• 2 Posts
  • 103 Comments
Joined 1 year ago
cake
Cake day: June 9th, 2023

help-circle
  • I choose not to think about it or include it in my mental threat model, the same way I choose to not worry about thermonuclear warheads.

    If there’s some exploitable backdoor and Intel gets owned, we’re all boned and there’s nothing we can really do about it. I don’t have anti-ballistic-missile systems, and I also don’t have the capability to make an entire hardware/firmware/os from scratch.

    So instead focus on the things you can control and are more likely to happen. Don’t plan for doomsday, plan for every day.



  • Cardiff, Wales. One of the few places in the world that felt like a Real City while also having its own distinct culture and feel. Every other city I’ve been to feels like the same sort of dull corpo-district monoculture.

    Old Montreal also has a bit of this, but only the central city areas, the outside periphery quickly devolves back into the “this could be anywhere in North America (version francaise)”








  • I did something very similar with Opensearch rather than grafana, but it’s definitely possible. My setup:

    • fluent-bit installed on webserver to scrape and parse nginx logs, then forward them over TLS to the monitoring server
    • on the monitoring server, a second fluent-bit service runs here to collect the forwarded logs and insert them into the correct index pattern. A filter also inserts geoip lookups into the records.
    • opensearch & dashboards set up to exclude known “bot” user-agents from the analytics, and do some other basic data cleanup to make the dashboards pretty

    It works well, but could be a bit simpler admittedly. You may choose to use Loki instead of Opensearch/Elasticsearch, and there are plenty of other log parsing tools out there.

    Another, much simpler option is to just run Goaccess on your log files, either periodically to generate reports, or as a daemon to create a live dashboard.


  • I’ve been using Thunderbird with the OWL and TBSync plugins for exchange for years with good results. Obviously some things won’t work (teams integration, provisioned signatures, mail merge, etc) but it’s good enough that I only need proper outlook/OWA less than once a month.

    Another option is “installing” the webapp as a PWA. I tried that for a bit but found notifications to be unreliable.