if they have minimal capacity for installing/configuring/using software, then sending a USB drive via the postal service should be a strong contender

relevant if it sabotages coal mining infrastructure

I don’t understand, why what my lemmy?

looks like this and runs NetBSD

Services:

• OpenSSH

npftables blocks all incoming except a particular set of ips. any connections from those ips hit pubkey authentication.

I’ve never had a problem

you’re right and sane firewall rules could prevent this type of attack

If you’re just accessing one device, why not use SSH?

SSH with pubkey authentication and sane firewall rules is very secure. Bonus points for fail2ban

i use namecheap’s dynamic dns with a curl cronjob

haven’t had a problem since setup 7 years ago

you can find me on Port 70

bsd fam

NetBSD

You’re advocating for running private services on the default ports?

I have a server exposed to the wan. some ideas:

• disable password auth for pubkey when you can
• don’t use default ports
• open as few ports as possible
• be conservative with your firewall allows: this is your server and not a public service

have fun!

Ctrl-a! love learning new things

Thanks for sharing :)

Personal bias: I’m a SSH/tmux zealot

How is this different/better than connecting to a tmux session on a remote machine?

I have electric! The coal stove is backup, some people use wood as a backup. It’s not uncommon

found one whose never felt the heat of a coal stove

it’s handy to have backup heat source when the power goes out so pipes don’t freeze

i keep a pile of coal in the cellar for the extra cold days

I started learning networking with OpenBSD’s tutorial on building a router.

Building a router forces one to learn networking.

https://www.openbsd.org/faq/pf/example1.html

GitHub?