• 0 Posts
  • 570 Comments
Joined 3 years ago
cake
Cake day: June 16th, 2023

help-circle

  • That is not an answer.

    Here’s a simple way to look at it

    I’m not looking for a simple way to look at it. I want a technical breakdown of why rebuilding back end instances is valuable in a security context.

    • When do the rebuilds occur? Are they triggered by some event?
    • what happens to session tokens?
    • do you have frontend / backend auth? What happens to that?
    • are you rotating secrets as well? Compromised back end would imply your secrets can no longer be trusted.
    • is data encrypted in massive blobs, or can one request only blocks of data?
    • can the app tune storage requirements depending on S3 configuration?

    I’ll be blunt with you: your answers to this and others have been very surface-level and scant on technical details, which gives a strong impression that you don’t actually know how this thing works.

    You are responsible for your output. If you want chatgpt or github ai tools to help you, that’s fine, but you still need to understand how the whole thing works.

    You are making something “secure”, you need to be able to explain how that security works.

















  • 777 is read/write/execute for owner, group, and world, respectively. It’s the most permissive POSIX permission that can be set. If something can’t write on a 777 umask, then either the filesystem is mounted read-only, or something is deeply wrong with the storage.

    drives are NTFS

    You probably have the clean unmount bit unset for the NTFS partition. This is trivial to bypass, but I would suggest not using NTFS in Linux, NTFS is not a great fs and Linux support is… OK.



  • Proxmox has no desktop by default. You can install it, add a desktop environment, but it will be less hassle to just use Debian as the desktop and install proxmox on top of that.

    Ultimately, it’s all Linux or Unix. You can install qemu/KVM and libvirt on just about anything.

    You can pretty much just pick your distribution and then add KVM on top of that, it will get you a long way before you need to use anything with more features.

    A lot of people like to keep their hypervisor separate from their daily driver, but you can totally just fire up VMs and containers on your dd if that works for you.