439
700+ self-hosted Git instances battered in 0-day attacks with no fix imminent (www.theregister.com)
submitted 11 months ago by to c/selfhosted@lemmy.world
86 comments fedilink hide all child comments
 

By 'Git instances' they mean Gogs instances that allow open registration. I know most of the community moved from Gogs to Gitea, and then to Forgejo, but thought this was still worth noting.

you are viewing a single comment's thread
view the rest of the comments
[–] 17 points 11 months ago (1 child)

this is what I'm talking about when it comes to the selfhosted communities.

if you don't know how to properly segment and vlan your network, you have no business exposing your shit to the internet.

  • permalink
  • fedilink
  • source
  • hideshow 1 child comment
    •
  • [–] 12 points 11 months ago

    While good, network security isnt the issue. Its running a web service with open registration allowing randos to upload content that gets processed by the server.

    Throw this up on a dedicated $5 VPS and you still have a problem. The default should be manual registration by admins.

  • permalink
  • fedilink
  • source
  • parent