Small advice: would be nice if there was a dark mode, so I can read it at night. (without flash bang)
melroy
- 1 Post
- 130 Comments
melroy@kbin.melroy.orgto
Selfhosted@lemmy.world•Nextcloud/OneDrive Files-only Replacement
6·6 days agoIt’s actually funny and sad at the same time. Nextcloud used to be just simple and only focused around file hosting…
melroy@kbin.melroy.orgto
Linux@programming.dev•Linux Mint isn't the answer for Windows refugees anymore
51·6 days agoYou can install actually something called Mainline kernels. Which is a simple GUI app. That works also very well under Mint. Allowing you to install even newer kernels.
melroy@kbin.melroy.orgto
Technology@beehaw.org•Pornhub to restrict access for UK users from February
4·15 days agoFirst hand experience…
melroy@kbin.melroy.orgto
Selfhosted@lemmy.world•How do I avoid becoming one with the botnet?
43·16 days agoIt’s all about server hardening. See https://blog.melroy.org/2023/server-hardening/
melroy@kbin.melroy.orgto
Linux@programming.dev•New Linux Patches Allow More Easily Changing The Tux Kernel Boot Logo
14·1 month agomost important patch since 1995.
melroy@kbin.melroy.orgto
Linux@programming.dev•Libxml2 Narrowly Avoids Becoming Unmaintained | Hackaday
2·2 months agoCurrent version is actually still MIT: https://gitlab.gnome.org/GNOME/libxml2#license (which is the most preferred license for a low-level library like this)
melroy@kbin.melroy.orgto
Linux@programming.dev•Libxml2 Narrowly Avoids Becoming Unmaintained | Hackaday
1·2 months agoSwitching the license to GPL (ideally GLPv3 or compatible, although IMO we are due for a GPLv4) is a pretty good outcome, hopefully it works.
Actually that means that no company will use it anymore. Since if you have low-level library like that under GPL, then all the source code need to be GPL compatible as well. And 99% of the source code that is build on top of libxml2 is most likely not GPL / no GPL compatible.
melroy@kbin.melroy.orgto
Linux@programming.dev•Libxml2 Narrowly Avoids Becoming Unmaintained | Hackaday
4·2 months agoAlso he was getting every week cve issues, which are often not urgent issues. Yet it costs him a lot of time. He also considers security issues now just the same as a normal issue. Not giving it priority anymore, since that doesn’t make sense anymore for him.
melroy@kbin.melroy.orgto
Linux@programming.dev•Libxml2 Narrowly Avoids Becoming Unmaintained | Hackaday
10·2 months agoAnother maintainer already jumped in and he is now maintaining it. The original author forked it actually his own project, and is planning to release it under gpl license (instead of MIT), basically making it open source in a sense I can’tbe used by big tech. Since that was his point, large software projects and companies relied on his work. Yet nobody is paying him.
melroy@kbin.melroy.orgto
Technology@beehaw.org•This Flock Camera Leak is like Netflix For Stalkers
11·2 months agoFlock is a disgrace for the technology and innovation section.
And governments just like it way too much. Do with your tax money govements are paying these companies a lot of money so they can track you again. It’s insane and I don’t believe this should be legal.
melroy@kbin.melroy.orgto
Selfhosted@lemmy.world•Using Fail2ban to protect exposed services
1·3 months agoCaddy is also fine.
I wrote a blog about server hardining and you might find it useful: https://blog.melroy.org/2023/server-hardening/
melroy@kbin.melroy.orgto
Selfhosted@lemmy.world•Using Fail2ban to protect exposed services
0·3 months agoYes, I run many services and website on the public web from my homelab. Harden your server first. Like disabling root ssh login.
Also enable auto updates on your server. Use your router/server to block some counties using geoip (especially if those services are meant for only a couple of people within your county maybe?). You could also use block lists, there any many bad ip lists out there.
Configure rate limits in Nginx.
You also mentioned fail2ban. You can define many rules and actions. Like blocking ips that might go over your previously defined rate limits. Or 4xx action for ips that request a lot of non existing pages (404 errors) .
Also captcha won’t cut it anymore today. Try https://github.com/TecharoHQ/anubis
Of course expose only what you want to expose, so only open ports in your firewall you really want to open. Ideally put everything behind a reverse proxy like Nginx.
Let’s start with all of the things mentioned above. Ping me later if want to know more or have questions.
Just in time for FOSDEM :P
melroy@kbin.melroy.orgto
Linux@programming.dev•Github's fake stars, Nvidia's $700M open source bet, KDE looks healthy: Linux & Open Source News
1·1 year agoExtremely uninterested in sharing them with the general public. Don’t want rancid comments about my family, friends, or myself. So I stick to YouTube for all my uploads.
So, YouTube (and cloud) is just somebody else it’s computer. A computer which a large company with millions of dollars behind it, that is the main difference.
melroy@kbin.melroy.orgto
Linux@programming.dev•Github's fake stars, Nvidia's $700M open source bet, KDE looks healthy: Linux & Open Source News
9·1 year agoYouTube is still very big and used a lot. LBRY/Odysee tried but failed. I hope PeerTube will succeed and I really wish more tech Channels will move to PeerTube as well.
I also believe the web has to become too centralized around Google, YouTube, Reddit, Amazon and alike. The only way to open up the full potential of the internet is to use and promote these platforms. Individual forums as well as software like PeerTube. People will regret if we continue to centralized the web.
melroy@kbin.melroy.orgto
Linux@programming.dev•Github's fake stars, Nvidia's $700M open source bet, KDE looks healthy: Linux & Open Source News
6·1 year agoNice to see PeerTube getting used more and more.
What are the odds?
And exactly the same type of the RedHat hats with a black line… What a coincidence?

Thanks. There is a dark skin: https://mmistakes.github.io/minimal-mistakes/docs/configuration/#dark-skin-dark