Linux nerd and consultant. Sci-fi, comedy, and podcast author. Former Katsucon president, former roller derby bouncer. http://punkwalrus.net/

  • 0 Posts
  • 5 Comments
Joined 2 years ago
cake
Cake day: June 22nd, 2023

help-circle

  • These are two types of cartoon sounds when a character snores.

    The “Inside you there are two wolves” is the name of a proverb which began being parodied towards the end of 2018 and through the beginning of 2019. In the original proverb, a grandfather says there are two wolves fighting inside him, an evil one and a good one. His grandson asks, “who will win?” The grandfather replies, “The one you feed.” In parodies, the story is often simplified to “There are two wolves inside you. One is X. The other is X. You are X.” The proverb’s actual origins are murky. It has been attributed to Christian pastor Billy Graham in 1978, as well as the Cherokee Native American tribe.



  • Basic setup for me is scripted on a new system. In regards to ssh, I make sure:

    • Root account is disabled, sudo only
    • ssh only by keys
    • sshd blocks all users but a few, via AllowUsers
    • All ‘default usernames’ are removed, like ec2-user or ubuntu for AWS ec2 systems
    • The default ssh port moved if ssh has to be exposed to the Internet. No, this doesn’t make it “more secure” but damn, it reduces the script denials in my system logs, fight me.
    • Services are only allowed connections by an allow list of IPs or subnets. Internal, when possible.

    My systems are not “unhackable” but not low-hanging fruit, either. I assume everything I have out there can be hacked by someone SUPER determined, and have a vector of protection to mitigate backwash in case they gain full access.


  • This right here. I have worked with a dozen PMs in 30 years, only two were any damn good. One managed an IT team, and she didn’t know tech worth squat, but God damn, did she keep the flow going and know how to get shit done without being an ass about it.

    On the other hand, I faught with a PM once because he didn’t understand the concept of priorities or how to manage a crisis. “You want me to fix the outage or attend a meeting about it?” “Both.” “Pick one. You have a choice. I can fix the issue in the data center, or join a blame session in the meeting room. Which one?” “BOTH!” I got to the meeting room, and he demanded we put down our laptops and pay attention. He invited EVERYBODY regardless of whether they were needed or not. Twenty seven people all bitching about the outage and not a single person fixing it. No meeting moderation. Just chaos until he had a panic attack. Just useless.