derek
@derek@infosec.pub
- Comment on Looking for a YouTube monitor and downloader. Sorry if wrong place for question. 2 weeks ago:
Not that I have any say in the matter but I think this kind of question is fine for the selfhost community. It’s still in the spirit of “how to do xyz with my own hardware / less dependence on a third party”.
The other suggestions have covered my own. I did want to add that good resources for finding these kinds of tools are often called Awesome lists. Awesome self-hosted. Awesome CLI. Awesome social media. You get it. I’m not sure where the trend started but I stumbled on them after getting fed up with the likes of Slashdot and AlternativeTo.
They’re usually a community-maintained git repo on one of the major platforms. This list has quite a few hits for “YouTube”, for instance: github.com/krzemienski/awesome-video
- Comment on Help configuring OPNsense VLANs? Tutorials I find seem to quickly become outdated. 4 weeks ago:
I’m a bit late to the party. I was a network admin in another life and believe I can help out. I’ve skimmed existing conversations but not fully poured over them.
That said: I’d print the routing tables for the switches and firewall and review them. Considering firewall rules is sensible but it seems you’ve already done quite a bit of investigation there. It sounds like there is some vlan configuration missing. Like one of the switches doesn’t have the vlan interface defined or named in its vlan database.
Review the routing tables and confirm who owns each vlan and what those networks are aware of. Also toggle your logging options on so you can review them and test with more info than pass/fail.
It very well may be a OPNsense firewall knowledge thing but I’m not convinced. If you’re still working on this tomorrow I’d be happy to help root-cause the problem and fill in the gaps between RTFM and old YouTube videos. :)
- Comment on Fed up with vibe coders, dev sneaks data-nuking prompt injection into their code 2 months ago:
I call bullshit on this “don’t have the time” shtick. If one doesn’t have time to review code prior to hacking on it then they ought to rearrange their priorities.
Offloading this basic and essential responsibility to any tool is an explicit abdication of claims to grievance over the result of such negligence.
So much more so when offloading that responsibility to LLM “agents”. If you find yourself disagreeing with this then you need to educate yourself about those tools.
I recommend this Internet of Bugs video: Don’t Use Any AI Agents or Browsers Until You Watch This www.youtube.com/watch?v=TdHg9ee56Iw
and the deeper dive on their second channel: Technical Breakdown: How AI Agents Ignore 40 Years of Security Progress www.youtube.com/watch?v=_3okhTwa7w4
This isn’t some anti-AI doomer crap. This is understanding computer science and continuing to think critically about its evolution.