A system like proxmox backup server can do this scurely. There you can create a user that can only add new backups and read the existing ones, but cannot delete any or read anything else on the remote host.
Otherwise if you only care to protect the remote machine, then something like an ssh chroot jail would also work.
How about Teardown? It got voxel physics where you can break anything in the game
it seems to be available with flashpoint. At least it is in their database but i haven’t tried it. https://flashpointproject.github.io/flashpoint-database/search/#1680d37e-e4d6-4812-c685-858c9488df5b
It is a tool to establish persistente after the server is already hacked. This isn’t a way to break into a server.
I guess that mods like create (and all the addons made by many people) would need some effort. create has it own rendering system called flywheel that it needs for all the animated contraptions.
i store my ssh key on my yubikey using the gpg interface. On linux it’s natively supported, on windows you need cleopatra and on android you can you OpenKeychain together with TermBot.
This won’t sync the hosts you have, but at least you always will have your private key with you.
Yubikey. I dont want to trust my phone, so I use some separate hardware instead
Maybe you can enable bridge mode on it? Then you could run something like opnsense behind it.
What kind of router to you have? A good router should not crash from any amount WAN traffic. But yes, if you host anything you will get scanned even harder than usual.
Well, good news then: lvm comes with most modern linux distros. In fact, it is an option you can enable when installing linux mint.
I use it on every system that I run (workstations and servers) and never had any issues.
It really just makes partition management way easyer: With normal partitions you cannot grow any partition without moving all other partitions after it. LVM can do it without touching anything else.
The best case for semthing like this is when you buy bigger ssd. You can copy the data with dd and then grow any and partitions that you want without hassle.
I recommend that you take a look at LVM. It can help you manage your partitions without much planning beforehand.
In my case all it does is setting DisableAppUpdate to true. So that firefox doesn’t update itself and instead the package manager does it.
You usually scrub you pool about once a month, but there are no hard rules on that. The main problem with scrubbing is, that it puts a heavy load on the pool, slowing it down.
Accessing the data does not need a scrub, it is only a routine maintenance task. A scrub is not like a disk cleanup. With a disk cleanup you remove unneeded files and caches, maybe de-fragment as well. A scrub on the other hand validates that the data you stored on the pool is still the same as before. This is primarily to protect from things like bit rot.
There are many ways a drive can degrade. Sectors can become unreadable, random bits can flip, a write can be interrupted by a power outage, etc. Normal file systems like NTFS or ext4 can only handle this in limited ways. Mostly by deleting the corrupted data.
ZFS on the other hand is built using redundant storage. Storing the data spread over multiple drives in a special way allowing it to recover most corruption and even survive the complete failure of a disk. This comes at the cost of losing some capacity however.
A ZFS Scrub validates all the data in a pool and corrects any errors.
Even safe rust can do it, if we allow compiler bugs
That’s not Squidwards’s brithday. That is annoy Squudward day.
That reminds me of PayPal. I can’t use my hardware sevurity key to log in on mobile… Unless I enable desktop mode in firefox. Then it works
It seems to that it works. I don’t get any web-scrapers hitting anything but my main domain. I can’t find any of my subdomains on google.
Please tell me how you believe that it works. Maybe i overlooked something…
I explained my setup here
The benfit of tang is that you don’t store the secret on a shared server.
The server has a single keypair that it reuses for every client, and each client has thier own keypair.
The encryption key can only be recovered when the client and server perform thier handshake. And only the client gets the key, the server cannot see it.