I'm happy with my little Pi

OK, sorry. I'm being petty.

But this is pretty good IMO.

Nice!
I once reached an uptime of nearly 2 years with my little Cubitruck 3 based home server back in the day. :grinning_face:

But it also means you haven't rebooted it for kernel and security updates that long. Something I'd consider more and more important these days, even for home setups. :index_pointing_up: :face_with_monocle:

Yeah, thanks.

There are other things happening too but I don't want to let the cat out of the bag on them.
Sorry.

Could you elaborate on your last bit though?
even for home setups

I meant you shouldn't underestimate security issues in your private setup at home, regarding operating systems, firmwares... you name it. Also make use of firewalls, separate networks for appliances and IoT stuff, if possible.

Keeping things patched and updated is essential these days. Home network security is often underestimated.

Maybe also a bit paranoid here :nerd_face: but the means that bad actors will have at their disposal now and in the future will become more powerful, and even easier to (mis)use.

I understand that.

I'd better not say much more though or I will cop a lot of ...... anyway.

In a perfect world, the nasty stuff gets installed and then opens outputs to the nasty sites FROM your machine.

As I have no inputs from the net, the only way the bad stuff gets on the machine is from local machines.

If I am not installing any new programs it is going to be difficult for any of that software to get on the machine.

Yes/agree?
(Not trying to trap you.)

Yes indeed but it always helps to be scared. Be very scared of everyone, everything and particular your neighbours. /s :wink:

I recall how Apple updated their OS and then updated again and then again (the last 26.x updates) because each release had a bug. Even updates are buggy, else we won't be updating all the time.

Ironically it's sometimes best to stay on a very old version because "evil doers" building their automated scripts don't invest the time to create code for hacking older versions because the market share is too small. They are, as we are all, driven by market forces and it's simply not profitable to invest the time for a market share under X percent (whatever X may be). Thanks to AI, that X is getting smaller and smaller ... until even that strategy won't work.

I say this very much tongue-in-cheek and no personal offence is meant - to anyone. Each to their own, and let God sort them out.

It's a pity that we forget that it doesn't have to be this way. It's a pity that we don't question why this constant updating is even necessary. After all, why can't software simply be complete and need no update? It seems to be something "positive" that software is constantly needing updating "oh it's maintained" - because it was broken in the first place? Because everything around it was broken? Because the code is too complex and not properly understood? Perhaps it needs even more features?

Meanwhile we all cheer 2FA and in the future, 3FA or 4FA ... until we collectively drown in passwords and factor-authentication apps and SMS pins and OTP and all the rest of the so-called security mechanisms that "keep us safe" ... from whom? From ourselves. Because the haves don't want to share with the have-nots, some need to steal/cheat/lie to survive while others sail with their yachts having stolen legally on the finance markets.

Oh well, better check https://haveibeenpwned.com/ for my password - it's become my key store. Works great collecting all my passwords that I use on those scammy and untrustable websites selling my data.

Just because I'm paranoid doesn't mean they aren't out to get me

Yul Brynner Telefon.

:wink:
What great show.

I wish that were true but I'm afraid it isn't as you would see if you followed the security press. It is so cheap to run many automated bots that it is easy money for bad actors to keep old things running periodically to catch people out.

  1. Change != Features
  2. Software generally IS complex and nobody has all the time necessary to try and squeeze out every issue.
  3. Threats change - so do the risks - and changes are needed to deal with that.
  4. More positively, because people are endlessly inventive and come up with new and (sometimes) better ideas.

There is, of course, some real truth in there. But it is, I'm afraid, still only a partial truth. A very significant number of people steal because that's what they want to do. Many more are in it for the attack, they believe that people in other countries are "Enemies" (capital E). Others simply to survive in a country where that is hard (e.g. North Korea). It isn't just about greed.

Ah, you are talking about Google again! Or Facebook, et al.

Anyway, we are well off-topic (again!). Lets keep things on-topic. :smiley: