I try to respond to every genuine engagement. I block trolls, contrarians, and provocateurs because life is too short.

  • 0 Posts
  • 79 Comments
Joined 1 year ago
cake
Cake day: January 29th, 2025

help-circle





  • The point about ‘educating users’ being dumb is itself incredibly stupid, because the largest element of hacking is social engineering: the letter from a nigerian prince, the zip file from an attractive person with ‘my hot photos enclosed’, to today’s calls from government impersonators (tax agency, immigration), and emergency requests from close known contacts that ‘urgently need money wired to them’.

    Education has gone a long way to improving user response and caution against default trust of unverified contact, which is essentially what the first two points complain about from a technical aspect (default allow). Those complaints are at odds with one-another.


  • To those fretting: there is a wide margin between a legit VPN service and these guys. Interpol are not coming for your paid run-of-the-mill VPN provider.

    I hadn’t even heard of 1VPN prior to this story, and the reason is that they advertise almost exclusively on cybercrime forums - mentioned multiple times in the article.

    The administration/owner of this VPN service explicitly tailored their business to enabling cybercrime. That’s real stupid, because it means you become a legitimate law enforcement target as an accomplice with prior knowledge / facilitator to a crime, and generally explicitly waives your immunity rights as a service provider under legal frameworks like EU DSA.

    Dutch police stressed that this particular VPN service “was considered criminal, because it specifically targeted cyber criminals.”

    First VPN “mainly advertised on the cyber criminal forums known to the police and thus expressly approached cyber criminals as potential clients,” Dutch police said. “The website of the service also stated that any cooperation with the judiciary would be denied, that the service was not subject to any jurisdiction".

    Lol. There is no country on earth that is not subject to any jurisdiction - as the VPN provider and users found out.

    Any legit VPN has a thorough ToS/policy to explain acceptable and unacceptable use of their systems (including any illlegal use like crimes/DDOS/etc), and to cover the legal jurisdiction they fall under and what they do when recieving legal court orders.

    If anything, be pissed that this intentional cybercrime service tarnished the concept of VPNs a little, not that they were pursued and busted. Your legit provider is safe.



  • Its not as egregious as you think. ‘Everyone’ group means every Synology user account - not that everyone on the network that can talk to the NAS, they’d still need both a Synology account and Shared folder permissions. Any Synology user trying to access those files would still have to have read and write access to the Share to actually access it (eg via file explorer SMB/CIFs or app-level access to Synology File Manager, or they would need to be granted SSH access to get in via terminal, etc) in order to R/w/m the files.

    I know it’s a bit confusing, but it’s correct. Docker often causes confusion with file permissions. There are file-level permissions (this article) and there are share-level permissions. You need both to access folders and files via mapped drives / SMB, this setting is just to ensure that Docker containers which can be running as a variety of user names (depending on how you config docker and the container) don’t experience issues accessing files you’re expecting them to be able to access, as Synology says, the default Docker folder permission is for the ‘everyone’ group to have Read-only access. This should allow most Docker containers configs to at least run and then if you run into issues writing/modifying files… That’s a clue you have missed some file permission configuration settings that need to be done, and the only reason it’s running at all is because that default ‘everyone’ permission is saving your butt.



  • I use very popular router by Gl.Inet called Flint 2 (GL-MT6000). Goes on special for about $125 USD. Great specs, solid device.

    Fully supported by OpenWRT, and I recommend flashing to that so that you have completely FOSS software with no possibly hijinks from the manufacturer’s OEM OS.

    You’ll need to read some guides or watch some vids to get you set up on OpenWRT, bit of a learning curve, but it has everything you could possibly need. Check it out.