operator avatar

operator

@operator@kbin.social

Self hosted SSH key repository?

I have too many machines floating around, some virtual, some physical, and they’re getting added and removed semi-frequently as I play around with different tools/try out ideas. One recurring pain point is I have no easy way to manage SSH keys around them, and it’s a pain to deal with adding/removing/cycling keys. I know I...

Max_P,
@Max_P@lemmy.max-p.me avatar

I would switch to certificate based SSH authentication.

All the server keys gets signed by your CA, all clients also gets signed by your CA. Everyone implicitly trust eachother though the CA and it’s as safe as regular SSH keys.

You can also sign short lived client keys if you want to make revocations easier, the servers don’t care because now all it cares is that it’s a valid cert issues by the CA, which can be done entirely offline!

HashiCorp Vault can also help managing the above, but it’s also pretty easy to do manually.

designatedhacker,

Your ISP is doing it wrong, which I guess you already know. I get a /64 net via DHCPv6 for my LAN which is pretty standard.

+1 to dual stack. Too much of the internet is v4 only, missing AAAA, or various other issues. I’ve also had weird issues where a Google/Nest speaker device would fail 50% of the time and other streaming devices act slow/funky. Now I know that means the V6 net is busted and usually I have to manually release/renew. Happens once every few months, but not in a predictable interval.

Security is different, but not worse IMO. It’s just a firewall and router instead of a NAT being added in. A misconfigured firewall or enabling UPnP is still a bad idea with potentially worse consequences.

Privacy OTOH is worse. It used to be that each device included a hardware MAC as part of a statelessly generated address. They fixed that on most devices. Still, each device in your house may end up with a long lived (at least as long as your WAN lease time) unique IP that is exposed to whatever sites you visit. So instead of a unique IP per household with IPv4 and NAT, it’s per network device. Tracking sites can differentiate multiple devices in the house across sites.

This has me thinking I need to investigate more on how often my device IPv6 (or WAN lease subnet) addresses change.

marsara9,
@marsara9@lemmy.world avatar

Sadly not yet. I'm in desperate need of a fronted dev, as the HTML/Javascript needs some serious work. But if I can't find someone soon I'll see what I can get put together and get it up and running soon enough.

Reddit Threatens to Remove Moderators From Subreddits Continuing Apollo-Related Blackouts (www.macrumors.com)

As some subreddits continue blackouts to protest Reddit's plans to charge high prices for its API, Reddit has informed the moderators of those subreddits that it has plans to replace resistant moderation teams to keep spaces "open and accessible to users."

JohnDClay,

In conclusion, no AI bots is an amazing feeling

JanoRis, (edited )

The -30% value is taken from the peak value, but doesn't look at the total amount posted per day.

So I took the data from the blackout.photon-reddit site source.

It seems that it makes a Reddit Api call every Minute searching the newest Post and Comment and calculates both per Minute rates.

I wanted to see the effect the Blackout had over the day, so I summed the data and plotted it: Seems like between 11th and 12th June the comments/day diminished by -19.2%. The posts/day saw a decline of -8.9%

Reddit Blackout Graph

The sub with the most Activity was probably Askreddit

AskReddit Comment Activity

  • All
  • Subscribed
  • Moderated
  • Favorites
  • megavids
  • kavyap
  • DreamBathrooms
  • thenastyranch
  • magazineikmin
  • InstantRegret
  • GTA5RPClips
  • Youngstown
  • everett
  • slotface
  • rosin
  • osvaldo12
  • mdbf
  • ngwrru68w68
  • JUstTest
  • cubers
  • modclub
  • normalnudes
  • tester
  • khanakhh
  • Durango
  • ethstaker
  • tacticalgear
  • Leos
  • provamag3
  • anitta
  • cisconetworking
  • lostlight
  • All magazines