I got a bunch of them : 104.23.166.79 , 141.101.76.149 , 108.162.238.148 (this one gave me waild-fedi-reach with an unreachable URL as its user agent, and hit legit paths on my lemmy), 104.23.170.65 , 172.71.182.22 , 104.23.172.96 , 172.71.182.234. It’s only 2 hits/day, but this seems weird. What’s weird as well is that all it does is keep trying to hit /wp-content/plugins/woocommerce/readme.txt on the same couple of subdomains (except for that one waild-fedi-reach user agent)

Yeah, I could see a credential stealer being smuggled into an alternative frontend…

It also made my browser freeze for a moment when I first found and loaded his page before I blocked all JS from his domain. Not stealthy at all… Many nerd (like most of us lemmy users are) will instantly open devtools when a random page that’s supposed to be just text freezes the browser for a second.

Like, c’mon man, setInterval with even 10 ms of delay would have made the attack both stealthier by not insta-freezing the brower on load, and more efficient by getting way more than 2000 request out of each reader…

Also, their website seems to be down now :)

I did not follow this drama, and I don’t know about this list everyone is mentioning. Is this something that hides specific users posts and comments from the Tesseract UI ?

“Apparently only three people who aren’t me actually want a place that’s not just a circle-jerk of rage and hate.”

I think this is the best part of their message

I’m in France timezone so hopefully we can find a time of the day that works for both of us, but feel free to DM me here or on Matrix (@pcouy:matrix.pierre-couy.fr)

I think your post is missing a link

I thought funkwhale is dead

Edit: last time I checked, the funkwhale.audio website was offline and I could not find a maintained Git repo, but now the site is online and the Git repo has had recent updates. I don’t know what happened

I don’t know about other homeserver implementations but synapse kinda sucks. It used to randomly eat 100% of 1 or 2 CPU cores (including the database) until I tracked it down to 3 rooms having a messed up state which caused costly SQL queries. I removed the rooms from my server (using a third party admin panel because there’s no proper admin GUI built in, the documentation just mentions curl commands to hit the admin API, with placeholders to manually replace). It has been fine since I did it, but I’m the only user on my server. And I expect other issues to come up at any time…

It also eats a lot of storage, mostly the database. It grew very large quickly, but it’s more stable now

I had one such case recently, turned out it was due to a faulty SATA (data) cable. Once you find which drive is clicking, try plugging it with a new cable before declaring it dead.

dmesg output may contain some useful error messages. If you find errors related to I/O, block devices, SCSI or SATA, you should include them in your post

Someone registering the domain would be able to receive any email sent to any address under this domain, including password resets.

https://inti.io/p/when-privacy-expires-how-i-got-access

There are a few things I don’t like about this scoring system :

• Why is there a “Top Provider Content Share” metric if its gonna score the same as the “Top Provider User Share” every time ?
• Why is the Top Provider Content Share not higher than the user share ? For instance, emails usually have at least one sender and one recipient, making it twice as likely that at least one of them is using gmail. If an email has 10 recipients across 10 different providers, each provider has a copy of the data
• Why is ease of hosting a mail server rated so well ? How is “leveraging email hosting services” decentralized in any way ?
• Why are we using a random repo created a few hours ago by a random github user as a reference ?

If you are interested in web technologies, you can turn your python program into a local API using something like Flask, then make a web interface using HTML/JS.

Alternatively, if your databases are on a filesystem that supports snapshots (LVM, btrfs or ZFS for instance), you can make a snapshot of the filesystem, mount the snapshot and backup thame database from it. This will ensure the backup is consistent with itself (the backed up directory was not written to between the beginning and the end of the backup)

Enabling multi DC redundancy is really easy though. The other providers you mentioned may have it by default, but they’re also a lot more expensive.

I love that they let me pick my own redundancy strategy, without forcing me to pay for theirs

ENS stands for Ethereum Name Service

I’m personally using Docker MailServer. It’s been working great for over a year now, but mailu seems to have some interesting features (I’m especially interested in the admin panel)

You’re probably behind a CGNAT, check out the other comments

Glad I could help :)

Your ISP might make you go through another layer of NAT. Can you find the WAN IP address of your router and compare it to your public IP address from a website such as ipinfo.io ?

If they do not match, you’re probably out of luck and will need to forward your port from an actually public IP in order to achieve what you want

More details : CGNAT (Carrier Grade Network Address Translation) is basically a second router between your router and the public internet. This second router is configured in the same way as your personal one, the main difference being that your ISP fully manages it. From the viewpoint of this second router, your WAN IP is a private IP, and you share one actual public IP with several other customers (the same way all devices on you LAN share one single WAN IP)

Performing port forwarding from the public internet to your LAN, when behind a CGNAT, would require you to be able to configure a forwarding rule in the ISP’s NAT, which you usually cannot do.