[–] 13 points 3 months ago (5 children)

good! Now the next challenge will be flagging & executing these proposals.

If you come up with an automated system that's not going to provide such high accuracy, then if you rely on manpower alone that's also prone to fail - I think it's a gray area; What's next, a combination of both with human asked to approve on the flagged repos? perhaps

  • source
  • [–] 54 points 3 months ago (4 children)

    the finger pointing shouldn't be on the hyperscalers alone, it's pure greed also from the manufacturers end because they have accepted backfill orders of such grade.

    Also these are manufactured in China mainly which don't give a damn about regulations or have any protections for what we're facing currently

  • source
  • [–] 8 points 4 months ago

    I want to be able to use Nextcloud the same way you’d have iCloud, without any hiccups in background sync and all this mess we have right now…

    Also they are in breach of GDPR too because they’re not allowing data portability, if you request an iCloud Photos dump, you’ll get scrambled & non-usable files which you cannot easily import in whichever media platform you want …

  • source
  • [–] 2 points 4 months ago

    normally this should happen within each family by limiting screen time but I’ve seen cases with families leaving the kid to watch cartoons on tablet without any social interaction at all, majority of those will grow to be cave men adults

  • source
  • [–] 11 points 4 months ago

    hmmm

    Komi Store only helps you discover and download release assets that are already published on GitHub by third‑party developers. The contents, safety, and behavior of those downloads are entirely the responsibility of their respective authors and distributors, not this project.

  • source
  • [–] 7 points 5 months ago

    assuming that you’re to expose that to the Internet, my recommendation is to deploy only

    complicate the setup too much and it’s going to rather be more painful to maintain and also much easier to misconfigure.

    The WAF covers OWASP Top 10 so that should give you around 70% protection which is still better than nothing

  • source
  • [–] 5 points 5 months ago* (last edited 5 months ago)

    I was pondering the same for last couple of days and had some thoughts on how to make it feasible. My research led me so far to 2 prerequisites:

    1. must have Anubis in front
    2. must have a WAF solution in place that covers at least OWASP Top 10

    I found pretty good Caddy documentation that covers both, so I think I’ll deploy a secondary Caddy reverse proxy that’ll perform such ops for public facing services.

    Of course, I currently have only 1 Caddy instance reverse proxying my internal services, haven’t reached the part on traffic handling when my devices are connected to the “safe network” (aka my home LAN)

  • source
  • view more: next ›