Gerowen

  • 6 Posts
  • 69 Comments
Joined 2 years ago
cake
Cake day: June 14th, 2023

help-circle





  • GerowentoSelfhostedHow to harden against SSH brute-forcing?
    link
    fedilink
    English
    arrow-up
    30
    ·
    edit-2
    14 days ago

    I generally do a few things to protect SSH:

    1. Disable password login and use keys only
    2. Install and configure Fail2Ban
    3. Disable root login via ssh altogether. Just change “permit root login” from “no password” to just “no”. You can still become root via sudo or su after you’re connected, but that would trigger an additional password request. I always connect as a normal user and then use sudo if/when I need it. I don’t include NOPASSWD in my sudoers to make certain sudo prompts for a password. Doesn’t do any good to force normal user login if sudo doesn’t require a password.
    4. If connecting via the same network or IPs, restrict the SSH open port to only the IPs you trust.
    5. I don’t have SSH internet visible. I have my own Wireguard server running on a separate raspberry pi and use that to access SSH when I’m away, but SSH itself is not open to the internet or forwarded in the router.


  • GerowentoSelfhostedSelfhosting Sunday - What's up?
    link
    fedilink
    English
    arrow-up
    2
    ·
    20 days ago

    So far I haven’t seen any attempts to change their user agents. I’ve seen one or two other bots poking around, but nothing to write home about so I’ve left them alone.

    I have heard however that changing user agents is a tactic they do indeed employ, especially Claude, so it may be that I’ll eventually have to adapt my defenses.




  • Gerowentomemes[crumbles into dust]
    link
    fedilink
    English
    arrow-up
    3
    ·
    22 days ago

    I made one the other day, though I bought the music from HDTracks instead of “acquiring” it from Limewire or Kazaa. Burned it to a CD because the bus I drive has a CD player but no SD card slot or anything.



  • GerowenOPtoData HoarderCheck Your Optical Media
    link
    fedilink
    English
    arrow-up
    2
    ·
    1 month ago

    Other than that one disc I haven’t had any real issues getting a complete copy of the whole disc, and that disc did eventually cooperate. MakeMKV is pretty good about halting or warning you in the event of an error, checksum mismatch, etc. So I haven’t lost any data so far and I’m up to season 6. I’ll start season 7 tomorrow and try to finish the whole show in the next day or so and I’ll just keep full ISOs of these discs. I’ve got the space and an off site backup so I might as well do it at least for stuff I really like. Years ago when I first started my home server I kept ISOs of everything; but that quickly got out of hand when I started backing up my Blurays at 50GB a pop.




  • I’m not sure. I’ve only noticed it on my TV and have even noticed it with content that I personally ripped from DVDs or Blurays and encoded to x265 or AV1. Since it only affects the TV apps I’m wondering if it isn’t a lack of support for some color space or something by the TV hardware because when I’m encoding I don’t usually change anything about the dimensions, color space, frame-rate, etc., just the codec and quality. If the video is 10 bit, I encode it as 10 bit. If it’s HDR, I pass that thru. I’ve checked with the mobile and desktop app and the web player on content the TVs had issues with and those same files played fine everywhere else, so it’s something specific to the LG and Roku apps for Plex.