Skip Navigation
InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)EX
Posts
1
Comments
106
Joined
2 yr. ago
  • I think this is zerobytes.monster, one of the reddit mirror instances.

    the post count fits and it also matches with the user count not significantly dropping.

    that instance has been using rather strict waf blocking rules from time to time that likely also affect the crawler for fediverse.observer.

  • with db migrations the database structure changes. it's not possible to do db schema migrations without downtime unless the application has been built with that in mind and the application is able to run with a partially upgraded schema.

  • you asked why it happens so often, I provided a possible explanation.

    just yesterday we had a similar case where a usb ethernet adapter wouldn't work on a locked device due to a similar issue, even if that one may be more logical.

    especially when you have to follow an outdated password policy where people have to change their passwords at regular intervals you'll have such cases more frequently than when they only need to set it once until a suspected compromise.

  • the token is completely tied to your account.

    you can access part of your account info/settings with that as well, a while back they added an extra password prompt to some of that.

    truly anonymous searches are simply impossible unfortunately. while they claim they're not logging any searches it's impossible to verify.

  • I'm indeed talking about spinning up full vps. with untrusted workloads I'd rather have the best isolation reasonably possible. effectively, this is similar to how Github hosted runners work. my gitlab is currently primarily working by spinning up Hetzner cloud vps on demand, but I've also used this with proxmox before.

    if I have very sensitive secrets accessible to my ci pipeline I want to minimize the risk of leakage through compromise of CI environments to a minimum.

  • I've been considering moving away from gitlab for a long time, but so far, as far as I know, it's still the only service that supports ephemeral self hosted runners. with gitlab it can utilize docker-machine to spin up vps on demand and ensure only a single job runs on each vps before it gets destroyed again.

  • you can't delete comments from modlog, except for admins purging then, and then there is a purge modlog entry. purging also only applies to the local instance. the reason that you don't see it in modlog is that banning a user while selecting to also remove their content is only going to put the ban in modlog currently, so the comment removal was never there in the first place.

  • Reddthat Announcements @reddthat.com
    example @reddthat.com

    Removal of some kbin.social communities

    Hello Reddthat,

    Similar to other Lemmy instances, we're facing significant amounts of spam originating from kbin.social users, mostly in kbin.social communities, or as kbin calls them, magazines.
    Unfortunately, there are currently significant issues with the moderation of this spam. While removal of spam in communities on other Lemmy instances (usually) federates to us and cleans it up, removal of spam in kbin magazines, such as those on kbin.social, is not currently properly federated to Lemmy instances.

    In the last couple days, we've received an increased number of reports of spam in kbin.social magazines, of which a good chunk had already been removed on kbin.social, but these removals never federated to us.
    While these reports are typically handled in a timely manner by our Reddthat Admin Team, as reports are also sent to the reporter's instance admins, we've done a more in-depth review of content in these kbin.social magazines.
    Just today, we've banned and removed content