Comment on 700+ self-hosted Git instances battered in 0-day attacks

• 1984@lemmy.today ⁨4⁩ ⁨days⁩ ago

  Yeah. If I needed collaboration, I would just whitelist their ips or require everyone involved to use Wireguard vpn, Tailscale or other solutions that allows access without being publically exposed.

  source

  • quick_snail@feddit.nl ⁨4⁩ ⁨days⁩ ago

    That kills collaboration from new people who just, like, discovered your project on some Lemmy thread

    source

    • Natanael@infosec.pub ⁨4⁩ ⁨days⁩ ago

      They can still collaborate old school way. You can publish static mirrors of git, then take email patches lol

      source
• greedytacothief@lemmy.dbzer0.com ⁨4⁩ ⁨days⁩ ago

  I do the same thing. Anything I put on there isn’t something that I would share with the Internet anyway. If it was a serious project, sure. It’s just nice to have a personal git you can access over a VPN sometimes.

  source

  • quick_snail@feddit.nl ⁨4⁩ ⁨days⁩ ago

    I can’t understand why anyone would waste time writing code that won’t be shared

    source

    • mic_check_one_two@lemmy.dbzer0.com ⁨4⁩ ⁨days⁩ ago

      Personal projects. Not everything has to be FOSS. My tiny little script to automate my lights turning green and my smart speaker playing All-Star by Smash Mouth at full volume, so I can jork it in peace? That shit doesn’t need to be public.

      source

      • AA5B@lemmy.world ⁨3⁩ ⁨days⁩ ago

        Home Assistant hs communities to share exactly that

        source
      • quick_snail@feddit.nl ⁨4⁩ ⁨days⁩ ago

        Yes, it needs to be public. The videos too.

        Take my money.

        source
    • communism@lemmy.ml ⁨4⁩ ⁨days⁩ ago

      For personal use? To automate tasks you do or solve a problem you have?

      source
    • mko@discuss.tchncs.de ⁨4⁩ ⁨days⁩ ago

      For personal use. As someone you has all my non-trivial creations, including dot-files and scripts I replicate between machines, in repos since CVS has a thing it’s a habit. Version control. This stuff is mostly private but not secret, why should I have it public?

      source
    • uncouple9831@lemmy.zip ⁨4⁩ ⁨days⁩ ago

      Don’t kink shame,.man

      source
    • greedytacothief@lemmy.dbzer0.com ⁨3⁩ ⁨days⁩ ago

      Dunno, I just don’t believe my NixOS config files are particularly valuable. What is the benefit of sharing garbage code from a novice? I’d rather share things worth sharing, that could be useful to someone else.

      source
• Jason2357@lemmy.ca ⁨3⁩ ⁨days⁩ ago

  You can git pull a repo to your machine, make your changes and then use git to submit a patch via email. Its not pretty, but it works. Hopefully federation is built soon and you will be able to submit a pull request from your own forge.

  source