pHr34kY

@pHr34kY@lemmy.world · Joined ⁨Jul⁩ ⁨2023⁩

Replying to @⁨Septimaeus@infosec.pub⁩

NTP, DHCP, SNMP, FTP, SSH

  • NTP just tells you time. No confidential data here.
  • DHCP and SNMP dont go over the internet. A VPN won’t save you from this.
  • FTP is dead. Not even web browsers support it anymore.
  • SSH is already encrypted. In some cases, it can literally be used as a VPN.

Wireshark is useless on WPA3. Although hotel wifi typically doesn’t use it.

SNI is encrypted with ECH.

I disabled plaintext SMTP on my mail server years ago. Requiring TLS actually reduced spam by 99%. No reputable mail server will use plaintext.

Almost nothing uses plain HTTP. The only thing I typically see is my phone’s internet connectivity check, which simply returns an HTTP 204 (No content). It’s practically a ping.

HTTPS + DoH is enough because all of these problems are solved.

Replying to @⁨libewa@feddit.org⁩

I’m using bcache, and I’m using btrfs as the filesystem on top of it. I’m not sure that the way I’ve done it is considered best practice anymore. The discourse online is a mess because the landscape keeps evolving.

evilpiepirate.org/git/…/bcache.txt

evilpiepirate.orgbcache.txt « Documentation - linux-bcache.git - Unnamed repository; edit this file 'description' to name the repository.

Replying to @⁨libewa@feddit.org⁩

2 of my 4x 4TB spinning drives are portable. 2 in mirrored raid, and on-site backup, and an off-site backup. If you don’t have it on 3 drives across two sites, you don’t have it. 5400RPM is fine as long as you allocate some of that NVMe as a cache for it. Keep all high-transaction stuff like databases, thumbnail caches and indexes on the NVMe drive. Going to 7200RPM just increases power consumption and noise, and reduces reliability.

The other specs seems fine, but I personally upgrade my desktop then take the old CPU, RAM and motherboard to use for my server.

Immich and Nextcloud run fine on my 2015 Core i5 with 16GB RAM.