Of course security comes with layers, and if you’re not comfortable hosting services publically, use a VPN.

However, 3 simple rules go a long way:

1. Treat any machine or service on a local network as if they were publically accesible. That will prevent you from accidentally leaving the auth off, or leaving the weak/default passwords in place.

2. Install services in a way that they are easy to patch. For example, prefer phpmyadmin from debian repo instead of just copy pasting the latest official release in the www folder. If you absolutely need the latest release, try a container maintained by a reasonable adult. (No offense to the handful of kids I’ve known providing a solid code, knowledge and bugreports for the general public!)

3. Use unattended-upgrades, or an alternative auto update mechanism on rhel based distros, if you don’t want to become a fulltime sysadmin. The increased security is absolutely worth the very occasional breakage.

4. You and your hardware are your worst enemies. There are tons of giudes on what a proper backup should look like, but don’t let that discourage you. Some backup is always better than NO backup. Even if it’s just a copy of critical files on an external usb drive. You can always go crazy later, and use snapshotting abilities of your filesystem (btrfs, zfs), build a separate backupserver, move it to a different physical location… sky really is the limit here.

https://mailcow.email/

As far as I remember, RDP server in gnome (or any other exisitng DE) can’t do multiple sessions yet. You have to be logged in via display manager to remote access the existing session via RDP.

They just skipped the special metadata device. It’s been a lifesaver on my proxmox backup server. It went from barely usable to pretty good. And that’s on first generation of HP microserver.

https://forum.level1techs.com/t/zfs-metadata-special-device-z/159954

I thought I was going to see how to repair the pressure washer. There’s no better feeling than taking something broken or incomplete and making it right. Watching someone else do it is the close second.

But the guy just said “I did it” “And you can too!”. The internet equivalent of patting each others back. Meanwhile I still have no idea what was really wrong with it, and how it was fixed. Nothing of value was transmitted, except maybe a vague form of a feeling.

I hate this so much.

I was thinking laptop. It would be so much less clunky without the external USB and antenna in the field. Or, damn, even a phone! Now I finally have a reason to even think about Librem 5.

XTRX software defined radio.

That’s pretty sweet formfactor. Shame that minipcie is not as comon anymore.

Looks like it’s creating a new volume in a file, but I don’t see any type of quota being set upfront. If it scales up dynamically, it looks like a hot candidate. At this point I just hope distro maintainers settle down on something, anything, and give it a long term support.

There used to be exactly what you are looking for. Encfs, and later ecryptfs could encrypt just the data in your home folder.

It was a checkbox in ubuntu installer, just like the full disk encryption today. The key was protected by the standard user password.

Unfortunately, it was deprecated due to discovered security weaknesses, and I’m not aware of any viable replacement.

For anyone who didn’t see “zeitgeist moving forward” yet, just don’t.

Isn’t that mainly a problem with recursive DNS servers? The authoritative servers are only aware of the few domains they’re hosting.

I had a similar setup once. Dualboot, plus the VM with the same physical disk, to access windows, while running linux.

All it took was a small distraction… I’ve missed the grub timeout, and accidentally booted the same ubuntu partition in a VM that was running on the real HW. To shreds…

What’s wrong with miracast? Almost every device sold these days has some kind of radio, but no way to talk to each other. Releasing a new standard every few years won’t help much.

If it means I won’t have to do a ritual dance under the full moon, facing towards finland, just to get it installed correctly, I welcome my new gentleman overlords.

More like form and whitespace… God knows how I try to like modern gnome, but it’s not easy.

This is why we can’t have nice things.

Running for 6 days, save_pieces: false

My database is currently 184 GB

It has been [ 0 ] days since somebody abused the word “contract” in this context. Please, leave the contract alone!

Back in the windows 2012 era, we knew every time a major windows update was pushed, because the same set of customers would always create a ticket, complaining about inaccessible RDP. Windows firewall is just opinionated like that.