IP addresses are fairly public.

In order to get that kind of infection there need to be a serious vulnerability. None of the services I expose have those kind of vulnerabilities, and I keep them updated.

A Zero-day may be possible, but it can happen with any software.

Any way, even if some of my services got infected that way, I have them all in docker containers. If they managed somehow to insert any malicious software it would have disappeared in the next restart of the container.

And in order to have a software that breaks out of the container it would need to also have some sort of zero-day docker exploit. Two zero-days needed for accomplish that…

Every expose software I have is running on a caddy reverse proxy. And caddy is the only authorized author on my firewall so it gets more difficult to try to run an unexpected malicious software through it.

Any software can have zero-day exploits for that matter.

I don’t think jellyfin vulnerabilities could lead to a zombified machine. At least I’ve not read about something like that happening.

Most Jellyfin issues I know are related to unauthorized API calls of the backend.

I have had jellyfin exposed to the net for multiple years now.

Countless bots probing everyday, some banned by my security measures some don’t. There have never been a breach. Not even close.

To begin with, of you look at what this bots are doing most of them try to target vulnerabilities from older software. I have never even seen a bot targeting jellyfin at all. It’s vulnerabilities are not worth attacking, too complex to get it right and very little reward as what can mostly be done is to stream some content or messing around with someo database. No monetary gain. AFAIK there’s not a jellyfin vulnerability that would allow running anything on the host. Most vulnerabilities are related to unauthorized actions of the jellyfin API.

Most bots, if not all, target other systems, mostly in search of outdated software with very bad vulnerabilities where they could really get some profit.

You can share jellyfin over the net.

The security issues that tend to be quoted are less important than some people claim them to be.

For instance the unauthorized streaming bug, often quoted as one of the worst jellyfin security issues, in order to work the attacker need to know the exact id of the item they want to stream, which is virtually impossible unless they are or have been an authorized client at some point.

Just set it up with the typical bruteforce protections and you’ll be fine.

I’ve heard someone comparing it to the famous rubber duck.

Not at all. I have my instance sitting on 100MG of RAM and 0% cpu usage. There’s only 3 users that barely use it, but there it is.

It scales by number of users.

It’s true that it’s a resource hog, due to being written in python (who the hell though that), but it all depends on usage.

I selfhost a matrix instance just for myself and my bots. And send myself notifications to the phone client element. I can even trigger a fake VoIP phone call for really important stuff.

Notifications come through as any other message app notification. And calls do the same.

In order to get all notifications and not destroy your phone battery I found out that you need to download the google play version as you need google services for notifications.

I doubt is satire as the project was truly linked with trans groups.

Probably they just count as experience things that are probably not truly experience or maybe there’s a lot that’s being untold there.

Just last week I was setting up a matrix server.

I considered conduwuit but I had a feeling this might happen. Happy to stick with Synapse. It’s just a shane that it’s written in freaking python.

I’ve been thinking for years. Maybe there’s a way to do a collaborative crawler and indexer. In a similar way on how collaborative science is done. And probably using p2p protocols.

Get a bunch of people together to create the perfect search engine in these dire times.

It’s an experiment for the Duncan Princicle!

I don’t know fully what’s they are doing. But here’s my workflow with watchtower.

I have a cron task that runs watchtower every day on monitor-mode and only-once one time a day. That creates a list on what containers can be uograded. They using shourrr (it’s already integrated with watchtower it’s just an environment variable to do this) I send myself a message to my phone informing me of what updates are available. If I see fit to upgrade everything I just run watchtower once without monitor mode to upgrade all. I have pendant to automate this last part in a way that I just answer to the bot that’s informing me of the updates and should apply the command without having me ssh into the server. But as for now I have to ssh and run a script I have at hand to launch the upgrade with watchtower.

There are some problematic containers that I don’t want to upgrade this way. For those I have their compose files version locked and I upgrade them manually when I want.

This. Except for a few projects that have given me headaches for an automatic update before (I’m looking at you Jellyfin). Those I have them locked to a version and only upgrade when I think it’s truly stable (spoiler: stable release was not stable) and when I know I will have time to fix things that may broke.

Then the moderator would ban you because the mod agrees with the other person. I have seen it happen. (Not to me luckily, but I’ve got a post deleted and the post insulting me was upvoted by the same mod who deleted my post).

And not fron small communities, some of the bigger here on Lemmy.

Moderation is a bit lacking. Which is understandable as few people want to invest time in moderating.

With the aggravated issue of moderators being far less ““professional”” here than in Reddit. At least in some big reddit communities there was a big admin team that tried to keep things more or less professional (not that they would always achieved that but they tried). Here mod teams are very small and mods mostly just got their position by just being here first, so I have found out a lot of very biased moderation and mods just using mod tools and position of authority to defend their own particular opinions.

If you are debating something with a moderator alt account, or with a moderator friend you are in for some unfairness going your way. At least that have been my experience trying to debate even very small deviations from a Community main political stance.

Also a lot of people do not consider they could be on the wrong or that other person can have a total different valid definition of what’s right. And just take this “I’m obviously on the right so I can be an as*****” approach.

I remember cheats playing cs 1.6

Cheaters have always been there.

I also remember that it was kind of fun sometimes?

I’ve never been a competitive person. So ranks mean nothing to me. So when a cheater was in the room it felt like a Boss in dark souls. Hard and unfair to beat, but when you did you felt the reward of hard work. I didn’t care about dying 100 times, I lived for killing that player just one time.

My ps1 controler have not gotten stick drift in… how long now? 30 years?

Is that a lost technology like in sci-fi books?

The thing is that I already have a server and a few Terabytes of unused storage. So that would not be an issue. As long as storage doesn’t en up adding that much. I know that the fediverse protocol likes to replicate storage among all servers involved in an interaction. Though I wonder if it would be possible to safely erase old data, specially if I’m just hosting it for myself. I need to investigate on that.

But for the other costs I already have a server running 24/7 on my house and several Tb of Storage. I already pay for that regardless as I use it for other things. Though ideally I would not want to allocate more than 500Gb for a one person instance, idk how reasonable would that be.

And I also need to investigate how are the normal federation politics with one person instances. If it is like trying to host an email server would be hell as you’ll get mark as spam by a lot of providers.

And now that I’m wondering things I wonder how feasible would it be to host very small instances on cheap devices like sbc or cheap mini-pc. Maybe aiming for thousands of instances with a few dozen people in each instead of a few dozen of instances with thousand of people in them.