• 0 Posts
  • 28 Comments
Joined 1 year ago
cake
Cake day: April 30th, 2024

help-circle

  • IP addresses are fairly public.

    In order to get that kind of infection there need to be a serious vulnerability. None of the services I expose have those kind of vulnerabilities, and I keep them updated.

    A Zero-day may be possible, but it can happen with any software.

    Any way, even if some of my services got infected that way, I have them all in docker containers. If they managed somehow to insert any malicious software it would have disappeared in the next restart of the container.

    And in order to have a software that breaks out of the container it would need to also have some sort of zero-day docker exploit. Two zero-days needed for accomplish that…

    Every expose software I have is running on a caddy reverse proxy. And caddy is the only authorized author on my firewall so it gets more difficult to try to run an unexpected malicious software through it.




  • daniskarma@lemmy.dbzer0.comtoSelfhosted@lemmy.worldSharing Jellyfin
    link
    fedilink
    English
    arrow-up
    9
    arrow-down
    1
    ·
    6 days ago

    I have had jellyfin exposed to the net for multiple years now.

    Countless bots probing everyday, some banned by my security measures some don’t. There have never been a breach. Not even close.

    To begin with, of you look at what this bots are doing most of them try to target vulnerabilities from older software. I have never even seen a bot targeting jellyfin at all. It’s vulnerabilities are not worth attacking, too complex to get it right and very little reward as what can mostly be done is to stream some content or messing around with someo database. No monetary gain. AFAIK there’s not a jellyfin vulnerability that would allow running anything on the host. Most vulnerabilities are related to unauthorized actions of the jellyfin API.

    Most bots, if not all, target other systems, mostly in search of outdated software with very bad vulnerabilities where they could really get some profit.


  • daniskarma@lemmy.dbzer0.comtoSelfhosted@lemmy.worldSharing Jellyfin
    link
    fedilink
    English
    arrow-up
    48
    arrow-down
    5
    ·
    edit-2
    7 days ago

    You can share jellyfin over the net.

    The security issues that tend to be quoted are less important than some people claim them to be.

    For instance the unauthorized streaming bug, often quoted as one of the worst jellyfin security issues, in order to work the attacker need to know the exact id of the item they want to stream, which is virtually impossible unless they are or have been an authorized client at some point.

    Just set it up with the typical bruteforce protections and you’ll be fine.







  • I don’t know fully what’s they are doing. But here’s my workflow with watchtower.

    I have a cron task that runs watchtower every day on monitor-mode and only-once one time a day. That creates a list on what containers can be uograded. They using shourrr (it’s already integrated with watchtower it’s just an environment variable to do this) I send myself a message to my phone informing me of what updates are available. If I see fit to upgrade everything I just run watchtower once without monitor mode to upgrade all. I have pendant to automate this last part in a way that I just answer to the bot that’s informing me of the updates and should apply the command without having me ssh into the server. But as for now I have to ssh and run a script I have at hand to launch the upgrade with watchtower.

    There are some problematic containers that I don’t want to upgrade this way. For those I have their compose files version locked and I upgrade them manually when I want.





  • With the aggravated issue of moderators being far less ““professional”” here than in Reddit. At least in some big reddit communities there was a big admin team that tried to keep things more or less professional (not that they would always achieved that but they tried). Here mod teams are very small and mods mostly just got their position by just being here first, so I have found out a lot of very biased moderation and mods just using mod tools and position of authority to defend their own particular opinions.

    If you are debating something with a moderator alt account, or with a moderator friend you are in for some unfairness going your way. At least that have been my experience trying to debate even very small deviations from a Community main political stance.




  • I take you are a mod, my app doesn’t show mods of communities for some reason.

    Just a fair and square question. As you quote the fallacy thing.

    And please be sincere. As it would be very important for my continuity in this community even in lemmy as a whole.

    Why my supposed fallacies are being judged here but not his? He made fallacies also. Are the fallacies on the question or it’s the opinion?

    Can anything be debated here? As in would you allow opinions that are different than yours on the slightest?

    Because at no point I defended any kind of racism, not institutionalized not anything. It would be irrational, as I’m clearly against racism, I consider racism something terrible thus why I get offended when not racist people get accused of being racist.

    You clearly agree with the other part. Are you giving me heat because of that? If so please I need a list of what can be said exactly in this community.

    Because I would defend in from of a judge with a cristaline conscience, that migration or border policies different from completely open borders are not racism. And that I don’t think the European Union have racist policies written in their law with the purpose of putting people down for their race. Quite the contrary I think the European Union have done wonders integrating races, and teaching everyone here not to be racist through incredible programs and policies with foreign countries (including the mentioned refugee programs) and forcing eu members to remove any racial law from their legislation.

    If even that sentence cannot be debated here, please let me know. And put it more clear in the rules to which political party do you need to be affiliated to be allowed to post here.

    Because calling the EPP or Renew Europe racist just because (and you say nothing about that) feels completely antieuropean. And I don’t even vote for those parties, btw (I don’t vote), but it hurts me very much when radicalization demonize normal people that may vote or belong to a party for whatever reason.

    That’s my two cents, from here do what you want to do.

    Have a good day.

    This will be my last contribution to this community at least from a while. I don’t think this particular moderation action was well done or contributive to the benefit of the community or Lemmy as a whole, sorry. If you don’t agree with me you could argue with me as a normal user, same as I have done with the other person, with arguments from both sides, each one giving our opinion, which are normal, either of us are defending anything bad, we just disagree on what consists a racist policy, or what European border and immigration policies should be better. I think both me and the other user (and you) agree on all humans being born equal with the same fundamental rights. But confronting a normal opinion with moderative actions from a moderator account is not great.

    And just some final though. I think it’s disheartening that more and more it feels like you need to have a very specific political affiliation to participate in Lemmy in general. You are free to look at my posts, here in c/europe and in many other communites, I think my political affiliation is very clear from what I write. And see what kind of policial ideas have a person that more and more feels uncomfortable here.

    I’m sorry if this comment read angry or heated. But you must understand that in this space you are the authority, and it’s not the same being confronted from equal to equal any difference of opinion we could have (that’s why we are here to read what other people have to say) than to be confronted by moderation. If from your heart you really think that this moderation was needed because I, and only I, broke the rules and not because your own opinions made you make this action so be it. But from my opinion the authority broke the neutrality needed for good moderation here.