• 4 Posts
  • 1.13K Comments
Joined 3 years ago
cake
Cake day: July 3rd, 2023

help-circle
  • CrowdSec isn’t really for protection against novel threats. It’s just a crowdsourced Fail2Ban that’s extensible with custom rules.

    If you and I are both using CrowdSec, and some foreign machine is trying to brute force into one of my services, then when it tries to do the same to you it doesn’t even get the chance to try. It cuts down on the load.

    You can also define your own scenarios. Most of the rules it ships with block IPs using a leaky bucket method but I have a custom rule that instantly blocks anyone trying to log into anything using usernames like admin, root, pgadmin, etc.




  • The conversation we’re having doesn’t involve the place of irrelevance you’re trying to pull it to.

    It’s not bitching about AI, it’s a conversation that’s different from the one that you’re trying to have.

    I’m not trying to shame you, I’m just letting you know that the weird semantic sidebar you’re trying to start is irrelevant to what’s being discussed. We don’t have to stop what we’re doing and explain this to you just because you’re demanding it.











  • Sure you can. Because in this case Pandora’s box is something which exists solely through a sustained, inconceivable amount of money being continuously funneled into it without any guaranteed long term benefit to the people who do so. It’s a technology which isn’t sold as a product as it exists in its current form, but a theoretical future form.

    If the bottom were to fall out from under it tomorrow, it couldn’t even continue to exist as it is now, it would disappear entirely as there would be no financial incentive to keep it running. Individuals could still run what we have now offline, but its value and usefulness would degrade rapidly as time went on, because it relies on mass-scale power consumption and data theft to remain up to date, much less improve.





  • Couple reasons.

    • Jellyfin is not security software, and given the inconsistency and general lack of polish of every other aspect of Jellyfin, its raw login page is not something I’d comfortably expose to the internet to begin with.
    • Quick connect is a poor, unintuitive imitation of Device Flow. A non-technical user would have to also have a Jellyfin app or bookmark in their phone already, and know where to navigate in it to reach the quick connect function. This on its own is insurmountable.
    • It’s not SSO. Jellyfin is yet another username and password they must remember when every single other thing I self host supports OIDC out of the box and they get one user account for everything.