Spyke

Replies

Comment on

What are the most paranoid network/OS security measures you've implemented in your homelab?

I'm an enterprise guy, so that's the explanation for non home use things.

  • VPN for anything not my web or certificate revocation distribution point
  • Sophos IPS
  • sophos utm for web application firewall
  • transparent inline web proxy, sophos is doing https inspection. I have internal CA and all clients trust it. I don't inspect medical or banking, other common sense stuff.
  • heavily vlan segmented with firewall between
  • my windows clients are managed by active directory with heavy handed GPOs.
  • least priv accounts, different accounts for workstation admin, server, domain, network devices
  • security Onion IDS
  • separate red forest that has admin accounts for my management access and accounts on devices
  • trellix antivirus and global reputation based file monitoring
  • I've started applying disa STIGs on servers
  • site to site VPN with other family member household. They get managed trellix av also.
  • my public identity accounts like MS,.Google, etc all need 2fa, token, etc.

I bet this can still get exploited, just would take effort hopefully none does for a home network.

I'm still one shitty windows zero day click away from getting my workstation or browser tokens owned though, I can feel it.

news

Comment on

Americans are lonely and it’s killing them. How the US can combat this new epidemic.

Reply in thread

Yeah, I get it. Hard people make good times, good times make soft people, soft people make hard times...I'm there a little.

But...I I also very much agree that poor mental health leads to lots of physical issues. I live In a first world country, survived a war, and have gone from dont be soft to understanding people's issues aren't made up.

You might ask someone who struggles if you want to really understand.

world

Comment on

China Is Pressing Women to Have More Babies. Many Are Saying No.

I've seen a bunch of comments expressing interest in the population declining. Since I don't really want the Thanos approach, lowering the birth rate is great.

I propose sterilization for cash, like cash for clunkers. You get a bunch of free money if you decide you want fixed.

Think of the amount of people who'd take that deal. Long term, lower population, less social program spending, hopefully less people's wanting abortions, win win. It goes against the rich people need for more workers, but you can dangle the lower welfare receipts, they'll be all about that. 😋

Sorry, morbid humor among actual socioeconomic conversation.

Comment on

Prisoners in the US are part of a hidden workforce linked to hundreds of popular food brands

Before I started reading that article, I was slightly in support of prison labor. Everything I read about incarceration is that it's incredibly expensive.

I thought it would understandable to help offset the costs, not actually make money. I didn't see anything in the article that put over all costs and profits into context. I can't imagine those systems are actually generating more money than the total costs of incarceration, but I have no idea.

Then I got to the parts about safety, inappropriate/illegal? coercion, and abuse. I know there's some worse places to be in prison in the world, but still.

We used to make people do stupid shit like break rocks just for punishment, but I don't see how that rehabilitates. Learning job skills is good, nice to hear a few people were bettered and got jobs, but legislators in those states probably need to be harassed until we get prisoners treated in appropriate ways.

Comment on

What If: No Social Media Anonymity (Edit)

Reply in thread

That is super interesting. Not getting into the politics, Security Now podcast recently discussed two US child protection online related initiatives.

From a technical perspective, I imagine it being difficult to both handle age proof, guardian proofing, and dealing with lack of anonymity. Part of why I posed the question.