

So, this is fucking wild, but I actually got an email from GCHQ today, telling me my server was vulnerable to this attack and how to fix it. Gratifying, but bizarre.


So, this is fucking wild, but I actually got an email from GCHQ today, telling me my server was vulnerable to this attack and how to fix it. Gratifying, but bizarre.


Different subnets, similar to how you describe. It would be really tricky to have them on the same subnet, especially if you want a firewall between them.


FWIW, I use the VLAN approach. I have a VLAN (101) specifically for IoT shit. The firewall allows devices on other VLANs - general purpose (104), infrastructure (102) and servers (103) to connect in to 101, but nothing can reach out. Works seamlessly. The only issue you might bump into is that some devices use UPnP/mDNS for discovery, but OpenWRT has a proxy module you can install to facilitate that.
You may be wondering why the tags I use for my VLANs are so odd. I also wonder that sometimes.


Wow. I’ve got, like, a dozen of those sticks in the cupboard. Never even occured to me to do anything with them - I just assumed it was ultra locked down. Even getting OpenWRT rocking on them would be amazing.


You need a separate device to act as a firewall. See if you can get a device running OpenWRT or pfSense to manage your whole network (search those terms on eBay to find cheap devices pre-flashed) and put the server on its own VLAN with minimal access to the outside world and no access to your trusted LAN.
OpenWRT is great and the built-in web interface, LUCI, makes it as easy to configure as any serious network kit. What I will say, though, is that OpenWRT is a real network OS, more akin to enterprise grade tools like Cisco or SonicWall than anything sold in a big box store. Again, LUCI makes it easy and hides a lot of complexity so there’s nothing to fear, but you quickly come to realise the power of OpenWRT isn’t that it turns your Wifi Thing into a better WiFi Thing, but that it turns your Wifi Thing into a WiFi, routing, firewalls, bridging, VLAN, mesh, PPP, VPN, and a thousand other things Thing.
There’s a meme floating about somewhere that goes:
Windows Tool: Producix Pro for Business 2024
MacOS Tool: Sweesh
Linux Tool: klitoris
and this kinda feels like that.
Tell me you’ve never tried to control a class of teenagers without telling me you’ve never tried to control a class of teenagers.


I used to work in schools IT and I managed to get a lot of FOSS tools into regular use amongst both staff and students; Audacity, Libre Office, Firefox, even Debian in a few IT labs… but the one that never stuck was GIMP because no teacher is going to tell their class they’ll be using GIMP today.
I know this is a tired point and will probably never be fixed, but that name causes more problems than anything else.


Not a direct answer to your question, but assuming you have a switch that supports VLANs you don’t need a second ethernet port at all.


You’ll have to take my word for it, but I am pantslessly dancing in victory.


I read “I R Madlad” in the style of “I R Baboon”.


I’m on a variable rate electricity tariff and I use Home Assistant and iLO to power things on and off automatically, so most of the time it pulls 30-50W. At peak it pulls north of 1.5KW but that’s really rare.


Makes mine look boring.



GIMP is an English acronym.


I just 100% all-the-time will always want someone to release a fork of GIMP that is totally identical in every way but has a different name. I can’t tell you the amount of time it was rejected by schools because of it.


Well a miscarriage is basically an abortion and an abortion is basically a murder.
/s, to be clear, but some people will say that sincerely and in some parts of the world they get to write the law.


Vibe Coding is Killing
Open SourceSoftware
FTFY. The only difference is that with FOSS the slop is visible to all.


My OG Pebble is still going strong, but I have pre-ordered the new Pebble Time 2 because it just looks like a straight-up upgrade. The fact that the new Pebble company is fully supporting the old devices makes me want to buy their new devices even more.
Seems finicky. Keeping the camera and screen aligned during the transfer. Someone should research if it’s possible for two phones to send data acoustically. Then they don’t need to be kept perfectly aligned. Hell, they could even transfer data over a phone call or something.