Gosh I’m sure that this will be some dangerously delicate process that will be too hard for me…

pihole -up

Oh. Cool.

Yep. Went through all our hosts to verify ssh was disabled

Windows can’t have any 9.8 sev issues if we don’t score them as such…

I’d go with archive.is

That’s how fiber optic cables work now.

You can use a laser for line of sight through the air, so you don’t have to lay fiber. So ship to shore

How it is transmitted, others in this thread have said, light on is a 1 off is a zero, now just transmitting information in binary. You can go as fast as you can reliably turn it off and on, and understand the info at the other end.

The real trick is using multiple wavelengths at the same time. So your data goes at 100nm mine at 110nm and yes that is a gross oversimplification.

The single best thing you can do security wise, is to NOT have any personal data on a web facing server.

Separate the data

Rereading it does look like you are doing the things right; so just audit what is on the public side. - your calendar and tasks- cool

Your photo and docs, do those need to be on there?

they are not accessible on the WAN

If they are on a server that is publicly accessible, please move them to a different location

Otherwise you sound like your doing well

Old man says:: yep could be. I thought the other was IDDKFA ??

But they say memory is the second thing to go ¯\_(ツ)_/¯

I hate cheating in general, however I do have a personal carve out…

Some single player games, like (yes I’m old) doom — I almost always play with a full load out IDDFA No one should be dropping a Space Marine with out full weapons and ammunition and armor.

But that’s it.

Anything else, the point is to learn and find all the stuff the designers want to to discover

Orders a <null>

Yep. And even I did it in my post. Notice what is missing?

Test your backups!

Agreed… Yes, and… specific to backups all the encryption….

Your production stuff, yes should be as well

Would that be sufficient

No.

3-2-1

Three copies; your working copy, and a cloud copy, and (as an example) on and external HD that you keep at a friend’s house….

On two separate media… so yes cloud can cover that

One off site. So yeah cloud covers that.

Encryption on your off site copies. Yeah I don’t care if they are Linux ISOs or your grandmas recipes. ENCRYPTED

Thanks for coming to my TED talk

🤣

TLDW ???

TLDR:: Bitcoin

We do a quarterly test.

I have the DB guy make a change, I nuke it and ensure I can restore it.

For us. I don’t work for Veeam, while I don’t like their licensing. Veeam is pretty good

Hth

¯\_(ツ)_/¯ Yeah. It is kinda hard.

Backups. First and foremost.

Now once that is sorted, what if your DB gets corrupted. You test your backups

Learn how to verify and restore

It is a hassle. That’s why there is a constant back and forth between on prem and cloud in the enterprise

We make it a drinking game…

Whenever a salespeople or a demo uses weasel language. DRINK!

Thank you. I’m totally going to steal “Tech debt reduction “. Ffs

Sigh, kinda… but don’t forget to factor in your backup costs too

I don’t use b2, rather; I have a personal account. Backing up 3 computers and they’ve never said anything over years So. Yeah it’s fine

Longer lasting I think; leave it powered on and warm.

Best in reality; buy 3 drives, and after you do a backup move one off site.

3-2-1-1