Yeah I like them as well, it’s what we use at work. The article doesn’t leave me optimistic though

It is but they’re working on federation for forgejo (which powers Codeberg).

If you don’t want to host something yourself, check codeberg

Is there any documentation on how they share user data like emails? That sounds super wild to me

Lemmy is a small part of the fediverse and the tankie triad is a small part of Lemmy. Barely ever seen that stuff on Mastodon and co.

Switching to mbin won’t help you with that since it’s the same communities.

I don’t know, I’ve seen it several times mentioned in the Proxmox forum. I think it’s more of a theoretical scenario but it’s strongly advised against.

Gets annoying soon if you have more than one host. Easily automated with Ansible

You’re not supposed to run apt upgrade in Proxmox at all, it may even break your system. Use dist-upgrade.

https://pve.proxmox.com/pve-docs/chapter-sysadmin.html#system_software_updates

I think they know what they’re doing, bit of a troll. Framed like this in the article:

Various entities, including some with security teams, revised their judgment about what Forgejo is and isn’t, which was the main goal of the previous blogpost.

There’s a follow up by the author:

https://dustri.org/b/follow-up-to-carrot-disclosure-forgejo.html

Including this:

So I ended up sending and email to Forgejo security team, containing: an apology, a bit about my reasoning for proceeding with carrot disclosure, recommendations about what to harden/review, and a bunch of commented exploits/proof-of-concepts as attachment. We’ll see how it goes.

I have wireguard, it’s supported by my router (Fritzbox).

You’re right, I added a question mark.

Thanks for posting, what a wild ride.

The screenshot is supposedly from a Nazi forum and they claim to have infiltrated db0 and possibly other instances by becoming admins.

This screenshot is passed around a lot today. It’s hard to prove it’s authencity because it’d be very easy to just pretend you have infiltrated something and create a chat like this just to stir shit up and damage db0’s “reputation” and the trust between admins.

The mentioned instance’s main admins should look real hard if their other admins are actually doctoring opinions by abusing their admin powers/authorities and check how they’re recruiting their admins. I would imagine it’s not super hard to get into there when moderation in the fediverse is pretty tiring and you appreciate any help.

I don’t follow db0 or the other instances closely so idk how likely it is in this case. Just saying it’s absolutely possible but the screenshot doesn’t prove anything.

Yes, the dual partition approach is what I usually do with LUKS

Depends on what your goal is. .social has half a million active users every month, so it certainly had some impact

Finally, selfhostable ads to deploy across your homelab services!