• 0 Posts
  • 79 Comments
Joined 2 years ago
cake
Cake day: July 2nd, 2023

help-circle

  • You got two options. Both suck.

    1. Call support. Have fun. I’d rather rip out my eyeballs in this scenario because you’re not a paying customer. You will get the shit-tier service, will likely be hung up on, and reexplain the situation to 3+ individuals over the course of 4 hours and ultimately get nothing done.

    2. Resubscribe. Finish the job. The odds of your accounts db being wiped are kinda slim. Sucks because you do what you explicitly sought to avoid: pay Microsoft.




  • I think the bulk of users are running discarded junk and raspberry pis.

    That was me, I built a ~$5k rig and now some of what I’m doing is just nonsense of a typical self hoster, so the point is somewhat valid, but even those like me mostly started out with discarded junk and raspberry pis.

    Docker used to scare me until I tackled a project that required me to use it. Then I realized I learned it without knowing I’d learned it.






  • foggy@lemmy.worldtoSelfhosted@lemmy.worldAutograding tool
    link
    fedilink
    English
    arrow-up
    3
    ·
    edit-2
    1 month ago

    I mean just for the love of God don’t spin up something on your company’s infrastructure that accepts file uploads.

    Just don’t.

    If you’re reading this and going “well, it’s just internal,” or “well, it doesn’t do much it just accepts this exact file type.” My god. Ask your CISA. And if they’re okay with it, cool. That’s on them.

    Unless your whole business is transferring files, don’t. And even then… Don’t.

    And if you’re still confused, the answer is to use another company’s infrastructure for this. Use Azure. Use AWS. Use Google cloud or even g suites. Don’t accept that liability. Let the trillionaires do it.


  • foggy@lemmy.worldtoSelfhosted@lemmy.worldAutograding tool
    link
    fedilink
    English
    arrow-up
    17
    arrow-down
    2
    ·
    edit-2
    1 month ago

    Why give your students a way to get RCE on your institutions servers through anything less than perfect file upload implementation.

    For a .tar? I wish you the best…

    Instead of that, simplify.

    Use unique salts for each assignment per student.

    Align hashes with those salts to check the outcome for each students assignment.

    Literally have them send you a CTF style sha256 string.

    Do it step by step where each step doesn’t depend on the next, grade as a percentage of flags accurately procured.


  • For getting your stuff available over the internet, y I recommend a secure tunnel with wire guard between your vps and servers running the services.

    Make your vps an authentication portal using stuff like Authelia and Fail2ban.

    If you’re really needing out, get ELK stood up for free and get agents on your containers/services to keep visibility into any potential… Anything



  • Show it.

    Take for example the case where person A has blocked person B.

    Person C comments. Person B responds.

    New thread, same post, person C comments about how some people think like person B, and quote them.

    As is the current case, person A can see this quoted material. It’s just text. It’s not in any programmatic way tied to the person B account.

    We don’t need to change this just because it’s a child comment of person B.



  • Been doing this with a warning system. I tag shitty people and block them if I see a person who is tagged acting shitty.

    2 years in, no regrets.

    I do wish Lemmy would fix the blocking system though. If someone who I’ve blocked responds to me, I don’t see it. Fair enough, but I also don’t see what people who respond to that say. I feel like it should just show the username as [blocked] and the content as [hidden] with an option for me to show that content/username, while keeping the rest of the child content fully visible.



  • If you don’t have a specific goal, here are some ideas.

    Build a NAS.

    Use a bunch of small PCs or pis, build a CA, a DNS server. Make an db server and an app server.

    Get shit running on your network.

    Suit them all up with ELK stack.

    Misbehave on your own network. Go find evidence for your misbehaving.

    DoS yourself.

    Without goals it’s tough to give ideas beyond general like this.