
erev
@erev@lemmy.world
Just passin’ through
- Comment on What actual damage do you secure your servers against? Whats the attack vector? 2 weeks ago:
You’re wrong, containerization is a massive security measure that shouldn’t be ignored. Proper containerization allows you to segment the namespacing of a single server by user and application; this helps massive with esrablishing boundaries that are still very difficult to cross under normal circumstances. Keycloak is an IdP which only provides one layer of security; good swcurity implements defense in depth where every layer of the system has securiry measures. Just because Linux recently had two vulnerabilities that bypass a lot of those doesn’t mean they’re worthless; you still need initial access to a nonprivileged user to exploit those and layered security can help prevent that from happening in the first place.
- Comment on What actual damage do you secure your servers against? Whats the attack vector? 3 weeks ago:
Also worth mentioning that Linux recently has had two massive privilege escalation vulnerabilities that bypass system namespacing and thus also provide container escapes.
- Comment on The prices differences of different providers for the same domain is crazy. 3 weeks ago:
Certain domains stipulate user verification. Porkbun has to legally comply with this
- Comment on Homelab for DevOps experience? 2 months ago:
W answer (although im considering moving to neovim due to vim using AI code)
- Comment on Homelab for DevOps experience? 2 months ago:
It seems they literally meant what commands are your favorite. Bash is a shell but it is just as much a command (
bash -c ‘wall poop’), and ssh and man are some of the most widely used commands on linux (if you end up working with LXC containers many of them do not come with manpages preinstalled. I highly recommend installing them if you’re going to spend any of amount of time on thr LXC)