• 0 Posts
  • 26 Comments
Joined 1 year ago
cake
Cake day: June 9th, 2023

help-circle
rss


  • It’s a buzz word.

    Web 1.0 is just websites. They envisioned everyone had their own web site to blog on. Geocities, ISP hosting, web rings, link aggregators, and simple human curated search engines. That kind of thing.

    Web 2.0 basically meant APIs. You could stitch a weather API with a map API and make a weather map app. This kind of came true, but it wasn’t as free and open as people hoped for.

    Web 3.0 is supposed the intersection of the web and distributed apps. Think games on the block chain like crypto kitties. It’s mostly been a flop since blockchain based decentralization is slow, expensive, and difficult for users. That being said there are successful use cases like online wallet management and distributed exchanges (defi).















  • Moving the port doesn’t reduce attack surface. It’s the same amount of surface.

    Tailscale is a bit controversial because it requires a 3rd party to validate connections, a 3rd party that is a large target for threat actors, and is reliant on profitability to stay online.

    I would recommend a client VPN like wireguard, or SSH being validated using signed keys against a certificate authority your control, with fail2ban.


  • This is not true and bad security practice.

    There are exploits that can be installed without a mistake made on the users part, the user can make a mistake, and almost every user downloads and open files regularly.

    Windows is less secure than the other options, but the other options are not impenetrable. The biggest botnets are made of Linux IoT devices, and nobody opened the wrong email on they’re thermostat…

    What a virus scanner will do is check your filesystem and possibly program memory for known footprints. A tool like this can save you from becoming a node on a botnet or being crypto locked. More importantly, if you work from home it can save your company from this issue as well!


  • I think mandatory military service is likely a good thing for a population (maybe not the individual). With a highly trained population, volunteering would likely increase and reduce the need for conscription during times of war.

    The benefits of military service for young adults are numerous. Discipline, exercise, comeradity, professional exposure, etc. Could reduce some of the mental issues we see due to isolation through technology. Of course I’m taking in peace time.


  • Sounds like you were out of resources. That is the goal of a DoS attack, but you’d need connection logs to detect if that was the case.

    DDoS attacks are very tricky to defend. (Source: I work in DDoS defence). There’s two sections to defense, detection and mitigation.

    Detection is very easy, just look at packets. A very common DDoS attack uses UDP services to amplify your request to a bigger response, but then spoof your src ip to the target. So large amounts of traffic is likely an attack, out of band udp traffic is likely an attack. And large amount of inband traffic could be an attack.

    Mitigation is trickier. You need something that can handle a massive amount of packet inspection and black holing. That’s done serious hardware. A script kiddie can buy a 20Gbe/1mpps attack with their moms credit card very easily.

    Your defence options are a little limited. If your cloud provider has WAF, use it. You may be able to get rules that block common botnets. Cloudflare is another decent option, they’ll man in the middle your services, and run detection and mitigation on all traffic. They also have a decent WAF.

    Best of luck!