• 0 Posts
  • 126 Comments
Joined 11 months ago
cake
Cake day: August 8th, 2023

help-circle
  • It does sound to me like ingesting all these different formats into a normalized database (aka data warehousing) and then building your tools to report from that centralized warehouse is the way to go. Your warehouse could also track ingestion dates, original format converted from, etc. and then your tools only need to know that one source of truth.

    Is there any reason not to build this as a two-step process of 1) ingestion to a central database and 2) reporting from said database?


  • Correct. 65% of all human internet traffic is unmodified Chrome.

    When Firefox was slow, Internet Explorer was clunky and didn’t render anything correctly, and scrappy upstart with a “Don’t be evil” slogan and great search engine Google came out with a new fast, memory efficient web browser, all us nerds ran out and told everyone “look! The internet doesn’t suck anymore! Use Chrome!” We were all amazed that we could have like 5 tabs open on our PCs with a whole gigabyte of RAM.

    The normies echoed this through time, never unchanging - “my kid says ‘Chrome’ is the good one”. Even when sites started breaking when viewed in other browsers…didn’t we just finish fighting this “standards” war? Isn’t this what we destroyed Internet Explorer for?







  • It’s UID/GID 10000 on the host because you are using an unprivileged LXC container. Unprivileged means that “root” inside the container (which is just a user space of the host with access restrictions) is user 10000 on the host - this is so that files and processes inside the container don’t run with the real UID zero, where they could plant a malicious file, or run a malicious program that escapes containment that ends up with root access on the host.

    Quickest way to make this work over samba is to force user 10000 and force group 10000. That way everything connecting to Samba would see the files as their own.

    Honestly the better solution is to make your software inside the containers run with a local non-root user (which would be something like 10001) and then force samba to use that. Then nothing is running as root in or out of the containers. Samba will still limit access to shares based on the samba login, but for file access purposes it will still use the read/write levels of your non-root user (because of the force- directives)




  • 4am@lemm.eetoSelfhosted@lemmy.worldVLAN question
    link
    fedilink
    English
    arrow-up
    3
    ·
    1 month ago

    If Proxmox is already installed on the machine, how are you running OPNSense? If it’s not bare metal, it’s a VM, and if it’s a VM it needs Proxmox’s virtual NICs to be VLAN aware, unless you are doing PCI pass through of the entire network card.







  • Yeah, it’s kind of incredible the responses I see to this story that are like “bro if they got as far as planting a rogue DHCP server on your network you were already owned anyway, yawn”

    Like, you do realize people use VPNs over unsecured WiFi all the time right? That’s one of the primary use cases. You can’t guarantee every network hasn’t been compromised.

    Armchair netsec quarterbacks need to get out more.