Do you use ssh on standard or non-standard port?
I deployed two machines with sshd on 22 port and already a bit tired of bots knocking into it.
Poll
Voting ended 25 October at 7:12.
Do you use ssh on standard or non-standard port? I deployed two machines with sshd on 22 port and already a bit tired of bots knocking into it. Anonymous poll
Poll
22
64
49.2%
Non-standard port
56
43.1%
Do some other cool trick
130 people voted. 10
7.7%
Voting ended 25 October at 7:12. Trying to deploy kubernetes cluster with Guix. guix deploy fails multiple times in different ways :/ The most annoying part that it somehow makes ssh daemon to stop responding, so I have to restart VPS after such occasions. Also, the deploy of 0-diff system is very slow for some reason. Another funny observation: shepherd doesn't respond to `herd status` during guix deploy. Definitely need to find out why it happens, but today goal is to get k8s cluster running. I think recent guix deploy got a progress bar. Now it's more comfortable, when you can see that something is happenning under the hood. A new SRFI-64 implementation by @graywolf is merged into Guile: https://git.savannah.gnu.org/cgit/guile.git/commit/?id=ad90f45a8c4fd00add44c214863850a425f787a0 ⚠ If you’re using #Guix, consider upgrading ‘guix-daemon’ now 👇 Fellow hacker Reepca (Caleb Ristvedt) found two related vulnerabilities allowing for a takeover of the build user accounts used by guix-daemon, which in turn could let anyone interfere with build processes. After coming back from 1week trip in the mountains I was reviewing my backlog and found out that there is a grant application deadline today. So my sunday looks like: a 10k run, turkish breakfast, a bit of yoga and 5h work on application. It's me hiding from any javascript related work I have in my current projects.
#javascript #js #ts #typescript #web #webdev I've started a project of my own in (1) but it seems like I have to move to (3) if I want to get it done already. I just couldn't maintain the (1). I could try to rewrite 2 to 1, but it's much time again and I need some well-tested and working Wayland Interop with lisp already... Time to learn some Common Lisp. Special thanks to Andrew (@abcdw) and #RDE project that has feature-lisp (common) packed and all the Developer Env needed is already a part of it. I've started a project of my own in (1) but it seems like I have to move to (3) if I want to get it done already. I just couldn't maintain the (1). I could try to rewrite 2 to 1, but it's much time again and I need some well-tested and working Wayland Interop with lisp already... Time to learn some Common Lisp. Special thanks to Andrew (@abcdw) and #RDE project that has feature-lisp (common) packed and all the Developer Env needed is already a part of it. take my word back on cl-wayland. it's not so friendly as I've expected. guy build a WM on top of it so that's why I thought it's reliable. My new home for the next couple month. Will go through Lucian way, climb and run preparing for marathon. Will be away from civilization for a week during the hike, but after that will come back to base camp and do some guile, guix and hoot work.
@civodul What could be nicer: “guix run supertuxkart” or “guix run objdump -T whatever” and do all the dance under the hood. Well, “run” or whatever other verb. :-) This way, it would “run” with any shell. # #Guix trick borrowed from Nix folks: the comma shell function, So you can type “, supertuxkart” or “, objdump -T whatever” in your shell and it will do the right thing! A fast and responsive manhatten track in the JBrowse2 genome browser written in @guile hoot wasm! Zooms in to gene and SNP tracks quickly. Coming to GeneNetwork.org soon.
[DATA EXPUNGED]
Want to learn about reviewing #guix patches? Just published jgarts talk about using Mumi and RDE: https://youtu.be/8m8igXrKaqU?si=xfFhcd0XwsqIuF0R He discusses using RDE to configure email and git-send-email which is such a big pain point - on #fedora or any foreign distribution (for me that's #ubuntu). Also some chat about #GNU debbugs instance and how Mumi makes it easy to use! @ekaitz_zarraga talk about bootstrapping RISV-V on Guix Linux is published: https://www.youtube.com/watch?v=Cj7DyiRqWBk Discusses #RISCV, #linux #security, #guix and @nlnet sponsorship of #future of #internet. Check it out! @futurile @ekaitz_zarraga @nlnet Sorry, but the work must have been astounding there.
Show previous comments
@asterism feeling like you have to do something but not being able to do it burns me out so fast, and the issue is i can’t stop doing it when I realize that’s what I’m doing, i can’t give myself a real break, even though I know that would actually make me more likely to at some point do the thing, and that feeling guilty about it doesn’t help, so I just continue to be stuck in this state and feeling more and more drained and terrible @asterism@ni.hil.ist As someone who needs her homework done rn, I'm in this photo and i don't like it :neofox_think_googly: |
@abcdw just 22 with fail2ban
also have it set to increase in ban time every failed attempt
# initial ban time:
bantime = 1h
# incremental banning:
bantime.increment = true
# default factor (causes increment to double bantime):
bantime.factor = 1
# max banning time = 8 week:
bantime.maxtime = 8w
@abcdw why should I change the standard port? This brings no enhanced security, it only makes me forget my own server config 😀
Trust the math
@abcdw with sshguard enabled, that adds the failed login sources to an nftables ipset, or a pf table