• 2 Posts
  • 10 Comments
Joined 1 year ago
cake
Cake day: March 27th, 2024

help-circle


  • I was hacked years ago. I was hosting a test instance of a phpbb for a local club. Work blocked SSH, so I opened up telnet. They either got in from telnet or a php flaw and installed password sniffers and replaced some tools (ps, top) with tools that would hide the sniffer service they installed.

    After that, I changed my model. My time lab is for learning and having fun. I’m going to make mistakes and leave something exposed or vulnerable and hackers are going to get in. Under this new model, I need to be able to restore the system easily after a breach. I have a local backup and a remote backup and I have build scripts (ansible) so that I can restore the system if I need to. I’ve had to do this twice. Once from my own mistake and one from hardware failure.






  • r0ertel@lemmy.worldtoSelfhosted@lemmy.worldBacking up IaC
    link
    fedilink
    English
    arrow-up
    7
    ·
    10 days ago

    As others have said, a traditional off site backup will work. How do you plan to perform a restore, though? If you need the self hosted source repo, it won’t be available until the infrastructure is stood to creating another circular dependency.

    I’m still in the early stages of exploring this, too. My solution is to run a local filesystem git clone of the “main” repo and execute it with a Taskfile that builds a docker image from which it can execute the ansible infrastructure build. It is somewhat manual but I have performed a full rebuild a few times after some Big Mistakes.


  • Americans get really upset when people go to the US and do things like they do in their home country, but also expect to be able to act like Americans in other countries. It’s a little arrogant or ignorant. Some people who who were even invited to study in the US have been deported for doing things that Americans do themselves, like protesting.

    Whittle this story down to its core and you have, “guest in country breaks law and gets punished”. Is that really surprising? How about, “guest in country exercises rights of citizens and gets punished?”