• 57 Posts
  • 838 Comments
Joined 11 months ago
cake
Cake day: June 21st, 2024

help-circle

  • This article is IMO factually wrong. Just take one example:

    Passkeys only solve one use case - phishing where the user inputs their password and MFA into a fake site.

    Passkeys solve a few issues:

    • Phishing resistent
    • Unique per site (e.g. protection against credential stuffing)
    • Immune against brute force attacks
    • And offer an (optional) way to log in with biometrics

    This tech is clearly not perfect, but not as bad as this article suggests.

    Also, you can store passkeys in a password vault like bitwarden and have it available on all your devices.





  • I’m currently following this guide to setup caddy reverse proxy with coraza web app firewall.

    But be warned, this whole rabbit hole of WAF isn’t trivial, some protections don’t work well with some apps (e.g. portainer triggers some rules about system command execution) and it needs some tuning. I personally set it up to learn more about WAFs because I believe it will help me in my career, but I would not blindly recommend it to everyone.

    Approaches like crowdsec and fail2ban seem much more suitable for selfhosters – and keep your server software updated.



  • Great idea. Would be even better if we turned lemmy into an AI only social network. Thousands of bots will create content, vote and comment. And all this could be done without user interaction.

    Finally, even the super niche communities will have hundreds of bot comment per day, and all human lemmy users will leave voluntarily (thus reducing the need for moderation).