one of the annoying things about indieweb is that people will just take it upon themselves to pentest your website. like well done you broke into my git repo and fucking wiped all the info there and replaced it all with a "security notice". all this does is make me not want to use git again?
Timeline
Post
Remote status
Replies
13nothing to do with LZ btw
@Velveteen s/indieweb/internet
s/people/bots
@kirby yeah i guess i just have never in my life experienced this many annoying emails from "white hat security researchers" that are breaking into my shit for no reason. like i dont think you can call yourself white hat if you're breaking in without permission and then deleting my git repo you know? it's just frustrating
@kirby not only frustrating but like, illegal too i guess
@Velveteen the russian bots don't care about nuttin unless they can extract a few extra bucks out of you. how did you set up git btw? i ask to see if i could guess how what happened happened
@kirby i didn't think there was any special way to set up git.
i had my website on a server and i was working on it directly (it's just pure hand written html/css/js), and i had it set up as a repo so i could keep a backup on a git forge. it wasn't like i was keeping any weird secrets or anything, and there's nothing else even on the forge but the html for my website lol. i had an nginx rule for anything at /.git to 404, too.
as far as i was aware that was just pretty much all it took to put a website on the internet like it always was for the past 15 years i've been hosting little websites for myself but apparently these days everyone is a skid or a bot.
i had my website on a server and i was working on it directly (it's just pure hand written html/css/js), and i had it set up as a repo so i could keep a backup on a git forge. it wasn't like i was keeping any weird secrets or anything, and there's nothing else even on the forge but the html for my website lol. i had an nginx rule for anything at /.git to 404, too.
as far as i was aware that was just pretty much all it took to put a website on the internet like it always was for the past 15 years i've been hosting little websites for myself but apparently these days everyone is a skid or a bot.
tbh i don't like git, i think it's shite. this just gives me another reason to not bother with it in the future
@Velveteen some nerds just got too much time on their hands
@Velveteen unfortunately, literal skill issue. it's less of a problem if its just your data and not like anything important like your bank passwords, but even if you're being entrusted with people's medical records, your computer could still get turned into a botnet by a russian to take down whatever. not using git if you're getting pwned is really treating the symptom. i don't think most people should be actually using computers
@shibao @Velveteen >your computer could still get turned into a botnet by a russian to take down whatever
I dunno that also sounds like a skill issue. Don't Windows and don't javascript, and subscribe to some low-frequency alerts for your distro (or just check fedi regularly), you'll be fine.
I dunno that also sounds like a skill issue. Don't Windows and don't javascript, and subscribe to some low-frequency alerts for your distro (or just check fedi regularly), you'll be fine.
@shibao yeah there is just some fundamental complication that I don't understand with how git works since it is twice now this has happened. My site is still live and nobody has ever broken in over ftp or ssh and git isn't really a crucial component in this case anyway so like idk I think not using git is a fair concession in this case. Thankfully I do not have a reason to ever handle data that's actually important
@Velveteen i gotta be honest i don't think git is the problem or the solution