And it is heavily opinionated, without pointing out other solutions like for example the use of openvpn without mentioning wireguard even once.

TLDR, the developers of pfSense are not the nicest people sometimes. If this bothers you, consider checking out OPNsense.

So first the author is arguing around on the router section that you should not buy a cheap router but then goes for pfsense instead of opnsense, i understand that when you are used to pfsense that you may not want to switch but recommending it for new ppl is just stupid. They have shown their hostality against their OS community in the past see https://news.ycombinator.com/item?id=13615896

As it was already said. Docker is not virtualization. The number of Containers you can run depends on the containers and what applications are packaged in them. I am pretty sure you can max out any host with a single container when it runs computational heavy software. And i am also pretty sure you can run on any given host thousands of containers when they are just serving a simple static website

This is not correct. The mobile chips have changed their naming scheme in 2022 to an potentially misleading scheme, where the first number does not mean the architecture but the year it released. See https://www.xda-developers.com/amd-processors-explained/

I think OC refers to the change in naming scheme on the mobile chips. They changed it so that for example in 7640U, the 7 refers not to the architecture generation it instead refers to the launch year and the 4 is the actual indicator on the architecture generation.

A graphic explaining this can be found here: https://www.xda-developers.com/amd-processors-explained/

This does differ from the desktop naming scheme and it could be argued that this is to mislead customers.

This does work anymore for some ISOs. Depending on the version and Region i actually could not continue without connecting it to the internet. The oobe\bypassnro does work more reliably.

How is Intel better? With the last letter (H or U) They change the performace between CPUs extremely.

Basically from for example 6 to 2 performance cores. Yes the naming schemes are getting worse but that is true for every company.

Have done it via bash scripts for years. Never had a problem. Since a few months i use https://github.com/qdm12/ddns-updater

Those attacks you see are mostly (close to 100%) harmless bots, scripts. Yes they are trying default passwords and exploits that got patched years ago.

If you do not use default credentials and do run up to date software there is nothing to worry about.

Even brute force attacks are rare.

This is just “noise” so to speak.

If you are scared by this, you should reconsider hosting something on the internet. Yes things like fail2ban can help but only if they knock on your server multiple times and mostly only to keep your logs clean.

https://prometheus.io/docs/introduction/overview/

would fit all points.

So for port forwarding you need the port on the router the host and the port the traffic should get forwarded to on the selected host.

So you are saying, when exposing a host then the host is reachable over internet but when using port forwarding it is not?

How you check this? What commands/procedure?

Because in the local/private network are many hosts, like your phone, pc and your server. Exposing means that the device that is exposed gets basically everything forwarded what usually the router would handle. Exposing does expose a host to the WAN.

Forwarding a Port only forwards the specified ports. You can use multiple hosts for that. For example you can port forward port 80 to your Phone to port 321 or whatever and port 443 to your server at port 20.

Host exposure does what it says, exposing the host. Thats not port forwarding.

A compacted archive could be used as an attack vector.

• Zip Bombs
• Code execution through a vulnerability in the extracting algorithm

Both of them are valid for any OS.

Because you pointed 2 programs at the same directory to sync the content with an external directory structure.

In my experience adding an already existing directory structure to a sync program is a bad idea. Create the directory and then move the existing structure into it to be safe or/and at the very least have a backup.

Not having a backup is on you. You got lucky this time.

NOTE: Scrutiny is a Work-in-Progress and still has some rough edges.

Honestly, at this point i would not recommend the usage of scrutiny, the development was almost ways really slow and the creater does not seem to have kuch interest in the project. There are still standing issues and imho important features missing.

I would look into prometheus+grafana or something of that sort.

if i recall correctly

I cannot, i did some searches when i wrote the comment but could not find info about it. It is possible that i am confusing it with another project. I added a iirc but maybe that was not clear enough that i am not sure about it.

That’s simply bad software practice, which was fixed once pointed out. Fact is that if they had done this on purpose, they wouldn’t have changed it and instead, would’ve came up with an excuse to keep it the same way.

This is not correct. While they have removed it from being installed on newer installs/updates, the certificate remains on the system that ran the corresponding version installer/upgrade unless it will be manually removed by the few percent that got the news.

I am talking about it in general. If you trust it or not depends on you. I am just saying that the argument that it is OS or that you can host the server yourself does not automatically mean that it is safe. That applies to any software.