Nice. That helped me quickly test my systems, thanks
Cyber
joined 3 years ago
Seems a bit extreme.
Well, with the script at least you can follow the actions first, so it's better...just don't run it blindly because 2 minutes ago the attacker just put an additonal line of code in...
The executable / installer is more of a Windows thing and we've seen how that arms race is going... even Microsoft are trying to create a Linux-style repo called Windows Store.
curl | sh is the worst security front door I've seen
At least check the script first so it's understood
Me, an Arch user (btw), watching the NPM chaos on any distro...
DNS... set your system up to use an external DNS provider like OpenDNS where you can select categories to block.
I used this to block adult, gambling, malware, etc at the grandparent's house when the kids were growing up and starting to search the internet for school homework, etc.
If it's done in the router you'll cover all devices and you give someone else the password, so you can't change it.
“Ask partner out on date, and check their wardrobe to suggest an outfit for the outing”
Yeah, that's probably about right 😁
Yeah, I'm kinda, open wardrobe door, grab what looks about right for today, done.
But.
I can see another use case here...
- Partner "has nothing to wear"
- Mentions buying more clothes
- I open app, scroll, demonstrate how long the scrolling is still going for.
- Win argument.
- Purchase beer with saved money
- (pass some to devs for assisting)
... because? ... or, instead, do...?
Nice wiki
Didn't know about infCloud... thanks
No, I was referring to a separate DMZ host...
Physically separate firewall connection, with different firewall policies between internet<--> DMZ than DMZ <--> internal network.
Not a VLAN. VLAN Hopping makes it possible to jump between VLANs, so they should only be consided as an administration tool, not a security mechanism.
But, I agree with you, putting a device on the internet isn't something that anyone should do without understanding the technical issues.
view more: next ›
As long as you're using a slower release cycle, ie something like Debian, then you shouldn't need to be concerned.
I think anyone riding the crest of the wave with Arch (& esp. the AUR) would likely be aware that things break, so, supply chain attacks are likely to be seen here quicker.
I honestly wouldn't be surprised if PPAs had similar issues, but might take longer to be noticed.
Personally, I have a lot of Ansible building my stuff, so actually rebuilding things wouldn't be an issue, but, would I then be installing everything with all the current latest malware...?