mastodon 4.7.3Infosec, Unix, IP (networking, not lawyering), Free and Open Source software.
Has folded a fitted bedsheet, at least once.
#NZ Ōtepoti/Dunedin
Some journalism in #nz is still critical, important, and detailed.
TP-Link fireware is a gift that keeps on giving.
TL;DR an undocumented command in the CLI calls out to a TFTP server and trusts whatever is provided because really, why wouldn't you?
Now, of course you need to be authenticated in order to get to the CLI like this; but you gain more control over the machine by exploiting it.
This is your last opportunity to grab the latest Hackers Town Tshirt. Go to https://www.customink.com/fundraising/always-be-n00bin and pick up @prahou@merveilles.town's design for The Fool, reminding you to Always Be N00bin'.
This isn't only for people who use the Hackers.Town fediverse server (although that's where the money will be going, to our hosting expenses), it's for anyone who understands what we're talking about!
Hey #hackerstown ... (and non-hackerstown peeps too, you're all welcome)
It's fundraising time for our instance, we're not charging users for the service but we do like to be able to pay for it :-)
This time around we have a fantastic design from @prahou@merveilles.town's Analog Nowhere, The Fool to remind you to Always Be N00bin' - new experiences and new perspectives help us all hack better.
@Larvitz ssh should not be facing the Internet these days for the vast majority of users, even though by default it usually makes secure choices (like, no root user and keys instead of passwords). Your VPS should come with console access, which can be used for initial configuration and emergency access. You can then choose to set up management access via some separate network, probably a VPN.