• 5 Posts
  • 237 Comments
Joined 1 year ago
cake
Cake day: July 4th, 2023

help-circle
  • Im_old@lemmy.worldtoPrivacy@lemmy.mlHow save is XMPP really?
    link
    fedilink
    arrow-up
    2
    arrow-down
    1
    ·
    14 hours ago

    It depends on the client and the security implementations they support. For example IIRC no client support the last version of OMEMO (I think it was about OMEMO, I remember an article about it some time ago). Also are you sure that all the other people’s clients are on the same version and you’re not susceptible to a downgrade attack?

    Unless you are ready to/want to control the whole environment (i.e. at least the clients and possibly the server), look into simplex.chat






  • deep breath So I’m not the most star trek nerd by any measure, but I grew up watching the next generation (TNG), but also some of the original star trek series. And then deep space 9 (DS9) and enterprise. Also the one with the one which is not the enterprise and they got lost (forgot the name). But I’ve lost interest with the recent series. So not a uber nerd but I’ve watched quite a bit.

    I think starting with the MOVIES of the first series is good. But also starting with the series of TNG is ok.












  • That article is SO wrong. You don’t run one instance of a tier1 application. And they are on separate DCs, on separate networks, and the firewall rules allow only for application traffic. Management (rdp/ssh) is from another network, through bastion servers. At the very least you have daily/monthly/yearly (yes, yearly) backups. And you take snapshots before patching/app upgrades. Or you even move to containers, with bare hypervisors deployed in minutes via netinstall, configured via ansible. You got infected? Too bad, reinstall and redeploy. There will be downtime but not horrible. The DBs/storage are another matter of course, but that’s why you have synchronous and asynchronous replicas, read only replicas, offsites, etc. But for the love of what you have dear, don’t run stuff on bare metal because “what if the hypervisor gets infected”. Consider the attack vector and work around that.