saint

joined 3 years ago
MODERATOR OF
 

ECDSA NIST-P521 keys used with any vulnerable product / component should be considered compromised and consequently revoked by removing them from authorized_keys, GitHub, ...

 

Check out the book page as well (and you can download the book for free) - https://goatgreatesteconomistofalltime.ai/en

 

Yea or Nay?

 

Although the vulnerability was addressed in August 2018, the maintainers of Lighthttpd patched it silently in version 1.4.51 without assigning a tracking ID (CVE).

This led the developers of AMI MegaRAC BMC to miss the fix and fail to integrate it into the product. The vulnerability thus trickled down the supply chain to system vendors and their customers.

BMCs are microcontrollers embedded on server-grade motherboards, including systems used in data centers and cloud environments, that enable remote management, rebooting, monitoring, and firmware updating on the device.

In short - it is a BIOS/virtual keyboard and mouse accessible via internet and if you can access it - you are controlling the computer. Of course, to have such devices exposed without adequate protection is an interesting idea by itself, but there are quite some dedicated server providers that do it for various reasons (less work).

 

Specific case about teachers

 

Probably web runs on PHP - upgrade!

 

The big picture: Employers don't offer parental leave out of the goodness of their hearts.

What to watch: So far, no other firms have followed suit — but Big Law is a lock-step world, so it's not something to rule out.

 

With a mix of classic cinema and some new releases, King stated: “I am especially partial – this will not surprise you – to suspense films”.

[–] [email protected] 3 points 2 years ago (6 children)

you should be able to use any mail gateway that supports smtp. one way to do it is to configure postfix to use sendgrid as relayhost - https://docs.sendgrid.com/for-developers/sending-email/postfix

[–] [email protected] 1 points 2 years ago (11 children)

from the log it seems that lemmy cannot reach https://midwest.social/ - if you have more such operation timed outs - probably there is some networking issue with outgoing requests - maybe you have some kind of firewall? i can reach your instance from other direction: https://group.lt/c/[email protected]

probably the easiest way to setup lemmy and another front facing reverse proxy is to use nginx that comes with lemmy on another port and setup simple reverse proxying with NPM to it. i myself using caddy for reverse proxying, using this config: https://join-lemmy.org/docs/en/administration/caddy.html

[–] [email protected] 1 points 2 years ago (14 children)

okay, i don't know how npm works, could you check this tutorial to see if you have set it up similarly?

https://youtu.be/6lQFZvCCe7U

also - check docker-compose.yml settings to remove port for lemmy host and i think you need to set use https to true as it is provided by npm

[–] [email protected] 1 points 2 years ago (16 children)

try to look here for the config file:

include /etc/nginx/conf.d/*.conf;
	include /data/nginx/default_host/*.conf;
	include /data/nginx/proxy_host/*.conf;
	include /data/nginx/redirection_host/*.conf;
	include /data/nginx/dead_host/*.conf;
	include /data/nginx/temp/*.conf;

btw, i think port in lemmy.bulwarkob.com:1236 in docker-compose is not needed for you, should be just lemmy.bulwarkob.com

[–] [email protected] 1 points 2 years ago* (last edited 2 years ago) (18 children)

yeah, nginx config for lemmy is not very straighforward. you need to mimic this:

worker_processes  1;
events {
    worker_connections  1024;
}
http {
    upstream lemmy {
        server "lemmy:8536";
    }
    upstream lemmy-ui {
        server "lemmy-ui:1234";
    }
    server {
      listen       1236;
      server_name  localhost;

      # frontend
      location / {
        set $proxpass "http://lemmy-ui";
        if ($http_accept = "application/activity+json") {
          set $proxpass "http://lemmy";
        }
        if ($http_accept = "application/ldr+json; profile=\"https://www.w3.org/ns/activitystreams\"") {
          set $proxpass "http://lemmy";
        }
        if ($request_method = POST) {
          set $proxpass "http://lemmy";
        }
        proxy_pass $proxpass;

        rewrite ^(.+)/+$ $1 permanent;

        # Send actual client IP upstream
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header Host $host;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
      }

      # backend
      location ~ ^/(api|pictrs|feeds|nodeinfo|.well-known) {
        proxy_pass "http://lemmy";
        proxy_http_version 1.1;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection "upgrade";

        # Add IP forwarding headers
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header Host $host;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
      }
    }
}

also - can you check if all containers are running? just do docker-compose ps in the lemmy dir.

[–] [email protected] 1 points 2 years ago* (last edited 2 years ago) (20 children)

it seems there is no config for lemmy nginx here.. might be in other files?

[–] [email protected] 1 points 2 years ago (22 children)

nginx config and lemmy.hjson would be useful as well

[–] [email protected] 1 points 2 years ago (25 children)

hi, can you post your docker-compose.yaml, nginx config and screenshots/logs of failures?

[–] [email protected] 2 points 2 years ago

I realize that if I would be reading non-stop - I would not finish all books I have. Just a passing thought before buying a new one. ;D

[–] [email protected] 2 points 2 years ago
[–] [email protected] 1 points 2 years ago (1 children)

link is dead?!

[–] [email protected] 3 points 2 years ago (1 children)

There are many ways to play with it - one of them is https://github.com/nomic-ai/gpt4all . As for the strangeness, I would say it depends on the prompt (input).

view more: ‹ prev next ›