bless

joined 1 year ago
sorted by: new top controversial old
question about self hosting SSO for multiple domains and services. in c/[email protected]
[–] [email protected] 1 points 9 months ago

Looking for a good guide on getting this setup via docker and AD LDAP, any pointers?

Looking for help setting up an alternative to DuckDNS in c/[email protected]
[–] [email protected] 6 points 10 months ago (2 children)

Who's your DNS provider? I use cloudflare and powershell script and hits their API. Works well

Best way to set up cloudflare dynamic DNS in late 2023? in c/[email protected]
[–] [email protected] 3 points 10 months ago

Same but powershell. Works like a charm runs every 5 minutes

Access home server from anywhere in c/[email protected]
[–] [email protected] 1 points 11 months ago* (last edited 11 months ago) (1 children)

You can bound ufw rules to interfaces, so you can allow in only on the wg0 interface and not eth0 interface.

Glad it's working! I love wireguard!

Access home server from anywhere in c/[email protected]
[–] [email protected] 2 points 11 months ago (3 children)

Hmm do a traceroute and see where it's dying. Can you ping inside IP of the tunnel on the wireguard server? What about outside?

What did you deploy in docker, firezone or basic wireguard?

Does your phone say connected and you see both incoming and outgoing packets? Is there a firewall in place on the wireguard host (ufw maybe)?

If you have nmap available you can also check port status.

Access home server from anywhere in c/[email protected]
[–] [email protected] 2 points 11 months ago (5 children)

Good thing about wireguard is it's really simple. Google should get it done, if you get stuck send me a DM. I started with basic wireguard, I now run firezone in docker as I like the frontend.

Access home server from anywhere in c/[email protected]
Bluetooth security flaws reveals all devices launched after 2014 can be hacked in c/[email protected]
[–] [email protected] 17 points 11 months ago

It means they can impersonate the Bluetooth device connected. Input devices are particularly concerning (keyboards and mice) as well as BT IoT devices which already historically lack good security controls. A lot of vehicles have Bluetooth integrated as well these days.

70
Bluetooth security flaws reveals all devices launched after 2014 can be hacked (lemmy.world)
submitted 11 months ago* (last edited 11 months ago) by [email protected] to c/[email protected]
5 comments fedilink
 

Security researchers have discovered new Bluetooth security flaws that allow hackers to impersonate devices and perform man-in-the-middle attacks.

The vulnerabilities impact all devices with Bluetooth 4.2 through Bluetooth 5.4, including laptops, PCs, smartphones, tablets, and others.

Users can do nothing at the moment to fix the vulnerabilities, and the solution requires device manufacturers to make changes to the security mechanisms used by the technology.

Research paper: https://dl.acm.org/doi/pdf/10.1145/3576915.3623066

Github: https://github.com/francozappa/bluffs

CVE: https://nvd.nist.gov/vuln/detail/CVE-2023-24023

Access home server from anywhere in c/[email protected]
[–] [email protected] 45 points 11 months ago (16 children)

I would go with wireguard VPN or something like cloudflare tunnels or tailscale. With wireguard you'll need to open up an external port and forward to your VPN host, but wireguard uses UDP so no one can probe it for responses. CF tunnels and tailscale you don't have to open up holes in your firewall which is nice.

You also have the option of using a proxy and opening up 443 publicly on your firewall, but unless you know what you're doing I'd leave that closed until you learn more.

35
Bluetooth security flaws reveals all devices launched after 2014 can be hacked (lemmy.world)
submitted 11 months ago* (last edited 11 months ago) by [email protected] to c/[email protected]
1 comments fedilink
 

  • Security researchers have discovered new Bluetooth security flaws that allow hackers to impersonate devices and perform man-in-the-middle attacks.

  • The vulnerabilities impact all devices with Bluetooth 4.2 through Bluetooth 5.4, including laptops, PCs, smartphones, tablets, and others.

  • Users can do nothing at the moment to fix the vulnerabilities, and the solution requires device manufacturers to make changes to the security mechanisms used by the technology.

Research paper: https://dl.acm.org/doi/pdf/10.1145/3576915.3623066

Github: https://github.com/francozappa/bluffs

CVE: https://nvd.nist.gov/vuln/detail/CVE-2023-24023

Setup a DNS server on a dynamic public ip in c/[email protected]
Setup a DNS server on a dynamic public ip in c/[email protected]
[–] [email protected] 5 points 11 months ago* (last edited 11 months ago) (3 children)

I would get a domain name and use ddns to update your rotating IP. Then I would setup wireguard VPN in split tunnel and have your parents network tunnel back to your piholes for dns resolution.

I use cloudflare API for ddns updates but there are plenty of choices for that. If you're using cloudflare for DNS just keep in mind you can't proxy the DNS entry for the ip for your VPN host as CF only forwards traffic over certain ports and they are not configurable (on free plan anyway not sure about paid).

11
Ardent Hospital ER's Disrupted in 6 States After Ransomware Attack (www.bleepingcomputer.com)
 

Looks like it hit on Thanksgiving

Help me trash my FireTV stick in c/[email protected]
[–] [email protected] 2 points 11 months ago

Don't get rid of it, install Kodi and/or Plex on it

9
The Microsoft Security Adoption Framework (SAF) is live (learn.microsoft.com)
4
The Microsoft Security Adoption Framework (SAF) is live (learn.microsoft.com)
view more: next ›