• 0 Posts
  • 87 Comments
Joined 1 year ago
cake
Cake day: June 9th, 2023

help-circle




  • anteaters@feddit.detoSelfhosted@lemmy.worldCosmos 0.12 major update
    link
    fedilink
    English
    arrow-up
    7
    arrow-down
    7
    ·
    edit-2
    11 months ago

    wow you are getting in quite a nonsensical defensive mood here. I gave my opinion on it and warmaster asked for clarification. If you want to use it go ahead I just pointed out the red flags. If you think it is hateful that people read the readme of your favorite project you really need to grow up. A readme is not the place for absurd ‘promotion’ like it’s a product sold on TV.

    Also it’s not FOSS but a selfmade variation on Apache 2. Check the reddit link, even the author claims it is not FOSS.


  • anteaters@feddit.detoSelfhosted@lemmy.worldCosmos 0.12 major update
    link
    fedilink
    English
    arrow-up
    10
    arrow-down
    7
    ·
    edit-2
    11 months ago

    It is becoming an important threat to you. Managing servers, applications and data is very complex, and the problem is that you cannot do it on your own: how do you know that the server application where you store your family photos has a secure code? it was never audited.

    How do they fix this? Do they audit and approve all source code? Do they submit security patches to the apps they have in their repo?

    In fact, the recent LastPass leak happened because a LastPass employee had a Plex server that wasn’t updated to the last version and was missing an important security patch!

    How do they fix this? Auto updates? Those are going to bite you in the ass extremely hard at some point.

    Things like this are completely untrue:

    Additionally, because every new self-hosted applications re-implement crucial systems such as authentication from scratch everytime, the large majority of them are very succeptible to being hacked without too much trouble. This is very bad because not only Docker containers are not isolated, but they also run as root by default, which means it can easily be used to offer access to your entire server or even infrastructure.

    Most tools currently used to self-host not specifically designed to be secure for your scenario. Entreprise tools such as Traefik, NGinx, etc… Are designed for different use-cases that assume that the code you are running behind them is trustworthy. But who knows what server apps you might be running? On top of that, a lot of reverse-proxies and security tools lock important security features behind 3 to 4 figures business subscriptions that are not realistic for selfhosting.

    Scaremongering and lies.



  • anteaters@feddit.detoSelfhosted@lemmy.worldCosmos 0.12 major update
    link
    fedilink
    English
    arrow-up
    14
    arrow-down
    11
    ·
    11 months ago

    Why use Cosmos?

    If you have your own self-hosted data, such as a Plex server, or may be your own photo server, you expose your data to being hacked, or your server to being highjacked (even on your local network!).

    It is becoming an important threat to you. Managing servers, applications and data is very complex, and the problem is that you cannot do it on your own: how do you know that the server application where you store your family photos has a secure code? it was never audited.

    Even a major application such as Plex has been hacked in the past, and the data of its users has been exposed. In fact, the recent LastPass leak happened because a LastPass employee had a Plex server that wasn’t updated to the last version and was missing an important security patch!

    That is the issue Cosmos Server is trying to solve: by providing a secure and robust way to run your self-hosted applications, you can be sure that your data is safe and that you can access it without having to worry about your security.

    Yeah, no, thanks. That sounds 100% like some snake oil salesman trying to sell me nord vpn or some trash because HaCkeRs.












  • Are you trying to rebrand useful idiot to no longer mean dumbasses who repeat Moscows fairytales 😂? That’ll be as successfull as Russia claiming it did not start WW2 together with the Nazis to eat up Poland.

    Also your link is a fictional opinion piece by some “journalist”. The comment below the article gives a great summary:

    JHC this is one of the worst examples of ‘fantasy realism’ I’ve ever seen. I don’t doubt that the US motives aren’t stellar and never have been but good god man, russia has shown itself for over 400 years to be a brutal imperialist terrorist state and is slaughtering, raping, torturing Ukrainian civilians (men, women, AND children) in a godawful genocide (can’t say that word here? I don’t see a trace of it). You know damn well what would happen in occupied territories if ‘negotiations’ were carried out before russia was thoroughly kicked out of Ukraine and defeated. Putin apologist/tankie is what I see here.

    So still no one in the West threatening Russian territorial integrity. (Because no one gives a shit about that crap land, all we ever wanted was to just buy your resources and let it be)