▲ 439 ▼ 700+ self-hosted Git instances battered in 0-day attacks with no fix imminent (www.theregister.com) submitted 11 months ago by festus@lemmy.ca to c/selfhosted@lemmy.world 86 comments fedilink hide all child comments By 'Git instances' they mean Gogs instances that allow open registration. I know most of the community moved from Gogs to Gitea, and then to Forgejo, but thought this was still worth noting.
[–] quick_snail@feddit.nl 12 points 11 months ago (13 children) Well that kinda kills collaboration permalink fedilink source parent hideshow 13 child comments replies: [–] 1984@lemmy.today 19 points 11 months ago (2 children) Yeah. If I needed collaboration, I would just whitelist their ips or require everyone involved to use Wireguard vpn, Tailscale or other solutions that allows access without being publically exposed. permalink fedilink source parent hideshow 2 child comments replies: [–] quick_snail@feddit.nl 6 points 11 months ago (1 child) That kills collaboration from new people who just, like, discovered your project on some Lemmy thread permalink fedilink source parent hideshow 1 child comment replies: [–] Natanael@infosec.pub 8 points 11 months ago They can still collaborate old school way. You can publish static mirrors of git, then take email patches lol permalink fedilink source parent [–] greedytacothief@lemmy.dbzer0.com 5 points 11 months ago (8 children) I do the same thing. Anything I put on there isn't something that I would share with the Internet anyway. If it was a serious project, sure. It's just nice to have a personal git you can access over a VPN sometimes. permalink fedilink source parent hideshow 8 child comments replies: [+] quick_snail@feddit.nl -10 points 11 months ago (7 children) I can't understand why anyone would waste time writing code that won't be shared permalink fedilink source parent hideshow 7 child comments replies: [–] mic_check_one_two@lemmy.dbzer0.com 8 points 11 months ago (2 children) Personal projects. Not everything has to be FOSS. My tiny little script to automate my lights turning green and my smart speaker playing All-Star by Smash Mouth at full volume, so I can jork it in peace? That shit doesn’t need to be public. permalink fedilink source parent hideshow 2 child comments replies: [–] AA5B@lemmy.world 1 point 11 months ago* Home Assistant hs communities to share exactly that My similar script has a very different goal: at midnight if someone is still up, it dims the family room light and announces on speaker”hey kids, it’s time for bed” permalink fedilink source parent [–] quick_snail@feddit.nl -1 points 11 months ago Yes, it needs to be public. The videos too. Take my money. permalink fedilink source parent [–] communism@lemmy.ml 5 points 11 months ago For personal use? To automate tasks you do or solve a problem you have? Or people use git repos for notes and the like too permalink fedilink source parent [–] mko@discuss.tchncs.de 3 points 11 months ago* For personal use. As someone who has all my non-trivial creations, including dot-files and scripts I replicate between machines, in repos since CVS has a thing it’s a habit. Version control. This stuff is mostly private but not secret, why should I have it public? Edit after spell check. permalink fedilink source parent [–] greedytacothief@lemmy.dbzer0.com 1 point 11 months ago Dunno, I just don't believe my NixOS config files are particularly valuable. What is the benefit of sharing garbage code from a novice? I'd rather share things worth sharing, that could be useful to someone else. permalink fedilink source parent load more comments (1 reply) [–] Jason2357@lemmy.ca 2 points 11 months ago You can git pull a repo to your machine, make your changes and then use git to submit a patch via email. Its not pretty, but it works. Hopefully federation is built soon and you will be able to submit a pull request from your own forge. permalink fedilink source parent
[–] 1984@lemmy.today 19 points 11 months ago (2 children) Yeah. If I needed collaboration, I would just whitelist their ips or require everyone involved to use Wireguard vpn, Tailscale or other solutions that allows access without being publically exposed. permalink fedilink source parent hideshow 2 child comments replies: [–] quick_snail@feddit.nl 6 points 11 months ago (1 child) That kills collaboration from new people who just, like, discovered your project on some Lemmy thread permalink fedilink source parent hideshow 1 child comment replies: [–] Natanael@infosec.pub 8 points 11 months ago They can still collaborate old school way. You can publish static mirrors of git, then take email patches lol permalink fedilink source parent
[–] quick_snail@feddit.nl 6 points 11 months ago (1 child) That kills collaboration from new people who just, like, discovered your project on some Lemmy thread permalink fedilink source parent hideshow 1 child comment replies: [–] Natanael@infosec.pub 8 points 11 months ago They can still collaborate old school way. You can publish static mirrors of git, then take email patches lol permalink fedilink source parent
[–] Natanael@infosec.pub 8 points 11 months ago They can still collaborate old school way. You can publish static mirrors of git, then take email patches lol permalink fedilink source parent
[–] greedytacothief@lemmy.dbzer0.com 5 points 11 months ago (8 children) I do the same thing. Anything I put on there isn't something that I would share with the Internet anyway. If it was a serious project, sure. It's just nice to have a personal git you can access over a VPN sometimes. permalink fedilink source parent hideshow 8 child comments replies: [+] quick_snail@feddit.nl -10 points 11 months ago (7 children) I can't understand why anyone would waste time writing code that won't be shared permalink fedilink source parent hideshow 7 child comments replies: [–] mic_check_one_two@lemmy.dbzer0.com 8 points 11 months ago (2 children) Personal projects. Not everything has to be FOSS. My tiny little script to automate my lights turning green and my smart speaker playing All-Star by Smash Mouth at full volume, so I can jork it in peace? That shit doesn’t need to be public. permalink fedilink source parent hideshow 2 child comments replies: [–] AA5B@lemmy.world 1 point 11 months ago* Home Assistant hs communities to share exactly that My similar script has a very different goal: at midnight if someone is still up, it dims the family room light and announces on speaker”hey kids, it’s time for bed” permalink fedilink source parent [–] quick_snail@feddit.nl -1 points 11 months ago Yes, it needs to be public. The videos too. Take my money. permalink fedilink source parent [–] communism@lemmy.ml 5 points 11 months ago For personal use? To automate tasks you do or solve a problem you have? Or people use git repos for notes and the like too permalink fedilink source parent [–] mko@discuss.tchncs.de 3 points 11 months ago* For personal use. As someone who has all my non-trivial creations, including dot-files and scripts I replicate between machines, in repos since CVS has a thing it’s a habit. Version control. This stuff is mostly private but not secret, why should I have it public? Edit after spell check. permalink fedilink source parent [–] greedytacothief@lemmy.dbzer0.com 1 point 11 months ago Dunno, I just don't believe my NixOS config files are particularly valuable. What is the benefit of sharing garbage code from a novice? I'd rather share things worth sharing, that could be useful to someone else. permalink fedilink source parent load more comments (1 reply)
[+] quick_snail@feddit.nl -10 points 11 months ago (7 children) I can't understand why anyone would waste time writing code that won't be shared permalink fedilink source parent hideshow 7 child comments replies: [–] mic_check_one_two@lemmy.dbzer0.com 8 points 11 months ago (2 children) Personal projects. Not everything has to be FOSS. My tiny little script to automate my lights turning green and my smart speaker playing All-Star by Smash Mouth at full volume, so I can jork it in peace? That shit doesn’t need to be public. permalink fedilink source parent hideshow 2 child comments replies: [–] AA5B@lemmy.world 1 point 11 months ago* Home Assistant hs communities to share exactly that My similar script has a very different goal: at midnight if someone is still up, it dims the family room light and announces on speaker”hey kids, it’s time for bed” permalink fedilink source parent [–] quick_snail@feddit.nl -1 points 11 months ago Yes, it needs to be public. The videos too. Take my money. permalink fedilink source parent [–] communism@lemmy.ml 5 points 11 months ago For personal use? To automate tasks you do or solve a problem you have? Or people use git repos for notes and the like too permalink fedilink source parent [–] mko@discuss.tchncs.de 3 points 11 months ago* For personal use. As someone who has all my non-trivial creations, including dot-files and scripts I replicate between machines, in repos since CVS has a thing it’s a habit. Version control. This stuff is mostly private but not secret, why should I have it public? Edit after spell check. permalink fedilink source parent [–] greedytacothief@lemmy.dbzer0.com 1 point 11 months ago Dunno, I just don't believe my NixOS config files are particularly valuable. What is the benefit of sharing garbage code from a novice? I'd rather share things worth sharing, that could be useful to someone else. permalink fedilink source parent load more comments (1 reply)
[–] mic_check_one_two@lemmy.dbzer0.com 8 points 11 months ago (2 children) Personal projects. Not everything has to be FOSS. My tiny little script to automate my lights turning green and my smart speaker playing All-Star by Smash Mouth at full volume, so I can jork it in peace? That shit doesn’t need to be public. permalink fedilink source parent hideshow 2 child comments replies: [–] AA5B@lemmy.world 1 point 11 months ago* Home Assistant hs communities to share exactly that My similar script has a very different goal: at midnight if someone is still up, it dims the family room light and announces on speaker”hey kids, it’s time for bed” permalink fedilink source parent [–] quick_snail@feddit.nl -1 points 11 months ago Yes, it needs to be public. The videos too. Take my money. permalink fedilink source parent
[–] AA5B@lemmy.world 1 point 11 months ago* Home Assistant hs communities to share exactly that My similar script has a very different goal: at midnight if someone is still up, it dims the family room light and announces on speaker”hey kids, it’s time for bed” permalink fedilink source parent
[–] quick_snail@feddit.nl -1 points 11 months ago Yes, it needs to be public. The videos too. Take my money. permalink fedilink source parent
[–] communism@lemmy.ml 5 points 11 months ago For personal use? To automate tasks you do or solve a problem you have? Or people use git repos for notes and the like too permalink fedilink source parent
[–] mko@discuss.tchncs.de 3 points 11 months ago* For personal use. As someone who has all my non-trivial creations, including dot-files and scripts I replicate between machines, in repos since CVS has a thing it’s a habit. Version control. This stuff is mostly private but not secret, why should I have it public? Edit after spell check. permalink fedilink source parent
[–] greedytacothief@lemmy.dbzer0.com 1 point 11 months ago Dunno, I just don't believe my NixOS config files are particularly valuable. What is the benefit of sharing garbage code from a novice? I'd rather share things worth sharing, that could be useful to someone else. permalink fedilink source parent
[–] Jason2357@lemmy.ca 2 points 11 months ago You can git pull a repo to your machine, make your changes and then use git to submit a patch via email. Its not pretty, but it works. Hopefully federation is built soon and you will be able to submit a pull request from your own forge. permalink fedilink source parent