Unless you’re intentionally exposing inbound traffic to your LAN from the internet, pen testing really isn’t necessary. Your default firewall settings would be enough to protect you from that angle.

You can run vulnerability scans and look up best practices for your router settings, but really most modern OSes are safe as long as you follow basic common sense like not downloading and running sketchy software, even on Linux. Just keep everything updated. Even Windows Defender is sufficient as long as you’re not dumb about it.

If you’re talking about remaining anonymous online, that’s an entirely different, much longer conversation.

Same with keeping your internet connected devices from spying on you.

But without knowing what your attack surface looks like, none of us will be able to provide a very detailed answer.

Part of the problem is often figuring out how and when the bad actor gained access. Sure, you can restore from backups, but if they’ve been in your system for months you might just be restoring a back door they left.

That’s the reason it took my org 2 weeks to recover. Every server that was spun back up had to be isolated from the network and fully inspected before it was put back in use.

We could have been back up and running in much less time, but being thorough is very important.

But I run a VPN on my phone by default, so I’d have to disconnect from that to access stuff on my home network (and remember to turn it back on after).

That’s why I’m planning on using mTLS until I get my router configured to direct my BTH VPN through the gateway I have running on my phone.

I just need to figure out how to get VLANs properly set up in Mikrotik without having to nuke everything and start from scratch.

Upperclass is still working class, though.

No, they’re ruling class.

No it doesn’t. I run https with my own CA server.

I wonder if the person who downvoted you thought you pointed your public DNS record to a 192.168 network, instead of making a change to your local DNS server like I’m assuming you did.

They didn’t issue new SSNs after the Equifax breach.

If you get a Mikrotik router it comes with a back to home VPN server and a dedicated DDNS.

You need to know a bit about network configuration, although the setup wizard is sufficient for most use cases.

When you enable to BTH VPN, it does all of the configuration for you. And it works for me behind a double NAT

That was the recommendation for years.

I’m curious as to how they transferred the data at 650Gb/s.

I guarantee you it’s buried somewhere in the stack of paperwork you have to sign while being pressured not to read it.

And it should have been laughably easy to patch. The whole Dev process should have taken far less than a single month.

That’s not negligence, it’s reckless disregard.

It’s important to note that RAID is not a backup solution.

I know you touched on it, but I just wanted to state it plainly.

There’s also some stuff in Proc and run that won’t let you.

If you’re doing raw bluray, not as many as you’d think.

Iirc that was a math error on the poster’s part.

Not on Apple products, apparently

I’ve witnessed MS Copilot suggest using a Microsoft product that’s been deprecated for a decade.

Then when that was pointed out, it suggested using a product that didn’t exist.

Thank you for info!