nik282000

nik282000 , 1 month ago to Privacy in When privacy expires: how I got access to tons of sensitive citizen data after buying cheap domains

Spread the chaos! It's the only way that people will learn!

nik282000 , 1 month ago to Privacy in When privacy expires: how I got access to tons of sensitive citizen data after buying cheap domains

I read a great post where a guy bit-squatted (bought a domain that was 1 flipped bit away) Google and managed to replace the Google logo on google.com for millions of people. He did the same for facebook and ended up getting thousands of post requests with user data which normally would have failed to resolve or just timed out.

There is still plenty of unexpected fun to be had with domains.

nik282000 , 1 month ago to Selfhosted in How do you handle family requests that you disagree with?

Chaotic good, right there.

nik282000 , 2 months ago to Selfhosted in What are common practice's for hardening/securing your server?

I recently setup Guacamole (Web based VNC/RDP/SSH) with totp and was able to close external SSH access. Now everything I run can sit behind a single reverse proxy, no extra ports.

nik282000 , 2 months ago to Selfhosted in Pi.Alert is dead...💀 Long live NetAlert X 🚀 (network monitoring)

I found WatchYourLan hosed my PiHole logs. Somehow the WYL instance got its hostname associated with ~10 mac addresses on my lan so more than half of my traffic comes from "watchyourlan.local". FML

nik282000 , 2 months ago to Privacy in Manually opting out of data brokers' databases

DeleteMe

They seem like a scam. Their "Free Scan" gives the same results on a 20 year old email address as it does on a 2 years old address.

nik282000 , 3 months ago to Privacy in Your VPN provider won't go to jail for you for 5 dollars

Hmm, TIL, thanks.

nik282000 , 3 months ago to Privacy in Your VPN provider won't go to jail for you for 5 dollars

I love Mullvad and recommend them for everything other than torrenting. Once they disabled port forwarding I moved to AirVPN who seem to be pretty legit.

I'm not trying to keep my ratios up but I have a few torrents of media that are not available anywhere for sale and have less than 10 seeds, so I feel like I am helping keep the shows and movies of my childhood alive.

nik282000 , 3 months ago to Privacy in Feds Ordered Google To Unmask Certain YouTube Users. Critics Say It’s ‘Terrifying.’

You expect a cop to understand both the threat and entertainment value of a Defcon talk?

nik282000 , 3 months ago to Privacy in Feds Ordered Google To Unmask Certain YouTube Users. Critics Say It’s ‘Terrifying.’

As soon as Google bought YouTube they knew who the users were and everything they did online. This was never not true. Their business is to log all the activity of all internet users, not to make them safe or happy, there is nothing broken in their platform as far as they are concerned.

nik282000 , 3 months ago to Selfhosted in Are you reusing one postgres instance for all services?

I keep each service separate as far as DBs, if something breaks or get a major upgrade I don't have to worry about other containers.

nik282000 , 3 months ago to Selfhosted in Owners of a domain, which domain registrar did you choose and why?

Namecheap, cheap, easy to use, easy to setup DDNS, helpful support staff. I have heard horror stories of them selling popular domains out from under their owner but none were recent.

nik282000 , 5 months ago to Selfhosted in Public DNS server with gui

I ran my ssh behind 53 for a while because it's rarely blocked. A few bots even got it right and figured out it was ssh.