▲ 851 ▼ Welcome to 2025 (content.federation.network) submitted 11 months ago by daniel@federation.network to c/memes@lemmy.world 82 comments fedilink hide all child comments Welcome to 2025 @memes@lemmy.world
[–] daniel@federation.network [S] 30 points 11 months ago (2 children) @DaPorkchop_@lemmy.ml @memes@lemmy.world Is that an actual issue or a hypothetical one? I've never had an attack in 10 years of publicly hosting stuff. permalink fedilink source parent hideshow 4 child comments replies: [–] purplemonkeymad@programming.dev 19 points 11 months ago (1 child) As someone else who used to host via an open port, you get random connections all the time. Almost constantly and the request paths make it obvious they are scanning for vulnerabilities. Via cloud flare the number of those requests is much lower, as they have to know at least the DNS to do so, (and can't guess it from a presented SSL cert.) permalink fedilink source parent hideshow 2 child comments replies: [–] sobchak@programming.dev 12 points 11 months ago Yeah, I see random https and other connections all the time blindly scanning for vulnerabilities. Not enough to cause any real problems though. One time I publicly exposed redis or rabbitmq (can't remember which) and didn't set a password, so someone set a password for me :). That's about the worst that's happened to me. permalink fedilink source parent [–] DaPorkchop_@lemmy.ml 5 points 11 months ago (2 children) It's the reason I set up cloudflare in the first place, so yeah. I was getting SYN flood-ed to the point that my router would just crash almost immediately, and after rebooting it the attack would resume after a minute or two. permalink fedilink source parent hideshow 4 child comments replies: [–] daniel@federation.network [S] 7 points 11 months ago (1 child) @DaPorkchop_@lemmy.ml @memes@lemmy.world Hm weird, I don't see why they would spend their resources attacking random people without any kind of demand. Even at work I've never seen one happening. I still believe Cloudflare has most of its customers because of fearmongering tbh. permalink fedilink source parent hideshow 2 child comments replies: [–] Alaknar@sopuli.xyz 7 points 11 months ago (1 child) It's a bit like saying "having a password on your account is fearmongering, why would anyone try to access your data". It's only fearmongering until you get attacked, and it's already too late when you do. Better to be proactive. permalink fedilink source parent hideshow 2 child comments replies: [–] daniel@federation.network [S] 6 points 11 months ago (1 child) @Alaknar@sopuli.xyz @memes@lemmy.world Being proactive doesn't mean you have to hide your personal service behind a billion dollar company. That is precisely the kind of overreaction triggered by fearmongering. If you don't know how to secure access points or harden configurations, no service will be able to do it for you as if by magic. Not to mention your responsibility towards your users, who may not want to be tracked by a third-party company without their knowledge every time they visit your site (or half of the internet by now). permalink fedilink source parent hideshow 2 child comments replies: [–] Alaknar@sopuli.xyz 1 point 11 months ago If you don’t know how to secure access points or harden configurations, no service will be able to do it for you as if by magic That's the point. Cloudflare does this as if by magic. Not to mention your responsibility towards your users, who may not want to be tracked by a third-party company Cloudflare doesn't track your users. As a sidenote - am I reading you correctly? Your main issue with Cloudflare is "they're large"? Like, if they were "two dudes in a basement" and provided the same quality product as they do now, you'd be happy to use their service? permalink fedilink source parent [–] pulsewidth@lemmy.world 6 points 11 months ago (1 child) Get a router that has flood protection? This is like.. Extremely basic network protection. OpenWRT has had configurable syn-flood protection (enabled by default) since like 2010. permalink fedilink source parent hideshow 2 child comments replies: [–] DaPorkchop_@lemmy.ml 3 points 11 months ago Even if the SYN packets were being ignored, the connection would still be unusable if there's enough incoming traffic for most legitimate packets to get dropped. And as mentioned in other comments, the router in question is a shitty ISP router which can't be replaced (although I do have a much fancier router with OpenWRT running behind that). permalink fedilink source parent
[–] purplemonkeymad@programming.dev 19 points 11 months ago (1 child) As someone else who used to host via an open port, you get random connections all the time. Almost constantly and the request paths make it obvious they are scanning for vulnerabilities. Via cloud flare the number of those requests is much lower, as they have to know at least the DNS to do so, (and can't guess it from a presented SSL cert.) permalink fedilink source parent hideshow 2 child comments replies: [–] sobchak@programming.dev 12 points 11 months ago Yeah, I see random https and other connections all the time blindly scanning for vulnerabilities. Not enough to cause any real problems though. One time I publicly exposed redis or rabbitmq (can't remember which) and didn't set a password, so someone set a password for me :). That's about the worst that's happened to me. permalink fedilink source parent
[–] sobchak@programming.dev 12 points 11 months ago Yeah, I see random https and other connections all the time blindly scanning for vulnerabilities. Not enough to cause any real problems though. One time I publicly exposed redis or rabbitmq (can't remember which) and didn't set a password, so someone set a password for me :). That's about the worst that's happened to me. permalink fedilink source parent
[–] DaPorkchop_@lemmy.ml 5 points 11 months ago (2 children) It's the reason I set up cloudflare in the first place, so yeah. I was getting SYN flood-ed to the point that my router would just crash almost immediately, and after rebooting it the attack would resume after a minute or two. permalink fedilink source parent hideshow 4 child comments replies: [–] daniel@federation.network [S] 7 points 11 months ago (1 child) @DaPorkchop_@lemmy.ml @memes@lemmy.world Hm weird, I don't see why they would spend their resources attacking random people without any kind of demand. Even at work I've never seen one happening. I still believe Cloudflare has most of its customers because of fearmongering tbh. permalink fedilink source parent hideshow 2 child comments replies: [–] Alaknar@sopuli.xyz 7 points 11 months ago (1 child) It's a bit like saying "having a password on your account is fearmongering, why would anyone try to access your data". It's only fearmongering until you get attacked, and it's already too late when you do. Better to be proactive. permalink fedilink source parent hideshow 2 child comments replies: [–] daniel@federation.network [S] 6 points 11 months ago (1 child) @Alaknar@sopuli.xyz @memes@lemmy.world Being proactive doesn't mean you have to hide your personal service behind a billion dollar company. That is precisely the kind of overreaction triggered by fearmongering. If you don't know how to secure access points or harden configurations, no service will be able to do it for you as if by magic. Not to mention your responsibility towards your users, who may not want to be tracked by a third-party company without their knowledge every time they visit your site (or half of the internet by now). permalink fedilink source parent hideshow 2 child comments replies: [–] Alaknar@sopuli.xyz 1 point 11 months ago If you don’t know how to secure access points or harden configurations, no service will be able to do it for you as if by magic That's the point. Cloudflare does this as if by magic. Not to mention your responsibility towards your users, who may not want to be tracked by a third-party company Cloudflare doesn't track your users. As a sidenote - am I reading you correctly? Your main issue with Cloudflare is "they're large"? Like, if they were "two dudes in a basement" and provided the same quality product as they do now, you'd be happy to use their service? permalink fedilink source parent [–] pulsewidth@lemmy.world 6 points 11 months ago (1 child) Get a router that has flood protection? This is like.. Extremely basic network protection. OpenWRT has had configurable syn-flood protection (enabled by default) since like 2010. permalink fedilink source parent hideshow 2 child comments replies: [–] DaPorkchop_@lemmy.ml 3 points 11 months ago Even if the SYN packets were being ignored, the connection would still be unusable if there's enough incoming traffic for most legitimate packets to get dropped. And as mentioned in other comments, the router in question is a shitty ISP router which can't be replaced (although I do have a much fancier router with OpenWRT running behind that). permalink fedilink source parent
[–] daniel@federation.network [S] 7 points 11 months ago (1 child) @DaPorkchop_@lemmy.ml @memes@lemmy.world Hm weird, I don't see why they would spend their resources attacking random people without any kind of demand. Even at work I've never seen one happening. I still believe Cloudflare has most of its customers because of fearmongering tbh. permalink fedilink source parent hideshow 2 child comments replies: [–] Alaknar@sopuli.xyz 7 points 11 months ago (1 child) It's a bit like saying "having a password on your account is fearmongering, why would anyone try to access your data". It's only fearmongering until you get attacked, and it's already too late when you do. Better to be proactive. permalink fedilink source parent hideshow 2 child comments replies: [–] daniel@federation.network [S] 6 points 11 months ago (1 child) @Alaknar@sopuli.xyz @memes@lemmy.world Being proactive doesn't mean you have to hide your personal service behind a billion dollar company. That is precisely the kind of overreaction triggered by fearmongering. If you don't know how to secure access points or harden configurations, no service will be able to do it for you as if by magic. Not to mention your responsibility towards your users, who may not want to be tracked by a third-party company without their knowledge every time they visit your site (or half of the internet by now). permalink fedilink source parent hideshow 2 child comments replies: [–] Alaknar@sopuli.xyz 1 point 11 months ago If you don’t know how to secure access points or harden configurations, no service will be able to do it for you as if by magic That's the point. Cloudflare does this as if by magic. Not to mention your responsibility towards your users, who may not want to be tracked by a third-party company Cloudflare doesn't track your users. As a sidenote - am I reading you correctly? Your main issue with Cloudflare is "they're large"? Like, if they were "two dudes in a basement" and provided the same quality product as they do now, you'd be happy to use their service? permalink fedilink source parent
[–] Alaknar@sopuli.xyz 7 points 11 months ago (1 child) It's a bit like saying "having a password on your account is fearmongering, why would anyone try to access your data". It's only fearmongering until you get attacked, and it's already too late when you do. Better to be proactive. permalink fedilink source parent hideshow 2 child comments replies: [–] daniel@federation.network [S] 6 points 11 months ago (1 child) @Alaknar@sopuli.xyz @memes@lemmy.world Being proactive doesn't mean you have to hide your personal service behind a billion dollar company. That is precisely the kind of overreaction triggered by fearmongering. If you don't know how to secure access points or harden configurations, no service will be able to do it for you as if by magic. Not to mention your responsibility towards your users, who may not want to be tracked by a third-party company without their knowledge every time they visit your site (or half of the internet by now). permalink fedilink source parent hideshow 2 child comments replies: [–] Alaknar@sopuli.xyz 1 point 11 months ago If you don’t know how to secure access points or harden configurations, no service will be able to do it for you as if by magic That's the point. Cloudflare does this as if by magic. Not to mention your responsibility towards your users, who may not want to be tracked by a third-party company Cloudflare doesn't track your users. As a sidenote - am I reading you correctly? Your main issue with Cloudflare is "they're large"? Like, if they were "two dudes in a basement" and provided the same quality product as they do now, you'd be happy to use their service? permalink fedilink source parent
[–] daniel@federation.network [S] 6 points 11 months ago (1 child) @Alaknar@sopuli.xyz @memes@lemmy.world Being proactive doesn't mean you have to hide your personal service behind a billion dollar company. That is precisely the kind of overreaction triggered by fearmongering. If you don't know how to secure access points or harden configurations, no service will be able to do it for you as if by magic. Not to mention your responsibility towards your users, who may not want to be tracked by a third-party company without their knowledge every time they visit your site (or half of the internet by now). permalink fedilink source parent hideshow 2 child comments replies: [–] Alaknar@sopuli.xyz 1 point 11 months ago If you don’t know how to secure access points or harden configurations, no service will be able to do it for you as if by magic That's the point. Cloudflare does this as if by magic. Not to mention your responsibility towards your users, who may not want to be tracked by a third-party company Cloudflare doesn't track your users. As a sidenote - am I reading you correctly? Your main issue with Cloudflare is "they're large"? Like, if they were "two dudes in a basement" and provided the same quality product as they do now, you'd be happy to use their service? permalink fedilink source parent
[–] Alaknar@sopuli.xyz 1 point 11 months ago If you don’t know how to secure access points or harden configurations, no service will be able to do it for you as if by magic That's the point. Cloudflare does this as if by magic. Not to mention your responsibility towards your users, who may not want to be tracked by a third-party company Cloudflare doesn't track your users. As a sidenote - am I reading you correctly? Your main issue with Cloudflare is "they're large"? Like, if they were "two dudes in a basement" and provided the same quality product as they do now, you'd be happy to use their service? permalink fedilink source parent
[–] pulsewidth@lemmy.world 6 points 11 months ago (1 child) Get a router that has flood protection? This is like.. Extremely basic network protection. OpenWRT has had configurable syn-flood protection (enabled by default) since like 2010. permalink fedilink source parent hideshow 2 child comments replies: [–] DaPorkchop_@lemmy.ml 3 points 11 months ago Even if the SYN packets were being ignored, the connection would still be unusable if there's enough incoming traffic for most legitimate packets to get dropped. And as mentioned in other comments, the router in question is a shitty ISP router which can't be replaced (although I do have a much fancier router with OpenWRT running behind that). permalink fedilink source parent
[–] DaPorkchop_@lemmy.ml 3 points 11 months ago Even if the SYN packets were being ignored, the connection would still be unusable if there's enough incoming traffic for most legitimate packets to get dropped. And as mentioned in other comments, the router in question is a shitty ISP router which can't be replaced (although I do have a much fancier router with OpenWRT running behind that). permalink fedilink source parent
