• 0 Posts
  • 137 Comments
Joined 2 years ago
cake
Cake day: July 2nd, 2023

help-circle

  • foggy@lemmy.worldtoSelfhosted@lemmy.worldAutograding tool
    link
    fedilink
    English
    arrow-up
    3
    ·
    edit-2
    10 days ago

    I mean just for the love of God don’t spin up something on your company’s infrastructure that accepts file uploads.

    Just don’t.

    If you’re reading this and going “well, it’s just internal,” or “well, it doesn’t do much it just accepts this exact file type.” My god. Ask your CISA. And if they’re okay with it, cool. That’s on them.

    Unless your while business is transferring files, don’t.

    And if you’re still confused, the answer is to use another company’s infrastructure for this. Use Azure. Use AWS. Use Google cloud or even g suites. Don’t accept that liability. Let the trillionaires do it.


  • foggy@lemmy.worldtoSelfhosted@lemmy.worldAutograding tool
    link
    fedilink
    English
    arrow-up
    17
    arrow-down
    2
    ·
    edit-2
    10 days ago

    Why give your students a way to get RCE on your institutions servers through anything less than perfect file upload implementation.

    For a .tar? I wish you the best…

    Instead of that, simplify.

    Use unique salts for each assignment per student.

    Align hashes with those salts to check the outcome for each students assignment.

    Literally have them send you a CTF style sha256 string.

    Do it step by step where each step doesn’t depend on the next, grade as a percentage of flags accurately procured.


  • For getting your stuff available over the internet, y I recommend a secure tunnel with wire guard between your vps and servers running the services.

    Make your vps an authentication portal using stuff like Authelia and Fail2ban.

    If you’re really needing out, get ELK stood up for free and get agents on your containers/services to keep visibility into any potential… Anything



  • Show it.

    Take for example the case where person A has blocked person B.

    Person C comments. Person B responds.

    New thread, same post, person C comments about how some people think like person B, and quote them.

    As is the current case, person A can see this quoted material. It’s just text. It’s not in any programmatic way tied to the person B account.

    We don’t need to change this just because it’s a child comment of person B.



  • Been doing this with a warning system. I tag shitty people and block them if I see a person who is tagged acting shitty.

    2 years in, no regrets.

    I do wish Lemmy would fix the blocking system though. If someone who I’ve blocked responds to me, I don’t see it. Fair enough, but I also don’t see what people who respond to that say. I feel like it should just show the username as [blocked] and the content as [hidden] with an option for me to show that content/username, while keeping the rest of the child content fully visible.



  • If you don’t have a specific goal, here are some ideas.

    Build a NAS.

    Use a bunch of small PCs or pis, build a CA, a DNS server. Make an db server and an app server.

    Get shit running on your network.

    Suit them all up with ELK stack.

    Misbehave on your own network. Go find evidence for your misbehaving.

    DoS yourself.

    Without goals it’s tough to give ideas beyond general like this.