archive.today and archive.ph (also .is, .md, .fo, .li, .vn) could be Russian assets.

  • 4 Posts
  • 615 Comments
Joined 9 months ago
cake
Cake day: March 5th, 2025

help-circle




  • Can’t hurt to quote a bit more:

    — joining Adalah’s existing list of now more than 100 Israeli laws that discriminate against Palestinian citizens.

    One of the report’s central findings is a sweeping assault on freedom of expression, thought, and protest across a wide array of arenas. It includes laws prohibiting the publication of content that includes “denial of the events of October 7,” as determined by the Knesset, and restricting broadcasts of critical media outlets that “harm state security.”

    Another authorizes the Education Ministry to fire teaching staff and withdraw funding from educational institutions based on views it considers expression of support for, or incitement to, a terrorist act or organization. And alongside a state-led campaign to deport international solidarity activists, a third law bars foreign nationals from entering the country if they have made statements critical of Israel, or have appealed to international courts to take action against the state and its officials.

    But perhaps the most dangerous bill is one that targets citizens who merely seek to consume information from sources the state doesn’t like. Just a month after October 7, the Knesset passed a two-year temporary order — renewed last week for another two years — that outlaws the “systematic and continuous consumption of publications of a terrorist organization,” carrying a one-year prison sentence. In other words, the legislature now criminalizes conduct that takes place entirely within a person’s private space.

    All happening silently while the public is busy wrapping their heads around more overt government activity. Sound familiar?


  • the evidence points to the use of an agent that the French military named “camite”.

    The Georgian authorities said our investigation findings were “absurd” and the police had acted legally in response to the “illegal actions of brutal criminals”.

    Camite was deployed by France against Germany during World War One. There is little documentation of its subsequent use, but it is believed to have been taken out of circulation at some point in the 1930s, because of concerns about its long-lasting effects.

    Couldn’t make up anything more cynical than this.



  • Sounds like they haven’t had sufficient funds to keep it in good repair, yet they’re announcing that after decomissioning the ISS they will launch their own Russia-only space station. Baloney?

    Anyhow I feel they’re busy with other things right now and launching astronauts is not their #1 priority. But this could point to Russia’s economy/society crumbling more and more, so it’s still a net positive.

    The only thing that really pisses me off here is that it will most likely play into Musky Melon’s hand.



  • If crowdsec works for you thats great but also its a corporate product

    It’s also fully FLOSS with dozens of contributors (not to speak of the community-driven blocklists). If they make money with it, great.

    not exactly a pure self hosted solution.

    Why? I host it, I run it. It’s even in Debian Stable repos, but I choose their own more up-to-date ones.

    Allow me to expand on the problem I was having. It wasnt just that I was getting a knock or two, its that I was getting 40 knocks every few seconds scraping every page and searching for a bunch that didnt exist that would allow exploit points in unsecured production vps systems.

    • Again, a properly set up WAF will deal with this pronto
    • You should not have exploit points in unsecured production systems, full stop.

    On a computational level the constant network activity of bytes from webpage, zip files and images downloaded from scrapers pollutes traffic. Anubis stops this by trapping them in a landing page that transmits very little information from the server side.

    • And instead you leave the computations to your clients. Which becomes a problem on slow hardware.
    • Again, with a properly set up WAF there’s no “traffic pollution” or “downloading of zip files”.

    Anubis uses a weighted priority which grades how legit a browser client is.

    And apart from the user agent and a few other responses, all of which are easily spoofed, this means “do some javascript stuff on the local client” (there’s a link to an article here somewhere that explains this well) which will eat resources on the client’s machine, which becomes a real pita on e.g. smartphones.

    Also, I use one of those less-than-legit, weird and non-regular browsers, and I am being punished by tools like this.

    All the self hosters in my internet circle started adopting anubis so I wanted to try it. Anubis was relatively plug and play with prebuilt packages


    edit: I feel like this part of OP’s argument needs to be pointed out, it explains so much:

    All the self hosters in my internet circle started adopting anubis so I wanted to try it. Anubis was relatively plug and play with prebuilt packages


  • EU’s foreign policy chief Kaja Kallas said such threats posed an “extreme danger” to the bloc, arguing it must “have a strong response” to the attacks.

    Last week, Italian Defense Minister Guido Crosetto slammed the continent’s “inertia” in the face of growing hybrid attacks and unveiled a 125-page plan to retaliate. In it, he suggested establishing a European Center for Countering Hybrid Warfare, a 1,500-strong cyber force, as well as military personnel specialized in artificial intelligence.

    “Everybody needs to revise their security procedures,” Polish Foreign Minister Radosław Sikorski said on Nov. 20. “Russia is clearly escalating its hybrid war against EU citizens.”

    Walk the talk

    Despite the increasingly fierce rhetoric, what a more muscular response means is still an open question.

    Part of that is down to the difference between Moscow and Brussels — the latter is more constrained by acting within the rules, according to Kevin Limonier, a professor and deputy director at the Paris-based GEODE think tank.

    As much as I’d love for the EU to get its shit together right now, I have to agree with this 100%.

    “This raises an ethical and philosophical question: Can states governed by the rule of law afford to use the same tools … and the same strategies as the Russians?” he asked.

    So far, countries like Germany and Romania are strengthening rules that would allow authorities to shoot down drones flying over airports and militarily sensitive objects.

    National security services, meanwhile, can operate in a legal gray zone. Allies from Denmark to the Czech Republic already allow offensive cyber operations.

    So, some nations (mostly those bordering on Russia) are already taking, hmm, “semi-offensive” action while we’re still waiting on the EU’s official response - the “walk” as opposed to the “talk”.


  • IMO this is largely Debian-specific: this distro seems to hold backward comaptibility in very high regard, so any problem is bound to have a multitude of solutions. In addition, the Debian Wiki is not as well maintained as you-know-whose.

    I see nothing untoward here.

    Except maybe that last sentence, what “s” are you talking about (fwiw, the man page that comes with an installed package should™ be the ultimate authority)?


  • At the time of commenting, this post is 8h old. I read all the top comments, many of them critical of Anubis.

    I run a small website and don’t have problems with bots. Of course I know what a DDOS is - maybe that’s the only use case where something like Anubis would help, instead of the strictly server-side solution I deploy?

    I use CrowdSec (it seems to work with caddy btw). It took a little setting up, but it does the job.
    (I think it’s quite similar to fail2ban in what it does, plus community-updated blocklists)

    Am I missing something here? Why wouldn’t that be enough? Why do I need to heckle my visitors?

    Despite all that I still had a problem with bots knocking on my ports spamming my logs.

    By the time Anubis gets to work, the knocking already happened so I don’t really understand this argument.

    If the system is set up to reject a certain type of requests, these are microsecond transactions of no (DDOS exception) harm.