• 0 Posts
  • 106 Comments
Joined 11 months ago
cake
Cake day: November 4th, 2023

help-circle
  • I accidentally overwrote /etc/passwd once and I allowed /boot to run out of space during a kernal update and I created a local user with the same user that was also on the realm/domain that I had joined and various bash script issues.
    Some stuff I’ve had to fix that someone else did:

    • named a file rm -rf
    • rm -rf /bin instead of ./bin – Also the fact that they had sudo was crazy and also I guess this was the second time
    • chmod -R 777 /
    • Various software bugs running swap out of space or hitting the inode limit by creating files over and over again with a timestamp in the filename and having to remove all of them because there was no backup to the OS
    • Someone disabled SELinux because something wasn’t working but didn’t tell anyone – ugh
    • Compiled java because they googled some issue and followed some old tutorial without understanding anything instead of using alternatives and symlinked the old java from /bin to /home/theiruser/java – had sudo because he was a Windows domain admin.
    • Cybersecurity guy didn’t know what some VMs did so he turned them off and figured he’d find out if/when someone complained. Caused a massive core services outage.
    • Same Cybersecurity guy deleted a bunch of data because he wanted to see how the sysadmins would respond and witness backup restorations. He did not inform anyone.
    • Cybersecurity guy above still has Domain Admin and sudo everywhere. I would have personally removed his privileged access regardless of what ‘CyberSecurity’ management thought but I was leaving for a new job by then anyway so I figured I’d just let them eventually lie in the bed they made.

    There’s more but I don’t want to keep going because it is Sunday and I don’t want to ruin it.










  • The problem is that there is that ad networks and ad placements are just bad actors in the consumer space. Not only has malware been passed time and time again with ads but also false ads to malware. When that happens suddenly the content creator/website/whatever ‘isn’t responsible’ for it. Then there’s the issue of ads being placed everywhere slowing down websites but even worse, getting in the way with auto play audio and video, videos autoscrolling over the content you’re trying to read or whatever, etc.

    As a consumer, I should not and ethically do not need to worry about another’s business model. If the business model fails simply because I don’t allow something that model depends on to traverse my network then it is on them to figure it out. If the ads get in the way of the content, then I just want consume the content anyway.

    Some news websites use Ad Admiral or whatever it is called and I haven’t bothered trying to bypass the adblock wall for them. I just simply consume the content elsewhere.

    If ads were ever responsibly used or perhaps could be argued that there is compromise where consumers wouldn’t mind, then there’d probably be a lot less ad blocker usage. It’s like anything else. When it takes less effort to install an adblocker to have an OK experience, then ad blockers will be popular.

    I was around before ad blockers were very popular and even before pop-up blockers were around. Ads kept getting worse which is why ad blockers became more popular and more sophisticated. The Internet had ads for years before ad blockers were the norm.


  • I’m a millennial and worked since I was legally old enough in my state. I did use a small loan for my first car and paid for my own insurance policy and gas. I went into the military as soon as I could, worked hard and bought a house.

    I bought my house during the housing bubble burst and couldn’t really afford rent in a one bedroom apartment. Rent kept raising every year as did housing prices. I was very worried about food, electricity, water and rent every month. I made too much to get any benefits. I moved to a shithole in a small meth town and then the bubble burst and buying a house was cheaper than rent.

    I was lucky. Very lucky. People now aren’t so lucky and are working hard but calculating grace periods every month to pay some other critical bill. Going without, skipping meals, living on the bare necessities and this piece of shit that has zero perspective because ‘he made it’ in time just says “they aren’t working”.

    All while unemployment has been at a historical low all while there is a housing availability crisis. He has to be very willfully ignorant and thus dishonest.


  • A 30% cut for steam games sold on steam and a 0% cut for steam keys sold by the publisher wherever they want with the caveat that they must give steam users the same sales at around the same time. They get their games hosted on Steam’s industry best CDN, a page with support for images and videos, an API with features users like, workshop API for mod hosting and delivery, and other SteamWorks API stuff for stuff like multiplayer, patch management without charging a fee for it, forum hosting to hit the highlights. Pretty much all of that drives engagement and is mostly turn-key though you do have to programmatically interact with their API when it makes sense.

    Steam provides a lot of benefit for a 30% cut of what is sold on their store front and a lot more benefit for getting all of the above for a 0% cut if they sell steam keys outside of steam.








  • Depends on if there’s an IPv6NAT and how your ISP converts between IPv4 and IPv6 or actually supports IPv6 straight through. It also depends on your router.

    Currently, there’s still some debate since IPv6NAT (NAT66/NPT6/NATv6) isn’t really needed for WAN boundaries for the reasons NAT exists. However, without it you are right on that this will be a problem for the consumer because PCs, IoT devices, printers, circuts or whatever my wife has, etc. could all be exploitable and even worse, you may never know you’re contributing to the botnet.

    As an example, I have a global IPv6 on a few on my devices. They can connect to IPv6 if it originates from me but if it originates from them or is UDP it doesn’t route to my IPv6. My router doesn’t care. It’ll route it just fine either way. It would appear that my ISP has me behind one of the IPv6 NATs.

    I’d imagine that’s true for most people at home.


  • NAT provides some measure of security as pure coincidence to how it works. It is not designed or intended to provide security. It does not inspect packet payloads in order to filter them for security. It looks at the header and attempts to route it to an internal IP address (your devices on your LAN) and if it cannot, it will drop the packet because the header will only have the external IP address – the packet has no idea which device it is supposed to go to. Forwarding a port is telling the NAT to assume that when a packet hits a certain port, if it doesn’t know the destination internal IP, forward it to some internal IP anyway.

    The reason you can connect to websites, ssh outside, FTP, whatever, is because your connection comes from your internal IP first to some other IP and therefore, NAT knows which internal IP to route those packets to.

    Take for example this scenario:

    You download some software. It has malware that provides command and control (C2) to someone else outside of your network. A firewall and/or antivirus may be able to stop this and hopefully notify you. NAT will not help here. Furthermore, if you have uPNP enabled (usually it is by default on your router) the malware can forward any ports through your NAT to the compromised device opening it up to bot attacks and the like.

    Another scenario:

    You want to play a video game with you and your friends and you’re going to host it. So either you manually forward those ports or perhaps uPNP just does it for you. That game has an exploit known by attackers, or perhaps it can just be DDoS’d. Your NAT isn’t going to stop that. Hopefully a firewall will help you here. It definitely will if you set up explicit rules so that if they aren’t your friend’s IPs it will drop them. Though it is possible the game is exploitable and your friend’s are compromised.

    Take for example malware has been known to spread via Minecraft.