Bit-breaker working in cybersecurity/IT. Only languages I know are English and Programming ones.

Sometimes I write things about technology.


If I told you the SHA256 for this sentence starts with 'c, 5, four, a, and a', would you believe me?

  • 2 Posts
  • 21 Comments
Joined 3 years ago
cake
Cake day: March 12th, 2022

help-circle









  • Yet this comes across as criticizing their project for what they’ve always said it was, while using said project to do so. Just a bit boggling.

    No I’m criticising the Developers complaint that there’s only a few active developers for Lemmy, and the rest of you freeloaders don’t contribute and code.

    The number of people who understand Rust, can code in it, know of Lemmy and want to contribute is very few. There would be More developers contributing to Lemmy if it weren’t written in Rust.






  • Practice standard server security.

    • Disable all inbound ports in the firewall except for those you absolutely need (like port 80/TCP, port 443/TCP, sshport/TCP, DENY all other inbound)
    • Use the principle of least privilege. Don’t run your docker containers or web server as the root user. Make a new user, give it only the permissions needed in order to run the service definitely not sudo group. Set a strong password for those users, and disable remote/SSH logins for them
    • For SSH, use public key authentication, disable password login afterward
    • Instead of fail2ban, I like and would recommend Crowdsec. Needs some fiddling for Lemmy though, due to rate limits and federation