UselesslyBrisk

joined 2 years ago
[–] UselesslyBrisk@infosec.pub -4 points 2 years ago (1 children)

He had a dry run with the attempt on his life. He knew nothing would come of it. That the rest of the world would do nothing.

Hell Russia has since pushed the boundaries much further with no recourse.

I can respect that he’s principled and still recognize the total lack of forethought in the move.

[–] UselesslyBrisk@infosec.pub 28 points 2 years ago (2 children)

Frankly i find it inconsiderate to the social contract to go out on holidays, and sometimes around them.

Its frankly why i always found Black Friday and the "scope creep" of this festival of consumerism partially so repulsive. I mean its repulsive on its own just in the way people act, but doubly so in that it runs right through a national holiday.

[–] UselesslyBrisk@infosec.pub 3 points 2 years ago (3 children)

I mean there’s precedence. Avian bird flus have been known to infect humans.

[–] UselesslyBrisk@infosec.pub 4 points 2 years ago

I was going to say “are we in a simulation” but this would work too.

[–] UselesslyBrisk@infosec.pub 2 points 2 years ago (1 children)

You have to go and search out communities to federate with. This is done at the user level . Even now there are a ton of servers so pulling info on everything would probably overload servers as is.

Some of the larger instances are spinning up dedicated containers to handle user traffic and others that do just federation. Which makes sense.

It’s why I like my account here. The folks here are probably more infosec minded and thus, searching all may/has shown me communities I haven’t seen quite yet searching fediverse.

Others may have similar.

But TL:DR: no. You instance will only sync what users have searched. So some of the larger instances may have interesting things in “all” that you may not see.

[–] UselesslyBrisk@infosec.pub 2 points 2 years ago (3 children)

It’s a mixed bag

I use my own instance 95% of the time. But there are times where I like to use the “All” filter instead of local or subscribed and can find some interesting content I haven specifically sought out. On your own personal instance subscribed and all are basically the same thing.

So I still use accounts, like this one, from before when I built my own. But I am a control freak and like to be in the know as to when I upgrade and or backup. So my own instance is nice for that.

[–] UselesslyBrisk@infosec.pub 3 points 2 years ago

Subscribe to the communities. They aren’t clones. Just different instances. There’s a few links on how to subscribe.

My reccomendation is to go here, hit the home icon and type your instance name. Then search for instances that interest you and join.

https://lemmyverse.net/

[–] UselesslyBrisk@infosec.pub 1 points 2 years ago* (last edited 2 years ago)

Correct. Connect to for example connect to lemmy.ml and pull their communities so it shows in your communities page locally. Dont have to sync the posts etc. Just the base stats (subs, post, comments. Basically exactly what this is doing. https://lemmyverse.net/communities

note: I hadnt seen that page until after my comment... But im getting a lot of 404's on specific communities, so i have to put in their ! name in search...spam that, click to open the community and subscribe.

[–] UselesslyBrisk@infosec.pub 1 points 2 years ago* (last edited 2 years ago)

that would be perfect.

WIth Debian I would install UFW for a firewall. Set SSH to whatever your home IP is. You can always use the Linode SSH console for external access.

UFW is easy to configure and just translates iptables.

sudo ufw allow from any to any port 80 proto tcp
sudo ufw allow from any to any port 443 proto tcp
sudo ufw allow from HOMEIP to any port 22 tcp

If you want leave SSH open. Then i would probably only do Key based auth in /etc/ssh/sshd_config

you also want to edit that file (sshd_config) to disable root access once setup. I often turn on the following

LoginGraceTime 2m
PermitRootLogin no
StrictModes yes
MaxAuthTries 6
MaxSessions 10
AllowGroups somegroupname

then create a user and a group and add the user to the group. This ensures only that user has SSH access.

sudo adduser someusername
sudo addgroup somegroupname 
sudo usermod -aG somegroupname someusername

You can also use visudo to edit sudoers. The first like will require a password. If you use the second line, you can sudo without a password. I would only do the latter if you only use key-based auth though.


someuser   ALL=(ALL:ALL) ALL
someuser ALL=(ALL) NOPASSWD: ALL

I also edit /etc/hostname to my server name. Update and reboot. From there run through ansible instructions and make edits as necessary.

[–] UselesslyBrisk@infosec.pub 1 points 2 years ago* (last edited 2 years ago) (2 children)

Yeah how familiar are you with linux?

You dont run the ansible stuff on the instance itself. You do it from your personal machine or something with ansible installed.

Though I guess in theory you could run it on itself if you dont have another linux box, or something with ansible installed. https://www.middlewareinventory.com/blog/run-ansible-playbook-locally/

But I am happy to walk you though the basics of setting up a securing the box.

[–] UselesslyBrisk@infosec.pub 1 points 2 years ago* (last edited 2 years ago) (4 children)

Yes the ansible config worked fine for me. I worked for days to get an kbin instance up. Ansible worked first go.

I have yet to get email working but otherwise its solid. Linode will block email btw if you account is new (and frankly may be blocking mine now). You just have to put in a case and justify and it should be fine. My account should be old enough to be exempt but I will likely do it anyhow. Their support is pretty good.

Getting federation crawled and communities added is a bit slow. Mostly because the other instances are a bit slow.

A few pointers if you havent done admin yet.

  1. Put nothing in the federation allow list unless you want to go whitelist only. Over time as other instances hit yours and you search others, the linked list of instances will grow. Just use the blocklist if you want to block certain instances. I havent found a good way to block the growing number of instances in case they have some illegal content like CSAM. So...i may just go whitelist anyhow

  2. Searching for instances seems to be CPU heavy on mine. Its not a problem though. You just cant simply plug in a URL of a community in another instance if you havent linked. You will get a 404 if you do. So you have to go to search, looking for that community by hitting search a few times until it shows up, then you can join and it will start crawling

  3. I have no idea what "Private instance" does other than i believe it will keep your instance form starting in the future if you have it checked AND federation turned on. I saw some logs in dockers startup when i did it but nothing in the UI.,

view more: ‹ prev next ›