Tech Tyrant ᴶᴶᴳᵃᵈᶢᵉᵗˢ :jjtinfoil:<p>I'm finally writing an <a href="https://social.jjgadgets.tech/tags/introduction" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>introduction</span></a> toot LOL.</p><p>I'm "JJGadgets" online, you can call me JJ, everyone does.</p><p>My life is <a href="https://social.jjgadgets.tech/tags/tech" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>tech</span></a>, nothing brings me more joy and zen than sitting in front of my screens. Maybe except for Japanese food.</p><p>I use and prefer <a href="https://social.jjgadgets.tech/tags/linux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>linux</span></a> for both server and desktop use, despite its flaws. I live in the <a href="https://social.jjgadgets.tech/tags/commandline" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>commandline</span></a>. Been that way since I first jailbroke on iOS 5 and installed MobileTerminal.</p><p>I study <a href="https://social.jjgadgets.tech/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>infosec</span></a> but textbooks and lessons don't even come close to doing justice to what <a href="https://social.jjgadgets.tech/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>infosec</span></a> is all about. I like to think that I live and strive to live the infosec life, including my mindset. (After all, that's why <span class="h-card"><a href="https://fedi.voltaicforge.com/users/truxnell" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@<span>truxnell</span></a></span> started calling me the "tinfoil hat sensei" LOL)</p><p>I do <a href="https://social.jjgadgets.tech/tags/kubernetes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Kubernetes</span></a> @ Home, and maintain my cluster state in <a href="https://social.jjgadgets.tech/tags/git" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>git</span></a> then apply it with tools like <a href="https://social.jjgadgets.tech/tags/fluxcd" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>FluxCD</span></a>. My <a href="https://social.jjgadgets.tech/tags/homelab" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>homelab</span></a> repo can be found at <a href="https://biohazard.jjgadgets.tech" rel="nofollow noopener noreferrer" target="_blank">https://biohazard.jjgadgets.tech</a> (will always 301 redirect to my latest Git remote of choice, in the event it changes). I think using <a href="https://social.jjgadgets.tech/tags/gitops" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>GitOps</span></a>/IaC to declare desired security-related state (policies, rules etc) makes managing security a lot easier.</p><p>I try to follow "Principle of Least Privilege" for my homelab, and especially for Kubernetes security, using tools such as network policies (<a href="https://social.jjgadgets.tech/tags/netpols" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>netpols</span></a>), policy engines, secrets management, identity management, strong <a href="https://social.jjgadgets.tech/tags/authentication" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>authentication</span></a>, and access control. For example, my homelab Kubernetes cluster heavily uses netpols everywhere to default-deny and only allow the necessary network traffic for any given app to work.</p><p>I am also very interested in strong authentication methods such as <a href="https://social.jjgadgets.tech/tags/passwordless" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>passwordless</span></a> <a href="https://social.jjgadgets.tech/tags/fido2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>fido2</span></a> / <a href="https://social.jjgadgets.tech/tags/webauthn" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>webauthn</span></a> (<a href="https://social.jjgadgets.tech/tags/yubikey" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>yubikey</span></a> and <a href="https://social.jjgadgets.tech/tags/passkeys" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>passkeys</span></a>) and where possible, I only enroll FIDO2 MFA, and choose the passwordless variant if available.</p><p>I try my best to use privacy-respecting software where possible, as I believe in maintaining transparency and control over the <a href="https://social.jjgadgets.tech/tags/privacy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>privacy</span></a> of people, regardless of online or offline.</p><p>I also believe in <a href="https://social.jjgadgets.tech/tags/opensource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>opensource</span></a>, too many times we've been shown the consequences of relying on closed source software, so where possible I always prefer open source.</p><p>Outside of the screen, admittedly I'm terrible at life stuff, and it's very hard for me to be interested in much of anything other than stuff on or related to a screen/device (I basically only talk tech stuff LOL). I'm working on changing that in the event I burnout hard again (though I still haven't found a non-tech interest yet, as of writing). I've burnt out multiple times despite still being a student, and thus I now (try to) take as much necessary measures as I can to avoid over-working, over-stressing or over-exerting myself.</p><p>That's about it, let's chat (or toot?)!</p>