• 0 Posts
  • 42 Comments
Joined 1 year ago
cake
Cake day: April 30th, 2024

help-circle
  • IP addresses are fairly public.

    In order to get that kind of infection there need to be a serious vulnerability. None of the services I expose have those kind of vulnerabilities, and I keep them updated.

    A Zero-day may be possible, but it can happen with any software.

    Any way, even if some of my services got infected that way, I have them all in docker containers. If they managed somehow to insert any malicious software it would have disappeared in the next restart of the container.

    And in order to have a software that breaks out of the container it would need to also have some sort of zero-day docker exploit. Two zero-days needed for accomplish that…

    Every expose software I have is running on a caddy reverse proxy. And caddy is the only authorized author on my firewall so it gets more difficult to try to run an unexpected malicious software through it.




  • daniskarma@lemmy.dbzer0.comtoSelfhosted@lemmy.worldSharing Jellyfin
    link
    fedilink
    English
    arrow-up
    9
    arrow-down
    1
    ·
    2 days ago

    I have had jellyfin exposed to the net for multiple years now.

    Countless bots probing everyday, some banned by my security measures some don’t. There have never been a breach. Not even close.

    To begin with, of you look at what this bots are doing most of them try to target vulnerabilities from older software. I have never even seen a bot targeting jellyfin at all. It’s vulnerabilities are not worth attacking, too complex to get it right and very little reward as what can mostly be done is to stream some content or messing around with someo database. No monetary gain. AFAIK there’s not a jellyfin vulnerability that would allow running anything on the host. Most vulnerabilities are related to unauthorized actions of the jellyfin API.

    Most bots, if not all, target other systems, mostly in search of outdated software with very bad vulnerabilities where they could really get some profit.


  • daniskarma@lemmy.dbzer0.comtoSelfhosted@lemmy.worldSharing Jellyfin
    link
    fedilink
    English
    arrow-up
    47
    arrow-down
    5
    ·
    edit-2
    3 days ago

    You can share jellyfin over the net.

    The security issues that tend to be quoted are less important than some people claim them to be.

    For instance the unauthorized streaming bug, often quoted as one of the worst jellyfin security issues, in order to work the attacker need to know the exact id of the item they want to stream, which is virtually impossible unless they are or have been an authorized client at some point.

    Just set it up with the typical bruteforce protections and you’ll be fine.







  • I don’t know fully what’s they are doing. But here’s my workflow with watchtower.

    I have a cron task that runs watchtower every day on monitor-mode and only-once one time a day. That creates a list on what containers can be uograded. They using shourrr (it’s already integrated with watchtower it’s just an environment variable to do this) I send myself a message to my phone informing me of what updates are available. If I see fit to upgrade everything I just run watchtower once without monitor mode to upgrade all. I have pendant to automate this last part in a way that I just answer to the bot that’s informing me of the updates and should apply the command without having me ssh into the server. But as for now I have to ssh and run a script I have at hand to launch the upgrade with watchtower.

    There are some problematic containers that I don’t want to upgrade this way. For those I have their compose files version locked and I upgrade them manually when I want.




  • I take you are a mod, my app doesn’t show mods of communities for some reason.

    Just a fair and square question. As you quote the fallacy thing.

    And please be sincere. As it would be very important for my continuity in this community even in lemmy as a whole.

    Why my supposed fallacies are being judged here but not his? He made fallacies also. Are the fallacies on the question or it’s the opinion?

    Can anything be debated here?

    Because at no point I defended any kind of racism, not institutionalized not anything. It would be irrational, as I’m clearly against racism, I consider racism something terrible thus why I get offended when not racist people get accused of being racist.

    You clearly agree with the other part. Are you giving me heat because of that? If so please I need a list of what can be said exactly in this community.

    Because I would defend in from of a judge with a cristaline conscience, that migration or border policies different from completely open borders are not racism. And that I don’t think the European Union have racist policies written in their law with the purpose of putting people down for their race. Quite the contrary I think the European Union have done wonders integrating races, and teaching everyone here not to be racist through incredible programs and policies with foreign countries (including the mentioned refugee programs) and forcing eu members to remove any racial law from their legislation.

    If even that sentence cannot be debated here, please let me know. And put it more clear in the rules to which political party do you need to be affiliated to be allowed to post here.

    Because calling the EPP or Renew Europe racist just because (and you say nothing about that) feels completely antieuropean. And I don’t even vote for those parties, btw (I don’t vote), but it hurts me very much when radicalization demonize normal people that may vote or belong to a party for whatever reason.

    That’s my two cents, from here do what you want to do.

    Have a good day. This will be my last contribution to this community at least from a while. I don’t think this particular moderation action was well done, sorry.



  • But you are saying. Because people who come in handmade boats drown in the sea we are racist. There is no logical correlation between those two issues.

    You just want to stamp a negative connotation label on us over that.

    The fact that we want to control who enters our countries does not make us racist. That’s just a fact, as it does not fit into the definition of racism. Race have nothing to do with it.

    Wanting to control immigration is not racism.

    Racisms is making policies to harm people of different colour (or race) living in our country. Our politics have nothing to so with race, but with border control. We don’t care of the colour of the skin, we just care that they are coming through an unregulated migrational path, that it’s actually pretty dangerous to them. We are not even actually trying to kill anybody.

    And it’s of maximum importance to considere the massive amount of immigrants of all races and colours that come to Europe by different migrational path and face not those issues. So it’s EVIDENT that the treatment to those who come on handmade boats are caused by HOW the come, and not by what their colour or race is.

    Are people of the exact same race coming by plane sinking in the sea by european policies? No, then race is not the cause.

    Also, sorry, but the voices of a few politicians of two countries about Ukrainian refugees does not make EUROPE.

    It’s also very important to differentiate the concepts of not supporting immigration, or wanting to have control over the borders to the concept of racism. As they have nothing to do with each other, once again racism here is just used as a punitive label, a fallacy of those you like so much, to avoid talking seriously about the pros and cons on different border and immigration policies.


  • So if we have no comparison on what would happen with white people coming by sea why would you assume is racism.

    I gave the counterexample you conveniently ignored that’s black people coming by other means or from other country facing no discrimination or way different integration issues.

    The life of a USA black person, a south American Black person and an African Black person is on average completely different in europe. So race is not considered here. It’s not a narrow racism definition, it’s no racism because race does not have any weight in the equation on how someone is valued or not in europe.

    If we where racism we would be doing the same to black americans and we are not. So the issue is different. The reason some people are treated differently is other, not race. That’s just evident because plenty of black people face no issues whatsoever. And plenty of black people face way different issues that those faced by africans who come by the Mediterranean.

    I live in a place where most black population is not African but American. And they have the same integration issues as white Americans, despite having a completely different skin color. Because those issues have different roots that race.

    This is not the USA or other countries where race it’s taken into account for how people are treated, and thus we could talk about racism. In USA there’s plenty of people now who where alive when racial laws where still in place, way different situation than in Europe, same rethorics could not apply.


  • I would and I will. But I have little hopes for a rational discussion.

    European are not racists. If white people would come by sea in the same conditions as african people come they would face the same fate. The prove to this argument have two evidences. Black people migrating from America does not face those issues. And white people immigrating from south America do face integration issues.

    Also while being both white Ukrainian migrants tend to face way different inclusion issues than Romanian immigrants.

    There are none racial laws whatsoever in europe and have not been for ages. This is not one of those countries that have actual racism written in the law of have had it until very recently.

    So it’s clear and evident that race or skin color is not of relevance for European people when they chose if they want to be welcoming to someone or not.

    And not wanting fully open borders does not make anyone racist or a extremist. Many would argue that open borders is actually an extremist political view. And the moderate approach is border control. Being completely closed borders the other extremist approach that is evidently not being implemented not even proposed, by any european government.

    Also by every definition of extremist right wing, we could not consider most european governments as such. As most of them fall under one of three groups. S&D moderate left, EPP moderate right and Renew Europe, centre-right. Most governments are lead from a prime minister of one of those groups. None of which is extreme right. There are very few european countries actually lead by extremists.