Antivirus as a thing is mostly dead, or has morphed into more aggressive endpoint protection. In that sense ClamAV is mostly to scan for known malware in things like mail servers. Make sure people aren’t sending malicious stuff, albeit mostly low hanging fruit.

Nextcloud, wikis, or other similar aggregation sites are also a usecase, but again low hanging fruit.

Set up a cron job and have it run periodically, like once an hour / day / week, whatever. Make sure you set up something that alerts you if/when it hits on something.

My father in law was a commercial pilot and he had a home server just to keep photos and travel writing while he was flying and away from home a lot. I helped him upgrade some of that to the cloud, since that makes for sense when on the other side of the country, but he still has a bunch of stuff at home.

If they get root or admin they can hack the chip itself.

But minor exploits, nada, no issue, you good. Gotta get root to make it happen.

Problem is if you, as they say, get got, you have no way of knowing if they’re in your CPU, and no way to fix if they did – basically gotta trash it and replace.

Looks like a usb, and a molex power connector. You’d have to break out a multimeter to figure out what’s active and what’s a ground though, and then have to bit bang your way to figure out what each connection does.

Huh doesn’t require enterprise subscription to see that solution

Separate subsets, segregated traffic. Easy to avoid crosstalk by setting channels further apart or using 2.4ghz and 5ghz

At home I have one SSID as a main wifi, and the other is guest wifi and IoT or other random devices.

Main downside is getting it setup and maintenance.

What are the use cases? More RAM is nice but could be overkill if you’re bottlenecked by CPU, and if this is for running a few simple VMs or as storage then you may not need much of this.

RAID is generally a good thing but don’t get complacent, follow the 3-2-1 method. I.e. you might be better off saving the cash and using a backup script to push stuff you really care about to the cloud, and pay for cloud fees vice hw.

Has anyone done a true up between those and a system specific hw monitor? If I was going to hijack CPU and download a shit ton of malicious binaries I’d want to obfuscate that, and adding a CPU monitoring window with fake values is a great way to deflect/create false confidence