HW/FW security researcher & Demoscene elder.
I started having arguments online back on Fidonet and Usenet. I’m too tired to care now.
Are you perhaps asking from a US perspective? Or maybe Indian too. I don’t know of any other countries where marriage is expensive really.
We got married in Vegas as a fun thing to do, since we’re Swedish. Legally the difference is extremely small between being “sambo” (co-living) and being married, and we could just as well kept going without getting married.
I think you forgot commenting the part about your “never be able to” statement being a flat out lie.
They can be archived without being playable - and many of them are definitely still sold today and playable through commercial emulation. Playing PSX (Playstation 1) games is part of Sony’s Playstation Premium subscription as an example - and Nintendo has the same.
Completely unnecessary, and puts the actual archiving arguments at risk meaning we might see court action that makes it impossible for other “real” archives to exist.
They lost that argument when they implemented the possibility to play games they host in the browser.
I’m all for an archive. I’m not sure IA are doing this right.
… and those same men wonder why women find them repulsive.
Sit and pee.
They’re very efficient at spreading piss all over the place, yes.
Sit and pee.
Urinals are disgusting.
/European man
Yeah I’m with you. I’m more pissed with Proton for disengaging via Mastodon than at the stupid CEO - but none if it is a good reason enough to opt for lesser services. Proton’s doing good stuff.
Still no. Here’s the reasoning: A well known SSHd is the most secure codebase you’ll find out there. With key-based login only, it’s not possible to brute force entry. Thus, changing port or running fail2ban doesn’t add anything to the security of your system, it just gets rid of bot login log entries and some - very minimal - resource usage.
If there’s a public SSHd exploit out, attackers will portscan and and find your SSHd anyway. If there’s a 0-day out it’s the same.
(your points 4 and 5 are outside the scope of the SSH discussion)
Feel free to argue with facts. Hardening systems is my job.
This is not “the correct answer”. There’s absolutely nothing wrong with “exposing” SSH.
A few replies here give the correct advice. Others are just way off.
To those of you who wrote anything else than “disable passwords, use key based login only and you’re good” - please spend more time learning the subject before offering up advice to others.
(fail2ban is nice to run in addition, I do so myself, but it’s more for to stop wasting resources than having to do with security since no one is bruteforcing keys)
Breakfast is coffee and toast.
/Swede
It’s a list from 2021 and as a cybersec researcher and Jellyfin user I didn’t see anything that would make me say “do not expose Jellyfin to the Internet”.
That’s not to say there might be something not listed, or some exploit chain using parts of this list, but at least it’s not something that has been abused over the last four years if so.
There are still server softwares our there that are going to be exposing people’s private Mastodon posts.
You could’ve saved yourself a lot of typing there by just admitting to claiming things you actually didn’t know.
If you know of other ActivityPub servers that expose private posts the same way I suggest you make a responsible disclosure to the developers.
I don’t know of any, but you claim they exist so …
You have absolutely no idea what “responsible” in “responsible disclosure” means :) It’s completely irrelevant how Mastodon has implemented private posts when it comes to how Dansup handled the issue, knowing what the effects were.
You don’t, when told of a vulnerability, handle it in a way that cause harm if it can be avoided.
Read more, post less. I’ve said nothing about any spec violation. That’s not relevant.
Weird comment on the legality. Of course departing employees at any company have no rights whatsoever to bring company owned IP with them.
Happy that she did, but no idea why anyone would think otherwise.