• 0 Posts
  • 26 Comments
Joined 3 years ago
cake
Cake day: June 29th, 2023

help-circle


  • I just recently went through a much more benign, but scary nonetheless version of this.

    I realized that my Ansible directory, that I had made public on GitHub to share as an example to some folks, had secrets committed and pushed.

    It was the direct URL and credentials of an app I developed to store non-PII customer data. Now, it wouldn’t be the end of the world if someone noticed this and scraped the data, but it wouldn’t be good, either.

    Luckily, I have Caddy access logs, and it appears no one ever accessed it.

    So I pulled the secrets out of the Ansible directory and made the repo private, I rotated the credentials, and installed Crowdsec to monitor Caddy access logs and ban bad actors.

    I only noticed the secrets because I had just setup Authelia as an OAuth2 provider for my homelab, and I was adding it to my backup scripts.




  • chunkystyles@sopuli.xyztolinuxmemes@lemmy.worldRule
    link
    fedilink
    English
    arrow-up
    2
    ·
    21 days ago

    Bazzite/Bluefin/Aurora do all updates in the background. Flatpak and Brew as well.

    So all you have to do is restart your computer on a regular basis and everything just works.

    It’s what make them nice for people who use their computers like a Chromebook.















  • I used to do phone tech support for a device that hooked up to TVs to filter out profanity.

    I would give very explicit instructions on what to plug where. It was really common for me to have people unplug everything and start over because they did something wrong, and I had no way of knowing what because they were all unreliable narrators.

    On a second, third, fourth attempt I’d often hear a “OH! You said to plug that into the TOP ROW! I’ve been plugging it in to the bottom row.” Or something like that.

    A call less than 30 minutes was a good call. Calls over an hour were not uncommon. If I had someone who could follow instructions, it could be as quick as a handful of minutes.