• 0 Posts
  • 17 Comments
Joined 1 year ago
cake
Cake day: July 1st, 2023

help-circle
  • Do a search for you server OS + STIG

    Then, for each service you’re hosting on that server, do a search for:

    Service/Program name + STIG/Benchmark

    There’s tons of work already done by the vendors in conjunction with the DoD (and CIS) to create lists of potential vulnerable settings that can be corrected before deploying the server.

    Along with this, you can usually find scripts and/or Ansible playbooks that will do most of the hardening for you. Though it’s a good Idea to understand what you do and do not need done.




  • True on the digit by digit code decryption. That I can forgive in the name of building tension and “counting down” in a visible way for the movie viewer. “When will it have the launch code?!” “In either 7 nano seconds or 12 years…”

    If they had been more accurate, it would have looked like the Bender xmas execution scene from Futurama:

    https://www.youtube.com/v/aRdRZ6TKo4s?t=25s

    I did like the fact that they showed war-dialing and doing research to find a way into the system. It’s also interesting that they showed some secure practices, like the fact there was no banner identifying the system or OS, giving less info to a would be hacker. Granted, now a days it would have the official DoD banner identifying it as a DoD system.

    I remember with Windows 95, LAN Manager passwords were hashed in two 7 digit sections which made extracting user password from the password hash file trivial:

    https://techgenix.com/how-cracked-windows-password-part1/

    Looks like it was worse than I remember. The passwords were first converted to all upper case first!





  • Indeed. I did something like I mentioned above + we replaced the master bathroom carpet (yuck) with tiles for pretty cheap. In return we locked in a 1 year rent reduction to recoup our costs and 2 years at a low rate.

    It worked out for everyone. We didn’t have to live with disgusting bathroom carpets, the place looked nicer for the rest of our rental period, it let us save money to put a down payment on a house, and we didn’t have the temptation to move to a “nicer looking” place and spend money and time on moving again.

    In the end, the landlord got back a place that was more attractive to future renters.

    The key is to ensure your landlord is a decent person (they exist). Ours only had the one house they were renting (used to be their house before they bought a new house in a better school district and decided to rent vs sell).

    If it’s a large holding company that is known to screw over tenants? Yeah fuck them, do the bare minimum and move out.


  • The way to do it is to work in either a rent decrease for X months for the work and materials or lock in a low rent for X years based on the work being done.

    Another alternative is to do the above and get the landlord to supply the materials.

    I’ve done it in the past and it has worked out well though usually for minor things (like replacing generic doorknobs with nicer looking ones, replacing a toilet with a better flushing one, or installing a ceiling fan).

    Adding insulation to the attic if it’s missing in spots can also make sense to do if you’re paying the utilities. Though again I would get the landlord to at a minimum to pay for materials or discount it from the rent.

    If the upgrades are things that will help make the unit more marketable when you move out, then they’d be dumb to turn it down.



  • press Shift + f10 and then type “OOBE\BYPASSNRO” easy and simple, takes only a few seconds

    Not picking on you, that is actually really good advice and a neat shortcut I’ll be trying myself. I just think it’s funny all the reddit threads regarding Linux usage, someone will pop in with a simple commands to get whatever the user wants done quickly (Ex: Open the Console and type “sudo apt update” then “sudo apt upgrade” and you’ll be good!) and they get shit on with comments like “OMG! You have to Open a terminal to do anything! This is why Windowz rules and Linux is for fanboy dorks!!”

    Btw, I dual boot.


  • To add to that, back in the day you had to find out what engine a particular game used as there were huge compatibility issues with certain engines and others ran a fair amount slower via Wine. Some engines, however, ran incredibly well under Wine.

    That said, there were some cool things you could do in Wine like define a pseudo monitor to run your game on. Example, back in 2010 (before widescreen monitors were more common) I had a triple head setup on Linux. I could specify in Wine an arbitrary monitor size (like say 2560x1024) and run games “full-screen” centered on my setup while having other windows open on the edges of my real desktop.

    Even games that officially didn’t support multiple monitors and on Windows (would force themselves to one screen and black out the other ones) ran well via Wine with this setup.

    It was a bit involved to get working the first time though!

    Played through the HL2 games, Supreme Commander, Rift: Planes of Telara, and even Wow that way (though WoW had other issues with non 4:3 displays).


  • Before Proton there were many projects that were helping run windows games and apps on Linux. Many of these were massive undertakings:

    Wine (translate windows API calls to Linux API calls)

    Wine tricks (automates the installation of many Window app dependencies)

    Crossover and their work on wine & wine bottles (a mini windows drive environment for each program)

    Loki’s early work on SDL to simplify sound and input for Linux and other *nix targets.

    Mono (open source implementation of . Net a library used by a fair amount of windows apps (also includes Moonlight - the open source implementation of MS Silver light)

    DXVK a impressive and efficient Direct X 10 & 11 to Vulcan translation layer (later incorporated D9VK - Direct X 9 to Vulcan) which also helps older games run better in Windows in addition to adding compatibility for Linux

    And many other pieces I’m forgetting now, make up Proton. Valve did an awesome thing in packaging all the community developed components, put some of those devs on their payroll, and even paid Crossover to work on the project that ultimately became Proton.

    Now with Proton, what would require lots of individual steps and separate downloads (setup a separate wine environment for each application, add dependencies, install DXVK, install needed open source frameworks, add any registry tweaks needed, etc) is now mafically automatically handled behind the scenes in one step by one tool by just installing a Windows game on Linux via Steam (though Proton can work without Steam as well).

    Since all the work is open sourced, the community is able to have their own version of Proton with newer fixes and components that Valve could not distribute themselves due to licensing: Glorious Eggroll.

    There were many attempts in the past to make an all-in-one tool to handle setting up wine and other compatibility tools (Lutris, Transgaming, PlayOnLinux, etc). So Valve wasn’t necessarily the first, they just offered a well put together, funded, and easy to use implementation.






  • The best ad I saw for Reddit (back before the grand Digg migration) was one day, everyone agreed to stop posting direct links to articles and instead post the links to the Reddit discussions for said articles.

    Suddenly, one day, the entire Digg feed was links to Reddit.

    We should do the same thing (on say 8/1) to give time for the different federated instances to get accustomed to the higher traffic, more activity on the feed, and more people to welcome the future Reddit refuges, just like Redditors once welcomed us during the Digg 4.0 exodus.