Admin on the slrpnk.net Lemmy instance.

He/Him or what ever you feel like.

XMPP: povoq@slrpnk.net

Avatar is an image of a baby octopus.

  • 218 Posts
  • 901 Comments
Joined 2 years ago
cake
Cake day: September 19th, 2022

help-circle










  • It is possible that people get access to your server while it is running via known or unkown software vulnerabilities, but that isn’t really the point… all I am saying is that if you host your server at home, it is unlikely that at-rest disk-encryption does you any good and it certainly doesn’t help to protect against illicit remote access.

    What it does “help” is preventing you from remotely accessing your own server if it rebooted for some reason… and many other such footguns that you will experience sooner or later.


  • No the Nextcloud DB is not excrypted, but neither is your LUKS file system while the computer is running. Anyone getting access to the server while it is running, can access all the data unencrypted. For a server this is the much more likely scenario than for a Laptop, which might get stolen while turned off.

    At-rest disk encryption is useful for servers in co-location hosting, where a 3rd party might be able to pull a disk from the system, or if you are a large data-center that regularly discards old drives with customer data, and you want to ensure that no 3rd party can access that data from the discarded drives.








  • edit, delete, etc.

    Can you do that with a letter once it is send? And the instance admin of the mirroring server can delete posts if that is legally required for some reason.

    And how would that even work technically? Bulk import posts and spam other instances with mass updates? That would immediately detected as a spam-wave and blocked. And back dating technically new messages is also not exactly a great thing to allow.

    Other implementations of nomadic identity like Hubzilla get around this by letting you run two accounts in parallel and syncing them from your main account, but they will also not back-port old messages before you linked up the secondary account.

    Basically anyone with some experience with federated systems agrees that importing old messages in bulk on account migration will never happen, and I don’t really see an issue with that, since messages are not lost.






  • Lemmy.world used to cost that much, but I think they downscaled a bit recently, or are at least planning to as the current growth of the userbase has slowed down.

    I was actually surprised by that 150 figure when I first read it, as it is much cheaper than what the BlueSky documentation makes it sound.

    It is certainly possible to collect that much in monthly donations, but then again… how do you build a loyal base of supporters for running a mostly hidden piece of infrastructure? People always complain about the instance focussed nature of the fediverse, but the ability to build communities around them and get people actually emotionally invested in their home instance is IMHO rather a strength of it. That is also why I am slightly sceptic of easy account migration tools, as it devalues the instance as yourhome base to a certain extend.