https://utube.ro/about/instance/homehttps://utube.ro/videos/browse?scope=localhttps://utube.ro/w/d8gVBqdGiLsqXwZm1FdJw8https://utube.ro/lazy-static/thumbnails/538d591d-2a8e-4815-9e23-e53e56607026.jpgWhat HARDWARE is in my Homelab? - Home Server TourWant to map out your own infrastructure? Check out @MiroHQ here: https://miro.pxf.io/EE4ae9 β an intuitive diagramming platform with real-time collaboration, AI-powered diagram generation, and hundreds of customizable templates to visualize everything from home servers to enterprise systems.
Homelab Gear: https://github.com/TechHutTV/homelab/blob/main/README.md
π FOLOW TECHHUT
X (Twitter): https://bit.ly/twitter-techhut
MASTODON: https://bit.ly/mastodon-techhut
BlueSky: https://bsky.app/profile/techhut.bsky.social
INSTAGRAM: https://bit.ly/personal-insta
π SUPPORT TECHHUT (all links below this line will earn us commission)
BUY A COFFEE: https://buymeacoffee.com/techhut
YOUTUBE MEMBER: https://bit.ly/members-techhut
βPAID/AFFILIATE LINKS BELOWβ
π RECOMMENDED SERVICES
VPN I USE: https://airvpn.org/?referred_by=673908
π· MY GEAR
HARD DRIVES: https://serverpartdeals.com/techhut
MinisForum Tablet: https://amzn.to/3SeMmds
Beelink N200: https://amzn.to/3xZjeQs
Raspberry Pi 5: https://amzn.to/4f3yUCN
Q1 HE QMK Custom Keyboard: https://www.keychron.com/products/keychron-q1-he-qmk-wireless-custom-keyboar?ref=techhut
ASUS ProArt Display: https://amzn.to/4i4cAKz
00:00 - Intro
01:53 - Miro (sponsor)
03:28 - Rack
03:57 - Unifi Small Stuff
04:59 - Dream Machine Pro Max
05:56 - 10G PoE Switch
06:47 - 24 Port PoE
07:40 - BEST Patch Panel
08:32 - 16 Port PoE Switch
09:26 - U7 Pro XG Wifi
10:15 - OpnNas Server
12:01 - Unraid Storage
14:18 - Minisforum AI Pro
15:17 - More Compute
16:23 - Security
17:54 - Power and UPC
18:46 - Extras
This video was sponsored by Miro
#Homelab #MiroPartnerhttps://utube.ro/static/streaming-playlists/hls/6231af1c-0b9f-4fe9-8692-c7f1cab01d8b/803c2894-726b-4906-9313-587708f0797a-master.m3u8https://utube.ro/videos/embed/d8gVBqdGiLsqXwZm1FdJw812095152026-03-09T00:13:18.042ZYESOpenSourceNOhttps://utube.ro/w/iVEhPGRj8DJaZh4k3VBhERhttps://utube.ro/lazy-static/thumbnails/030e9037-06c1-4b82-bc5c-4ef85247348c.jpgthe BEST Home Server Backup App I've Used - ZeroBytePowerful proxies with the lowest prices on the market (from $0.6) β Floppydata: https://bit.ly/floppydata_techhut Use promo code EXTRA50 to get +50% extra traffic with your purchase! 20% OFF with promo-code YTGL20 on the top multi-accounting browser β GoLogin: https://bit.ly/gologin_techhut
Zerobyte: Powerful backup automation for your remote storage. Encrypt, compress, and protect your data with ease. Zerobyte is a backup automation tool that helps you save your data across multiple storage backends. Built on top of Restic, it provides a modern web interface to schedule, manage, and monitor encrypted backups of your remote storage.
ZeroByte: https://github.com/nicotsx/zerobyte
REST Server: https://netbird.io/knowledge-hub/zerobyte-rest-server
π FOLLOW TECHHUT
X (Twitter): https://bit.ly/twitter-techhut
MASTODON: https://bit.ly/mastodon-techhut
BlueSky: https://bsky.app/profile/techhut.bsky.social
INSTAGRAM: https://bit.ly/personal-insta
π SUPPORT TECHHUT (all links below this line will earn us commission)
BUY A COFFEE: https://buymeacoffee.com/techhut
YOUTUBE MEMBER: https://bit.ly/members-techhut
βPAID/AFFILIATE LINKS BELOWβ
π RECOMMENDED SERVICES
VPN I USE: https://airvpn.org/?referred_by=673908
π· MY GEAR
HARD DRIVES: https://serverpartdeals.com/techhut
MinisForum Tablet: https://amzn.to/3SeMmds
Beelink N200: https://amzn.to/3xZjeQs
Raspberry Pi 5: https://amzn.to/4f3yUCN
Q1 HE QMK Custom Keyboard: https://www.keychron.com/products/keychron-q1-he-qmk-wireless-custom-keyboar?ref=techhut
ASUS ProArt Display: https://amzn.to/4i4cAKz
00:00 - Start
00:59 - FlobbyData (Sponsor)
02:07 - ZeroByte Setup
04:11 - ZeroByte Tour
05:07 - Local Backup
08:08 - Cloud Backups with Rclone
09:47 - Google Drive APIhttps://utube.ro/static/streaming-playlists/hls/91295fc5-7cb0-42a4-83ee-52e1b7126255/6406e145-4245-44ea-984a-d59d9a122b5d-master.m3u8https://utube.ro/videos/embed/iVEhPGRj8DJaZh4k3VBhER10230122025-12-24T18:32:56.712ZYESOpenSourceNOhttps://utube.ro/w/rPZ3zCcE8NQcKygLHfZhPihttps://utube.ro/lazy-static/thumbnails/59072057-aaee-4325-a594-78a134901608.jpgThey Hit TanStack. 518 Million Downloads. And the Security Cert Was Real.TeamPCP is back. On May 11th they hijacked TanStack's own legitimate release pipeline and used it to publish 84 malicious package versions in a six-minute window. By end of day the campaign had spread to over 170 packages across npm and PyPI with 518 million cumulative downloads affected.
What makes this attack different from anything before: the malicious packages carry valid SLSA Build Level 3 provenance attestations. The security certificate was real. Valid provenance no longer guarantees a package is clean.
There's also a dead man's switch. If you ran affected packages on May 11th, do not immediately revoke your tokens -- watch the video first.
β οΈ If you ran @tanstack packages on May 11th, treat the environment as compromised.
β οΈ WHAT TO DO
Block these domains at your DNS level now:
git-tanstack.com
*.getsession.org
api.masscan.cloud
If affected, rotate credentials in this order from a clean machine:
npm tokens
GitHub Personal Access Tokens
AWS credentials
Vault tokens
Kubernetes service account tokens
β οΈ Do NOT revoke tokens on a machine that may still be running the malware. Isolate the machine first, then rotate from a separate clean machine.
Confirmed clean @tanstack families:
@tanstack/query, @tanstack/table, @tanstack/form, @tanstack/virtual, @tanstack/store
β± CHAPTERS
00:00 - TeamPCP Hits TanStack
00:39 - What Is TanStack?
01:04 - The Scale of the Attack
01:07 - How They Did It
02:00 - The pnpm Store Explained
02:30 - How OIDC Tokens Were Stolen
03:13 - The Provenance Problem
04:13 - The Dead Man's Switch
04:43 - Do Not Revoke Tokens Yet
05:01 - What To Check Right Now
06:21 - The Bigger Picture
07:14 - The Claude Impersonation
07:37 - Closing Thoughts
π LINKS & SOURCES
TanStack website: https://tanstack.com
Socket: TanStack npm packages compromised Mini Shai-Hulud: https://socket.dev/blog/tanstack-npm-packages-compromised-mini-shai-hulud-supply-chain-attack
TanStack: postmortem: https://tanstack.com/blog/tanstack-start-npm-supply-chain-attack
...https://utube.ro/static/streaming-playlists/hls/d127941f-0645-4aa4-a1b8-8e66d27f97df/b6889ab3-2e5b-4029-ac96-49ebeb036a41-master.m3u8https://utube.ro/videos/embed/rPZ3zCcE8NQcKygLHfZhPi515002026-05-13T21:57:57.617ZDB TechDBTechDocker tutorialYESOpenSourceNOhttps://utube.ro/w/a3rVsq4E8QjGQEW1UzLPHVhttps://utube.ro/lazy-static/thumbnails/4d165c63-9dac-44ab-abfe-d2641830286c.jpgTeamPCP: Frag YouThree Linux kernel privilege escalation bugs in two weeks. Copy Fail. Dirty Frag. Now Fragnesia.
Fragnesia is related to one of the patches for Dirty Frag. Fixing one thing exposed a weakness nearby. The good news: if you already applied the Dirty Frag mitigation, you're covered for this one too.
I also want to talk about how I feel about all of this. Because I have thoughts.
π Dirty Frag video: https://youtu.be/3MhLcaPyfPI
π Copy Fail video: https://youtu.be/LwqEUiuXmbg
β οΈ MITIGATION COMMANDS:
π https://code.dbt3ch.com/dv0SgHNn
β± CHAPTERS
00:00 - Here We Go Again
00:11 - What Is Fragnesia?
00:42 - The Plumbing Analogy
01:15 - How I Actually Feel About This
01:59 - The Good News
02:14 - What To Do
02:33 - Is This a Pattern?
02:58 - Wrap Up
π LINKS & SOURCES
Wiz: Fragnesia Linux kernel LPE: https://www.wiz.io/blog/fragnesia-linux-kernel-local-privilege-escalation-via-esp-in-tcp
DB Tech: Dirty Frag video: https://youtu.be/3MhLcaPyfPI
DB Tech: Copy Fail video: https://youtu.be/LwqEUiuXmbg
π DB TECH
Website: https://dbtechreviews.com
Shop: https://dbtech.dashery.com/
Patreon: https://www.patreon.com/dbtech
Water leak video:
https://www.youtube.com/watch?v=WVpW87a4UuI
/=========================================/
All My Social Links:
β
https://dbt3.ch/@dbtech
Join Discord!
β
https://discord.gg/M9J6hFq
/=========================================/
β¨Ways to support DB Tech:
β
https://www.patreon.com/dbtech
β
https://www.paypal.me/DBTechReviews
β
https://ko-fi.com/dbtech
β
Cashapp: https://cash.app/$dbtechyt
β
Venmo: https://venmo.com/dbtechyt
β¨Come chat in Discord:
β
https://dbte.ch/discordhttps://utube.ro/static/streaming-playlists/hls/4939b5d3-b16d-4f6f-854a-3894ea23328b/29422785-30b4-4591-b1b3-3d9fb8a8e407-master.m3u8https://utube.ro/videos/embed/a3rVsq4E8QjGQEW1UzLPHV194002026-05-14T20:52:41.503ZDB TechDBTechDocker tutorialYESOpenSourceNOhttps://utube.ro/c/ciprian_utube/videoshttps://utube.ro/c/opensource/videoshttps://utube.ro/a/razvan/video-channelshttps://utube.ro/a/ciprian/video-channels