Security Know Now

 To tighten up home network, and to test,  I recently made a Wireguard server behind the Sophos firewall. My Sophos Firewall is built on an old PC and I have Proxmox on a little mini PC.  The ProxMox server is setup for various services like a Unifi Controller, FreePBX, Wazuh, and most recently a Wireguard server. Essentially, a client at work mentioned that they wanted "everyone to be on a VPN" and a friend was complaining about their VPN not working when they went to the office.  Everyone at the shop mocked the idea and said it would not work....   After building this setup with a Wireguard server and setting up some special rules on the firewall to allow VPN access across VLANS, I am convinced this is the best way to segment a network.  First you can VLAN everything separating various resources but then to limit access within those VLANS is easiest with the Internal VPN server.   

 Fun little project. I had some of these RCWL-0516 boards laying around and a Raspberry Pi Pico so I started to wonder if I could make a motion sensor toy that would turn the lights on as i needed in my little workspace in the basement. Super easy cute python project: basically set it up to sense motion, and close a relay that turns on the LED light.    When you walk in the room the RCWL-0516 senses via microwave that there is motion, tells the Pico and the Pico sends a signal to the relay to close.   The relay will remained closed for 10 seconds after the motion is no longer detected. I am not sure how I am going to use this.... maybe a logging of detected motion and alerts?   IDK yet.

 The cats auto water bowl filler stopped working but it was being not super easy to diagnose.   Is it a sensor reading issue?   Sensor issue? Pico? Programming glitch?  Power?  Pump? so I added this little 128x32 OLED display to the hacky looking project to show the sensor reading and whether or not the relay should be open or closed for the pump. Then, throw a little hotmelt glue on it to place it somewhere visible...

 Goal:    to Get to the storage of THAT Raspberry Pi (left circle with a USB drive Plugged in) from this laptop (hotspotted on my phone) through a drop box (right circle) made from a RaspberryPi Zero 2 with a POE Ethernet hat on it.   Essentially the thought was, "If I could gain access to a local network by plugging in this drop box, could I easily gain access to the files on the file share. Topography of the setup for the remote access and resonance.   The laptop and the "drop box" were setup having ZeroTier Nodes.   essentially putting bot on the same network over the internet.    Using Putty and the IP address provided by ZeroTier. I was able to SSH into the drop box remotely:  once in the network I could run an ip addr to find the subnet that the drop box got from the local DHCP server keeping in mind that we want the address of the bridge as this drop bix has 2 purposes.   It is a wireless access point if we are clos...

 Customer sent a message today “I keep getting these login requests, they are annoying.   Can we stop them?”   Congratulations, your mfa is working.  Bad news is… they have your password.  Change it and everyplace that you use that password immediately.  

I had one of those old EOL security camera systems that was not really trust worthy... it went to the internet, the apps were buggy started requiring subscription service. Not very good with encryption or security... I took it off of the network and used a raspberry pi zero to capture the video from the device and then ran ZeroTier for remote monitoring.  Fun little project...