Jump to content

SquallStrife

Herø
  • Content Count

    11,923
  • Joined

  • Last visited

  • Days Won

    56

Everything posted by SquallStrife

  1. SquallStrife

    Tips for securing public-facing SFTP?

    I see what you're saying, but I've never been much of a believer in security-through-obscurity. Given that the site is mentioned a lot in vintage computing circles, and now ranks highly in searches for old drivers, I'm not surprised at all that it's a target for more than just the most casual script kiddies.
  2. SquallStrife

    Tips for securing public-facing SFTP?

    In my mind, a better host discovery method would be a SYN sweep on port 80 or similar, to find hosts offering at least one public-facing service, since ICMP blocking seems to be common practice. Time will tell I suppose!
  3. SquallStrife

    Tips for securing public-facing SFTP?

    I'll keep that in mind if ICMP traffic becomes a problem. However I've discovered that you can indeed just drop ICMP echo, while still responding correctly to other types: iptables -A INPUT -p icmp --icmp-type echo-request -j DROP
  4. SquallStrife

    Tips for securing public-facing SFTP?

    Pretty much. Being a public-facing site, I don't want it to be misbehaving in funny ways because I tried to do something spec-breaking.
  5. SquallStrife

    Tips for securing public-facing SFTP?

    Ping, specifically, probably none. But ICMP is used for other things (see the link I posted in the previous post), and I don't know if iptables lets you just drop one type of ICMP packet?
  6. SquallStrife

    The GeForce Partner Program

    There's a bit of a difference between re-purposing stocks of old printed material for a new port by attaching a sticker, and deliberately trying to undermine a branding partner.
  7. SquallStrife

    The GeForce Partner Program

    That might be a stretch. What you're describing would just be confusing at best, deceptive at worst.
  8. SquallStrife

    As a non social media user - Mansplaining

    The phenomenon is real, and hardly a new thing. Dumbing down an explanation with no real sign that you should need to, but a judgement on their gender, age, race, etc. It's just a form of sexism/racism/etc. The name of this phenomenon is the only thing that's new or contentious, really. Calling is "mansplaining" is a product of this SJW nonsense.
  9. SquallStrife

    Tips for securing public-facing SFTP?

    I toyed with these ideas, but ultimately the target audience is very geographically diverse, including Russia, China, and the other usual suspects. Some (but not all) are also "modern tech savvy" and use VPNs, so blacklisting them would get messy. I had thought of blocking pings, though there are sound technical reasons not to. I may consider it if the volume ramps up. Since implementing fail2ban, the frequency has dropped from several attempts per second, to one every few minutes, which I'm happy with for now. Some are, others not so much, it complicates something that's already not super straightforward. Another change I've just made is to shorten the "AuthOrder" directive on ProFTPd, so it no longer falls back to /etc/passwd if a user isn't found in the database. The immediate effect is that instead of "USER ROOT" returning "incorrect password", it now returns "no such user found", which would probably discourage bots/scripts from trying the same user again. The proftpd-root filter bans IPs that try to login with "root" immediately, other usernames get 3 attempts (because legit users typing their password wrong still trip this rule).
  10. SquallStrife

    Maximum PC recommends XBOne X over a PC

    For sure. I just meant to point out that the risk with Kickstarter is that you get nothing. Granted there is some recourse now for campaigns that don't deliver; there wasn't back then. Early access means there's a product already, however incomplete and broken it might be.
  11. SquallStrife

    Maximum PC recommends XBOne X over a PC

    The entire "early access" and pre-order thing is deviant. Early access doesn't even have the notional safety of a kickstarter project. Now now, at least with early access you usually get SOMETHING. I backed Two Guys from Andromeda on Kickstarter... just after I backed Double Fine Adventure. Still waiting for the former.
  12. https://www.humblebundle.com/software/magix-sounds-of-music-software $20 (US I assume) for Acid Pro 7 alone is a steal, never mind all the other cool shit at the lower tiers.
  13. SquallStrife

    Bitcoin trading.....

    ...in which case it wouldn't have mattered if you'd used cash (in lieu of buttcoins) in the first place. So I re-iterate, if the point of buttcoins is not simply as an alternative store of value, then what is the point? Even if you personally only use them for barter, somewhere along the line, somebody is going to need to exchange them for fiat to pay tax. Without the ability to do that, they are pointless. You might as well just use cash. People mining buttcoins are simply making a long-winded conversion of fiat to butts, vicariously through their power bill (or by stealing someone else's power).
  14. SquallStrife

    Bitcoin trading.....

    ...and if obtaining shells and restoring them becomes more than a hobby, and flipping cars becomes a primary source of income, you now need to record-keep that flow of value. Buying a case of beer to trade for a shell becomes a business expense, you get a GST credit for it. Putting in the work and selling it for a profit attracts business tax. Wages paid to yourself attract income tax. To be legal, it's all accounted for. Substituting beers and shells for butttcoins is immaterial. Substituting dollars for buttcoins just makes your recordkeeping harder.
  15. SquallStrife

    Bitcoin trading.....

    This isn't new. It's called barter. Before buttcoins I might have offered you some of my SNES collection in exchange. Or to help fix your car. Or some of the mangoes from my orchard that I spend time tending to. Consider: You mine buttcoins and trade buttcoins for a Ferrari, but then you fall on hard times and have to sell your Ferrari to pay your rates, water, and child support. This person reported no income but had a Ferrari to sell. Hello audit. Hence, bitcoins are treated as non-liquid assets. No different to hoarding gold bricks. "We" can make a new currency, but eventually you, or somebody, needs to liquidate it.
  16. SquallStrife

    Bitcoin trading.....

    If that's not the point, then what IS the point? You can't buy stuff without turning your butts into real dollars at some point. Whether you do that at Magic The Gathering Online eXchange, or your vendor does it through BitPay or similar, you're making a payment. If you're burning through electricity and computer parts with no view to ever "spend" your butts, then why do it in the first place?
  17. SquallStrife

    What's on your mind?

    If Qantas replaced their planes more frequently, people like you would be complaining that it costs too much to fly, and probably about how it's a rich people conspiracy to keep you from travelling or some stupid shit.
  18. SquallStrife

    Custom Case - Emulation Station

    THREE DEE PRINT SOMETHING ... at least a mounting jig for the mobo, that would get fastened to your alum plates described earlier.
  19. SquallStrife

    Gaming community in 2018 versus 1996?

    Incidentally, I'm going to be using this awesome Sega PC when I do early DOS games on my Twitch stream! Just going through the process now of setting up lighting and mics.
  20. SquallStrife

    Win 95 or 98 Odyssey space station game demo CD?

    Do we even care about thread necromancy nowdays? The tune is called ODYSSEY.MID. The CD itself is available on archive.org, download it from there and pluck the MID file from within. :)
  21. SquallStrife

    Anyone here have 'VRbox' cheap VR goggle things?

    Oh OK, the ones I saw had a single LCD (might have been cheap/early ones?), but that makes sense. But for the purpose of trying to use cardboard VR as FPV gogs, then yeah, you need to either sort out what's being shown to each eye (software), or modify the gogs to converge optically on the one large image (hardware). It'll never work the way you tried it earlier.
  22. SquallStrife

    Anyone here have 'VRbox' cheap VR goggle things?

    It's not the divider, or the "it has two lenses problem", it's the whole arrangement. In VR: - Separate image for each eye - Optical axes of each lens is parallel, and lands at the centre of the respective eye's image. In FPV goggles: - One wide image for both eyes - Optical axes of each lens converge at the centre of the screen, a lot like viewing a 2D image in real life, just closer to your face. At the very least, you could make the cardboard VR work by running your video feed through a "3D movie viewer" type app, to duplicate the image and apply the spherical distortion.
  23. SquallStrife

    Gaming community in 2018 versus 1996?

    The reason they call it the PCI or ISA "bus" is because the slots are literally bussed together. (All the pin 1's are commoned together, all the pin 2's, etc.) How do you think riser cards work? ;) It's up to the individual cards to determine which instructions are destined for it, and when it's safe to drive the data bus. ISA did it by directly decoding the address bus pins A0 thru A19 or A31. PCI is a bit more sophisticated, the BIOS/EFI/OS can tell a card what memory range it should "listen" on, but it's the same in principle. The way I learn all this stuff is by starting with a problem to solve, and going from there. I wanted a second ISA slot, so I started looking up info about ISA architecture, schematics of motherboards, etc etc. I've rarely (if ever) learned something new by starting with "I want to learn about XYZ."
  24. SquallStrife

    how crap is this government ?

    That might be the case, but doesn't really address the point.
  25. SquallStrife

    how crap is this government ?

    For someone that doesn't like politicians, you're pretty good at using (whatever the opposite of jingoism is) and hyperbole.
×