BitacoraByte

Sobre; Software libre, ciberseguridad, administración de sistemas, redes, programación...

[elhacker.NET @elhackernet]

Pueden espiar tu navegación midiendo la actividad del SSD vía API del navegador

Investigadores austríacos descubrieron el ataque FROST, que permite a sitios maliciosos espiar qué aplicaciones y páginas web usa un usuario

El ataque FROST no requiere permisos ni interacción para identificar apps y webs usadas
https://t.co/1rvmLGKxqD

[Antonio J. Caba 💚💙 @antoniojcaba]

Securizar nuestra WiFi de casa para acceder usando un certificado digital a un coste muy asequible. En mi caso he usado un router #Mikrotik y una @Raspberry_Pi para crear una arquitectura de #ciberseguridad de rango empresarial. ¿Quieres saber cómo? Nos vemos en @C1b3rWall

[𝗚𝘂𝗶𝗹𝗹𝗲𝗿𝗺𝗼 💾🌍 (oldoldstable) @GuillermoVersus]

Mucho cuidado con las actualizaciones de #Proxmox 8 a 9 y aseguraos de tener el paquete systemd-boot-tools, que te pueden dejar sin arranque UEFI😱

[BitacoraByte @BitacoraByte]

@weareDMNTRs @david_bonilla @tarugoconf Una olla bien grande... cucharadita y paso pa tras!

[BitacoraByte @BitacoraByte]

@weareDMNTRs Demasiado!

[DMNTR Network Solutions 👻 AS204773 @weareDMNTRs]

Algo se está cocinando 👀

Si has reiniciado un router a las 3 AM, has explicado qué es una VLAN o sabes lo que duele un ticket mal escalado... estamos preparando algo para ti.

Granada · Octubre 2026

#LaDement0r #conf

[Alberto @alozanox89]

Cómo enrutar tráfico de MikroTik a través de un VPS con WireGuard
https://t.co/8sr28X5t1W

[Codely ﹤🍍﹥ @CodelyTV]

LaLiga y Movistar han vuelto a censurar medio internet.

Y si no fuera ya un escándalo que cada vez que hay fútbol no se pueden acceder a muchas webs, ayer Movistar se olvidó de desactivar el bloqueo de IPs.

Consecuencia: Hasta el medio día de hoy seguían censurando diversas IPs de Cloudflare y AWS.

Dado que muchos servicios comparten dirección IP, esto ha afectado a miles de webs.

Una de las afectadas, otra vez, ha vuelto a ser Codely.

Y tanto nos cansa ya el tema que hemos escrito un post sobre ello. https://t.co/7ktLDtbM67

[IPCisco @ip_cisco]

Static Route & Default Route Configuration!!!
.
Please Like & Retweet..:)
.
#routing #ccna

[Tim Dunn @MrTimDunn]

Hey @Adobe. 1.14GB just to *read a PDF*? Your Adobe Reader is now officially bloatware. We don't want "podcast summaries of your docs" we just want to read, print and maybe annotate. Please make this insanity STOP

[Alberto @alozanox89]

Configurar Adlists en MikroTik y Bloquear Contenidos No Deseados https://t.co/YnAv6OnNG7

[Miguel Ángel Durán @midudev]

Este repositorio es una joya. Te da todos los pasos e instrucciones para proteger y asegurar tu servidor Linux.

Perfecto por si tienes un servidor propio o VPS:
https://t.co/yJD2GnXFPj

[BitacoraByte @BitacoraByte]

@bquintero @GuillermoVersus Enhorabuena por tu carrera, por el premio y por esa defensa de la Educación Pública.

[Alfon 🎸 Seguridad y Redes @seguridadyredes]

#Wazuh. La solución del pipeline de ingestión (Ingest Pipeline) para #OpenSearch. Evitamos #regex complejos, anidados de campos, decoders e incompatibilidad de campos data. Los #JSON se los traga todos.

[Enrique Maza @EnriqueMaza]

Le pedí a Claude que generase 50 contraseñas. 18 eran la misma.

Las contraseñas de ChatGPT, Claude y Gemini son crackeables en horas.

La regla: nunca uses un LLM para generar secretos. Usa mejor un gestor de contraseñas.

https://t.co/bWLfvJd4y0

[Dhanian 🗯️ @e_opore]

Linux Backup Strategies

1. Introduction

→ Backup strategies protect Linux systems from data loss due to hardware failure, human error, cyberattacks, or corruption.
→ A proper backup plan ensures business continuity and disaster recovery.
→ Backups must be reliable, automated, and tested regularly.

2. Why Backups Are Critical
→ Prevent permanent data loss.
→ Recover from ransomware attacks.
→ Restore systems after hardware crashes.
→ Maintain regulatory compliance.
→ Ensure minimal downtime in production systems.
3. Types of Backups

→ Full Backup

→ Copies all selected data.
→ Simplest recovery process.
→ Requires more storage and time.

→ Incremental Backup
→ Copies only data changed since the last backup.
→ Faster and storage-efficient.
→ Restoration requires full backup + all incremental backups.
→ Differential Backup
→ Copies data changed since the last full backup.
→ Faster restore than incremental.
→ Uses more storage than incremental.
4. Backup Methods in Linux

→ 1. File-Level Backup

→ Backs up individual files and directories.
→ Common tools:
 → rsync
 → cp
 → tar

→ Example:
→ rsync -av /home /backup

→ 2. Image-Based Backup

→ Creates a complete system image.
→ Useful for full system restoration.
→ Tools include:
 → dd
 → Clonezilla
→ 3. Snapshot-Based Backup
→ Uses filesystem snapshots to capture system state.
→ Efficient and fast.
→ Common with:
 → LVM snapshots
 → Btrfs
 → ZFS

→ 4. Database Backups

→ Required for MySQL, PostgreSQL, etc.
→ Tools include:
 → mysqldump
 → pg_dump

5. Backup Storage Strategies
→ Local Backups
→ Stored on the same machine or local network.
→ Fast recovery.
→ Risky if hardware fails completely.

→ Remote Backups

→ Stored on another server via SSH.
→ Protects against hardware failure.

→ Cloud Backups
→ Stored in cloud storage providers.
→ Scalable and geographically distributed.
→ Ideal for disaster recovery.
6. The 3-2-1 Backup Rule

→ 3 Copies of data.
→ 2 Different storage types.
→ 1 Offsite backup.

→ This strategy reduces risk of total data loss.

7. Automation of Backups

→ Use cron jobs for scheduled backups.
→ Example:
→ crontab -e

→ Automate rsync or tar scripts.
→ Ensures consistent backup without manual intervention.
8. Backup Security
→ Encrypt backup files.
→ Restrict access permissions.
→ Regularly verify backup integrity.
→ Test restoration process frequently.
9. Disaster Recovery Planning
→ Define Recovery Time Objective (RTO).
→ Define Recovery Point Objective (RPO).
→ Document recovery procedures.
→ Regularly simulate recovery scenarios.

10. Best Practices
→ Automate backups.
→ Monitor backup logs.
→ Store backups in multiple locations.
→ Test restore process regularly.
→ Keep backup strategy simple and documented.

11. Tip

→ Linux provides powerful tools for reliable backups.
→ Choose full, incremental, or differential based on needs.
→ Follow the 3-2-1 rule for safety.
→ Automation and testing are critical for success.
→ Backup strategy is essential for system reliability and business continuity.

📘 Linux Mastery Ebook
→ Master Linux internals, backup strategies, system monitoring, logging, process scheduling, and IPC in depth.
🔗Grab the Linux Mastery Ebook
https://t.co/mCaIRlvD0A

[Alt43 @BurpWeb]

3: Herramientas y Despliegue

No todas las VPN son resilientes al DPI. Evaluamos las herramientas que definen la privacidad técnica hoy:

⚙️ Análisis: iVPN, Mullvad, Proton, AdGuard.
⚙️ Red Tor: Uso de Snowflake y obfs4.
⚙️ Conclusiones

https://t.co/5cGgpsgvxP

[Benjamin Bennett Alexander @RealBenjizo]

🚫 NEVER Use COUNT to Check for Existence

If you just want to confirm if a particular item exists in your data, do not use COUNT() with a filter (WHERE clause).

SELECT COUNT(*)
FROM users
WHERE email = '[email protected]';

The problem is that COUNT(*) answers a different question. It counts the number of rows that meet the condition, even though you only want to know if at least one exists.

When you use COUNT(*), the database may scan all matching rows to compute the total. Even if it finds one match immediately, it can keep going because you asked for a full count. That’s unnecessary work if you are dealing with large tables.

Instead of using COUNT(), use EXISTS

SELECT EXISTS (
SELECT 1
FROM users
WHERE email = '[email protected]';
);

👑 With EXISTS, the database will stop as soon as it finds the first match. No counting. No extra scanning.

Resource: https://t.co/OVaNhH3eeq

[DMNTR Network Solutions 👻 AS204773 @weareDMNTRs]

Hoy hemos estado mitigando un ataque contra algunos de nuestros servidores.

No era un pico aislado, ni una IP descontrolada, ni el típico escaneo automático. Era algo más interesante y bastante más representativo de cómo se ataca hoy en Internet.

Y me preocupa.

🧵🧵🧵

[Kubernetes @kubernetesio]

The Kubernetes Dashboard was officially retired and archived on January 21, 2026.

To continue providing a modern, extensible web UI for the community, the project now recommends transitioning to Headlamp.

Now under SIG UI, Headlamp is a user-friendly tool for managing and troubleshooting your clusters.

Check out the project and docs here:
🔗 https://t.co/7e4hDAOJFd