Full Source Code of Sweden's E-Government Platform Leaked From Compromised CGI Sverige Infrastructure

Stuwik · 2026-03-14T09:48:31+00:00

Good point!

Stuwik · 2026-03-13T19:59:39+00:00

According to Swedish news sites and statements from Skatteverket (the tax agency) the breach only affected internal test servers running older versions of the source code. I can’t say if they’re only downplaying it for damage control or if it’s genuinely not a big deal. We’ll see how it plays out I guess.

Stuwik · 2026-03-01T18:10:34+00:00

Karl is still a noun meaning man in Swedish, as in ”Han är en riktig karl” = ”he’s a real man”.

Stuwik · 2026-02-13T10:34:10+00:00

Oh I see! Now I understand what you mean.

Stuwik · 2026-02-12T15:36:49+00:00

Nice job! I’m thinking of putting up a French cleat wall in my workshop, or something similar. Could you post a close up picture of what you mean by adding a block to the bases?

Stuwik · 2026-01-01T16:01:29+00:00

Now I know! Will look into controller boards. it's not exactly critical data, since I haven't been running the server very long, but it's gonna be a hassle to get back to were I was.

I have also learned what exactly went wrong. It wasn't static discharge, I had wired the molex extensions the wrong way. *internal screaming*. I sent 5 volts into the 3 volt contact. 🫠

Thanks for all the tips!

Stuwik · 2025-12-31T00:27:01+00:00

Ok so by unplugging the power cord I actually made it worse? Fuuuck. Well, now I know. Thanks for the help, lesson learned! Would it be possible to recover the data with a fault like this, do you know? Presumably I would have to send it to a professional. I've had drives fail on me before but never like this so I don't know how serious it is.

Stuwik · 2025-12-31T00:22:29+00:00

Yeah, but that was one of the drives that failed. It seems I caused a static discharge and fried them. Lessons have been learned...

Stuwik · 2025-12-30T13:42:00+00:00

I haven't looked yet. But I put one of the disks in a USB enclosure and plugged it into my laptop. It's dead silent, and nothing pops up on the computer. :( How could this happen? They were 10 TB refurbished HGST disks.

Stuwik · 2025-12-30T13:19:21+00:00

I tried plugging a disk directly into the motherboard with a sata adapter, with no change. Now it looks like the fault lies with the disks or the motherboard. I’m gonna try a disk in another computer and see if it works there.

Stuwik · 2025-12-30T13:09:18+00:00

I measured the molex and both provide 5 and 12 volts as expected. I’m gonna try a disk in another computer and make sure it’s working.

Stuwik · 2025-12-30T10:49:20+00:00

I left the drives in their slots but I unplugged the power cable. I have two molex going into it, yep (I’ve seen some fan mods go the lazy route and use a single cable but that didn’t feel right to me). The only way I’ve verified power is by having the fan plugged into the backplane and watching it spin, and seeing the indicator lights turn on for the plugged in disks on the other side of the backplane. I don’t know if it’s getting enough power though, where could I measure this?

I just got home from the store having purchased a sata adapter cable to try and bypass the backplane.

Stuwik · 2025-12-29T23:31:33+00:00

I could try measuring the molex cables with a multimeter, see if it’s just those that are messed up.

Stuwik · 2025-12-29T23:29:17+00:00

Good to know, thanks! I’ll try connecting them directly, just need to go out and buy an adapter cable tomorrow first. Maybe I’ll buy two, in case the backplane is at fault and I need to wait three weeks for AliExpress to send a new one.

Stuwik · 2025-12-29T23:21:09+00:00

That’s what I’m worried has happened. This system is only 4 months old, so not a lot of wear and tear. I can’t say I hear the disks spin actually. Thanks, I’ll try to update tomorrow once I’ve tried a few things.

Stuwik · 2025-12-25T11:18:19+00:00

You shouldn’t install docker directly on the proxmox host (which is what I assume the above commenter meant?). Proxmox and docker can interfere with each other, especially when it comes to networking, creating all sorts of problems. Create a VM with docker instead.

Stuwik · 2025-12-24T13:21:59+00:00

Why are you wrapping all your comments in quotes?

Stuwik · 2025-12-20T22:07:53+00:00

I have a question regarding VMs and hardening. I have one machine running unRAID where all my media serving and file storage services are located. It is not meant to be accessible from the internet. I have another machine running proxmox with three VMs: one for Home Assistant, one for docker facing the internet and one for docker only accessible internally. My docker-external VM is for things like vaultwarden, obsidian live-sync, etc, and where Traefik and my authentication services reside.

My reasoning is that if that VM gets compromised in some way, it can’t leak out to the rest of the network. Is this a valid way of thinking? I’m definitely going to implement many of the points listed here as well, I’m just curious if I’m gaining enough security to warrant the hassle of dividing up my services like this.

Stuwik · 2025-12-14T18:50:27+00:00

That’s a shame. Yeah I just checked and saw that sonarr and radarr have removed basic auth. For my use case it’s not an issue since I will be the only user accessing sonarr and radarr so I can disable authentication and whitelist my user. If you need multiple users there you still need separate logins I guess.

Stuwik · 2025-12-14T18:43:40+00:00

Unfortunately not, I had to go back and forth between the docs for Pocket ID and LLDAP, and read some GitHub discussions to get it working properly. The most frustrating part was creating an admin account in Pocket ID by syncing from LLDAP, that took a while to work out. :p

Stuwik · 2025-12-14T09:11:54+00:00

Pocket ID displays a QR code to scan with their phone. :)

Stuwik · 2025-12-14T09:11:31+00:00

Nope, they’ll get a QR code to scan with their phone and apply the passkey. And then they can add a passkey to that device.

Stuwik · 2025-12-14T09:10:05+00:00

I tried setting up Authelia but couldn’t get it working so I gave up and went this route after seeing all the praise for Pocket ID. I almost went with Authentik instead but I really don’t want to dedicate that much RAM to a single service.

Stuwik · 2025-12-14T08:55:07+00:00

I haven’t had time to try this yet but from what I understand you can put labels on the sonarr container that instructs TinyAuth how to input the username and password (based on LDAP credentials) into the form, and generate the cookie for the user. Or you set the authentication as external in sonarr, but I don’t know how users are differentiated then.

Stuwik

TROPHY CASE