Oh no, you!

  • 1 Post
  • 420 Comments
Joined 2 years ago
cake
Cake day: November 3rd, 2024

help-circle




  • My home servers have generally a lot smaller attack surface, as only a few ports are actually routed to them, so in theoey I could get away with a more relaxed approach. But I’m also a big believer in defense-in-depth, so I follow the same rules of thumb:

    • iptables (or equivalent) that drops anything incoming that isn’t wanted. It also rejects anything going out that isn’t planned for.
    • any public facing service (except ssh) gets its own user
    • disable root login via ssh
    • ssh login with key only on any user in sudoers


  • Well, there’s a footnote on my end: Me taking the drives home is a bit of a grey area, as the procedures say that the drives are to be mechanically destroyed when no longer needed. It doesn’t specify needed by whom. And I do attack them with my angle grinder, so it’s in accordance with company policy.

    And yes, my employer knows and is OK with it. We go through a ridiculous amount of drives due to large storage needs, so pragmatism tends to trump bureaucracy.












  • Let’s see…

    Factorio: 7526 hours
    Dwarf Fortress: Untracked, as I bought it on steam only to support the devs. When I worked on a ship, Dwarf Fortress was my go-to when I was off shift, as it was a great way to unwind, but it must be well over a thousand.

    I actually only have 100h in Dyson, and maybe 3 in satisfactory.

    Other noteworthy titles:
    Kerbal Space Program: 1582
    Rimworld: 1048
    HoI IV: 1200
    War Thunder: 1768