hot_gril

37 ms·

691.
by hot_gril 2y ago
The situation is the SSH server is exposed everywhere, and you also have an unrelated VPN, maybe even via a paid service you don't manage. The VPN just provides you with an alternative IP address and privacy when traveling. It matters
692.
by hot_gril 2y ago
Other way. An EU-based or EU-related business can serve non-EU customers differently. I'm referring to natural gas and other energy, not the electrical grid.
693.
by hot_gril 2y ago
I won't propose a solution since I'm not in charge, but my guess for what will happen regardless is the EU outsources its tech innovation to some other place where they can still reap the rewards. Kinda like how they've impor
694.
by hot_gril 2y ago
There's really no such thing as "working with computers" (as is often said), because every piece of tech was made by and for humans, so social skills always matter. The hardest projects I've succeeded at depended on look
695.
by hot_gril 2y ago
Their proposed solution will be to regulate AI
696.
by hot_gril 2y ago
A ton of stuff in banking is based on soft logic and human intervention. My first guess would be fraud detection.
697.
by hot_gril 2y ago
fail2ban has been around for so long, people get impatient at some point
698.
by hot_gril 2y ago
Well seriously, I remember AT&T cellular giving me an ipv6 behind a cgnat (and also an ipv4). Don't quote me on that though.
699.
by hot_gril 2y ago
Good point on the DoS. Exploit on first attempt, maybe, I wouldn't count on that. Can't say how likely a timing exploit is. If the hotel is using such a dirty shared IP that it's also being used to spam random SSH servers, th
700.
by hot_gril 2y ago
If you're using an IP address that's being used to brute force the entire Internet, it's likely that lots of websites are blocking it. If that doesn't matter to you and all you need is to get into a particular SSH server
701.
by hot_gril 2y ago
Same as when a crappy network blocks SSH, you get better internet. Or if SSH is allowed, use a VPN over TCP port 22.
702.
by hot_gril 2y ago
Even with strong passwords, maybe you don't want someone attempting to authenticate so quickly. Could be DoS or trying to exploit sshd. If you're traveling, cellular and VPN are both options. VPN could have a similar auth dilemma,
703.
by hot_gril 2y ago
There's this ongoing attempt at Google called Alphabet Workers Union. Instead of simply negotiating for higher pay, their goals were all over the place according to their website: https://web.archive.org/web/202203
704.
by hot_gril 2y ago
We aren't allowed to do the first suggestion at work. If you can, and it's literally Debian, then it's fine.
705.
by hot_gril 2y ago
They're different use cases from the industry's perspective. Nvidia supports GPU compute on Linux very well, but graphics not so much. I'm not interested in the OS fan wars and neither is Nvidia, but if you want to consider L
706.
by hot_gril 2y ago
Was eliminating SAT/ACT requirements meant to be permanent in the first place, or did they just not trust the 2020-22 results? Stanford's statement here was more about covid19 issues: https://stanforddaily.com/2020
707.
by hot_gril 2y ago
What if it uses NAT v6 :D
708.
by hot_gril 2y ago
Unfortunately the only answer is "pay to play." If you're a server admin needing emergency access, you or your employer should pay for an ISP that isn't using cgnat (and has reliable connectivity). Same as how you probab
709.
by hot_gril 2y ago
Yeah on some cloud provider, the virtual networks can be all too confusing. But this story sounded like a home machine.
710.
by hot_gril 2y ago
Right. It's analogous to how blocking an ipv4 is unfair to smaller providers using cgnat. But if someone wants to connect to your server, you might want them to have skin in the game.
711.
by hot_gril 2y ago
The more complicated something is, the higher chance I screw it up.
712.
by hot_gril 2y ago
It's this, plus the potential that you've reused your password, or that it's been keylogged.
713.
by hot_gril 2y ago
What's the alternative? If you get onto a bad IP today, you're essentially blocked from the entire Internet. Combined with geolocks and national firewalls, we're already well past the point where you need a home VPN if you wa
714.
by hot_gril 2y ago
It's not quite fair, but if you want the best service, you have to pay for your own ipv4 or, in theory, a larger ipv6 block. Only alternative is for the ISP deploying the CGN to penalize users for suspicious behavior. Classic ip-based
715.
by hot_gril 2y ago
How did you accidentally expose it to the Internet, was your host DMZ?
716.
by hot_gril 2y ago
Maybe the only equivalent is to penalize a /32, since there are roughly as many of those as there are ipv4 addresses.
717.
by hot_gril 2y ago
There's a belief among some ipv6 proponents that the Internet should primarily be p2p services, meaning everything is globally accessible. This would imply it's not ok for NAT or default-deny firewalls to be common practice.
718.
by hot_gril 2y ago
Maybe the answer is that you run NAT even with ipv6.
719.
by hot_gril 2y ago
I'm ok with the opinionated kind of ipv6 this guide puts forth. There are too many other ways to use it that have problems.
720.
by hot_gril 2y ago
Thanks, I get it now. Guess LAN DNS can be optional since the ULAs can be memorized.

More ›