Episode 295: Introduction to Home Lab Security

This week we talk about things you want to be aware of before putting self hosted services on the wide open internet! -- During The Show -- 02:50 Power Monitoring, Home Assistant - Andy Basic CT Clamps and ESP32 Home Assistant and MQTT Steve's power monitoring setup Mosquitto MQTT (https://mosquitto.org/) Steve's Device Emporia (https://www.amazon.com/gp/product/B07R11H2Q2/?tag=minddripmedia-20) Be Careful Power is Dangerous 14:42 Privacy on Android - Chas What is your threat vector? Give garbage information Trusted Device? Data Service Providers collect GrapheneOS (https://grapheneos.org/) Noah's Approach Tin Foil OrganicMaps (https://organicmaps.app/) OSMAnd+ (https://f-droid.org/en/packages/net.osmand.plus/) Aurora Store (https://auroraoss.com/) 33:40 Website / Flask WikiJS Nginx 36:50 Gadget of the Week GoControl CECOMINOD016164 HUSBZB-1 USB Hub(https://www.amazon.com/dp/B01GJ826F8??tag=minddripmedia-20) Zigbee and Z-Wave interface Good Linux Support 39:30 News Wire Rocky Linux 9 The Register (https://www.theregister.com/2022/07/18/rocky_linux_9/) IT Pro Today (https://www.itprotoday.com/linux/rocky-linux-releases-its-rhel-9-clone-and-build-platform) RISC-V 10 Billion Cores COSFONE (https://www.cosfone.com/risc-v-only-takes-12-years-to-achieve-the-milestone-of-10-billion-cores/) Medusa E-Commerce Tech Crunch (https://techcrunch.com/2022/07/15/medusa-shopify-open-source-e-commerce-javascript-developers/) RedNixOS v0.1 Alpha GitHub (https://github.com/redcode-labs/RedNixOS) Justine Tunny Justine Tunny (https://justine.lol/pledge/) Retbleed Fix Dark Reading (https://www.darkreading.com/application-security/retbleed-fixed-in-linux-kernel-patch-delayed) DARPA Wants to Understand Linux Technology Review (https://www.technologyreview.com/2022/07/14/1055894/us-military-sofware-linux-kernel-open-source/) Ortur Open Source Firmware HackaDay (https://hackaday.com/2022/07/18/ortur-laser-will-go-open-source/) HackaDay (https://hackaday.io/project/186305-dont-ignore-open-source-licenses/log/208585-the-ball-started-rolling-quicker-than-expected) MS Open Source SBOM Generator Security Week (https://www.securityweek.com/microsoft-releases-open-source-toolkit-generating-sboms) New License for Digital Research's CP/M The Register (https://www.theregister.com/2022/07/15/cpm_open_source/) 42:00 OpenEMR OpenEMR 7 Released (https://www.open-emr.org/wiki/index.php/Release_Features#Version_7.0.0) Fundraised $115,000 $120,000 of professional development Usability Study 44:55 Install Linux on your (Intel Based) Chromebook Breath (https://cb-linux.github.io/breath/) Different approch to putting Linux on a Chromebook 46:20 Home Lab Security Connect back in TailScale (https://tailscale.com/) Consider Core Competency of the project Put it behind a firewall Turn off UPnP Vlans 54:19 Caller Tony How do you handle old equipment? Some hard requirements Set Client expectations Help where you can Computers are good for 1000 days -- The Extra Credit Section -- For links to the articles and material referenced in this week's episode check out this week's page from our podcast dashboard! This Episode's Podcast Dashboard (http://podcast.asknoahshow.com/295) Phone Systems for Ask Noah provided by Voxtelesys (http://www.voxtelesys.com/asknoah) Join us in our dedicated chatroom #GeekLab:linuxdelta.com on Matrix (https://element.linuxdelta.com/#/room/#geeklab:linuxdelta.com) -- Stay In Touch -- Find all the resources for this show on the Ask Noah Dashboard Ask Noah Dashboard (http://www.asknoahshow.com) Need more help than a radio show can offer? Altispeed provides commercial IT services and they’re excited to offer you a great deal for listening to the Ask Noah Show. Call today and ask about the discount for listeners of the Ask Noah Show! Altispeed Technologies (http://www.altispeed.com/) Contact Noah live [at] asknoahshow.com -- Twitter -- Noah - Kernellinux (https://twitter.com/kernellinux) Ask Noah Show (https://twitter.com/asknoahshow) Altispeed Technologies (https://twitter.com/altispeed) Special Guest: JT Pennington.