Viewing profile — jimsi

Recently I was reading logs on production machine and have seen line "pdns-recursor[2169088]: PowerDNS Security Update Mandatory: Upgrade now, see https://doc.powerdns.com/recursor…

I think that providing API to be used by standalone clients is far more better approach

I would recommend to use borgbackup - it is very convenient for security (it provides very flexible encryption options with safe defaults) and efficiency (deduplication)

I can't remember any recent good news about 0click mitigation

I use KeePassDX on Android and KeePassXC on a laptop, and they are synced with Syncthing. I have no issues with this setup

This might be a way better solution in terms of performance, but I cannot imagine way to run more complicated stuff rather only blocking IP in the firewall using iptables

This ratio is only applied if there are more than 1000 SYNs, forgot to mention that in the README ( https://git.encryp.ch/g00g1/no-portscan/src/branch/master/cm... )

Recently my domain register has received following abuse complaint. Honesty, I'm very shocked why they are even caring about 'groundless "facts"' and trying to take down such small…

My OpenSSH is located on a non standard port, 22/tcp is going to the endlessh honeypot.

How did you discover this? Anyway thanks for additional information

I have asked Cloudflare about this traffic, but support says "Cloudflare helps protect sites, and accelerate them. We do not attack sites, and our network can't be used to generate…

I think single SYN packet would be enough to know whether this port open or not, but they trying to gather full banner.

I expect to hear who (and why) generates that kind of traffic from cloudflare owned subnets.

Probably yes, but hey! Why do Cloudflare Worker would need SSH connection establishment? I do not asking Cloudflare to block 22/tcp entirely, but all this situation is very odd - I…

Maybe that's a case, but their abuse team hasn't replied anything in a 2 weeks about that after I gave them all timestamps and both source/destination IP addresses

Previously this post was named in such way, but post get flagged... So I removed its mentioning and replaced with ASN

https://github.com/xmikos/cryptboot/blob/master/README.md

> In addition to offer encrypted connections, each publicly available SMTP server must accept unencrypted connections according to RFC 2487 as well. So while Amazon SES should defi…