1. Install uBlock Origin in all of your web browsers
2. Configure uBlock Origin in each of your web browsers
   • enable Fanboy’s Social Blocking List
   • add the following to “My filters”
     • disqus.com
       disquscdn.com
       instagram.com
       twitter.com
       facebook.com
3. Enjoy a better internet

Rarely am I using ntpd to serve ntp information. It is more useful for clock-correction than a strict ntp/sntp client. Thus I don’t want the service listening on a wildcard address, even when there is certainly a firewall in place. I prefer the service to not be listening at all, or listening only to the loopback interface. Here is how to configure that in ntpd and chrony.

ntpd

interface ignore wildcard

chrony

bindaddress 127.0.0.1
port 0
bindcmdaddress 127.0.0.1
cmdport 0

How can I make chronyd more secure?

There are many NTP server implementations now. Here are some:

• ntpd
• chrony
• ntpsec
• openntpd
• sntp clients
  • systemd-timesyncd
  • sntp
• also:
  • ntimed – appears abandoned

Resources:

• Securing Network Time
  • A security review of three NTP implementations
  • concludes chrony is probably the best choice of ntpd, ntpsec, and chrony
• A rift in the NTP world
• Chrony: Comparison of NTP implementations
• NTPSec: Differences from NTP Classic
• NTPsec is not quite a full rewrite

I plan to give chrony a try.

I’m quite happy with my initial use of Firefox Monitor. I’ve recommended it to family, friend, co-workers. I recommend signing up for continuous monitoring. Anyone who has had a password compromise should consider that password and permutations there-of to be public knowledge.

• https://monitor.firefox.com/

For me the near constant data breaches we’ve seen in recent months is more evidence that strict regulation of retained personal information is necessary in the US and that it would be wise for more websites to consider whether storing passwords is even wise. I have argued that most websites should not be storing user passwords.

This is not exactly the best strategy given that malicious actors probably have access to IP addresses from other countries. I was asked to research this and this is what I found.

• Major IP Addresses Blocks By Country
• Block Visitors by Country Using Firewall
• https://www.countryipblocks.net/country_selection.php
• 8 Ways to Block Visitors to Your Website by Country