Oh no, you!

  • 1 Post
  • 427 Comments
Joined 2 years ago
cake
Cake day: November 3rd, 2024

help-circle



  • Not working on anything particular, but I’m going on a road trip on Tuesday to this regional airport that is giving away two racks perfect for my use case. Deep enough for my larger machines, sound proofed and 42U tall.

    Finally my hardware can have a proper rack instead of being in a stack/pile in this harrypotteresque locker under my stairs.









  • My home servers have generally a lot smaller attack surface, as only a few ports are actually routed to them, so in theoey I could get away with a more relaxed approach. But I’m also a big believer in defense-in-depth, so I follow the same rules of thumb:

    • iptables (or equivalent) that drops anything incoming that isn’t wanted. It also rejects anything going out that isn’t planned for.
    • any public facing service (except ssh) gets its own user
    • disable root login via ssh
    • ssh login with key only on any user in sudoers


  • Well, there’s a footnote on my end: Me taking the drives home is a bit of a grey area, as the procedures say that the drives are to be mechanically destroyed when no longer needed. It doesn’t specify needed by whom. And I do attack them with my angle grinder, so it’s in accordance with company policy.

    And yes, my employer knows and is OK with it. We go through a ridiculous amount of drives due to large storage needs, so pragmatism tends to trump bureaucracy.






  • “Task failed successfully” was actually uttered numerous times earlier this week at work; we were testing this robotics and automation system and trying to detect various failure modes, and this was declared every time we managed to produce a new fault. This was so that we could write procedures on what the operators should do under various circumstances.