• 0 Posts
  • 19 Comments
Joined 1 year ago
cake
Cake day: June 27th, 2023

help-circle


  • If it makes it any easier, those hundreds of millions of people are going to die anyway, the only tragedy about it is that it’s from something we could technically prevent or mitigate, but most things are like that… Traffic, smoking, guns, unhealthy diet… The climate changing isnt really going to affect the earth, our short sightedness and ignorance will just make lots of areas we can comfortable live in now much less comfortable or unlivable entirely. It’s going to suck, but do what you can with what you have and just the fact that you know enough to care means you have something to offer.


  • Maybe it helps to understand it when you think of it from the perspective that those $1000 expenses do happen, they’re not just hypothetical. But being able to cope with an event like that leaves you less able to handle a second one, and a third one

    Couple that with the fact that I’m the US there is very little financial education so what might be an expected event for one person surprises another. Imagine living with a roommate and not realizing that to move into your own place involves coming up with first and last month rent, deposit, hook up fees, renters insurance, furniture, kitchen supplies, toiletries, etc… None of those should be unexpected, but also why would you expect them if you didn’t happen to run into them before?

    Basically no amount of saving accounts for an expense that takes it all, and it’s then followed up by another one right after. And for some people those events are small and happen so quickly you never catch up and now you have late fees and interest and stress.








  • A benign scan could just be looking for an ftp server to connect to or a repeater or relay server of some sort. There are plenty of open services people make available for free and the fact that you would consider it an attack it doesn’t make it one.

    At minimum you could be alerted to look for someone attempting to connect to your ftp server with a single basic anonymous authentication vs someone flooding that port with known malicious software attacks, and block the latter across your entire network and effectively ignore the former. Really it seems like you’re advertising your lack of imagination in this context than a legitimate lack of possible uses for spoofing open ports.



  • Well, since you ask, it likely depends on whether they’re humorously encouraging you to look at something from a different angle, or if they’ve just discovered a handful of situations that get a chuckle from people who only encounter it occasionally, them proceed to subject everyone to the same ‘second-think’ ad nauseum.



  • At a guess, you might tell the difference between some benign scan and an attempt to actually take advantage of the port, perhaps to use as a trigger to automatically ban an ip address? or a way to divert malicious resources to an easy looking target so they are less available in other areas?

    The difference between someone scanning for open ports and someone attacking a port they find open seems significant enough to at least track and watch for patterns… Whether that’s useful for the majority of users or not is rarely why a feature is implemented.





  • Maybe think of it like one of those big walls of post office mailboxes…behind the wall is your computer and an app might be waiting for a message at box 22 or box 45678. You could close all the boxes and nothing could get in, or you could open one or all of them and allow people to deliver messages to them.

    If you connect your computer directly to the internet, anyone who knows your IP address could say 'deliver message X to port 22 at ip address <your ip address> and the program watching that box would get the message.

    If you put a router in the mix, and multiple computers, the router has the same block of boxes, but if someone sends a message to one of the boxes it just sets there. If you set up ‘forwarding’, sending a message to your ip address gets the message to the router, but if you forward box 22 from your router to a specific computer on your network, then the router takes a message at box 22 on itself and ‘forwards’ it to box 22 on whatever computer you specific (using internal ip addresses).

    You could map box 22 on your router to any other box on your computer…like port 22 coming into your router might get sent to port 155 on your computer…this is useful if you don’t want external people just exploring and lazily breaking into your computer using known vulnerabilities. Lots of ports are ‘common’, so an ftp hack on port 22 is easy, and might be ‘slightly’ harder if you tell your computer to actually look for ftp traffic on port 3333 or something.