• 0 Posts
  • 22 Comments
Joined 1 year ago
cake
Cake day: July 1st, 2023

help-circle

  • A first step is RBL intergration, a shared blocklist of spam instances that subscribed instances would use to blackhole spam users/traffic/instances. These are used ubiquitously in email spam systems, so there is a precedent in federation systems for it working. We need to stand up an RBL, and then mod Lemmys federation system to work automatically based on the community blocklist.

    It does mean that poorly admined instances will get blackholed, breaking their federation, but that’s the cost of a healthy network.


  • Simple to use NAS software. Has a unique raid model that allows adding as few or as many discs as you like of whatever size. You can start with 3 and add 1, 2 or more to the array, no issues. The parity model also lets you add as many parity discs as you like, as long as they are the same size as the largest disk.

    Had early docker support as well, so it’s easy to spin up and integrate docker apps on the same server.

    Lastly, they used to sell an excellent 8 bay standalone case. Think its been some years since they did.












  • I think it would be pretty easy to sort in your 1+2+3 case. Let users natively ban instances.

    Say you hate instance 3. If you go into the 1+2+3 thread, you will only be able to see or interact with 1+2 comments, as all others wont even load for you.

    The tricky part is if 3 users can see or interact with your comments. It might be the case that you literally just wont see anything downthread if one of them replies to you.


  • How to properly do sysadmin 101 for a homelab:

    Backup and test restore your shit. Move backups somewhere they wont be destroyed if the primary is.

    Secure your shit. Yes, its annoying. Yes, do it anyway. MFA, good unique passwords in a vault, ssh keys, cert bsded auth, firewalls, crowdsec running. If possible, expose nothing directly to the internet. Use a vpn like wireguard to connect to your home instead. It has clients for everything like your phone, laptops/etc.

    Those 2 things will put you head and heels above professional sysadmins. If you really sort them out, start applying for jobs. Seriously.





  • You can game verification pretty easily as a spammer. Spin up an instance, mark accounts as “verified” in the DB with a script and a junk email address. As lemmy stands now, they should show up as “verified” on other instances.

    Hell, you could do it on instances you dont run with your own mailserver. Use that to autoclick any registered emails that come into it with some coding. With relay services like mozilla relay or paid “10minutemail” throwaway style accounts, you could randomize the email address too, so even shared lists of spammers between servers wouldnt catch it. Its more work, but doable.

    Random admins means random skill and attention paid to security in the face of dedicated attackers. Defedeation is necessary to counteract this.