Findmysec @ Findmysec @infosec.pub

Posts

12

Comments

248

Joined

1 yr. ago

We really need to push IPFS and TOR/I2P to keep these websites alive. Fuck the low barrier to entry if it means the website can just be subpoenaed

What's the pay like for system admins in Europe on an average? Asking for mid-level (5-7 years of experience)

I have definitely read this answer before. I think we've probably already spoken on the matter. Indeed, Lemmy has a serious dearth of users interested and using secure distros over the averages. Thanks for your efforts; I do not know how to follow users on Lemmy but if I did I'd follow you. Do you have a blog/any other forum you're more active on?

Personally, I find it difficult to justify the time to learn Secureblue (especially the immutable part) or NixOS on Qubes because custom DispVMs with curated salt states work so well already. I'm interested in use-cases that will improve my security but I haven't found any dialogue on this yet. If you do have opinions on this and know where I can look, I would greatly appreciate it!

I would be really interested in a comparison of Kicksecure and secureblue. I'm interested in running one of them myself

Well the Star64 from Pine is pretty good, just doesn't have enough processing power and IO for my liking.

Framework has a laptop in progress if you're interested

Where is this

This Friday has been absolutely pathetic, I couldn't even get a couple of simple configs done right

How would they do DPI on DNS packets routed using DoH? It looks like HTTPS traffic, it's encrypted, and other than size and frequency I don't see how they can gey anything out of it. Yeah they'll get the SNI with eCH but that's supported by FF and by a lot of providers using DoH

Yeah that's your situation. Some people are fine with it

Ah, you mean they put the cert in a transparent proxy which logs all traffic? Neat idea, I should try it at home

Private CA is the only way for domains which cannot be resolved on the Internet

Isn't feeling like that a good thing though? If you're sufficiently miserable there's a good chance you'll actually get the work done. This also works if you feel embarrassed or feel that others depend on you, but in my case I'm going to have to depend on the former.

It used to be that I didn't really grasp the scope of most projects, and so after research I used to dive right in. These days I'm more jaded and try to make better long-term choices in terms of software (which is ridiculously hard because you never know, example: Terraform is no longer FOSS).

The extra work is usually in optimisations or security configuration, both of which I'd like to have done but apparently I don't feel horrible enough to actually do it.

Yes, I have done both of what you said. It's not a hard-and-fast rule for me, but it does make me a bit miserable, that I didn't finish what I started. Sometimes, that acts as a catalyst for me to get back into it and actually try to finish it, or leave it completely after understanding that it's beyond me.

Thanks for the advice.

I definitely fear projects being unfinished, and the apparent "mountain" of work that might be the new personal project I want to work on definitely intimidates me

I know what to do, what should happen (in theory), and I want to do it. But I waste my time away. Is there a way out of this?

No ADHD AFAIK.

Well, the stuff that I procrastinate on is inherently private and likely shouldn't be allowed access to for people outside. In doing so, I only stay accountable to myself, and we can see how well that has gone

Absolutely. But I want to do it, and yet I procrastinate. This has got to be a serious flaw in personality to procrastinate in doing a hobby

Oh absolutely there's no way I'm using CEXes for this. Thanks for the explanation

That's a difficult question. This is a hobby that I'd like to be more diligent in