Viewing profile — lazyweb

It is a bad idea. There's RCE CVEs on an almost weekly basis.

T-Pot does something similar: https://github.com/telekom-security/tpotce

Oh snap, that's crazy. In a bad way. > Going forward, customers must order the full server system to obtain the motherboard.

Veritasium - Why It Was Almost Impossible to Make the Blue LED https://www.youtube.com/watch?v=AF8d72mA41M

I generally agree. But then again, we had Master/Slave IDE connectors, floppy drives, _extremely_ shitty CPU sockets (broke plenty of Sockel A / 370 cooler latches), nothing (inclu…

I did the exact opposite. And by that I mean physically moved my homelab into their colo earlier this year. Runs like a charm, costs about 500€ per month total. Sounds like a lot, …

I'm hosting my own internal CA using Hashicorp Vault and some ansible + CI. The root CA is valid for 20 years, intermediate CA 10 years, client certs three months. Initial setup is…

As predicted by Mass Effect 1: Introducing Omni-gel.

Mort Way

I set up something like this [1] a few years ago at a previous job, mostly just because the security team wanted an interactive dashboard. [1] https://github.com/debricked/dmarc-vi…

I am running my own private CA as well, powered by Hashicorp Vault, Ansible and Jenkins. The Vault initialization and configuration is more or less manual (just a bunch of commands…

Straight out of https://www.imdb.com/title/tt21942866/ Which is a fun watch btw

Has anyone tried mirroring their apt repo yet? Using apt-mirror on Debian stable, I'm seeing errors: Processing indexes: [PPPPPPPPPPPPPPPPPPPPPPPPPPPPPPPapt-mirror: can't open inde…

Mildly relevant - the Telmate Terraform provider for Proxmox [1], which now stopped working with latest Proxmox version due to seemingly being abandoned, was initially mostly devel…

Agreed. I've introduced an internal, selfs-signed CA using Vault, ansible and Jenkins for my personal infrastructure. Issues certs via pipeline job and restarts / reloads affected …

"I still ate some and feel fine" vs. "I've been sitting on the toilet for the last 25 minutes".

I'm using Graphene, but with the default Google captive portal settings. While yes, I am technically leaking my current public IP to Google servers, what does it actually tell them…

Wow, incredible video. That's what I imagine could be the last few seconds of semi conscious hallucination by some poor Warhammer40K space traveller during a gellar field failure.

Exactly. Depending on the location and "crookedness" of each tooth, the oral surgeon might grind down the inside of the jaw bone for a clean extraction. Source: I've had three of m…

My way of doing private SSL (not necessarily the easiest): * own CA, to be distributed to all systems via Ansible playbook or Dockerfile directives * Hashicorp Vault with enabled P…

As stated, between 20 - 30W.

My router at the moment is a 1U Poweredge R230. Got it for 70€ off of ebay about 3,5 years ago. It's using a Pentium G4600, one stick of 16G DDR4 ECC RAM, and a small cheap 2,5'' S…

Staggered spinup is still a feature on virtually all modern hardware/RAID disk controllers.

Why not stay with Ubuntu, and upgrade to 22.04 LTS? Is the current setup giving you trouble? Any kind of (standard) Xeon HW setup should be well supported by either OS.

Can't help but be mildly amused by the article and many of the comments. Here in Germany the standard "Kündigungsfrist" is often three months to the end of the current month at man…