4 ms·

How does one figure out if any of their home systems is affected? I have 5 Linux installations(dev machines, router, nas, rpi, etc), multiple docker instances,

How does one figure out if any of their home systems is affected? I have 5 Linux installations(dev machines, router, nas, rpi, etc), multiple docker instances, a couple of windows machines and half a dozen phones at tablets at home. What’s the best tool to find out if any of them is hacked?

corobo 4y ago
Assume it will be hacked. Assume the bad guy is just sitting there patiently waiting for you to fuck up. Assume it has been hacked. Even if you are perfect, and you wont ever be, some dumb little thing can come up like Docker bypassing your firewall entirely and baring your database's passwordless arse to the internet[1]. Or like in this case you'll have forgotten to update Plex for 3 years. [1] https://blog.newsblur.com/2021/06/28/story-of-a-hacking/ https://blog.newsblur.com/2021/06/28/story-of-a-hacking/ Protect the data as well as the machines. Isolate everything that can be the best way it can be. Pull your backups rather than push. Don't leave sensitive data around if it doesn't need to be there. Encrypt data at rest where possible. Don't allow HTTP access to directories named .git if you're in web hosting - of course don't store a repo in the served web directory, but know someone is going to do it anyway. Pre-emptively disarm any footguns you come across. Label them at least. The best tool is experience, but I'd at least have some monitoring too. I use Zabbix myself because it was the first monitoring tool I used, but you can use whatever you fancy. This is not an install and sorted application, you need to learn how to use and configure it too.. Sorry as I type this I realise I definitely don't know my knowledge well enough as I'm having trouble simplifying it into a HN comment. This is a too-close-to 20 year career and counting in fairness haha. Learn how to be the bad guy. Guard against your skills. Improve your skills. Repeat. Stuff like running through hackthissite.org might be a decent place to get started on offence-based defence.
KyeRussell 4y ago
You’re asking for help working out if you’ve got a virus? Come on, man.
- noncoml 4y ago
  What’s wrong with asking for info on what others are using. That’s how you learn stuff. Overconfidence is how they get you

corobo 4y ago

Assume it will be hacked. Assume the bad guy is just sitting there patiently waiting for you to fuck up. Assume it has been hacked. Even if you are perfect, and you wont ever be, some dumb little thing can come up like Docker bypassing your firewall entirely and baring your database's passwordless arse to the internet[1]. Or like in this case you'll have forgotten to update Plex for 3 years. [1] https://blog.newsblur.com/2021/06/28/story-of-a-hacking/ https://blog.newsblur.com/2021/06/28/story-of-a-hacking/ Protect the data as well as the machines. Isolate everything that can be the best way it can be. Pull your backups rather than push. Don't leave sensitive data around if it doesn't need to be there. Encrypt data at rest where possible. Don't allow HTTP access to directories named .git if you're in web hosting - of course don't store a repo in the served web directory, but know someone is going to do it anyway. Pre-emptively disarm any footguns you come across. Label them at least. The best tool is experience, but I'd at least have some monitoring too. I use Zabbix myself because it was the first monitoring tool I used, but you can use whatever you fancy. This is not an install and sorted application, you need to learn how to use and configure it too.. Sorry as I type this I realise I definitely don't know my knowledge well enough as I'm having trouble simplifying it into a HN comment. This is a too-close-to 20 year career and counting in fairness haha. Learn how to be the bad guy. Guard against your skills. Improve your skills. Repeat. Stuff like running through hackthissite.org might be a decent place to get started on offence-based defence.

KyeRussell 4y ago

You’re asking for help working out if you’ve got a virus? Come on, man.

noncoml 4y ago
What’s wrong with asking for info on what others are using. That’s how you learn stuff. Overconfidence is how they get you