• 10 Posts
  • 39 Comments
Joined 1 year ago
cake
Cake day: July 3rd, 2025

help-circle









  • I haven’t hosted something big in the past but I have dabbled sometimes

    The ssh knockers have always been there. But now the blocklists are either more accessible or I just have heard about them more in the meantime

    Scrapers did not use to DDoS so aggressively but also have been there. Now we have the challenges (anubis, cloudfront, captchas) to mitigate their hunger (and the blocklists)

    What has changed is that now one needs to remember what a piece is written in. A PHP vulnerability one day, Go another. And everytime one has to run through the list “what the stuff we’re hosting is written in”. But personally, I think this will pass. What is being discovered right now are often long-standing bugs, so the only mitigation is update. Once the vulnerabilities are coming from a recent change, sometimes it will be patched before we need the newer version of a library



  • Massive shout of thanks from myself to INeedMana for jumping in and spending hours fixing this with me, guiding me, and putting up with my stress and panic!

    When we were hit by scrapers the other month, both load and CPU utilization were going through the roof, server was choking even on sending ssh data. So that load of all cores being requested, while uncharacteristic, didn’t automatically feel alarming. It wasn’t that bad
    When I was sitting down to take a look at the cron jobs, I was not expecting to find what we’ve found. And by the time I was getting API errors on simple docker exec I was starting to run in circles

    I’m very grateful that you were there, even though it was well past midnight for you. It was much more manageable to get through that in a duo