Posted in
Fediverse
I have my blog address (which goes to my home server) in my Mastodon profile, and every time I post on Masto, my server gets a request from every Mastodon site that federates with my instance - i.e. hundreds of requests. It’s no problem for my server, because my blog is a static site, but for anything that dynamically generates every single page impression (like worpress or joomla), it could be a problem. Caching settings might help, I suppose.
Truth is, though, I get far more traffic from vulnerability scanners and AI crawlers that don’t honour robots.txt (or aren’t yet listed).
To be honest, if a website has no caching of their server-rendered parts, they are also doing something wrong! Very little sites really need to re-render a public page on every view.
@dansup Hi it seems pixelfed.social is down 😿
@TheForeignAgent Yes, it will be back in a few hours after the php vulnerability is patched!
Everybody loves containers until the deepest component of every running system has a security issue
Posted in
Fediverse
it seems like ideally it shouldn’t attempt to preview the link before a user tries to view the content. i guess that would increase latency for users though
@dansup Hi it seems pixelfed.social is down 😿
I think PHP probably has to bring forward the release as cyber vendors who have advanced notice told customers details so now everybody is running around with details.
There’s probably a conversation to be had about cyber vendors effectively reselling open-source project intelligence for profit. I don’t think it is great. Protecting the ivory tower sucks.
i really like PHP. in my experience, its full of insane issues and functions called "doThingSecurely_final_FINAL". but it's a tool, like excel or hypercard, that lets a normal person make Web without years becoming a Web Developer. you could just throw it onto a server and make a view counter or whatever. just mash it in there in the HTML for some basic dynamic feature on an otherwise-static page. wow! then 'Developers' ruined it, like with javascript, by trying to use it to make actual software
Posted in
Fediverse
TIL the fediverse basically DDOS's sites when you share a link.
I shared a link from NPR Tiny Desk but there was no image preview or video embed. After investigating this I learned that when you do that, each instance picks up the link and individually retrieves the link preview nearly simultaneously. For gargantuan sites like YT or Reddit, this is a trivial amount of traffic and not a problem, but for smaller sites like NPR this results in a sort of botnet DDOS attack on the site’s servers. More here. Another example here . For that reason, NPR has blocked Fediverse servers like Mastodon.
I have experienced this on my personal server as well (DDOS), but at the time didn’t know why, exactly.
This isn’t the end of the world, but certainly is not great and hurts engagement with the content. Is there a solution for this? Perhaps using some sort of webtorrent service like PeerTube where they just fetch the information from another fediverse server instead of the source server? Maybe fetching embeds client-side? At least that would stagger the requests.
Posted in
Fediverse
Thanks for bringing this up. I think in general we need to work on optimisation of Activitypub and Threadiverse implementations of it.
Posted in
Fediverse
Similar, except those are caused by users visiting a link, whereas the Fediverse issue is federated servers gathering info before users even see a link.
The Wall Street Journal has now independent sourcing on this, oligarch Musk ordered the introduction of Starshield limitations for Ukraine.
The limitations caused failed interceptions of Russian drones, resulting in many civilian Ukrainian casualties.
https://www.wsj.com/world/ukraine-starlink-elon-musk-trump-dbc49193
The restrictions are still in place to this day, and have been preventing Ukraine from defending itself from the Russian piston engine-driven Geran drones.
@fj "The Wall Street Journal has now independent sourcing on this, oligarch Musk ordered the introduction of Starshield limitations for Ukraine."
www.wsj.com/world/ukraine-starlink-elon-musk-trump-dbc49193
This is pay-walled. Is there a reliable open source for this claim?
@aeris Tu fais référence à quoi cette fois ? T’en as trop dit ou pas assez.
well there it fuckin is lol
> SpaceX and Tesla boards are exploring potential merger
> Elon Musk says combining his two public companies would be a ‘good idea’ as the world approaches an AI singularity
https://www.ft.com/content/f2a2a578-5a2e-42ff-b4c9-8bafff271b37
archive: https://archive.ph/RS2z1
@davidgerard Time for one last payday from the company he lost interest in as it's not as easy to use to drive fascism. It's going to be fun to see liberals defend buying Tesla's after this merger... Oh the excuses they shall make.
Posted in
Fediverse
So we need people to just mass post links to bad websites, is what you’re saying.
﹒﹡﹒﹡﹒
﹒
﹒﹔﹒
﹒﹒﹒
﹠﹡﹠﹡﹠
﹒﹒﹒
﹒﹔﹒
﹒
﹒﹡﹒﹡﹒
Everybody loves containers until the deepest component of every running system has a security issue