And why exactly is that more secure?

Welcome to the internet! Your system will get probed. Make sure you run as little as possible services on open ports and only high quality ones such as OpenSSH. Don’t freak out because of your logs. You’re fine as long as your system is up to date and password login disabled! Don’t listen to the fail2ban or VPN crowd. Those are only snake oil.

A VPN is probably just as (in)secure as OpenSSH. There is no gain in complicating things. OpenSSH is probably one of the most well tested code for security around.

Public ssh is completely fine as long as you use key based auth only and keep your sshd up to date. Stop spreading bullshit.

Very interesting. Thanks for the link!

Welcome to the internet. You will be probed. Just as your immune system, or rather your body, is being probed.

Just don’t run broken software. The attackers will not be able to exploit you then. If they have zero day exploits, the WAF will most of the time not save you since they are often pretty easy to circumvent. WAFs are only effective against old and shitty exploits that should be patched anyways since ages.

Attack surface is made of the amount of code that is running when an attacker speaks to your machine. Imagine a freshly installed GNU/Linux distro with no services. The attack surface is minimal. All packages sent to your machine will only ever be touched by relatively limited parts of the linux TCP/IP stack and NIC driver. If you now run a web server, the package coes through the NIC driver, TCP/IP stack and web server. The surface is increased. Each of these parts of your machine’s code could have bugs. The more code your attacker’s packet runs through, the more opportunity to make your machine do things you don’t like.

If you want your machine to do what you like but not what random attackers like, it is therefore mandatory to have the least amount of attack surface, not adding code in contact with your attacker like a WAF or “antivirus”. Both these kind of softwares will inspect the packages coming in an take decisions (potentially bad ones) based on the content.

WAFs will mostly not help you since on a well configured and patched system, little known bugs are exposed. They might help you occasionally but usually patching the system is more effective. Of you want this to happen automatically, it’s entirely possible. Most os’s allow automatic unattended upgrades.

Wafs don’t make you safer but create unnecessary attack surface. Just keep your machine and services up to date.

Argh, hate them!

I’m from Europe and headlights suck here too! It’s spectrum of LEDs and tall cars and probably bad regulations too.

My problem is that I drive a low car (Ford fiesta) and most other cars are taller, this makes them way more blinding.

What I currently do is to take out my own headlight from its holder and deliberately point into their eyes. At least the message should be clear.

Yeah, I guess that’s one part of the problem. It’s not like most people care that much. But if that’s the only replacement lights you can get… :/

Just flash twice!! https://lyricsintosong.ai/music/02a3d10d-b96b-42e4-b839-8d73adeffb97

Totally, I’m commuting by bike almost every work day of the year and it’s infuriating how many cyclists have their headlights misaligned.

Hah, nice. The more the merrier!

The fuzzy skin came out very nicely!

They rock.I’m sometimes afraid they will be bought or change terms.

Ahhww, finally a candidate sound generator for my earPod buster bike horn. Nice!

Take the train instead!