Don’t recommend using FTP. It’s a shitty old protocol that needs to die. Just use nginx or apache with directory listing enabled.

Since I’m old and need to deal with administrating a bunch of machines for work, I settled on the most dull and unsurprising distros of all: debian. Sure, when I was younger and eager to learn and with much time on my hands, I used gentoo (basically what is now arch) and all the others too.

If you don’t consent to being born into this world right now, would that not mean that you should just kill yourself? I off course don’t mean to say that you should, but I’m curious why you have a drive to live, and thereby consuming precious resources that could benefit less defeatist people. Or would you have chosen differently if you had been asked when you were born.

I understand that we seem to be in a global situation where imminent doom is unavoidable but maybe you should ask older people or read up, because I think these things happen on a regular basis.

And no, I don’t want to downplay the consequences of the multiple clusterfuck of global catastrophes we’re heading into (since a long time). Maybe I’m just a hopeless optimist :).

Maybe try guix

Emacs will always be abe to do things you can’t do with other editors. It’s a text based interface toolkit that happens to also have a good text editor and IDE capability. Buuut, you need to spend a lot of time to set things up. I use it since probably more than 20 years and I still often need to look up and learn stuff. If you want a tool and not a workshop, get a simpler editor.

Just came here to say that the guy looks like a creep!

You could upload content to make it better !

No, I rarely read the code of software I use, especially crypto code since thant’s not my thing. But good to know that you did. Thanks for your opinion.

Please tell us more about the actual security problems!

Just do it!

Agreed!

Be sure to use a passphrase

I don’t agree about the point concerning cost. You have additional training, update, maintenance and config burden. This on top of the burdon of using the VPN on top of ssh.

Ok, fair point. But why stop at one vpn? I choose to trust OpenSSH, but I agree that adding a secondary layer of security actually helps here. You basically multiply two very low probabilities to get an even lower one. The trade-off is that you add complexity. You now need to keep two services up to date, and correctly configured and access/key material distributed.

I’d only recommend this setup for projects with special security requirements.

And why exactly is that more secure?

Welcome to the internet! Your system will get probed. Make sure you run as little as possible services on open ports and only high quality ones such as OpenSSH. Don’t freak out because of your logs. You’re fine as long as your system is up to date and password login disabled! Don’t listen to the fail2ban or VPN crowd. Those are only snake oil.

A VPN is probably just as (in)secure as OpenSSH. There is no gain in complicating things. OpenSSH is probably one of the most well tested code for security around.

Public ssh is completely fine as long as you use key based auth only and keep your sshd up to date. Stop spreading bullshit.

Totally agree. This is a legitimate reason to chop the axis. There should be a law requiring schools to put a lot of time in teaching kids to read news and especially graphs.

Welcome to the internet. You will be probed. Just as your immune system, or rather your body, is being probed.

Just don’t run broken software. The attackers will not be able to exploit you then. If they have zero day exploits, the WAF will most of the time not save you since they are often pretty easy to circumvent. WAFs are only effective against old and shitty exploits that should be patched anyways since ages.