It's wild that these cloud providers were seen as a one-way stop to ensure reliability, only to make them a universal single point of failure.
post
I hate how Signal went down because of this... Wish it wasn't so centralised.
My friend messaged me on Signal asking if Instructure (runs on AWS) was down. I got the message. That being said, it's scary that Signal's backbone depends on AWS
Why is this scary? That's what e2ee is for, so that no one besides your recipient can view the contents of a message. It does not matter which server is used. If anything for a service like Signal, you want a server with high availability like AWS, Azure, Google Cloud or Cloudflare.
Scared because it's centralized. If Amazon decides that it wants to shut Signal down, they can. Nobody can spin up a Signal instance and help out.
I hope they consider other ways of doing things after this incident.
I have been able to use Signal like any other day. I haven’t seen any disruption in sending or receiving.
Started moving to Element/Matrix this weekend when I attended a protest and wanted to have some kind of communication, but also wanted to leave my primary phone at home. I was using a de-googled android fork and an e-sim, but being a data-only e-sim, I couldn't use Signal due to the phone number requirement.
Annoying to have try to get contacts to get another app, but at least it's decentralized and comes with the option of being self-hosted once I'm ready to tackle that.
Hey, note that you can use mautrix-signal to access your Signal account within Element on this phone.
@MrMcGasion @Sunny Come to the dark side (xmpp, and jmp.chat) and get decentralized messaging and SMS support with that data-only sim!
@Sunny@slrpnk.net already has an XMPP account, as that is included in every slrpnk.net account automatically. It is very easy to set that up for most Fediverse software, and the user id is identical between Fediverse and XMPP.
Oh damn i did not even know about this! I will defo have a play around with this tomorrow, how very neat!
However, it isnt me im really worried about in the grand picture, its family and friends. It was already difficult enough to convert them to using Signal.
Matrix is way more dark side in my opinion (this is a joke about how often it fluffs up, leaving you in the dark).
The one that hits us in self hosted is https://auth.docker.io/
You guys don't selfhost a registry?
I know this is selfhosted so most people here are hobbyists, but it's a ton of work to selfhost in enterprise setting. I'd wager 90%+ of people using image registries are using Docker Hub, GHCR, or AWS ECR.
For your personal use, you don't need an enterprise setting. It's just a simple compose file that you run.
You can host a registry in pull through mode, so you still have all the images you use locally, but if it's not in your registry yet, it pulls it from docker hub or whatever.
The only pain point is that a single registry can't do both. So if you want to push your own docker images AND have a "cache" of stuff from docker hub, you need to run two registries in two different modes. And then juggle the url's.
Pretty sure you could run Pulp in pull-through mode and add your local Forgejo/whatever registry as a remote, which would at least give you a unified "pull" URL. Then just use Forgejo actions to handle the actual build/publish for your local images whenever you push to main (or tag a release, or whatever).
Pulp might actually be able to handle both on its own, I haven't ever tried though.
I hadn’t actually considered that before. What’s your preferred way to do that?
I have just this (which ironically won't work now cause docker hub is down)
services:
registry:
restart: always
image: registry:2
ports:
- 5000:5000
dns:
- 9.9.9.9
- 1.1.1.1
volumes:
- ../files/auth/registry.password:/auth/registry.password
- registry-data:/var/lib/registry
environment:
REGISTRY_STORAGE_DELETE_ENABLED: true
REGISTRY_HEALTH_STORAGEDRIVER_ENABLED: false
REGISTRY_HTTP_SECRET: ${REGISTRY_HTTP_SECRET}
REGISTRY_AUTH: htpasswd
REGISTRY_AUTH_HTPASSWD_REALM: Registry Realm
REGISTRY_AUTH_HTPASSWD_PATH: /auth/registry.password
# REGISTRY_PROXY_REMOTEURL: "https://registry-1.docker.io/"
volumes:
registry-data:
I don't even remember how and when I set it up. I think it might be this: https://github.com/distribution/distribution/releases/tag/v2.0.0
Recently somebody has created a frontend, which I bookmarked but didn't bother to set up: https://github.com/Joxit/docker-registry-ui
Yeah I ran into this as well. Wondered why it needs a call to auth for public container images in the first place.
Oh god, that just 404s for me
according to that page the issue stemmed from an underlying system responsible for health checks in load balancing servers.
how the hell do you fuck up a health check config that bad? that's like messing up smartd.conf and taking your system offline somehow
Well, you see, the mistake you are making is believing a single thing the stupid AWS status board says. It is always fucking lying, sometimes in new and creative ways.
I mean if your OS was "smart" as not to send IO to devices that indicate critical failure (e.g. by marking them read-only in the array?), and then thinks all devices have failed critically, wouldn't this happen in that kind of system as well..
If your health check is broken, then you might not notice that a service is down and you'll fail to deploy a replacement. Or the opposite, and you end up constantly replacing it, creating a "flapping" service.
Yeah, was reading about it here too
Ring doorbells, Alexa, ahh... the joys of selfhosting.
Is there no way to check the doorbell video locally?
An Amazon employee misconfigures something and now your doorbell doesn't work
I don't have one (because of that point), so I don't know...
Presumably the app and doorbell are hardcoded to go to an AWS URL (so it's "easier" for consumers), but in theory the data's all on your wifi.
Obligatory
Oh wow their front page doesn't mention at all that their products run locally and don't require subscriptions.
It mentions push notifications and emails, so I guess they must require an account, or can you configure them to use SMTP directly, as with the Amcrest Pro cameras?
TBH, I've never used any of those features. I just used it locally and plugged it into home assistant.
But I just reinstalled their app and can confirm I can watch the feed and get push notifications without a cloud account. Haven't tried email tho
That sounds worth investigating, thanks! Amcrest needs an account for notifications afaik, but the Pro cameras can work just on a local network.
The app for them is awful. Then they made a new version that is awful in slightly different ways, so I'm interested in new options.
The last time I looked at time I missed something. I want to use my existing chime and have it also use that power supply as a power source. Turns out the battery one does that! I missed that months ago! I was going to get a Ring Pro or whatever to get it to do that! This is so much better! Moving up the todo list now!
That explains why my Matrix <-> Signal bridge was complaining about being disconnected.
Does this break all the various security features that are the reason to use Signal in the first place?
You can connect Matrix with Signal?
Sure, I got all my Signal/Telegram chats synced to my Matrix server.
Who wants to bet Amazon gave AI full access to their prod config and it screwed it up.
top 87 comments