VLOG Thursday 502: pfsense, HOPE (Hackers On Planet Earth), Homelab Q&A
Source: YouTube · Lawrence Systems · published Aug 20, 2026 · 55:28
BLUF: The speaker analyzes recent pfSense updates, critiques the shift away from true open-source values toward Netgate's closed ecosystem, and advocates for UniFi or privacy-focused tools like Graphene OS and Signal as superior alternatives for security and privacy. 14:41
Key Takeaways:
• The release of pfSense Community Edition 24.11 includes security enhancements like updated SSH algorithms and TLS certificate improvements, though the speaker notes these are standard maintenance updates rather than groundbreaking features 21:54.
• Netgate is increasingly prioritizing its paid "Plus" version and the proprietary "Nexus" interface, effectively sidelining the Community Edition and reducing its value as a truly open-source option 14:41.
• UniFi is presented as a compelling alternative to pfSense for users willing to use closed-source software, offering superior features like Deep Packet Inspection (DPI), easier VPN setup, and better granular control that pfSense lacks 23:31.
• DNS filtering is discussed as a limited defense mechanism; while blocking new domains can help stop malware, it is less effective against phishing sites hosted on legitimate domains, making endpoint security more critical 11:12.
• For personal privacy, the speaker recommends Graphene OS for mobile devices and Signal for messaging, citing their robust security histories and resistance to surveillance compared to other platforms 46:53.
Closing Statement: As pfSense moves further from its open-source roots, users must evaluate whether the proprietary features of Netgate Plus or the ecosystem benefits of UniFi better suit their needs, while prioritizing endpoint security and privacy-focused tools like Graphene OS for comprehensive protection.
Sources:
- 14:41 Discussion on Netgate moving away from open-source branding toward pfSense Plus.
- 21:54 Overview of pfSense 24.11 feature highlights including SSH and TLS updates.
- 23:31 Comparison of pfSense versus UniFi, highlighting UniFi's superior features.
- 11:12 Analysis of DNS filtering limitations against phishing and malware.
- 46:53 Recommendations for Graphene OS and Signal for privacy and security.
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 1 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
And we are live after some very slight technical difficulties. And yes, I see in the comments here, news from PFSense. Yes, I got to pull that information up, which is the neck gate slashblog. There we go. So, this will be among the topics I bring up. Make it a little more readable here while we get started. The I should pull over in case anyone isn't seeing it. We'll find the slot photo. Actually, we'll find more than one thing here. Is this a video? Where's the video? There we go. The video. This is how I know what time it is now. We got Mario on my watch. He bounces to let me know the time. So, if you haven't seen this, I got the Pebble watch. So, that's kind of exciting. Um, I don't know if I'm actually gonna do a review of the Pebble Watch, but uh, it's definitely pretty cool for anyo…