The SSH client itself knows a few keyboard chords starting with Return-Tilde:
⏎~. terminates a connection. Useful when your connection got dropped but SSH hasn't noticed. ⏎~^Z suspends the client, like pressing ^Z normally (that's a Ctrl-Z)
I settled for non-resident keys. If anyone wants them, they have to torture me twice: once to get the FIDO PIN, and once to get the password to decrypt my hard disk, where the private keys reside.
Sudden Death, co-founder of the legendary ANSI art group CiA and creator of REZ2ANSI, will be live streaming on Twitch to review this awesome new tool for Linux and windows.
The stream is scheduled for 6:00 PM PST, where he’ll provide web access to download REZ2ANSI v0.02 (wide beta) and showcase how it’s used. See you on Twitch!
Wstęp Załóżmy hipotetyczną sytuację: jesteś administratorem ds. monitoringu w firmie. Wdrożyłeś środowisko Zabbix, a po lekturze artykułów na sekuraku dotyczących Grafany postanowiłeś wdrożyć ją również u siebie. Po pewnym czasie z powodzeniem uruchomiłeś kilka dashboardów wykorzystujących oficjalny plugin do Zabbixa. Koledzy patrzą z uznaniem, zarząd chwali Twoje działania, a prezes...
Honestly, #Zellij is just too good❤️. I'm just using the basic panes management now & it's really great experience.
But my fav thing so far is the ability to attach a session 🔥. On #remote machine & start zellij always. I do some #command & when #ssh#connection disconnects, I just hop in ssh again with `zellij attach` and it just reopens the #session fully for me🤯, nothing in stdout is lost & even whole layout is preserved🔥
Targets high value telecommunications infrastructure in South Asia
UAT-7290, a sophisticated threat actor active since 2022, is targeting critical infrastructure entities in South Asia, particularly telecommunications providers. The group's arsenal includes malware families like RushDrop, DriveSwitch, SilentRaid, and Bulbature. UAT-7290 conducts extensive reconnaissance before intrusions, using one-day exploits and SSH brute force to compromise edge devices. The actor is believed to be a China-nexus APT, sharing similarities with APT10 and other known Chinese threat groups. UAT-7290 has recently expanded its targeting to Southeastern Europe and may establish Operational Relay Boxes for other China-nexus actors. Their malware suite primarily focuses on Linux systems but can also utilize Windows-based implants.
@happyborg@dalai@jwildeboer I'd not trust any "one time purchase" cloud storage because that model is * unsustainable by virtue of recurring costs!
If one's already holding classes for #IT, it's either feasible to organize some (quota'd) storage (i.e. #SSH access to a server) or expect the class members to have i.e. some cheap external HDD for that.
I don't expect them to backup several terabytes of data and if they need to, then there should certainly be budget for either S3 block storage and a cheap VPS or a "Storage VPS"…
if those are small files that are frequently changed and/or they want to collab, then maybe using git is a better alternative.
Same with backup strategies, budget, storage amount and performance requirements.
Most of these tools can target/source any mounted filesystem, some even deal with #S3-Storage. If #privacy and #DataProtection ain't a concern and the storage itself does deduplication and compression, just regularly making tar (or pax) archives and shoving them over to the #iSCSI / #NFS / #SMB / #SSH / #FTP server is also an easy option.
I just generated a new #ssh ed25519 key, as the old one had a few years on its back. I will use it for all my ssh connection needs. Let the #bikeshed begin: should I also start using it to sign my git commits, instead of my current (and even older, but well known on the WoT) #GPG key? This question partially inspired by the recent @soatok post reminding me the stark reality that the WoT has failed to deliver. (there's also the reality that nobody really even cares if I sign my commits or not, but I will continue doing it in spite of it, of course)
SSH-Bruteforce, DigitalOcean und AbuseIPDB – warum Blocken das Problem nicht löst
Aus gegebenem Anlass möchte ich ein paar Gedanken zu DigitalOcean aufschreiben. Nicht, weil ich glaube, dass DigitalOcean ein grundsätzliches Problem hat oder etwas falsch macht. Sondern weil DigitalOcean in meinen Logs seit Jahren besonders auffällt. Am Ende steht DigitalOcean hier eher sinnbildlich für ein größeres Thema.
Wer Systeme im Internet betreibt, kennt das Spiel. Server werden dauerhaft von außen angefasst. SSH-Ports werden gescannt, Login-Versuche laufen durch, Webseiten […]
Sử dụng n8n để điều phối các Agent DeepSeek/Llama3 qua SSH với bộ nhớ trạng thái bền vững. Thay vì dùng OpenAI tốn kém, tác giả kết nối n8n đến Ollama local qua SSH, giữ phiên tương tác để duy trì ngữ cảnh. n8n tạo UUID, thực thi lệnh, lưu trạng thái và tự sửa lỗi trong cùng phiên. Giải pháp nhẹ, không cần framework phức tạp — chỉ cần n8n và bash. #n8n#LLM#Ollama#SSH#LocalAI#AIVietnam#Homedev#AI#LocalLLM