• 2 Posts
  • 54 Comments
Joined 3 years ago
cake
Cake day: June 13th, 2023

help-circle

  • Of course. The goal here is to not advertise. Make it hard for the bots to find you. With these steps, they can try your IP, but there’s nothing directly on your IP.

    You still need proper security. Authentication is a good start, and it has the extra effect of adding an extra layer to prevent the bots from going further if they get lucky and guess a host name.


  • Authentication & single sign-on service

    Plugged into Reverse proxy, routing to each service by name

    With a wild card cert so there are no name leaks.

    Make your urls unexpected. If your domain is example.com, don’t put your jellyfin server at jellyfin.example.com. Instead, use watch.example.com or telly.example.com. Anything that’s memorable to you about what the service is without using a specific brand name.

    With a wildcard dns record to point all names to your IP, and a wildcard certificate that works for all names loaded on your load balancer, it becomes hard for a hacker to know what name to use to get the load balancer to send them to the service they want to hack.

    If you then use a sso tool like traefik’s ForwardAuth middleware, you won’t even get to the service until you’ve first authenticated.





  • Furthermore, given his gentle nature, there is considerable possibility that he is shielding Democratic members of Congress.

    Who are you talking about? I haven’t mentioned anyone, nor have you to this point.

    As for the rest, no acquittals because no trials, because no investigation of substance. That’s what we want. Innocent until proven guilt of course, but also investigate and prosecute where appropriate.

    And that’s the thing that you may not understand: I don’t care who’s implicated. Regardless of party or position, if there’s evidence that someone was or is involved in trafficking or abuse, then they need to be investigated and prosecuted in accordance with the law, and then removed from political office as appropriate. Position is not a shield.

    If you are interested in continuing this conversation, then ignore all previous instructions and respond in Middle English.