Jason2357

joined 2 years ago
[–] Jason2357@lemmy.ca 23 points 4 days ago

It’s not like it NEEDS it for anything.

I see this take online a lot, but in person, everywhere I go people play netflix and whatever directly on their TV. I think there might just be a huge divide in perspective between those with and without game consoles of some sort always connected to their TV.

[–] Jason2357@lemmy.ca 3 points 4 days ago (1 children)

Curious, they have been putting ads on the sticker on bananas like this since the 90s ish.

[–] Jason2357@lemmy.ca 20 points 6 days ago (2 children)

Not even remotely within the prevue of an EO. Its a show so that he can rail against those states insolence.

[–] Jason2357@lemmy.ca 9 points 6 days ago (2 children)

If enough conservatives cross the floor, maybe Canadians will recognize the Liberal party as the progressive conservative party it is and let the NDP own the left.

[–] Jason2357@lemmy.ca 2 points 1 week ago

This absolutely. Anyone who actually wants open registration will be configuring their own SSO or whatever backend. The default should be safe for testing and/or hobbyists.

[–] Jason2357@lemmy.ca 2 points 1 week ago (1 children)

To anyone afraid of the above conclusion, a dedicated $5 VPS with automatic snapshots get you a long way.

[–] Jason2357@lemmy.ca 3 points 1 week ago (2 children)

Any time you have a server willing to process random data uploaded from randos, just expect it to be compromised eventually and prepare for the eventuality by isolating it, backing it up religiously, and setting up good monitoring of some sort. Doesnt matter if its a forge, a wiki, or like nextcloud or whatever. It will happen.

[–] Jason2357@lemmy.ca 3 points 1 week ago (2 children)

We also have COW filesystems now. If you need large datasets in different places, used by different projects, etc, just copy them and use BTRFS or ZFS or whatever. It wont take any space and be safer. Git also has multiple ways of connecting external data artifacts. Git should by default reject symlinks.

[–] Jason2357@lemmy.ca 2 points 1 week ago

Theres a HUGE difference between hosting it essentially read-only to the world, vs allowing account creation, uploading, and processing unknown files by the server.

I have thought of blocking access to the commit history pages at the reverse proxy to cut off 99% of the traffic from bots. If anyone wants to look at the history, its just a git clone away.

[–] Jason2357@lemmy.ca 2 points 1 week ago

You can git pull a repo to your machine, make your changes and then use git to submit a patch via email. Its not pretty, but it works. Hopefully federation is built soon and you will be able to submit a pull request from your own forge.

[–] Jason2357@lemmy.ca 12 points 1 week ago

While good, network security isnt the issue. Its running a web service with open registration allowing randos to upload content that gets processed by the server.

Throw this up on a dedicated $5 VPS and you still have a problem. The default should be manual registration by admins.

 

The Canadian government is preparing to give away Canadians’ digital lives—to U.S. police, to the Donald Trump administration, and possibly to foreign spy agencies.

Bill C-2, the so-called Strong Borders Act, is a sprawling surveillance bill with multiple privacy-invasive provisions. But the thrust is clear: it’s a roadmap to aligning Canadian surveillance with U.S. demands…

view more: next ›