• 2 Posts
  • 125 Comments
Joined 3 years ago
cake
Cake day: June 12th, 2023

help-circle




  • Well, i never argued against the clearly powerfull capabilities, those are obviously huge, my point was that as a hobbyist you should consider having the important stuff (finances, official documents, biometrics) in cold storage or on a separate machine as well as stuff like security cameras or doorlocks if you do stuff like this out of it until you fully understand the risks, which are not that easy to grasp for people without experience.

    Ofc proxmox and qubes are incredible useful tools of technology, but their high versatility and customizability gives you a lot of tools you need understand and use properly on top of what you are already doing. (More so with proxmox as with qubes, qubes is a little less industry focused IMHO)




  • Thanks for evaluating! The exploit was explained to me that an unpriviliged user/Programm could use it to get root access on the whole system, which I my mind included the hypervisor. Further reading seems to proof you right, while containers were broken VMs were not.

    My point still remains, although weaker: If you know exactly what you are doing you can get a system quite secure, if you are a hobby server owner like me, its not that easy. I would have not know that the use of VMs instead of containers has sooo major security implications, that something so fundamental as ssh could be exploited in such large scales, and clustering would have been needed to avoid being unsafe.

    Sure, noone would use an zero day on me targeted, the thing is: I am not working in the field, from publishing of the exploit till learned about it and had the time to patch, there were a few weeks. If in those few weeks someone deploys a tool going for mass and not for single targets, I would probably be infected and added to some botnet, cryptominer or whatever.

    If I have a bare metal dedicated server, which has only access to IPs contained in my whitelist on a dedicated opnsense, I have less to wory about. Sure, someone could still find a openbsd/opnsense exploit and get me, but my point is: complex systems break in complex ways, the more complex systems you use, the more attack surface u have, need to know and understand to control and mitigate it.

    Not that its impossible, but for a hobbyist who tries to self teach with man pages, tutorials and forums, you can get pwnd in unexpected ways (like because you used a container for dodgy Chinese smart home devices and expected that your production environment would be safe even if one of them was malicious, but in fact you were not, because that would have needed to be a VM. AND: before copy fail was published, users would have probably also told you that containers are safe.


  • I was going to build my system like that, but recently learned that host client isolation is not as strong as people make you believe.

    just a few weeks ago we learned that copy fail (security vulnerability) was on major distros for years until it was fixed, it would allow containers and VMS to infect the host system. Xz utils could also lead to a broken host client separation, as proxmox uses ssh for clustering and the like.

    So for really important stuff I am going to have a dedicated physical server or put it in cold storage altogether.

    That said, I am by no means an expert so feel free to correct me if I got something wrong.



  • I agree with you that the war on Gaza is worse than the war on Ukraine, as one of them is “only” imperialistic and the other is a genocide. We are on the same page here.

    The EU as a whole is not as supportive of Israel as Germany though, Germany is quite an outlier here. This can be explained (but not excused) by the special relationship between the ex Nazi country and the majority of Israels citizens being Jews. Still, supporting the israelian genocide is fucking disgusting, no question. Ireland, Slovenia and Spain are much more supportive of Gaza is also part of the truth though.

    I would support your idea of dismantling the us system, we are in the same page here as well, I am not that optimistic that this will get rid of fascism and capitalism though, Russia China and India and the EU will fill the void.

    I also agree with your take on climate change, while by pure numbers China is one of the largest emitter, given they produce most of the worlds goods, I think their climate efforts are honest and my hope is that they will stick to their plans of co2 reduction and be a valuable force for climate. China’s efforts here are very important and I respect them for that.

    I also agree with NATO needing to be dismantled, I dont agree with you that Russia is doing that. Look at trump and Putin, the invasion of Ukraine is not fighting against america or the NATO, its imperial landgrabing a non NATO state. And even if Putin would fight the NATO directly, I dont think this will benefit our class, we are the ones dying in the wars, hunger in the famines and getting arrested for fighting for solidarity amongst the international working class, a true change cannot come from a tyrann winning over another tyrann, it need to be a struggle by the people against the oppressors

    If you dont condemn an imperialistic country invading its small neighbour, you fight for the oppressor. War is never good for the working class, if you justify people dying in imperialistic wars, you are a class enemie in my eyes.

    For your las paragraph is where I find it to get interesting as we have the same opinion, that a democratical controlled public economy is better then privately owned means of production. From what I’ve read China is moving towards private ownerships of means if production then away from it and the actual public decision-making gets progressively less in favor of concentration of power for the political elites (https://www.statista.com/chart/25194/private-sector-contribution-to-economy-in-china/) (https://www.journalofdemocracy.org/articles/china-in-xis-new-era-the-return-to-personalistic-rule/)

    Here it would help to get the data straight, I’m open to critically over think my position here

    Your argument that USA is worse at nearly everything than nearly everyone else I would fully support.

    Apart from that there is an argument to be made, that Democratic votes dont mean shit if the discourse is not free, the regime decides what information you can get, what is allowed to be discussed publicly and what is not. Not only are there information like https://en.wikipedia.org/wiki/Mass_surveillance_in_China also My fellow exchange students from China tell me you can’t talk critically about the regime, even in private conversations because you will face direct or indirect repercussions. Things like https://en.wikipedia.org/wiki/Blitzchung_controversy also play into this picture.

    A state where the working class is truely ruling needs a free working class who can freely from their opinion. This can’t be done in a surveillance state.

    I’m not saying there is no surveillance in the EU, just less then in China.

    Also also: being able to vote doesn’t make a country socialist or “not capitalistic”, if it would america would fall into this category as well.

    I think gramcis works are quite enlightening in that regard.


  • SomeLemmyUser@discuss.tchncs.detoMemes@lemmy.mlIts not looking good..
    link
    fedilink
    arrow-up
    1
    arrow-down
    6
    ·
    edit-2
    6 months ago

    All valid criticism I would share (even if not to that degree) . That’s why I said its a capitalist hell hole and never celebrated anything (found your little strawman;)

    Now you tell me: in which of the three others mentioned in the meme the situation is better?

    P.S: There are a lot of pro Palestine demos, I go to them once a month, my grandpa is disabled and nearly everything is covered by inssurcance, I have never heard of censorship of pro Russian articles (but like Gaza, mainstream media will be very biased, which is a problem), trans people face no legal discrimination (but authoritarian and conservatives try to change that, which is a major problem)

    Dont get me wrong, I think the EU is an imperialistic system with lots of problems which need to be abolished in favor of a better, classless society. Still the material conditions to do that are better than in the 3 world powers at the moment




  • Not Europe, germany did. This cant be accepted and is one of the worst things they have done in recent years alongside with the judicial suppor and political backing up they give israel. This must be condemned and fought against.

    But since we are on the topic of war: who is supplying russia with the drones and fiber optics they use to invade Ukraine? Isnt that China? And isn’t xi giving Putin the same political backing?

    As I said: both capitalistic hell holes, but one has slightly less surveillance and slightly less political oppression.




  • Freedom of expression Freedom of assembly Surveillance state Freedom of press / censorship Privacy rights Medical security (at least better than USA and russia, dont know enough about chinas medical system to judge) Queer rights Climate destruction (EU is worse than china but better than Russia and USA by relative standards)

    Not to say anything of those is good here, just not as bad


  • I stated that the present EU is a hell hole, but oligarch Russia, imperialist america and authoritarian capitalist china are better at being a hell hole nothing more and nothing less.

    You imaging me not standing for Gaza or loving colonialism is typical tankie “if your not a Stalinist you must be a neoliberal” is so telling.

    You make up a picture in your head, where you are the good guys, everyone else is evil, and nuances dont exist. Same attitude as maga, puti lovers or ai fanboys, just different made up narrative.