xinayder

joined 1 year ago
[–] xinayder@infosec.pub 2 points 2 weeks ago

Yes, it made people realize we don't need Secure Boot and it's just a pit of vulnerabilities.

[–] xinayder@infosec.pub 2 points 1 month ago (1 children)

Do you have to do this every time you update your phone?

[–] xinayder@infosec.pub 6 points 1 month ago (3 children)

Care to share how you disabled every bit of AI in the phone?

[–] xinayder@infosec.pub 12 points 1 month ago

Yet companies are manipulating survey results to justify the FOMO jump to AI bandwagon. I don't know where companies get the info that people want AI (looking at you Proton).

[–] xinayder@infosec.pub 1 points 1 month ago

I maintain the DNS plugin for Vultr and I can say that it's "safe", but if you're worried you should check their source code.

I believe it's easier to have a vulnerability in the external provider's API (for example, caddy-dns/vultr uses govultr) than Caddy. But I wouldn't take things for granted if I was skeptical about these plugins.

[–] xinayder@infosec.pub 2 points 1 month ago* (last edited 1 month ago)

I have a k3s cluster for fun and I can admit that k8s is way too complicated.

I don't want to dig hours through documentation to find what I'm looking for. The docs sometimes feel like they were written for software devs and you should figure part of the solution yourself.

I have a ExternalName service that keeps fucking up my cluster everytime it restarts, bringing down my ingresses, because for some reason it doesn't work and I have no idea where to look at to figure out why it doesn't work - I just end up killing the service and reapplying the yaml file and it works.

I had to diagnose why my SSL certificates would get stuck in "issuing" in cert-manager, had to dig through 4 or 5 different resources until I got to an actual, descriptive error message telling me that I configured my ClusterIssuer wrongly.

I wanted a k3s cluster to learn but every time I have issues with it I realize it's a terrible idea.

I wish I had podman + compose but it does seem like a docker-compose is more complicated. Also, I wish I could do ansible but I have no idea where to start (nor how it works).

EDIT: oh yeah I also lost IPv6 support because k3s by default doesn't enable v6 and I was planning on using Hetzner CCM to have a 2 node cluster until I realized Hetzner Networks don't support v6.

[–] xinayder@infosec.pub 1 points 1 month ago (1 children)

Can you use CrowdSec to track logs from a k8s pod? Say I have my website and some other services hosted on a k3s cluster, do I need to spin up a new pod for CrowdSec or should it be installed on the host?

[–] xinayder@infosec.pub 1 points 1 month ago (1 children)

I guess Wifi 6 doesn't work in 5GHz band?

[–] xinayder@infosec.pub 3 points 1 month ago

The VPN bandwidth doesn't need to be that good, I was checking the GL iNet models and 200 Mbps on WireGuard is enough for me.

 

I am looking for suggestions of cheap, OpenWrt compatible routers that may have Wifi 6, for future proofing. My idea was to use it as a main router, but also as a travel router so I can plug it whenever I travel somewhere else.

I also want to learn how to use OpenWrt (I have an old router at home to test it out, but it's not ideal for everyday use since it's 100Mbps and doesn't have gigabit ports).

It'd be nice to have:

  • Wifi 6
  • OpenVPN or WireGuard support
  • Compatibility with OpenWrt
  • Ideally less than 60 EUR

A small form factor is also appreciated but not a requirement.

I checked the device tables and lists on the OpenWrt wiki, but it's hard to decide. A beginner's guide to the operating system recommended some routers but most of them are too expensive for my use case.

Currently, I'm leaning towards the GL iNet Opal (1200) but it doesn't support OpenWrt, the other option is the BananaPi BPI-WIfi 6. What would be your suggestions?

[–] xinayder@infosec.pub 2 points 2 months ago

The default config for sudo is to ask for root password. I too was annoyed by this and had to change the setting to ask for the user password, not root, every time I used sudo.

[–] xinayder@infosec.pub 2 points 4 months ago

It could be the issue if above 4g decoding/resizable bar is not enabled: https://gitlab.freedesktop.org/drm/amd/-/issues/3343

had a similar issue that my system would freeze completely after playing FO76, had to downgrade the kernel to get my games to work again.

 

I have a small VPS that hosts some services I use daily and I'd like to migrate that to a K8s cluster. One of the services being hosted is my personal website, built with Hugo and served by Caddy.

Right now, I have the code for my website on Codeberg and I have a CI pipeline that builds the website and uploads it to my VPS via rsync.

I want to move the website to the k8s cluster, but I have no idea how to do it "securely". What I have right now is a separate user on my VPS called deploy and it rsyncs the files to the data directory Caddy is using to serve my files.

I thought I could do the same on the k8s cluster server, but it's usually not a good idea to mount host paths with k8s unless absolutely necessary, because container escaping is an actual problem.

So far the only alternative I could think of is to change the CI pipeline to publish my website on another branch and signal it to my K8s cluster so the files should be updated, but I'd like to know what better options exist and how easy they are to setup.

view more: next ›