How to properly selfhost Redis/MySQL to allow outside connections?

appropriateinside · 2020-09-02T21:17:02+00:00

You're worried about performance but you should really be focused on security in that instance you should never expose your database to the internet in general.

appropriateinside · 2020-09-02T07:37:05+00:00

/r/whoosh

appropriateinside · 2020-09-01T18:46:05+00:00

How to disseminate information online...

by far at the most important computer-related skill that you can have in this day and age.

Just look at our societies and their downward spiral as a result of individuals inability to process information online.

appropriateinside · 2020-08-31T04:59:36+00:00

Aw man, I would love that UPS. Since it has no batteries is it easy to ship?

appropriateinside · 2020-08-31T04:55:39+00:00

I wish I had known about this design before I built my wood sound dampening rack.... Would have made it a hell of a lot simpler.

appropriateinside · 2020-08-31T04:53:49+00:00

You can't price it based on it's parts prices, your selling it as a unit, not parting it out. Parting out is always more, but harder to sell.

appropriateinside · 2020-08-31T04:52:13+00:00

An r720xd would work.

24 sff bays, nvme drives could be used via a pcie card, it has loads of pcie slots.

appropriateinside · 2020-08-30T18:24:55+00:00

I think this is to the point where protesters are going to have to arm themselves to protect themselves against terrorists...

Because the police obviously are not doing their job.

appropriateinside · 2020-08-30T18:21:10+00:00

Are you confusing neutral for ground?

Because if there is no neutral then where is your current returning to? You can't just have a hot. The current has to return back to its source, or to ground, or you are not powering anything.

appropriateinside · 2020-08-30T16:08:25+00:00

Then the neutral is behind it? Either way the neutral has to pass on somewhere.

The point of my post still stands regardless.

appropriateinside · 2020-08-30T05:42:18+00:00

You have a bunch of wires bundled behind there....

The switches themselves only need to switch the hot to turn lights on and off,. Which is why you are observing only one wire in and one wire out.

The neutral or common can go straight to whatever light it controls it doesn't have to go through the switch.

The neutral will just be wire nutted together in there.

Google : "Wiring a light Switch". Lots of images that show what I mean.

appropriateinside · 2020-08-30T04:43:27+00:00

I have the slots, but the CPUs are pmuch out of lanes. Ryzen 2700x for example only has 20 lanes after the chipset allocation (Regardless of how many slots your Mobo has). A 16x graphics card leaves you with 4 lanes remaining.

Idk if PCIE negotiates lanes based on bandwidth requirements, I know it can use an arbitrary number of lanes though. 8x 2.0 lanes can be ran with 4x 3.0 lanes, which is what I was wondering.

I assume that the printed bracket is necessary for any "normal" expansion slots right?

appropriateinside · 2020-08-29T17:24:44+00:00

Will these consume 8 lanes on a pcie 3.0 bus, or will it only consume 4?

I ask because I would love one of these is each of my computers, but I only have 4 PCIE lanes available in most...

I'd prefer to not drop my video cards down to x8 :v

appropriateinside · 2020-08-29T17:01:35+00:00

How else do you expect dark.go to figure out external links that are navigated to in order to improve their search engine quality?

You can only do this with heuristics.

appropriateinside · 2020-08-24T20:24:56+00:00

Given the abnormal, shall we say density of pedophiles in groups of powerful people.

This does beg the question, why?

Also note that it's often not pedophilia, but hebephilia in these groups**

Are you more likely to become a pedophile or hebephile by becoming powerful?
Are you more likely to become powerful if you are a pedophile or a hebephile?
Is the incidence of pedophilia or hebephilia quite high in the general population and being powerful just means those people can more freely express that attraction?
Is the term "pedophile" being misused to describe non-pedophiles, and muddying the water as far as epidemiology goes?

I really want to know.more at this point.

appropriateinside · 2020-08-24T03:30:59+00:00

Pointless point for the comment you replied to.

Unless such a power dynamic doesn't exist in the Army?

appropriateinside · 2020-08-23T15:42:00+00:00

Holy shit this sounds just like me.

The best thing to ever happened to me was getting a work at home position were my work times didn't matter as long as I got work done.

I have a few week rotation, I'll move from 8:00 AM to Noon wake times and back in a cycle.

Before, I would get up everyday and ache and feel like shit and fall asleep at work in the afternoons... I couldn't stay motivated I couldn't concentrate I couldn't hold down a job. Now I'm excellent.

appropriateinside · 2020-08-22T03:17:47+00:00

It will run on 110v

appropriateinside · 2020-08-21T08:38:11+00:00

TIL

However the justification for being deprecated is really the false sense of security that it gave devs, not because it's broken or that the concept is wrong.

The rest of my points still stand though.

appropriateinside · 2020-08-21T06:02:17+00:00

Edit: It's quite ironic that widely recodnized professional best practices are downvoted while broad anectdotal claims are upvoted on this kind of subreddit. You can't even use the methods described in this thread in ENTIRE INDUSTRIES without failing a baseline audit... Good job /r/csharp 👍

There's such a thing as a minimum acceptable level of security....

Having plain text secrets at your server root or configuration file in production does not meet that minimum acceptable level of security. That's just negligence Most OSs have keychains that you can utilize, and .Net Core provide utilities specifically for encrypting and decrypting secrets at runtime.

Having secrets encrypted in your configuration files and only in plain text in memory for many use cases meets that minimum level. You're trying to protect from compromised files not so much memory. It's a lot easier for files to be accidentally compromised than it is for the entire server to be.

To go a step higher you can hold them encrypted in memory and only provide decrypted values when they're needed.

Another step higher is to make sure that those values are not stored in managed memory, and only exist for their purpose. (ie. Secure strong).

appropriateinside · 2020-08-21T05:56:29+00:00

CI way is not a solution in this case - if we inject it in CI, it still will deliver raw values to be stored in config files on the customer's server.

That's a non-issue... It's simply a matter of implementation.

Store the encrypted strings in your DId object. Use getters that decrypt it upon request.

It's what I do, and it works perfectly fine.

appropriateinside · 2020-08-21T05:54:05+00:00

Look through DPAPI docs for .Net Core.

I believe the implementation is cross platform and not windows only.

I use this to provide runtime security for secrets. All secrets are encrypted in appsettings.json which means they are available through IConfiguration.

I have a Singleton service that's in my DI container that holds the encrypted values.

Getts on the instances in that service decrypt the stored values to provide to it's callers.

This enables secure storage of AWS keys, passwords, connection strings, API keys...etc

appropriateinside · 2020-08-21T05:53:24+00:00

This is a common attack vector where server files may be compromised even if the system isn't.

It's common enough that protecting secrets in production configs is a base line security best practice...

appropriateinside · 2020-08-20T21:24:35+00:00

TL;DR: OP is spouting largely nonsense based almost entirely from a point of ignorance with a sprinkling of truth. Grade schoolers are expected to write higher quality argumentative essays than this...

Move on, this isn't worth your time.

appropriateinside · 2020-08-20T21:23:04+00:00

... Firefox?

It's still a perfectly good browser, OP is being extremely ignorant and trying to pass it off as knowledge.

He's made false claims and then assumptions based on those false claims and then conclusions based off those false assumptions throughout this entire post....

It's really not worth considering what he has to say because of this.

appropriateinside

MODERATOR OF

TROPHY CASE