one of the annoying things about indieweb is that people will just take it upon themselves to pentest your website. like well done you broke into my git repo and fucking wiped all the info there and replaced it all with a "security notice". all this does is make me not want to use git again?
Timeline
Post
Remote status
Context
4
@Velveteen s/indieweb/internet
s/people/bots
@kirby yeah i guess i just have never in my life experienced this many annoying emails from "white hat security researchers" that are breaking into my shit for no reason. like i dont think you can call yourself white hat if you're breaking in without permission and then deleting my git repo you know? it's just frustrating
@kirby not only frustrating but like, illegal too i guess
@Velveteen the russian bots don't care about nuttin unless they can extract a few extra bucks out of you. how did you set up git btw? i ask to see if i could guess how what happened happened
Replies
1
@kirby i didn't think there was any special way to set up git.
i had my website on a server and i was working on it directly (it's just pure hand written html/css/js), and i had it set up as a repo so i could keep a backup on a git forge. it wasn't like i was keeping any weird secrets or anything, and there's nothing else even on the forge but the html for my website lol. i had an nginx rule for anything at /.git to 404, too.
as far as i was aware that was just pretty much all it took to put a website on the internet like it always was for the past 15 years i've been hosting little websites for myself but apparently these days everyone is a skid or a bot.
i had my website on a server and i was working on it directly (it's just pure hand written html/css/js), and i had it set up as a repo so i could keep a backup on a git forge. it wasn't like i was keeping any weird secrets or anything, and there's nothing else even on the forge but the html for my website lol. i had an nginx rule for anything at /.git to 404, too.
as far as i was aware that was just pretty much all it took to put a website on the internet like it always was for the past 15 years i've been hosting little websites for myself but apparently these days everyone is a skid or a bot.