Skip to content

How to Setup a Secure Ubuntu Home Server

Technology
12 5 77
  • Samsung Removes Bootloader Unlocking with One UI 8

    Technology technology
    29
    2
    143 Stimmen
    29 Beiträge
    315 Aufrufe
    S
    My Xiaomi Mi A1 sporting Android 13 says: "hold my beer… "
  • 129 Stimmen
    5 Beiträge
    62 Aufrufe
    E
    You know that they only are prepared to offer cyber security experts minimum wage. I was literally looking at this yesterday, if they doubled what they are offering it would still be well short of an entry-level wage in the private sector. Up to a point you can get away with it and rely on "patriotism" to fill the difference but not to this extent.
  • ICEBlock - See Something, Tap Something

    Technology technology
    13
    109 Stimmen
    13 Beiträge
    157 Aufrufe
    D
    My main concern is that the app isn't open source. I don't trust any software that isn't fully open source.
  • 98 Stimmen
    11 Beiträge
    111 Aufrufe
    K
    This guy wasn't born yesterday.
  • 385 Stimmen
    9 Beiträge
    80 Aufrufe
    C
    Melon Usk doomed their FSD efforts from the start with his dunning-kruger-brain take of "humans drive just using their eyes, so cars shouldn't need any sensors besides cameras." Considering how many excellent engineers there are (or were, at least) at his companies, it's kind of fascinating how "stupid at the top" is just as bad, if not worse, than "stupid all the way down."
  • 11 Stimmen
    1 Beiträge
    21 Aufrufe
    Niemand hat geantwortet
  • 1 Stimmen
    8 Beiträge
    80 Aufrufe
    L
    I think the principle could be applied to scan outside of the machine. It is making requests to 127.0.0.1:{port} - effectively using your computer as a "server" in a sort of reverse-SSRF attack. There's no reason it can't make requests to 10.10.10.1:{port} as well. Of course you'd need to guess the netmask of the network address range first, but this isn't that hard. In fact, if you consider that at least as far as the desktop site goes, most people will be browsing the web behind a standard consumer router left on defaults where it will be the first device in the DHCP range (e.g. 192.168.0.1 or 10.10.10.1), which tends to have a web UI on the LAN interface (port 8080, 80 or 443), then you'd only realistically need to scan a few addresses to determine the network address range. If you want to keep noise even lower, using just 192.168.0.1:80 and 192.168.1.1:80 I'd wager would cover 99% of consumer routers. From there you could assume that it's a /24 netmask and scan IPs to your heart's content. You could do top 10 most common ports type scans and go in-depth on anything you get a result on. I haven't tested this, but I don't see why it wouldn't work, when I was testing 13ft.io - a self-hosted 12ft.io paywall remover, an SSRF flaw like this absolutely let you perform any network request to any LAN address in range.
  • Mazda DMCA takedown of Open Source Home Assistant App

    Technology technology
    6
    108 Stimmen
    6 Beiträge
    69 Aufrufe
    S
    Soon this all will be much easier. From 12 of September we’re going into a new world of EU Data Act that forces all companies to allow third parties to communicate with iot devices. Which a car is. So soon Mazda will need to provide those APIs in an official way.