• 1 Post
  • 9 Comments
Joined 4 months ago
cake
Cake day: June 7th, 2025

help-circle
  • It isn’t a magic solution, no, but you have a lot more control than crummy layer 3 firewall rules and endless lists.

    The big players have far more data about what bad looks like. Either we can play whack a mole with outdated tools and techniques or get smart and learn to use what is available.

    Self hosting doesn’t mean we go backward in terms of the sophistication and difficulty, it means embracing modern solutions.

    In the dinosaur days, we had primitive tools, but so did the attackers. We cannot hope to self host with any measure of security if we bring piss to a shitfight.


  • Get a WAF. Sophos firewall is free if you want to diy. If not, use cloudflare.

    Opening ports, logging, monitoring, nailing up allow listed IP addresses and dicking around with fail2ban is such a timesuck. None of that crap will stop something from exploiting a vulnerability.

    Some things are worth farming out to a 3rd party. Plus, you can just point your DNS entry over and be mostly done. No more dynamic IP bs.





  • I’m going to do my favorite thing and blame HR. Useless lot of muppets they are. I have yet to work with an HRBP that was anything better than useless. Ask a question about worker rights in India or Singapore, get dumb looks and an empty promise to find out. Ask for support when hiring, yeah that is someone else, but we dont know who.

    Time and time they just fail to deliver anything useful. I just cannot overstate how underwhelmed I am with the entire discipline. From the chronic laziness to the ingrained stupidity of them, I have no idea why they still exist. I don’t even know how they buy groceries, pay their bills and walk upright. I presume they go back to a building where they are locked into a case, hoses attached to feed and extract waste while they just stare into the middle distance. They dont need to be sedated or entertained as they dont know or care about the process. They just exist.


  • I did five interviews and a project for the last job I didnt get. I’m scheduled for interview number four for a job I’m working now.

    When I was hiring engineers I capped it at three interviews, maximum two hours of candidate time.

    The reality is that if you know shit about your job, you will know if someone is a good fit in the first 10 minutes. If they suck, you will know it faster. It doesn’t take hours and weeks to hire people, you just have to grow a set and be secure that you know your shit.


  • I’ve been using mint for maybe 10 years now. I still run into frustrating shit.

    Brother printer, well supported by Linux still likes to fight. Playing with brsane4 configs is a joy. Scanning feels like it is still the same all these years later. Cups is not cute.

    So many little issues you just have to work through. Virtual box USB pass through; you need virtual box and also the addon pack and you have to add your local user to the vboxusers group, THEN it works. May I please have proton drive? No? OK then. I want to play some old emulated games, Lutris looks promisi–oh my god WHY?!

    I’m used to it at this point, but expecting regular users to sudo apt install blah blah ain’t happening. Sure ain’t happening if they hold broken packages or get stuck where one dependency of a package is unresolvable


  • You speak truth. My way to quietly fuck up this system has been to hire good people, not assholes. I pay them as well as I can get away with, I treat them well. I never yell at my staff, I show them what I want and I make things clear. I refuse to believe that work has to be this miserable and I encouraged all of my people to do the same. The managers I hired to run other teams also worked this way so that anyone throughout my organization were treated well. I had ONE fellow quit in the last year but that was only because someone offered him a fat pile of money. Otherwise my retention rate was damn near 100% which is unheard of in cyber.

    I genuinely love the people that work for me. Yes that sounds crazy, but after a lot of reading, thinking and soul-searching, I’m comfortable with saying that directly to the people I work with. I do not use that term in a watered-down way, I mean it in the same way that I would use it to describe one of my (actual) brothers. I don’t weird people out by saying “thanks I love you” at the end of 1:1 calls, but I do say it to the entire team. I see what they do, I see how hard they work, I see the sacrifices they make when they get called out for an off-hours incident. I know how hard that shit is because I’ve been in their shoes, I know what it’s like getting a stupid automated system calling you at 2AM because something just blew up. Hell, even though I lead the teams, I still get calls like that, but it’s usually one of the team calling me in because they’re in over their head and some other boss is chewing their ass. I join those meetings and swat down the assholes, refocus on getting shit fixed.

    I told them constantly that I appreciate everything they do. I had so few opportunities to put my money where my mouth is because of the imposition of so much bullshit. Bonus or merit increase time, these companies love to wrap it all in so many fucking dumb rules, it makes it impossible to reward people as they actually deserve. I typically get a bonus pool and a merit increase pool. Both are fucking tiny. The cunts in HR host a useless call describing how we should cut it up and no matter what company I work for, they all do the same thing. They put the burden on us and say stuff like “you should reward your high performers” so that we’re forced to fuck anyone who doesn’t qualify. However, when we’re hiring, they tell us “only hire high performers”. I hire quality people and I don’t bring in people who aren’t worthwhile–so now I’m sticking excellent people under the bell curve because some useless HR drone who doesn’t know shit about shit has decided this for me. If I were to cut the pie evenly, everybody gets dogshit for increases. Try telling your staff something like “well, you got fucked this year, but next year, I’ll pay you back and fuck someone else”.

    Maybe I’ll just buy myself a hotdog cart and sell drugs out of it, might be more steady and less risky.