aborsy

19 ms·

361.
by aborsy 2y ago
Does not have ACL in front of funnel, can be rate limited since it goes through relays, and probably can’t use a custom domain.
362.
by aborsy 2y ago
The problem is, since the reverse proxy and authentication system face the internet, you are responsible for maintaining its security. Software has vulnerabilities. Like nginx proxy manager had vulnerabilities and the developer didn’t patch
363.
by aborsy 2y ago
It’s a great product, but unfortunately they terminate the TLS and scan the traffic. It’s same as hosting the data on google or Microsoft (except you pay for hardware also). It should not be considered self hosted. Is there a reverse proxy
364.
by aborsy 2y ago
I would add QubesOS like sandboxing with micro kernels.
365.
by aborsy 2y ago
The term zero trust is bad marketing. You have to trust Cloudflare. The traffic is not end to end encrypted in their tunnel and access products (and pretty much all their products), and Cloudflare scans the traffic.
366.
by aborsy 2y ago
Depends what you count. Syncthing is my favorite, it deserves its GitHub starts.
367.
by aborsy 2y ago
Is it known what percentage of Tor users use it for illegal purposes? Even like, the majority or minority.
368.
by aborsy 2y ago
I don’t follow. They don’t hold any keys at all. The private keys never leave users’ devices. They say this clearly. You can also enable Taillock. That will prevent addition of nodes to your network. It will be a joke otherwise.
369.
by aborsy 2y ago
It’s a useful feature! Any idea when it will come out of alpha? Any feedback how it works in the current format? Tailscale is one of the best functioning pieces of software in my infrastructure. I noticed that applications that involve netw
370.
by aborsy 2y ago
What are the names of these services, to see how they work, their recovery process and abuse prevention?
371.
by aborsy 2y ago
Tailscale has a similarish SSH feature. You might be aware of that.
372.
by aborsy 2y ago
You have to work hard and come up with new ideas better than anyone else in the world, and demonstrate that. Then IEEE asks A review the work of B and B review the work of A for free. If the work is good, IEEE will ask you to transfer your
373.
by aborsy 2y ago
This was a good product. Are there any alternatives? The keybase app is still working. But I’m not sure if it is dependable, and to what extent it is maintained.
374.
by aborsy 2y ago
QubesOS is significantly more secure than the individual VMs. The vulnerability that the OS is compromised at the distribution level is a very special case. First of all, if Debian is compromised at source, it would be everyone that is comp
375.
by aborsy 2y ago
No it’s for public access. Still, a reverse ssh tunnel could expose it on a VPS, but there is no authentication and ACL. SSH port forwarding is also typically slow.
376.
Ask HN: How to securely expose an internal webserver to the internet
3 points by aborsy 2y ago|4 comments
377.
by aborsy 2y ago
If it’s a static website, S3 has “use for static website “ option. You can put cloud front in front of it and the cost normally would be pennies. But there is a small risk of DDoS or similar passing through their basic protections, and sudd
378.
by aborsy 2y ago
It has become a game of reputation, citations and the number of papers. It works the same way that a company does, with the actual work being done by students and postdocs and citations accumulated by management (a lot of them don’t do rese
379.
by aborsy 2y ago
LUKS has several key slots. As someone said, it’s quite simple, the data encryption key is encrypted with multiple keys and stored in different slots. You can encrypt the data encryption key with, say, any 2 keys out of 3. You concatenate a
380.
by aborsy 2y ago
>>Business groups have demanded the government step in by imposing binding arbitration and barring strikes and lockouts as the process plays out. Good idea! Canada is following the way of EU, and will slide into the same problems.
381.
by aborsy 2y ago
I have used Linux desktop for around two decades on my laptops and never had any issues with drivers or anything else. Various distributions have worked very well out of box with different models of laptops and PCs.
382.
by aborsy 2y ago
As a Linux desktop user, I installed windows in a VM to use an application that is not available for Linux (a printer app made by a vendor was available only for Windows and macOS). Awful! Slow, bloated, my files by default were uploaded to
383.
by aborsy 2y ago
So long as they are young!
384.
by aborsy 2y ago
Tailscale’s killer feature TailDrop. Reliable file transfer between devices of all kinds!
385.
by aborsy 2y ago
Yes, phishing is a concern, but is addressed by the same Yubikey. Most websites that matter support it. There is a CLI, but like KeepassXC I’m not sure it’s per password. All passwords seem to be encrypted with the same master key. Note tha
386.
by aborsy 2y ago
The container itself needed no maintenance at all in my experience. Just update it. The DNS and reverse proxy if you use one are separate though, and depends on your setup. Here is one scenario where self hosted could be more secure. If Bit
387.
by aborsy 2y ago
For sharing, I use diceware passphrases (with few words quickly typed in iOS keychain). With autocomplete it’s quick. There is a good mobile app for Pass though (I don’t use it). I try to separate the systems, and not to share as much as po
388.
by aborsy 2y ago
Vaultwarden is impressive. Years of work without issue. It supports Yubikey now. Eventually, I ended up using Pass though, since I prefer terminal. Pass doesn’t have any database to break: it’s just gpg and git. With Yubikey, every password
389.
by aborsy 2y ago
Is Google Pixel (with default Android, not GrapheneOS) at least as secure as iPhone?
390.
by aborsy 2y ago
A great client, but is it also a great plex server?

More ›