overview for bless

1

NM Highlands University Confirms Ransomware Incident (lemmy.world)

submitted 7 months ago by bless@lemmy.world to c/abq@lemmy.world

0 comments fedilink

https://www.nmhu.edu/eoc/

1

Ransomware attack strikes District Attorney offices across New Mexico (www.yahoo.com)

submitted 7 months ago by bless@lemmy.world to c/abq@lemmy.world

0 comments fedilink

question about self hosting SSO for multiple domains and services. in c/selfhosted@lemmy.world

[–] bless@lemmy.world 1 points 9 months ago

Looking for a good guide on getting this setup via docker and AD LDAP, any pointers?

Looking for help setting up an alternative to DuckDNS in c/selfhosted@lemmy.world

[–] bless@lemmy.world 6 points 10 months ago (2 children)

Who's your DNS provider? I use cloudflare and powershell script and hits their API. Works well

Access home server from anywhere in c/selfhosted@lemmy.world

[–] bless@lemmy.world 1 points 11 months ago* (last edited 11 months ago) (1 children)

You can bound ufw rules to interfaces, so you can allow in only on the wg0 interface and not eth0 interface.

Glad it's working! I love wireguard!

Access home server from anywhere in c/selfhosted@lemmy.world

[–] bless@lemmy.world 2 points 11 months ago (3 children)

Hmm do a traceroute and see where it's dying. Can you ping inside IP of the tunnel on the wireguard server? What about outside?

What did you deploy in docker, firezone or basic wireguard?

Does your phone say connected and you see both incoming and outgoing packets? Is there a firewall in place on the wireguard host (ufw maybe)?

If you have nmap available you can also check port status.

Access home server from anywhere in c/selfhosted@lemmy.world

[–] bless@lemmy.world 2 points 11 months ago (5 children)

Good thing about wireguard is it's really simple. Google should get it done, if you get stuck send me a DM. I started with basic wireguard, I now run firezone in docker as I like the frontend.

Access home server from anywhere in c/selfhosted@lemmy.world

Bluetooth security flaws reveals all devices launched after 2014 can be hacked in c/cybersecurity@sh.itjust.works

[–] bless@lemmy.world 17 points 11 months ago

It means they can impersonate the Bluetooth device connected. Input devices are particularly concerning (keyboards and mice) as well as BT IoT devices which already historically lack good security controls. A lot of vehicles have Bluetooth integrated as well these days.

70

Bluetooth security flaws reveals all devices launched after 2014 can be hacked (lemmy.world)

submitted 11 months ago* (last edited 11 months ago) by bless@lemmy.world to c/cybersecurity@sh.itjust.works

5 comments fedilink

Security researchers have discovered new Bluetooth security flaws that allow hackers to impersonate devices and perform man-in-the-middle attacks.

The vulnerabilities impact all devices with Bluetooth 4.2 through Bluetooth 5.4, including laptops, PCs, smartphones, tablets, and others.

Users can do nothing at the moment to fix the vulnerabilities, and the solution requires device manufacturers to make changes to the security mechanisms used by the technology.

Research paper: https://dl.acm.org/doi/pdf/10.1145/3576915.3623066

Github: https://github.com/francozappa/bluffs

CVE: https://nvd.nist.gov/vuln/detail/CVE-2023-24023

Access home server from anywhere in c/selfhosted@lemmy.world

[–] bless@lemmy.world 45 points 11 months ago (16 children)

I would go with wireguard VPN or something like cloudflare tunnels or tailscale. With wireguard you'll need to open up an external port and forward to your VPN host, but wireguard uses UDP so no one can probe it for responses. CF tunnels and tailscale you don't have to open up holes in your firewall which is nice.

You also have the option of using a proxy and opening up 443 publicly on your firewall, but unless you know what you're doing I'd leave that closed until you learn more.

35

Bluetooth security flaws reveals all devices launched after 2014 can be hacked (lemmy.world)

submitted 11 months ago* (last edited 11 months ago) by bless@lemmy.world to c/cybersecurity@infosec.pub

1 comments fedilink

Security researchers have discovered new Bluetooth security flaws that allow hackers to impersonate devices and perform man-in-the-middle attacks.
The vulnerabilities impact all devices with Bluetooth 4.2 through Bluetooth 5.4, including laptops, PCs, smartphones, tablets, and others.
Users can do nothing at the moment to fix the vulnerabilities, and the solution requires device manufacturers to make changes to the security mechanisms used by the technology.

Research paper: https://dl.acm.org/doi/pdf/10.1145/3576915.3623066

Github: https://github.com/francozappa/bluffs

CVE: https://nvd.nist.gov/vuln/detail/CVE-2023-24023

Setup a DNS server on a dynamic public ip in c/selfhosted@lemmy.world

[–] bless@lemmy.world 1 points 11 months ago

Yes

Setup a DNS server on a dynamic public ip in c/selfhosted@lemmy.world

[–] bless@lemmy.world 5 points 11 months ago* (last edited 11 months ago) (3 children)

I would get a domain name and use ddns to update your rotating IP. Then I would setup wireguard VPN in split tunnel and have your parents network tunnel back to your piholes for dns resolution.

I use cloudflare API for ddns updates but there are plenty of choices for that. If you're using cloudflare for DNS just keep in mind you can't proxy the DNS entry for the ip for your VPN host as CF only forwards traffic over certain ports and they are not configurable (on free plan anyway not sure about paid).