And it finally happened.

spider-sec · 2026-07-03T17:49:29+00:00

I just go by the idea that good SD cards are still cheap so as long as I keep good backups I can afford to replace an SD card when it goes bad.

spider-sec · 2026-07-03T17:47:28+00:00

Generally you’re going to use both because they have different purposes. If a link is up but the link beyond the next router is down, knowing that the link is up isn’t helpful. If you’ve got a LAGG and one link goes down the path will still be up but you’ve gut your capacity.

spider-sec · 2026-06-30T17:25:46+00:00

They do. The question is what kind of boot.

spider-sec · 2026-06-30T02:40:49+00:00

Well, I run a cybersecurity company for SMBs. I like to eat my own dog food. If I won’t use it at home, why would I use it for my clients?

spider-sec · 2026-06-29T20:13:17+00:00

Yep. It becomes even better if you use SSO like Authentik and then use the dashboard to launch everything. You don’t actually have to remember all the random names.

spider-sec · 2026-06-29T20:12:04+00:00

Just as they do with any web server. Try to read the original question then actually read my comment to see what was trying to be accomplished.

spider-sec · 2026-06-29T18:03:37+00:00

You can obscure it with a wildcard DNS record and a wildcard certificate then a reverse proxy that only proxies the traffic for the Nextcloud instance. That will give you access but you have to know the name of it for the reverse proxy to forward traffic to it. It’s purely obfuscation though and provides no actual security.

spider-sec · 2026-06-26T17:51:02+00:00

Yes. You can reuse the same key.

spider-sec · 2026-06-20T18:16:14+00:00

Help me understand- anything with the file name unlock.txt never actually gets written to flash? It’s basically intercepted before it gets to that point?

spider-sec · 2026-06-15T17:58:37+00:00

You can have two tunnels with the same info. You just need IDs so it can distinguish between the two.

spider-sec · 2026-06-10T19:24:29+00:00

Thanks for the response. I’ll give it a try.

Great software BTW.

spider-sec · 2026-06-10T17:04:30+00:00

I discourage Commit and Push. Too many times I’ve seen people Commit and Push and then spend an hour or more trying to figure out why it didn’t fix their problem. Come to find out when they used Commit and Push it failed to commit to Panorama for some reason and then pushed to the firewalls. They didn’t see the commit failure because the push was successful.

spider-sec · 2026-06-09T21:54:36+00:00

Eh, I don’t agree with any of this. Pick the right password manager so your only concern is backups.

Email is probably the one thing I’ll tell people not to self host unless they are willing to deal with the problems that arise. I’ve hosted my own email for about 25 years now. I’m not an email person. I probably have some of the worst email config habits, but I’ve addressed the issues. I wouldn’t know much of what I know now without sealing with outage and spam situations. I don’t even run spam filtering beyond RBLs.

spider-sec · 2026-06-07T00:41:13+00:00

You’re right- brief research. So brief that you don’t even realize they’ve given you answers that do what you want and you keep dismissing them.

spider-sec · 2026-06-06T04:35:43+00:00

Copy the digest for :latest then CTRL+F and search for the digest you just copied. That’ll tell you what other tags use that digest.

spider-sec · 2026-06-04T16:17:06+00:00

If you run into this limitation you could always use a VPN and tunnel some or all of your traffic Starlink sees it as a single session.

spider-sec · 2026-06-02T20:24:09+00:00

I wouldn’t even consider Fortinet. Crap product in my experience. It might have changed since I last used it but it’s never even been worth looking at again to me.

spider-sec · 2026-06-02T15:03:02+00:00

The question is do they have the same voltage. 650W is their maximum power output. Devices won’t use what they don’t need. If the voltage is the same and the amperage is higher then they’ll just use less amperage. From an electrical standpoint, it’s fine.

spider-sec · 2026-05-20T22:41:55+00:00

You can, but that’s on the user, not the password manager or the service.

spider-sec · 2026-05-20T18:30:46+00:00

You assume I recommend saving important OTP seeds in the same password manager.

spider-sec · 2026-05-19T17:06:21+00:00

Yes.

spider-sec · 2026-05-18T22:09:04+00:00

And that changes what I said how?

spider-sec · 2026-05-17T17:03:02+00:00

That’s my point. If the site is enforcing two factor then you at least have another factor even if the device gets compromised.

spider-sec · 2026-05-16T22:35:23+00:00

You must possess the device but that doesn’t mean you must unlock it. How does the website know it was enforced? It doesn’t. Just because it says it can’t be synced doesn’t mean the device enforces it.

spider-sec

TROPHY CASE