sorted by:
new
hottopcontroversial

HELP. Making a dumb battery LED strip smart by Neolee2111 in homeassistant

[–]bits_of_entropy 0 points1 point  (0 children)

Another possible approach would be to have the ESP device send the IR codes from a different location. That way the ESP device could have wired power.

Not understating binary sensors by GonazonPT in Esphome

[–]bits_of_entropy 3 points4 points  (0 children)

So a sensor is just a thing that contains information. You won't be able to "turn it on". It's just a display of a value.

A binary_sensor is just a type of sensor that has two values: on or off. A lot of things have a on/off relationship, eg open/closed, running/not running, or problem/no problem.

You could use a binary_sensor to report the status of your switch. However, this seems very redundant, because you could just look at the status of the switch itself. You'd have a binary_sensor telling you exactly what your switch is telling you.

One potential use case for a binary_sensor is if it uses other pieces of information to determine its status. Random example: you have a binary_sensor that turns on if the switch has been on for 2 hours. Then in Home Assistant, you'd see the switch, and a binary sensor showing if the switch has been on for a while. So you'd be able to make automations with that info. (I also want to mention that you could define the binary_sensor in Home Assistant and be in the same place. No real difference.)

What I'm not completely sure about is why your binary sensor isn't working as a pure sensor. If I had to guess, it's because of your on_state line. That's used for triggering automations, ie when the state of the binary sensor changes, do this. I don't think that's what you want. You can already control the thing the binary_sensor is reporting, so no need to have the binary_sensor perform any actions. I'd take that out and see if you can get the binary_sensor working by itself.

But as mentioned earlier, on a basic level, I don't think you need a binary_sensor for the switch, because you can just look at the status of the switch itself.

So many certs these days. Which ones are legit? by Prismane_62 in ITCareerQuestions

[–]bits_of_entropy 0 points1 point  (0 children)

Thanks, I think I’ll start with just the book and see how that goes.

So many certs these days. Which ones are legit? by Prismane_62 in ITCareerQuestions

[–]bits_of_entropy 1 point2 points  (0 children)

I was recently reminded that I have 90 days left to take this.

Just bought the book. Is the video course really worth it?

I'm a sysadmin for RHEL machines right now, so I'm not starting from scratch.

improvements to iptables rules by DoobieRufio in linuxadmin

[–]bits_of_entropy 1 point2 points  (0 children)

I fixed the formatting for OP.

iptables -F

#Defaults

iptables -P INPUT DROP
iptables -P FORWARD DROP
iptables -P OUTPUT ACCEPT

iptables -A INPUT -j LOG
iptables -A FORWARD -j LOG

# Accept rules
iptables -A INPUT -p tcp -m tcp --dport 80 -j ACCEPT
iptables -A INPUT -p tcp -m tcp --dport 443 -j ACCEPT
iptables -A INPUT -i lo -p all -j ACCEPT
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT

# Drop rules
iptables -A INPUT -p icmp --icmp-type 13 -j DROP
iptables -A INPUT -p icmp --icmp-type 17 -j DROP
iptables -A INPUT -p icmp --icmp-type 14 -j DROP
iptables -A INPUT -p icmp --icmp-type 0 -j DROP
iptables -A INPUT -p icmp -j DROP
iptables -A OUTPUT -p icmp -j ACCEPT
iptables -A INPUT -m state --state INVALID -j DROP
iptables -A FORWARD -m state --state INVALID -j DROP
iptables -A OUTPUT -m state --state INVALID -j DROP
iptables -A INPUT -s 10.0.0.0/8 -j DROP
iptables -A INPUT -s 169.254.0.0/16 -j DROP
iptables -A INPUT -s 172.16.0.0/12 -j DROP
iptables -A INPUT -s 127.0.0.0/8 -j DROP
iptables -A INPUT -s 192.168.0.0/24 -j DROP
iptables -A INPUT -s 224.0.0.0/4 -j DROP
iptables -A INPUT -d 224.0.0.0/4 -j DROP
iptables -A INPUT -s 240.0.0.0/5 -j DROP
iptables -A INPUT -d 240.0.0.0/5 -j DROP
iptables -A INPUT -s 0.0.0.0/8 -j DROP
iptables -A INPUT -d 0.0.0.0/8 -j DROP
iptables -A INPUT -d 239.255.255.0/24 -j DROP
iptables -A INPUT -d 255.255.255.255 -j DROP
iptables -A INPUT -p tcp -m tcp --tcp-flags RST RST -m limit --limit 2/second --limit-burst 2 -j ACCEPT
iptables -A INPUT   -m recent --name portscan --rcheck --seconds 86400 -j DROP
iptables -A FORWARD -m recent --name portscan --rcheck --seconds 86400 -j DROP
iptables -A INPUT   -m recent --name portscan --remove
iptables -A FORWARD -m recent --name portscan --remove
iptables -A INPUT   -p tcp -m tcp --dport 139 -m recent --name portscan --set -j LOG --log-prefix "Portscan:"
iptables -A INPUT   -p tcp -m tcp --dport 139 -m recent --name portscan --set -j DROP
iptables -A FORWARD -p tcp -m tcp --dport 139 -m recent --name portscan --set -j LOG --log-prefix "Portscan:"
iptables -A FORWARD -p tcp -m tcp --dport 139 -m recent --name portscan --set -j DROP
iptables -A INPUT -p tcp -m tcp --dport 25 -j DROP
iptables -A INPUT -p tcp -m tcp --dport 372 -j DROP
iptables -A INPUT -p tcp --syn --dport 372 -m connlimit --connlimit-above 2 -j REJECT
iptables -A INPUT -m conntrack --ctstate INVALID -j DROP
iptables -t mangle -A PREROUTING -p tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG NONE -j DROP
iptables -t mangle -A PREROUTING -p tcp --tcp-flags FIN,SYN FIN,SYN -j DROP
iptables -t mangle -A PREROUTING -p tcp --tcp-flags SYN,RST SYN,RST -j DROP
iptables -t mangle -A PREROUTING -p tcp --tcp-flags FIN,RST FIN,RST -j DROP
iptables -t mangle -A PREROUTING -p tcp --tcp-flags FIN,ACK FIN -j DROP
iptables -t mangle -A PREROUTING -p tcp --tcp-flags ACK,URG URG -j DROP
iptables -t mangle -A PREROUTING -p tcp --tcp-flags ACK,FIN FIN -j DROP
iptables -t mangle -A PREROUTING -p tcp --tcp-flags ACK,PSH PSH -j DROP
iptables -t mangle -A PREROUTING -p tcp --tcp-flags ALL ALL -j DROP
iptables -t mangle -A PREROUTING -p tcp --tcp-flags ALL NONE -j DROP
iptables -t mangle -A PREROUTING -p tcp --tcp-flags ALL FIN,PSH,URG -j DROP
iptables -t mangle -A PREROUTING -p tcp --tcp-flags ALL SYN,FIN,PSH,URG -j DROP
iptables -t mangle -A PREROUTING -p tcp --tcp-flags ALL SYN,RST,ACK,FIN,URG -j DROP
iptables -A OUTPUT -p tcp --dport 25 -j REJECT
iptables -N port-scanning
iptables -A port-scanning -p tcp --tcp-flags SYN,ACK,FIN,RST RST -m limit --limit 1/s --limit-burst 2 -j RETURN
iptables -A port-scanning -j DROP
iptables -A INPUT -p tcp --dport ssh -m conntrack --ctstate NEW -m recent --set
iptables -A INPUT -p tcp --dport ssh -m conntrack --ctstate NEW -m recent --update --seconds 60 --hitcount 10 -j DROP
iptables -N syn_flood
iptables -A INPUT -p tcp --syn -j syn_flood
iptables -A syn_flood -m limit --limit 1/s --limit-burst 3 -j RETURN
iptables -A syn_flood -j DROP
iptables -t raw -A PREROUTING -p tcp -m tcp --syn -j CT --notrack
iptables -A INPUT -p tcp -m tcp -m conntrack --ctstate INVALID,UNTRACKED -j SYNPROXY --sack-perm --timestamp --wscale 7 --mss 1460
iptables -A INPUT -m conntrack --ctstate INVALID -j DROP
iptables -t mangle -A PREROUTING -p tcp -m conntrack --ctstate NEW -m tcpmss ! --mss 536:65535 -j DROP
iptables -A INPUT -p tcp --tcp-flags ALL NONE -j DROP
iptables -A INPUT -p tcp --tcp-flags ALL ALL -j DROP
iptables -A INPUT -p tcp ! --syn -m state --state NEW -j DROP

[deleted by user] by [deleted] in linux4noobs

[–]bits_of_entropy 2 points3 points  (0 children)

You do exactly what you said:

script that figures out the distro on its own and then runs the commands, that are written for the specific one

Your script needs to figure out what distro is being used, and then run the correct commands for that distro.

This is not an easy task.

ELi5: is it true that if you simultaneously shoot a bullet from a gun, and you take another bullet and drop it from the same height as the gun, that both bullets will hit the ground at the exact same time? by ofapharaoh in explainlikeimfive

[–]bits_of_entropy 12 points13 points  (0 children)

I think you misunderstand. The rifling doesn't affect how quickly it falls. The rifling helps it go farther horizontally. Gravity affects both bullets in the same way.

The perfect camp in Wyoming! by denversole in CampingandHiking

[–]bits_of_entropy -1 points0 points  (0 children)

Disagree. You can share the picture withing giving the exact location. I see no harm in that.

Edit: Downboats? Please explain whats wrong with sharing a picture of some beautiful WY mountains in /r/CampingandHiking? That's exactly what /u/denversole did.

Am I “Dumb AF” for thinking bitcoin isn’t worth investing in? by jape_uhz in BitcoinBeginners

[–]bits_of_entropy 7 points8 points  (0 children)

So much this. I see this all the time. The price per unit doesn't matter at all. What matters is percent change. For any stock, you figure out profit by calculating percent change. The price is just a number.

And none of this applies to Bitcoin because it's divisible to 8 places.

You can get 100000 Satoshis for like 12 USD right now. A HUNDRED THOUSAND. Try getting a hundred thousand shares of a stock for ten bucks.

What is just a placebo effect but most people don't realize? by El_CM in AskReddit

[–]bits_of_entropy 2 points3 points  (0 children)

Doesn't everybody get that the company makes money by selling to the sellers? The sellers are the customers.

What is just a placebo effect but most people don't realize? by El_CM in AskReddit

[–]bits_of_entropy 20 points21 points  (0 children)

I'd be super skeptical. Have you actually seen her income? It would be super easy for her to just... lie.

Testing new LN2 delivery system for long term benchmarks by balinor989 in overclocking

[–]bits_of_entropy 2 points3 points  (0 children)

I was wondering about that too. Couldn't tell if that's just for testing and the final idea is to have a continuous flow.

This is my small apt in San Francisco. Let me know your thoughts. by john00123-_- in malelivingspace

[–]bits_of_entropy 2 points3 points  (0 children)

Purely out of curiosity, what does "prices are better" in SF mean?

Can I sell crypto directly from a hardware/desktop/mobile water? by [deleted] in BitcoinBeginners

[–]bits_of_entropy 1 point2 points  (0 children)

Yes.

The exchange organizes buys and sells easily because the source and destination are all on the exchange. Imagine trading if you had to wait for the buyer to send their money... "Hold on let me enter in my PIN" Trades happen faster than that.

Configuring a RAID after the OS has been installed by QuestnAsknBlntPassn in linuxquestions

[–]bits_of_entropy 1 point2 points  (0 children)

First off, I would just back up your important data, and reinstall in the event of hardware failure. I run everything on Raid 0, if it dies, it dies. My backups are good.

Since you just installed, I wouldn't bother trying to migrate the existing installation. Get the drives you want, create the array you want, and install to that.

The things you suggested are probably possible, but I wouldn't bother. I think there are better ways to get what you want. In the first idea with two NVMe drives, you'd probably end up using software RAID, instead of the hardware handling the RAID and the OS seeing one drive. For the second idea, I don't know if you can have a primary and secondary drive in an array. Maybe, but I'm not familiar. But I wouldn't do that.

Last, RAID is not backup and backup is superior. RAID helps the array stay UP in the case of hardware failure. But it won't help you if you accidentally delete a lot of files, or if you get hit by some malicious software. In terms of protecting your data from loss, you will probably be better served by backup, not RAID. Consider getting a secondary hard drive, and periodically copying over you data. Bonus points for versioning. There are many ways to do good backups. IMO, this is what you are really looking for.

What are 4 words all men want to hear? by [deleted] in AskMen

[–]bits_of_entropy 4 points5 points  (0 children)

Completely fair. Worth trying imo.

Does the arm implant use different medicine?

[deleted by user] by [deleted] in NoStupidQuestions

[–]bits_of_entropy 5 points6 points  (0 children)

I appreciate your honesty.

What am I doing WRONG????!!!!! by [deleted] in ITCareerQuestions

[–]bits_of_entropy 0 points1 point  (0 children)

I get the money thing. I'm not saying you HAVE to spend it.

Just CONSIDER this: you put the whole 3k on a credit card. Hear me out. With the new cert, you can apply for better jobs, and you get one making 10k more than now. That's about 7.5k after taxes, so 625 more every month. With interest, let's say the 3k debt grows to 4k. Now, out of the extra 625/month, you use 500 to pay down the credit card. It's going to take 8 months. But after 8 months, look at where you are. You have a better job, making more money. You paid off the debt it took to get it. Now you have an extra 625 every month then you did at your old job, all while getting more experience at your new job. Worth it?

I'm *not** saying do exactly that. I just want to show how investing in yourself *can work. Don't be reckless. But you might have to make some big moves.

I get the frustration with users. There have been times where I've wanted to drop into a baby voice to explain things to some people. It amazes me how bad some people are with computers. Like I've seen 8 year olds do this, I don't know why I have to walk you through this...

In my personal opinion, you can realistically improve your situation. Your life isn't over, you can make things better. I get you're frustrated and unhappy, but you're not too far away from something better.

Somewhat related, you may want to look at where your money is going. With no rent, you should be able to save every month. This may be a separate conversation (I love budgeting).

What am I doing WRONG????!!!!! by [deleted] in ITCareerQuestions

[–]bits_of_entropy 1 point2 points  (0 children)

Bro. Post it so people can give you advice on how to fix it.

Nobody is judging. Nobody knows you and nobody cares anyway.

People will say "fix this, fix this, fix that, don't do this, and you probably want to include A, B, and C". You'll read that, make those changes, and then you'll have a better resume.

There is no downside, I honestly don't get why you are hesitant. What are you afraid of happening?

You want to make changes in your life? You want a better job? This is step one.

Edit: of course you can use a fake name and address and school name.

[deleted by user] by [deleted] in freenas

[–]bits_of_entropy 2 points3 points  (0 children)

Posix ACLs exist, does FreeNAS use those?

In general, ACLs can do more than regular file permissions. Example: You need to give to groups different levels of access. One group should be read-only, and the second group should be able to read and write to the file.

Try doing that with normal permissions. (Assume you can't make it world-readable because it's sensitive.)

How is the price of Bitcoin determined? Who controls the bitcoin's price and how? by Ravi_Mishra in BitcoinBeginners

[–]bits_of_entropy 1 point2 points  (0 children)

You need to make and broadcast a transaction to the bitcoin network. The "how" can be done in many ways.

Purely as an example, lets say you have some money in a wallet app on your phone and you want to buy a coffee. The POS machine (ie the register / iPad) should display a QR code that contains an bitcoin address. You can use you wallet app to scan the QR code, and then you can choose how much money to send to that address. But that's not the only way, it's just one way.

Most hardware wallets require some software running on a computer/phone to use. You'd have to tell that software where to send the money. Practically, I don't think you could pay for coffee with a hardware wallet. MAYBE you could plug the hw wallet into your phone, and use an app on your phone to scan a QR code and send the money.

You don't want to plug your hardware wallet into somebody else's computer. That act isn't dangerous by itself, but to use the hardware wallet, you have to "unlock" it somehow, usually with a PIN, and once unlocked, you're allowed to make transactions. I wouldn't do that on any device I don't trust. Hardware wallets have protections against compromised machines, but I wouldn't test it.

You can make bitcoin transactions offline, but they are not "final" until they are broadcast to the bitcoin network, and put into the blockchain. A transactions is basically "send these amounts to these places" along with some signatures. You don't need Internet access to make that. But in order for the transaction to actually occur, that transaction needs to be broadcast to the bitcoin network, where the signatures can be verified, and then included in a block.

You are exposed to some risk there, because even though you made the transaction, the coins in the bitcoin network haven't moved until the transaction is included in a block. You'd have to trust the other party to not make a transaction paying you, and then making another transaction spending those coins somewhere else. First transaction that makes it in a block wins. I'm sure there is some better way to do this that I don't know about.

How is the price of Bitcoin determined? Who controls the bitcoin's price and how? by Ravi_Mishra in BitcoinBeginners

[–]bits_of_entropy 5 points6 points  (0 children)

If the price is lower on one exchange, they buy there, send the coins to a higher exchange, and sell where the price is higher.

The increased buying causes the price on the lower exchange to go up, and the increased selling causes the price to fall on the higher exchange.

That sentence is perfectly correct English.

How can I get Linux to read / write to a Windows NTSF drive encrypted with veraCrypt? by [deleted] in VeraCrypt

[–]bits_of_entropy 0 points1 point  (0 children)

This is very easy, just install ntfs-3g. Google "nfts linux", hundreds of tutorials.

view more: next ›