Without a published POC there’s a slightly longer window before clueless script kiddies start having a go at exploiting the vulnerability, though.
Modern tech, retro tech, 80s/90s music & nostalgia. I live in northern England so most things I post about have a UK slant.
Elsewhere on Fedi:
Without a published POC there’s a slightly longer window before clueless script kiddies start having a go at exploiting the vulnerability, though.
Not really a viable solution for many scenarios though. What if your PDF has half a dozen pages, your answer becomes really tedious. And in a lot of cases a PDF with forms is expected to be sent back to the person or company that created it once the fields have been filled in. They’re not likely to want to receive a bunch of JPEG screenshots instead.
From the sidebar
Posts must be relevant to operating systems running the Linux kernel. GNU/Linux or otherwise.
Nothing there saying it’s specifically for Linux News.
How did we let this happen?
How could we not have done? When electricity was first being proposed of a way of powering homes and industry we couldn’t even agree on a standard for distribution (Tesla vs Edison). The world’s governments didn’t step in because this was a dispute between private companies. Just like governments didn’t decide whether we should use VHS vs Betamax, or drink Coke vs Pepsi.
And then once a country decided on a standard distribution method they had to pick a voltage, a frequency, and a plug/socket design. Again, there was no real reason for governments to get heavily involved at this point - after all, nobody knew if this new-fangled electricity thing would ever really catch on.
Can we just start again?
Sure. But it will cost maybe hundreds of billions. Maybe more than that. It doesn’t matter which plug/socket design you say is the right one for the whole world, most of the world won’t already be using it (just look at the map!). So all those countries are going to have to change not only the plug on every single appliance in existence in their country, but also every single socket on every wall in every building. And what’s the benefit to the countries that have spent al those billions doing that? Absolutely nothing - the advantage and profits will be reaped by product manufacturers who don’t have to produce a variety of connectors.
Yes, I think that ‘masquerading’ is the key bit to grasp. The MITM Proxy isn’t just intercepting the traffic, it alters the traffic as it passes through.
DigitalOcean’s guides in general are pretty good for all sorts of things, whether it’s a generic discussion of a concept like the ones you’ve posted, or a step-by-step guide for installing and configuring specific systems or software. Even if you’re not using DO as a host, much of what they suggest is still very useful.
Do you want zombie orphans? Cos that’s how you get zombie orphans. Listen to the AI, it’s trying to save the world from becoming a dystopian TV series!
While true, I think most people’s concern is that their laptop is stolen and along with it all the access details for their email, online banking and so on.
If you’re doing things that mean you’re going to be the target of people with the knowledge, time, and technology to freeze the RAM and attempt to recover the data, you’re presumably already well aware of those (and other) dangers anyway.
systemd [is] a niche
Maybe in the wider world of all the operating systems installed on all the computers, but for Linux-based computing it is, like it or not, near ubiquitous these days. And in particular for server systems (and this is, after all, /m/selfhosted), good luck finding something that isn’t systemd-based unless you’re deliberately choosing a BSD or aiming for a system which has ever-decreasing amounts of support available.
what if I’m not using CoreOS?
Podman runs on any distro (or more strictly: any distro that uses systemd). It’s essentially a FOSS alternative to Docker.
GRUB (or any other bootloader) doesn’t care about and in fact doesn’t even know about X, Wayland, or any other userland GUI system.
It’s not a perfect analogy, but a good way to think about it if you’re not a programmer is to say “why do we need recipes when we can just buy a product in the store and read the ingredients list”.
Just because you know the ingredients, that doesn’t mean you know how to put them together in the right order, in the right quantities, and using the correct processes to recreate the finished product.
Yes, it matters hugely.
Let’s say I do a google search for “how to frobitz a widget” and the top result (because as you say it’s in Google’s cache) points me to a post on /r/WidgetFrobitzing.
I then click through and find that the post is deleted or has been changed to say “lol Spez sucks use Lemmy” or whatever. I’ll almost certainly close that tab and go back to google to find another link. That deprives Reddit of clicks through its ads, of time spent on site, and it also means that user is less likely to follow links to Reddit in future as they will know they’re not as useful as Google thought they were.
I haven’t run up my own Threadiverse server yet, but I self-host my own one-person Mastodon, also on Hetzner. Yes, it will eat up a lot of disk space, so if you’re trying to keep costs down you need to send all the media to S3-compatible storage. I use Backblaze B2 which costs me something like $2/month for 200GB of Mastodon media.
I would assume Lemmy or Kbin would also be greedy for asset storage, as they’ll pull in media (images and videos) for any community you follow. So again pushing that all off to a low-cost storage system such as S3 makes a lot of sense.
The developer of kbin, @ernest, has said that automated processing of account deletion requests is on the roadmap but currently it’s a manual process.
As you can imagine, for a piece of software that two months ago was in alpha status with fewer than 100 regular users and then suddenly became one of the most-used systems on the Fediverse, there are still a lot of rough edges to be cleaned up.
I can’t help with Lemmy, but I’ve been running a single-user Mastodon instance for almost a year now.
Like you, I found that the media very quickly used up much more disk space than I anticipated. There are a few things you can do.
You can tune how long media is stored for: some of this is done in the admin interface, but really you need to set up cron jobs to regularly run various tootctl
commands. This is the crontab I use:
SHELL=/bin/bash
PATH=/home/mastodon/.rbenv/shims:/home/mastodon/.rbenv/bin:/usr/local/bin:/usr/bin:/bin
RAILS_ENV=production
# Remove media attachments older than 8 days
11 19 * * * cd /home/mastodon/live && time bin/tootctl media remove --days 8
# Remove link previews older than 28 days
22 5 * * * cd /home/mastodon/live && time bin/tootctl preview_cards remove --days 28
# Remove files not linked to any post
3 23 * * 0 cd /home/mastodon/live && time bin/tootctl media remove-orphans
# Prune remote accounts that never interacted with a local user
44 1 * * * cd /home/mastodon/live && time bin/tootctl accounts prune
You can of course choose even stricter settings but I found that no matter what I did, given that I am following approx 1,000 other Fediverse accounts it still used up more disk space than I was comfortable with.
So I offloaded most of the media storage onto an S3-compatible service. It’s breaking the self-hosting ethos somewhat, but with Backblaze B2 I can happily store and serve several hundred GB of media files for just a couple of dollars a month. To me, that was a no-brainer.
CPU requirements for Lemmy hosting are minimal. Memory is useful - you’d want to use the Pi 4 with either the 4GB or 8GB RAM, anything less than that will work but you’ll be running the risk of difficulties if the server gets busy.
You’ll also need plenty of storage, especially if people are going to start uploading media to your Lemmy host. Given that a Pi runs off an SD card you might well find yourself running out of storage space - I’d recommend attaching a USB storage device for the reassurance in that respect.
It’s half as much again! If your budget is that flexible you really should have mentioned it in the original post so that people could give you a wider range of options.
Translate it up by a couple of orders of magnitude and you get “I want to buy a car, I have €10,000 to spend” … “I found one for €15,000, it’s a little bit more but …”