• 0 Posts
  • 8 Comments
Joined 2 years ago
cake
Cake day: June 5th, 2024

help-circle
  • derek@infosec.pubtoADHD memes@lemmy.dbzer0.comFuck you brain
    link
    fedilink
    English
    arrow-up
    12
    ·
    2 months ago

    I’ve found it’s the movement and change of context that helps me. Taking a walk, going for a ride, or even just moving to a different room helps my brain kick out of one of these ruts. Dancing is a high energy option that I’m not always ready for but, when I am, it’s very cathartic. 🙂

    ADHD is a spectrum (as is all neurodiversity) but one of the neurochemical commonalities between people who meet the diagnostic criteria for ADHD is disregulation of norepinephrine. Getting on meds that work and engaging a therapist who can help develop better emotional tooling and coping mechanisms can be life changing. One of my coping mechanisms is changing the scenery. Norepinephrine is a precursor for a whole bunch of essential chemistry so engaging other systems that need it seems to help other areas.

    Everyone is different but I’ve found that if my brain is stuck then my body is usually stuck as well. Unstick the body and, after a while, the brain wants to follow.

    When nothing sounds satisfying and I have no gumption whatsoever I can introduce something locally novel in an attempt to kick things into gear again. Executive dysfunction can make choosing from options tough (or temporarily impossible) but, on not-the-worst days, I can at least stand up and start walking aimlessly until I start to feel different. Walking outside tends to help the most.

    It’s nothing strenuous or fitness focused. Just a leisurely stroll around the bedroom, yard, neighborhood, etc. After a bit I usually feel like doing something. Even if that’s just more walking at least it beats mean mugging the wall until I want to cry or sleep. Usually I end up doing something I wanted to do earlier in the week though.



  • That sounds pretty good to me for self-hosted services you’re running just for you and yours. The only addition I have on the DR front is implementing an off-site backup as well. I prefer restic for file-level backups, Proxmox Backup Server for image backups (clonezilla works in a pinch), and Backblaze B2 for off-site storage. They’re reliable and reasonably priced. If a third party service isn’t in the cards then get a second SSD and put it in a safety deposit box or bury it on the other side of town or something. Swap the two backup disks once a month.

    The point is to make sure you’re following the 3-2-1 principal. Three copies of your data. Two different storage mediums. One remote location (at least). If disaster strikes and your home disappears you want something to restore from rather than losing absolutely everything.

    Extending your current set up to ship the external SSD’s contents out to B2 would likely just be pointing rsync at your B2 bucket and scheduling a cron or systemd timer to run it.

    After that if you’re itching for more I’d suggest reading/watching some Red Team content like the stuff at hacker101 dot com and sans dot org. OWASP dot org is also building some neat educational tools. Getting a better understanding of the what and why around internet background noise and threat actor patterns is powerful.

    You could also play around with Wazuh if you want to launch straight into the Blue Team weeds. Education of the attacking side is essential for us to be effective as defenders but deeper learning anywhere across the spectrum is always a good thing. Standing up a full blown SIEM XDR, for free, offers a lot of education.

    P. S. I realize this is all tangential to your OP. I don’t care for the grizzled killjoys who chime in with “that’s dumb don’t do that” or similar, offer little helpful insight, and trot off arrogantly over the horizon on their high horse. I wanted to be sure I offered actionable suggestions for improvement and was tangibly helpful.


  • You can meaningfully portscan the entire internet in a trivial amount of time. Security by obscurity doesn’t work. You just get blindsided. Switching to a non-standard port cleans the logs up because most of the background noise targets standard ports.

    It sounds like you’re doing alright so far. Trying not to get got is only part of the puzzle though. You also ought to have a backup and recovery strategy (one tactic is not a strategy). Figuring out how to turn worst-case scenarios into solvable annoyances instead of apocalypse is another (and almost equally as important). If you’re trying to increase your resiliency, and if your Disaster Recovery isn’t fully baked yet, then I’d toss effort that way.



  • Sure! That’s an SMTP Relay. A lot of folks jumped on the poopoo wagon. It’s common wisdom in IT that you don’t do your own email. There are good reasons for that, and you should know why that sentiment exists, however; if you’re interested in running your own email: try it! Just don’t put all of your eggs in one basket. Keep your third party service until you’re quite sure you want to move it all in-house (after due diligence is satisfied and you’ve successfully completed at least a few months of testing and smtp reputation warming).

    Email isn’t complex. It’s tough to get right at scale, a pain in the ass if it breaks, and not running afoul of spam filtering can be a challenge. It rarely makes sense for even a small business to roll their own email solution. For an individual approaching this investigatively it can make sense so long as you’re (a.) interested in learning about it, (b.) find the benefits outweigh the risks, and (c.) that the result is worth the ongoing investment (time and labor to set up, secure, update, maintain, etc).

    What’ll get you in trouble regardless is being dependent on that in-house email but not making your solution robust enough to always fill its role. Say you host at home and your house burns down. How inconvenient is it that your self-hosted services burned with it? Can you recover quickly enough, while dealing with tragedy, that the loss of common utility doesn’t make navigating your new reality much more difficult?

    That’s why it rarely makes sense for businesses. Email has become an essential gateway to other tooling and processes. It facilitates an incredible amount of our professional interactions. How many of your bills and bank statements and other important communication are delivered primarily by email? An unreliable email service is intolerable.

    If you’re going to do it make sure you’re doing it right, respecting your future self’s reliance on what present-you builds, and taking it slow while you learn (and document!) how all the pieces fit together. If you can check all of those boxes with a smile then good luck and godspeed says I.