• 0 Posts
  • 19 Comments
Joined 2 years ago
cake
Cake day: June 18th, 2023

help-circle

  • NaibofTabr@infosec.pubtoSelfhosted@lemmy.worldWhat do I actually need?
    link
    fedilink
    English
    arrow-up
    6
    arrow-down
    4
    ·
    4 days ago

    My main reasons are sailing the high seas

    If this is the goal, then you need to concern yourself with your network first and the computer/server second. You need as much operational control over your home network as you can manage, you need to put this traffic in a separate tunnel from all of your normal network traffic and have it pop up on the public network from a different location. You need to own the modem that links you to your provider’s network, and the router that is the entry/exit point for your network. You need to segregate the thing doing the sailing on its own network segment that doesn’t have direct access to any of your other devices. You can not use the combo modem/router gateway device provided by your ISP. You need to plan your internal network intentionally and understand how, when, and why each device transmits on the network. You should understand your firewall configuration (on your network boundary, not on your PC). You should also get PiHole up and running and start dropping unwanted inbound and outbound traffic.

    OpSec first.









  • There was no period without warfare or economic stability in Palestine.

    I mean… there was time to build a bunch of modern residential buildings, hospitals and businesses (the things Israel is currently blowing up and bulldozing) and for people to live their lives without having to be armed 24/7. It literally has not been open warfare (at least for a little while), and yes there was some economic stability, enough for local Palestinian businesses to develop, for a semi-functional civilian government to form, and for civil services like hospitals and schools to be established. It hasn’t just been a warzone for 100 years.






  • After reading the article and the website, I can’t find anything that explicitly says there is no network connection built into the vehicle.

    The instrument panel is a screen, and will be used to display the backup camera video. There is some computer capable of handling video processing and displaying the instrument graphics - so more than just low-level electronics to handle the battery and drive control. It could have built-in GPS, it could have 5G, it could still be collecting and sharing data on driving habits &etc, it could be subsidized by that on the backend. Just because those functions aren’t displayed to the end user doesn’t mean they aren’t in the system.





  • NaibofTabr@infosec.pubtoSelfhosted@lemmy.worldAlternative to ClamAV?
    link
    fedilink
    English
    arrow-up
    1
    ·
    edit-2
    2 years ago

    The core problem with this approach is that antivirus scanning is generally based on signature recognition of malicious binaries. Behavior-based antivirus scanning mostly doesn’t work and tends to generate a lot of false positives. No freely available antivirus is going to have a signature library that is kept up to date enough to be worth the effort of running it on Linux - most vulnerabilities are going to be patched long before a free service gets around to creating a signature for malware that exploits those vulnerabilities, at which point the signature would be moot. If you want antivirus that is kept up to date on a weekly or better basis, you’re going to have to pay for a professional service.

    That said, there are other, simpler (and probably more effective) options for hardening your systems:

    • Firewall - if your servers are dedicated to specific services and you don’t plan on adding many more applications, you should be able to tighten up their firewalls to have only the ports they need open and nothing else. If network security is a priority, you should start with this.
    • Application Whitelisting - prevent unrecognized applications from running. There are more options for this on Windows (including the builtin Applocker), but there are some AWL options for Linux. It’s a lot easier to recognize the things that you do want to run than all of the things that you don’t want to run.
    • Secure OS - I assume you’re using Debian because it’s familiar, but it is a general-purpose OS with a broad scope. Consider switching to a more stripped-down variant like Alpine Linux (it can be installed on a Pi).