Heh, I opened port 22 on my home network once. There wasn’t anything on it to connect to, but the firewall recorded thousands of SSH connection attempts within hours. Within a day it had over a million hits.
Yeah, you never really know how sheltered you are until you step out.
technicallythetruth
Per the Metric Act of 1866, the US customary units of length and mass were redefined based on the international metric system, making them essentially just weird conversion factors of the meter and kilogram.
I hope so. Nurses have pretty good unions right?
I’m convinced that the only thing that will really save us from this sort of thing is labor organization.
What will happen is they will sell it to your boss as a way to cut costs on labor, but will arrange things legally such that you are still responsible for the patients’ wellbeing, so if the AI makes a mistake you get the blame.
Concrete has a lot of thermal mass. I could believe that it stays warm enough that ice can’t stay on the surface, especially with a reservoir of non-frozen water behind it.
The steel brackets and aluminum panel frames will get a lot colder, especially with wind blowing around them. Basically the same principle as a bridge forming ice before the road on either side of it. An exposed metal frame with a wind chill can develop ice even if the average temperature around it is above freezing.
Hmm… and that makes me wonder if the solar array bolted to the concrete surface acts like a heatsink? That would be an interesting unintended consequence.
Maintenance access looks like a pain in the ass, and I would wonder about possible issues with snow/ice buildup and load limits, but otherw8se this is a nice use of the space.
No one at Microsoft gives a shit about what you are doing
Maybe, but 834 of their business partners are very interested in what I’m doing, and how much they should bid for Copilot ad slots on my computer.
I wonder what you are securing against?
OK, you’re familiar with vulnerability scanners and port scanners right?
The threat model here isn’t really attackers specifically targeting your home network for any particular reason (unless you’re a LastPass engineer working remotely while running an exposed Plex server). They’re not looking for you, they’re looking for anything useful.
The threat model is attackers using scanning tools to discover vulnerable systems connected to the Internet. All they need from you is an active connection and a system that can store data, from which they can host malware files for distribution to other targets or conduct attacks or just run a cryptominer (if you’re lucky and they’re not very ambitious). They can find this by scanning for open ports and then running a vulernability scanner to figure out if there’s some exposed hardware that can be exploited.
An unsecured system is a hazard that could land you in jail when someone else starts using your device and network connection to commit crimes.
Now, as long as you’re behind a standard residential network service, and your ISP is in control of your gateway device, you’re relatively safe from this. Most ISPs will block any traffic like that very strictly. If your ISP is in control of your gateway device then they’re responsible for its behavior (demarcation matters).
But, most self-hosters run into limitations with their ISP blocking a lot of ports by default, because they want to access their personal server from outside their home, and so they take control by running their own gateway device or paying for a business connection which gives them complete control over which ports are open. This is where the risk comes in. You are assuming the responsibility for properly securing your connection to the public Internet, taking it off your ISP’s hands.
If you’re going to do this, you should know exactly which ports you have open to the outside and why, and a general idea of what traffic you expect to see on them when and how much. Monitor that traffic at your firewall. Every other port should be closed and your firewall (on your router, gateway device, or better yet a dedicated OPNSense firewall) should be configured to drop packets received by closed ports (“stealth” mode). You don’t want it to respond that those ports are blocked, you want it to appear to not be there at all.
Every other security implementation is a secondary concern for a home network. Yes you should patch your software regularly and you should practice deny-by-default and least-privilege as a matter of course, but you’re going to mitigate 90% of your risk by just not accepting incoming connections for anything you don’t need. Most vulnerable systems are discovered by automated scanning, so the less your system responds to external connections the better. If you’re going to worry about configuring, securing and patching one device, make it that front line firewall. And be very selective about which internally hosted services you expose externally.
There are marketing people watching this and thinking, “These are great ideas!”
Moving to another country is complicated and difficult even under normal, stable circumstances. Doing it successfully (not ending up broke and homeless with no support) requires a lot of planning and money, or else a lot of help from someone else.
Even if the other country is willing to let you immigrate, and you have good prospects for a regular income and a stable living situation, you have to leave friends and family behind. That means leaving your support system. If you have children that’s going to be very difficult. If you have aging parents that you support, or other family with medical issues, it may be impossible.
Really, the only people who think picking up and moving to another country is something you can just do are young, single, above the poverty line, and have no dependents.
It’s worked out great for Ford.
The core problem with this approach is that antivirus scanning is generally based on signature recognition of malicious binaries. Behavior-based antivirus scanning mostly doesn’t work and tends to generate a lot of false positives. No freely available antivirus is going to have a signature library that is kept up to date enough to be worth the effort of running it on Linux - most vulnerabilities are going to be patched long before a free service gets around to creating a signature for malware that exploits those vulnerabilities, at which point the signature would be moot. If you want antivirus that is kept up to date on a weekly or better basis, you’re going to have to pay for a professional service.
That said, there are other, simpler (and probably more effective) options for hardening your systems:
Yes, like the men running the companies that make this product.