Our great sponsors
-
-
Tokmannin-ESP8266-Wifi-topseli
Tokmannin 13 euron wifi-töpselissä on ESP8266-kortti, jossa ohjelmointiliitin kivasti esillä
-
InfluxDB
Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
-
spectre-meltdown-checker
Reptar, Downfall, Zenbleed, ZombieLoad, RIDL, Fallout, Foreshadow, Spectre, Meltdown vulnerability/mitigation checker for Linux & BSD
As a learning experience, it's probably better than anything else, but for day to day work, it's simply not worth the trouble.
NOTHING you can dream up at home will be as safe and secure as a cloud offering from one of the major cloud providers, at least not if you have a "home budget" as well. We're talking redundant power, redundant internet, server grade hardware and spare parts, fire/flood protection, physical access control, dedicated security operations, and multi-geo redundancy means you get that across multiple data centers.
I've long since abandoned the chores that come with hosting anything from home, and instead moved everything to the cloud. If i need privacy, Cryptomator (https://cryptomator.org/) handles end-to-end encryption. Most other services have been migrated to cloud offerings, which in many cases are free, like GitHub or Bitbucket, and my (static) website runs on Azure for free.
The best part is i'm actually saving money. Before i moved to the cloud, i was running a 4 bay NAS as well as a server running Proxmox, and power consumption was around 250W, and even with normal electricity prices here (€0.35/kwh normal, current around €0.75/kwh), it was costing me about €8.50 every month. That's without the hardware cost, which will easily cost as much over 5 years.
For comparison, a "Microsoft Family365" subscription can be had for about €75/year (€6.25/month), and offers the above advantages on 6 accounts each given 1TB of storage, so if i was using OneDrive for file storage, i would be saving about €2 every month on just electricity.
Assuming the hardware costs as much as the electricity (€510 over 5 years), you could also get a VPS in the cloud, and still host websites and more, and still save money.
That being said, i do still have a small "home server", but it's main purpose is to act as a content cache for data stored in the cloud, to make it appear to be local when accessed from the LAN, as well as make backups (to another cloud) of my cloud data, but my firewall i now completely closed, and i sleep better at night :)
This Watchdog (aka "Vahtikoira") is already on Github. https://github.com/timonoko/Tokmannin-ESP8266-Wifi-topseli/b...
The server causes the Blue Led (aka "Sininen Ledi") to blink, so that I immediately know Watchdog is watching gets pings. Sometimes I boot to some other distro and forget to turn off the Watchdog, which is annoying.
OpenBSD will disable all but the first thread on any Intel processor by default. I'm assuming that these models are too old to have microcode updates addressing the Spectre exploits (Meltdown, Foreshadow, Fallout, Zombieload, RIDL etc.), and disabling SMT/HT might be the most secure thing to do by default.
This script produces a good assessment of Spectre problems for a wide variety of CPUs. I know that they are difficult to exploit, and the mitigations are disabled by many because of their performance impact.
https://github.com/speed47/spectre-meltdown-checker