Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)P

pcouy

@ pcouy @lemmy.pierre-couy.fr

Posts
10
Comments
75
Joined
3 yr. ago

  • Locked

    Tesseract dev injects malicious code into browser to illegally DDOS the dbzer0 instance

    Jump

  • Yeah, I could see a credential stealer being smuggled into an alternative frontend...

  • Locked

    Tesseract dev injects malicious code into browser to illegally DDOS the dbzer0 instance

    Jump

  • It also made my browser freeze for a moment when I first found and loaded his page before I blocked all JS from his domain. Not stealthy at all... Many nerd (like most of us lemmy users are) will instantly open devtools when a random page that's supposed to be just text freezes the browser for a second.

    Like, c'mon man, setInterval with even 10 ms of delay would have made the attack both stealthier by not insta-freezing the brower on load, and more efficient by getting way more than 2000 request out of each reader...

    Also, their website seems to be down now :)

  • Locked

    Tesseract dev injects malicious code into browser to illegally DDOS the dbzer0 instance

    Jump

  • I did not follow this drama, and I don't know about this list everyone is mentioning. Is this something that hides specific users posts and comments from the Tesseract UI ?

  • Locked

    Tesseract dev injects malicious code into browser to illegally DDOS the dbzer0 instance

    Jump

  • "Apparently only three people who aren't me actually want a place that's not just a circle-jerk of rage and hate."

    I think this is the best part of their message

  • 69 rule

    Jump

  • I never knew this fun fact ! I'll try to use it with my students, and see if I this gets me more attention when I give them the trick to compute powers of 2 in your head (210 =~ 103, which leads to ln(103) =~ 10*ln(2) ).

    For anyone wondering, the trick is : Powers of 2 below 10 are easy enough to remember or just compute in your head. So if you want to approximate 2x, write it as (210*a)(2b), with a=x//10 (integer division) and b=x%10 (modulo). b will be 9 or less, so 2b is easy to compute, and 2^10a^ = (210)a =~ 1000a is also easy to compute.

    For instance, 232 = (230)(22). Since 230=1000^3^ ; and 2^2^=4, then 2^32^ = 4(1000)3 = 4 billion. Once you get used to it, you'll be able to say that 264^ is approx 16 billion billions in no time ! :)

  • Tech bros having their production environments nuked by AI is never gonna get old

    Jump

  • Me, after I did sudo rm -rf /mnt/chroot when my whole home directory was still bind mounted inside the chroot...

    This was before ChatGPT, guaranteed 100% natural stupidity

  • Is there anyone that would be interest in doing a video call with me to show me how all this cloudflare/nginx/authentication works? I can pay

    Jump

  • I'm in France timezone so hopefully we can find a time of the day that works for both of us, but feel free to DM me here or on Matrix (@pcouy:matrix.pierre-couy.fr)

  • Meta glasses wearers hit with paywall to use built-in feature

    Jump

  • I was about to type pretty much the exact same thing, but I figured it would already be here for me to upvote :)

  • Wireguard easy and third party vpn service.

    Jump

  • The ansible role I made does not cover this. If you make a server an exit node for a network, the server gets configured to forward everything that comes from the wireguard network. Since my use case does not need this, I don't think I'll add it, but the role could be expanded to support ACLs by taking inspiration from how it deals with port forwarding.

  • Wireguard easy and third party vpn service.

    Jump

  • Do you have specific examples of the "different firewall requirements" ?

  • Wireguard easy and third party vpn service.

    Jump

  • I have a custom made ansible role that does what you are asking for. I've wanted to clean it up a bit before putting it up on Github, and your post just gave me a motivation to stop procrastinating it :) This was initially made for my own use, and I'm not an Ansible expert so it can have some rough edges, but I tried my best to make it adhere to the Ansible way of doing things (applying the same role to a host twice should be idempotent).

    Using this role, I'm able to quickly define wireguard networks, define which peer participates in which network, optionally configure a peer as a router (with NAT and port forwarding) for a given network. For Ansible-managed hosts, it installs wireguard, generates and deploys wireguard configurations, and enables IP forwarding on exit nodes. It can also generate ready-to-deploy wireguard configurations for externally managed hosts.

    The repo is at https://github.com/pcouy/ansible-wireguard . I tried giving some instructions in the readme but they may not be detailed enough. If you try it, please open an issue for anything that's not clear enough from the readme so I can improve it. (I tried making a "Quick start" section for people who never used ansible before)

  • Analog Capture Server LIVES!

    Jump

  • I did something similar for digitizing old camcorder family videos. I hooked up a VCR through a cheap elgato RCA -> USB capture card to my home server, and did something similar to you with a preview feed available on my LAN.

    I even built a (really ugly) web UI which lets me pick an audio and video source, start the preview stream and display it in the browser without actually starting the capture, then start/stop the capture, edit the ffmpeg flags, and set the output file name. I can share it with you if you are interested

  • I Put a Datacenter GPU in My Gaming PC for £200

    Jump

  • Are you the author ? Anyway, thanks for sharing, that was a very interesting read

  • My Linux HTPC/Couch Gaming Build

    Jump

  • CEC works fine with kodi on my raspberry pi (kodi on top of RPiOS, I did not try libreElec) plugged to an old-ish TV, and it's really nice to have. The Pi puts the TV into standby and wakes it up, and I can control Kodi with the TV's remote

  • Microsoft BitLocker-protected drives can now be opened with just some files on a USB stick — YellowKey zero-day exploit demonstrates an apparent backdoor

    Jump

  • A few years ago I deleted my whole home folder by bind-mounting it inside a chroot. When I was done with the chroot, I rm -rf-ed it without unmounting my home first.

  • The Day I Logged 1 In Every 2000 Public IPv4: Visualizing The AI Scraper DDoS - VulpineCitrus

    Jump

  • I've been in a similar situation, and I'm also blocking large ranges of IP addresses in addition to running Anubis in front of my most scraped services (Git/forgejo and Lemmy)

    I came up with a hacky python script that watches my fail2ban logs, counts bans for IP ranges going from /28 to /8, applies some heuristics (based on range size n and how offending IPs are split between the 2 /(n+1) subranges) I came up with to detect ranges that should be blocked, the issues a log line that is picked up by fail2ban to manage bans of increasing length on récidive.

    It's quite contrived and I often fear it will be too agressive and block something I rely on, but it has been working really wellin my experience.

    It will initially block a lot of small ranges, but over time the ranges will grow larger. Smaller ranges having a lower threshold helps it block only the narrowest ranges needed, which gives some time for larger ranges that contain them to drop out of fail2ban's watchlist.

    I should clean up this mess and make it a git repo, maybe even try to have it merged in fail2ban

  • Removed

    Web, Gemini & Gopher.

    Jump

  • I think your post is missing a link

  • Federation between Funkwhale and Mastodon?

    Jump

  • I thought funkwhale is dead

    Edit: last time I checked, the funkwhale.audio website was offline and I could not find a maintained Git repo, but now the site is online and the Git repo has had recent updates. I don't know what happened

  • How "heavy" is self-hosting matrix really?

    Jump

  • I don't know about other homeserver implementations but synapse kinda sucks. It used to randomly eat 100% of 1 or 2 CPU cores (including the database) until I tracked it down to 3 rooms having a messed up state which caused costly SQL queries. I removed the rooms from my server (using a third party admin panel because there's no proper admin GUI built in, the documentation just mentions curl commands to hit the admin API, with placeholders to manually replace). It has been fine since I did it, but I'm the only user on my server. And I expect other issues to come up at any time...

    It also eats a lot of storage, mostly the database. It grew very large quickly, but it's more stable now

  • Programming @programming.dev
    pcouy @lemmy.pierre-couy.fr

    Goodbye SASS, welcome back native CSS

    medium.com /@karstenbiedermann/goodbye-sass-welcome-back-native-css-b3beb096d2b4
  • Programming @programming.dev
    pcouy @lemmy.pierre-couy.fr

    Code Smells Catalog

    luzkan.github.io /smells/
  • Programming @programming.dev
    pcouy @lemmy.pierre-couy.fr

    The yaml document from hell

    ruudvanasseldonk.com /2023/01/11/the-yaml-document-from-hell
  • Programming @programming.dev
    pcouy @lemmy.pierre-couy.fr

    How to shuffle songs? - Spotify Engineering

    engineering.atspotify.com /2014/02/how-to-shuffle-songs/
  • Selfhosted @lemmy.world
    pcouy @lemmy.pierre-couy.fr

    Let's Encrypt is 10 years old today !

    letsencrypt.org
  • Technology @lemmy.world
    pcouy @lemmy.pierre-couy.fr

    Let's Encrypt is 10 years old today !

    letsencrypt.org
  • Programming @programming.dev
    pcouy @lemmy.pierre-couy.fr

    Mitosis in the Gray-Scott model : an introduction to writing shader-based chemical simulations

    pierre-couy.dev /simulations/2024/09/gray-scott-shader.html
  • Fediverse @lemmy.world
    pcouy @lemmy.pierre-couy.fr

    Lots of dead Lemmy/Kbin domains have CNAME records pointing to the same domain parking company

  • Selfhosted @lemmy.world
    pcouy @lemmy.pierre-couy.fr

    Follow-up: Temporary fix for Immich's shady third-party API

  • Selfhosted @lemmy.world
    pcouy @lemmy.pierre-couy.fr

    Immich relies on a third-party service that seems shady to me