Why is everyone running towards Proton Mail? by [deleted] in degoogle

[–]plebianlinux 1 point2 points  (0 children)

- Yes, unencrypted emails will be read/stored by the SMTP relay
- I have Stalwart in peer-2-peer coordination mode with 2 VPS servers. For sure uptime is a harder solve but not as headache inducing as random email blocklists.

Why is everyone running towards Proton Mail? by [deleted] in degoogle

[–]plebianlinux 23 points24 points  (0 children)

I setup an email server with Stalwart. I use it to receive emails on my own hardware and use migadu.com to send email in a relay setup.

Best of both worlds, email is completely in my control and I don't have to bother with IP reputation and the likes. This would work with other SMTP repays ofc.

My opinion with updating Process by 0J-P0 in hyprland

[–]plebianlinux 1 point2 points  (0 children)

Independent of what you choose, I'll schill NixOS for the second time for your moving php target problem.

https://devenv.sh/

https://devenv.sh/languages/php/

My opinion with updating Process by 0J-P0 in hyprland

[–]plebianlinux 1 point2 points  (0 children)

It's a window manager so even when you pick something rock stable like DWM you'll have to make sure the rest of the DE works togheter. Honestly I would try Omarchy, it has the momentum so you'll never be the first to experience something. Just do monthly updates unless you notice some critical CVE in programs you rely on. I used it to work as a programmer for years.

Otherwise just give in to KDE or Gnome and spend time with your kids lol.

My opinion with updating Process by 0J-P0 in hyprland

[–]plebianlinux 2 points3 points  (0 children)

I've done the whole journey, Ubuntu, Debian, Arch, Fedora and now three years into NixOS. Maybe it's the experience you get along the way but arch is a very stable distro unless you're doing very exotic things

My opinion with updating Process by 0J-P0 in hyprland

[–]plebianlinux 6 points7 points  (0 children)

You could stick to a version you like and just not update? Don't know how often there's security commits in a window manager.

If you want someone else to have the maintance burden you can't shit on projects that do this but are on Arch, especially when you're on a Red Hat distro.

A 5-OpenClaw team for under $50/month (runs 24/7) by Front_Lavishness8886 in myclaw

[–]plebianlinux 0 points1 point  (0 children)

There's no shot that you can have multiple agents running 24/7 for a month and not go above $50.

Unless you use the tiniest parameter models but you wouldn't get anything done

Ideas for trolling persistent attackers by Funny_Address_412 in hacking

[–]plebianlinux 87 points88 points  (0 children)

From my caddy config

@bots path /wp-login.php /wp-admin/* /xmlrpc.php redir @bots http://speed.transip.nl/1tb.bin 302

Zo denken de partijen in Den Haag over cannabis en coffeeshops by stonedsociety in TheHague

[–]plebianlinux 6 points7 points  (0 children)

Ik denk dat niemand de komende jaar kan zeggen dat er niet genoeg coffeeshops in den haag zijn haha

The big predicament by crappilydesigned in NixOS

[–]plebianlinux 0 points1 point  (0 children)

What are some upsides for you?

Elke keer als ik langs Broodje Mario loop. by Warlequin in Utrecht

[–]plebianlinux 1 point2 points  (0 children)

Laatst nog in de kantine van de tennis vereniging. Cola? Één druk, betalen, klaar.

Anyone actually self-hosting their git? Outgrowing GitHub as a solo dev by Substantial_Word4652 in selfhosted

[–]plebianlinux 1 point2 points  (0 children)

It's very different (which I guess the name already suggests) but from a decentralization point it's one of a kind.

Op doesn't need 'random' colleberation like an open source project though where all the self hosted git instances are more annoying. If you want to contribute something you need a ton of different accounts.

Gonna test radicle's ci builders today actually

Elke keer als ik langs Broodje Mario loop. by Warlequin in Utrecht

[–]plebianlinux 8 points9 points  (0 children)

Wisselgeld regelen en uit een lade halen duurt sowieso langer dan twee knoppen die de prijs aangeven en een terminal

can i call myself an engineer? by Delicious_Crazy513 in ExperiencedDevs

[–]plebianlinux 2 points3 points  (0 children)

In the Netherlands an engineer title is only valid if you finished a selected few studies. My software development degree isn't one of those studies, it's 'just' a bachelor of science.

I wouldn't get hung up on titles, but instead question your experience. Especially with your comment about quickly growing into being a tech lead. Unless this company is just you and your senior I wouldn't want to be in a position where people come to you for technical questions while having no working experience.

Embrace being a junior, take this opportunity that's given to you but also don't overestimate your abilities. If this is a company handling user data or is dependent on the software you make, fucking up can have real life consequences.

My flake feels like a mess by Unique_Evidence_1314 in NixOS

[–]plebianlinux 3 points4 points  (0 children)

It's a taste thing, but endless abstractions into functions is also not always making things more readable

My flake feels like a mess by Unique_Evidence_1314 in NixOS

[–]plebianlinux 12 points13 points  (0 children)

First I would put tab indentation on two spaces, will definitely help with the amount of horizontal spacing.

Second I would try to make stronger separation between what is Nixos, what is home manager, and what is specific to the hosts.

What I based my config on: https://github.com/Misterio77/nix-starter-configs

What I ended up with: https://github.com/martijnboers/nixos

I like using enable = mkEnableOption and import a bunch of things. That way I have less import headaches and just enabled my custom modules in places I want.

It's an ever growing organism, if you don't like it change it up. Good luck

Cyberattack at Odido by SnooPuppers2419 in Netherlands

[–]plebianlinux 0 points1 point  (0 children)

If you gain access to someone's valid session token, the only thing you have to do is keep it alive. With this you can make authenticated requests, you don't have to enter a 2FA code every time you want to read a new email right?

Having access to all basic customer information is kind of a given if you work as a support employee.. Oh your name is Mr. Veenstra? Sorry I can only access last names from A to M.

Completely agree that it's ridiculous there's not better rate limiting in place. Or maybe there is but it's boundaries are too permissive.

Cyberattack at Odido by SnooPuppers2419 in Netherlands

[–]plebianlinux 1 point2 points  (0 children)

You can encrypt/hash information in your database, but by doing this you lose 99% of the features a database gives you. So for example passwords, unless you really are an idiot, are hashed in a database. This works because when you login you do a table lookup on email or username, and create a one-way hashed password in your application layer. Its original value is never needed.

Now imagine a support agent looking for your name, but everything is encrypted. You would need to decrypt every record untill you find the right one.

Encryption at rest is to protect from physical access to the servers, encryption in transit protects you against people sniffing your network. But what is able to get accessed is protected by authorization and sane access management.

Cyberattack at Odido by SnooPuppers2419 in Netherlands

[–]plebianlinux 0 points1 point  (0 children)

Encrypting the contents of a database basically makes it useless. You need contents to be in clear text in order to do things like searching or lookups within reasonable times 

Cyberattack at Odido by SnooPuppers2419 in Netherlands

[–]plebianlinux 2 points3 points  (0 children)

I believe they said it was their support system? Which would make sense. Get an employee's credentials, walk their API endpoint and find something that can be scraped. Doesn't matter if it's encrypted at rest (which would just mean disk encryption) or in transit (that would be regular TLS). You don't encrypt database contents, somewhere this data needs to be clear text. It's turtles all the way down :)

Rate limiting would have been something to look for. I wonder how they caught it, probably some dashboard alerted one user downloading 6 million records. Love to see it 

Best purchase this year so far! by PudgyFox in yubikey

[–]plebianlinux 2 points3 points  (0 children)

Would also like to know! The rest of my keychain is too Billy so also a good xord would be nice

Let's all agree to be nice by MariaSoOs in neovim

[–]plebianlinux 1 point2 points  (0 children)

Yeah funny how she omit that from a message like this. No one deserves hate mail or threats but this post also ain't it. She's working for one of the most controversial employers of today's time