• 0 Posts
  • 24 Comments
Joined 8 months ago
cake
Cake day: April 5th, 2024

help-circle


















  • One aspect is how interesting you are as a target. What would a possible attacker gain by getting access to your services or hosts?

    The danger to get hacked is there but you are not Microsoft, amazon or PayPal. Expect login attempts and port scans from actors who map out the internets. But I doubt someone would spend much effort to break into your hosts if you do not make it easy (like scripted automatic exploits and known passwords login attempts easy) .

    DDOS protection isn’t something a tiny self hosted instance would need (at least in my experience).

    Firewall your hosts, maybe use a reverse proxy and only expose the necessary services. Use secure passwords (different for each service), add fail2ban or the like if you’re paranoid. Maybe look into MFA. Use a DMZ (yes, VLANs could be involved here). Keep your software updated so that exploits don’t work. Have backups if something breaks or gets broken.

    In my experience the biggest danger to my services is my laziness. It takes steady low level effort to keep the instances updated and running. (Yes there are automated update mechanisms - unattended upgrades i.e. -, but also downwards compatibility breaking changes in the software which will require manual interactions by me.)


  • hsdkfr734r@feddit.nltoTechnology@lemmy.worldThe problem with GIMP
    link
    fedilink
    English
    arrow-up
    16
    ·
    edit-2
    6 months ago

    In my opinion it is its limited suitability for (my) common image editing needs. I.e. add a white text with black border to an image.

    But these are my requirements. The developers don’t have to cater to them if they don’t want to. I in turn can decide to not use the program or add the features I would like to see myself (It’s the former for me).

    That is the way it is.

    Edit: The name gimp was never an issue for me. There are far worse.