i_am_not_a_robot

joined 1 year ago
[–] i_am_not_a_robot@discuss.tchncs.de 8 points 3 days ago (2 children)

It may or may not be a concern to you, but if you are hosting it from your home then people will be able to determine your IP and rough physical location.

If you're on American cable internet and expecting a lot of traffic, your upload speed may become a problem.

[–] i_am_not_a_robot@discuss.tchncs.de 1 points 5 days ago* (last edited 5 days ago) (1 children)

TI is overrated. Play Store has the HP calculator emulators Droid48 and Emu48, but they're unfortunately not on F-Droid.

Edit: link to source: https://github.com/dgis/emu48android

There used to be a respectable web 3.0 but now we just have web3 crypto grifters.

[–] i_am_not_a_robot@discuss.tchncs.de 3 points 1 month ago (1 children)

large companies who can afford the security infra to do those checks and store that data

There is no such company. This is just another way to ban "harmful" content. Verifying your identity and age to access restricted content is practically guaranteed to result in your identity being compromised within your lifetime.

[–] i_am_not_a_robot@discuss.tchncs.de 3 points 2 months ago (1 children)

Having a non-garbage domain provider can be a luxury. I used to work at a place where we were paying boatloads of money for certificates from Sectigo for internal services, and they were charging us extra per additional name and even more if we wanted a wildcard, even though it didn't cost them anything to include those options. Getting IT to set up the DNS records for Let's Encrypt DNS verification was never going to happen.

[–] i_am_not_a_robot@discuss.tchncs.de 12 points 2 months ago (1 children)

I'm pretty sure browsers stopped distinguishing EV certificates years ago.

[–] i_am_not_a_robot@discuss.tchncs.de 25 points 2 months ago (2 children)

Is it baffling? Live service games are all about extracting as much money from players as possible via loot boxes and battle passes. The best game is the game that makes the most money. Therefore, live services are the optimal type of game.

[–] i_am_not_a_robot@discuss.tchncs.de 6 points 2 months ago (1 children)

A large percentage of those hosts with SSH enabled are cloud machines because it's standard for cloud machines to be only accessible by SSH by default. I've never seen a serious security guide that says to set up a VPN and move SSH behind the VPN, although some cloud instances are inherently like this because they're on a virtual private network managed by the hosting provider for other reasons.

SSH is much simpler and more universal than a VPN. You can often use SSH port forwarding to access services without configuring a VPN. Recommending everyone to set up a VPN for everything makes networking and remote access much more complicated for new users.

[–] i_am_not_a_robot@discuss.tchncs.de 11 points 2 months ago (4 children)

Shodan reports that 35,780,216 hosts have SSH exposed to the internet.

Moving SSH to ports other than 22 is not security. The bots trying port 22 on random addresses with random passwords don't have a chance of getting in unless you're using password authentication with weak passwords or your SSH is very old.

SSH security updates are very infrequent and it takes practically no effort to keep SSH up to date. If you're using a stable distribution, just enable automatic security updates.

[–] i_am_not_a_robot@discuss.tchncs.de 21 points 2 months ago (15 children)

Having SSH open to the internet is normal. Don't use password authentication with weak passwords.

For me it's a combination of alerts being sent to the wrong areas and a disagreement about importance. I don't need an alert if it's hot outside, nor do I need an alert for every update about an earlier alert. People aren't turning off alerts because they don't know how to turn them on.

[–] i_am_not_a_robot@discuss.tchncs.de 5 points 2 months ago (1 children)
view more: next ›