What are the most paranoid network/OS security measures you've implemented in your homelab?

MigratingtoLemmy@lemmy.world to Selfhosted@lemmy.world – 180 points –

As the title says, I want to know the most paranoid security measures you've implemented in your homelab. I can think of SDN solutions with firewalls covering every interface, ACLs, locked-down/hardened OSes etc but not much beyond that. I'm wondering how deep this paranoia can go (and maybe even go down my own route too!).

Thanks!

131

You are viewing a single comment

Nice try, attacker trying to get me to do their reconnaissance work for them. I'm on to you.

It would be funny if that were the case. I was just hoping to be a little more paranoid from you lot and maybe improve on the things I've thought about

Yeah, just having a little fun in the role of a paranoid admin. My setup isn't worth mentioning since it fits my threat model (i.e. nobody gives a shit about my network, just don't be the low hanging fruit) but I'm interested in other replies. Hope you get some useful responses here.

No, honestly I'm not an attacker, but your local bank. We just need your help to update our systems. Please provide us the following credentials to continue using our phish- *ugh* services.

Credit card number: _____________
CVV: ___
Expiration date: ______

Spfff me, never Anyway please tell me more about your IP adress and your private keys.

Hey its me your friend Aaron how are you. Hey i was just wandering, what is your credit card details again? just wandering