Diego Roversi | Social GL-Como

senioradmin 14 ore fa (Ricevuto 7 ore fa) • writefreely

Are you still banning, or do you already penalize?

Still using fail2ban just for stopping SSH brute force attempts? Since OpenSSH 9.8 there is a new config option for sshd_config: [strong]PerSourcePenalties[/strong]This option has several parameters where you can define how long a client, based on its IP address, will be blocked, according to the unwanted behaviour. The most important parameters are: [...]

Still using fail2ban just for stopping SSH brute force attempts? Since OpenSSH 9.8 there is a new config option for sshd_config: PerSourcePenaltiesThis option has several parameters where you can define how long a client, based on its IP address, will be blocked, according to the unwanted behaviour. The most important parameters are:

min:duration – the minimum penalty which must be accumulated before it is enforced, default 15 seconds (15s).
max:duration – the maximum penalty which can be accumulated, default 10 minutes (10m).
crash:duration – penalty that cause a crash of sshd, default 90s.
authfail:duration – penalty for disconnecting clients after making one or more unsuccessful authentication attempts, default 15s. Consider also MaxAuthTries, which defaults to 6. So in an default setup an IP would be banned for 15 seconds if someone typed the wrong password for 6 times.
invaliduser:duration – penalty for authentication attempts with an invalid user, default 5s (available since OpenSSH 10.3)
noauth:duration – penalty for disconnecting without attempting authentication , default 1s. Don't change this if you're running monitoring checks against sshd.
grace-exceeded:duration – penalty for not logging in after LoginGraceTime (default: 120s), default 10s.

There is also PerSourcePenaltyExemptList, which is a comma-separated list of addresses to exempt from penalties.

As you can see the default values are quite lax. Let's tighten the rules a bit:

A client should be refused connection for 1 hour after 3 unsuccessful auth attempts (using also MaxAuthTries) and crash attempts.
Since penalties do accumulate and the default max duration is 10 minutes we must define a new maximum penalty.
As for invalid user attempts I set the penalty to 5 minutes, since typos can happen (if OpenSSH >= 10.3)
I don't touch the noauth parameter, since monitoring tools and tools like ssh-keyscan could be blocked.

The resulting sshd_config snippet looks like this (for OpenSSH 10.3 and newer)

MaxAuthTries 3
PerSourcePenalties crash:3600s invaliduser:300s authfail:3600s max:86400s

Since OpenSSH 10.3 is quite new (released on 2026-04-02), most Linux users would want to omit the invaliduser parameter:

MaxAuthTries 3
PerSourcePenalties crash:3600s authfail:3600s max:86400s

This makes tools like fail2ban quite obsolete, if it is used in an default setup just for blocking SSH brute force attempts. Of course, if you're using them in more complex scenarios and not only for SSH, these tools are still useful.

Script Kiddie 19 ore fa (Ricevuto 10 ore fa) • friendica

The media in this post is not displayed to visitors. To view it, please go to the original post.

source: wired.com/story/artemis-ii-mic…

#meme #software #outlook #microsoft #artemis #artemis2 #apollo #moon #technology #humanity #fail #email #omg #wtf #future #history #nasa #space #exploration #science

#software #Space #Moon #science #Meme #nasa #Microsoft #Future #technology #WTF #humanity #Email #history #Outlook #fail #Apollo #exploration #artemis #omg #artemis2

Questa voce è stata modificata (17 ore fa)

52.5046782 13.4490212

captain acab 6 giorni fa (Ricevuto 5 giorni fa) • mastodon

The media in this post is not displayed to visitors. To view it, please go to the original post.

😆 1 6

HackerWorkspace 6 giorni fa • mastodon

LinkedIn Is Illegally Searching Your Computer

browsergate.eu/

Read on HackerWorkspace: hackerworkspace.com/article/li…

#databreach #cybersecurity #privacy

LinkedIn Is Illegally Searching Your Computer

Microsoft is running one of the largest corporate espionage operations in modern history. Every time any of LinkedIn’s one billion users visits linkedin.

^BrowserGate

#privacy #cybersecurity #databreach

ILS Este 1 settimana fa (Ricevuto 6 giorni fa) • mastodon

La sicurezza di un sistema operativo vista da una prospettiva diversa, per chi non vuole davvero fidarsi di nulla.
estelinux.serviziliberi.it/qub…

#QubesOS #Whonix #Sicurezza #Privacy #SoftwareLibero #SistemiOperativiSicuri

Qubes OS: quando la sicurezza diventa architettura

Immagina un sistema operativo che non si limiti a “difendersi” dalle minacce, ma che le renda quasi irrilevanti per progettazione. Non un antivirus, non un firewall aggiuntivo, ma una vera filosofia: separare tutto in compartimenti stagni.

^{Kaneda (ILS Este)}

#privacy #softwarelibero #whonix #sicurezza #qubesos #sistemioperativisicuri

vonblubba 1 settimana fa • mastodon

I progetti open source di cui l'umanità ha bisogno

github.com/Bothari/googlarr

GitHub - Bothari/googlarr: A Plex poster daemon that overlays googly eyes on your media library

A Plex poster daemon that overlays googly eyes on your media library - Bothari/googlarr

^GitHub

Matt Venn 1 settimana fa • mastodon

The media in this post is not displayed to visitors. To view it, please go to the original post.

Meet the awesome judges of our #ASIC demoscene competition: @JeriEllsworth , @WillFlux and @sprite_tm !

tinytapeout.com/competitions/d…

#opensource #ASIC #competition

TTSKY26a Demoscene Competition - Tiny Tapeout

Build a sound and graphics demo on 130nm ASIC

^{Quicker, easier and cheaper to make your own chip!}

#OpenSource #competition #asic @Flux @JeriEllsworth @Sprite_tm

Paul Asadoorian 1 settimana fa • mastodon

The media in this post is not displayed to visitors. To view it, please go to the original post.

I will never look at the Slack logo the same way now

BrianKrebs 1 settimana fa • mastodon

yeah you really can't unsee that. thanks a lot.

Bill 1 settimana fa • mastodon

@briankrebs All you can do now is share the joy.

@BrianKrebs

Liam Proven 1 settimana fa • mastodon

A Dot a Day Keeps the Clutter Away

scottlawsonbc.com/post/dot-sys…

A Dot a Day Keeps the Clutter Away — Scott Lawson

The simplest organization system I've tried is a sheet of colored dot stickers. It's also the best.

^{Scott Lawson}

Mark 1 settimana fa • mastodon

Lolwhut: NS has announced the public sale of ICM / Koploper electric multiple units, with a minimum 15 units per sale.

Really wondering if someone is willing to buy some and for which purpose.

railwaygazette.com/tenders-and…

ICM EMU Trainsets for sale

Organisation: Nederlandse SpoorwegenLocation: The NetherlandsDeadline: 24 April 2026

^{Railway Gazette International}

Questa voce è stata modificata (1 settimana fa)

Trammell Hudson 1 settimana fa • mastodon

The media in this post is not displayed to visitors. To view it, please go to the original post.

I wish they would auction the parts again! My koploper destination sign has a very badly damaged diffuser and I don't want to buy a whole train just to get another one.

Mambonummer5 1 settimana fa • mastodon

I’m withholding judgement until Thursday to be on the safe side, given the upcoming date, otherwise interesting to see where they end up if this turns put to be true. 🙂

OSNews 1 settimana fa • mastodon

Microsoft Copilot is now injecting ads into pull requests on GitHub

Why do so many people keep falling for the same trick over and over again?

With an over $400 billion gap between the money invested in AI data centers and the actual revenue these products generate, Silicon Valley slowly returned to the tested and trusted playbook: advertising.

Now, ads are sta

osnews.com/story/144703/micros…

#ClownCar

Microsoft Copilot is now injecting ads into pull requests on GitHub – OSnews

^OSnews

#clowncar

Diego Roversi 1 settimana fa friendica (DFRN)

Quoto da un giornale nazionale:

"Delmastro e gli altri esponenti di Fratelli d’Italia piemontesi che detenevano quote minoritarie restano al momento fuori della contestazione perché ad oggi non è detto che fossero a conoscenza della provenienza del denaro investito dalla allora 18enne, nominata amministratrice unica della srl con il 50 percento delle quote."

Chi non investirebbe in una società amministrata da una 18enne, che detiene il 50% del capitale? Largo ai giovani!

2 2

Elena ``of Valhalla'' 1 settimana fa friendica (DFRN)

@Diego Roversi una società amministrata da una 18enne che non conosci, altrimenti sapresti chi è il padre.

mi pare un investimento più che ragionevole!

@Diego Roversi

1 1

FediLUG Italia 2 settimane fa • mastodon

Parte oggi una serie di interviste ai responsabili dei progetti Linux italiani presenti nel fediverso.

IL FediLUG intervisterà le distro attive e partiamo con @fuss una distro storica fondata più di 20 anni fa:

fedilug.it/dentro-il-progetto-…

Per non perdere le prossime distro italiane basta seguire il gruppo fedilug: @linux@diggita.com che ha da poco superato i 1000 iscritti e/o iscriversi alla newsletter FediLUG su fedilug.it oppure nella stanza matrix: matrix.to/#/#fedilug:fedimedia…

Dentro il Progetto FUSS – 20 anni di sostenibilità e sovranità digitale nella scuola

Questa è la prima di una serie di interviste che il FediLUG ha deciso di fare per andare alla scoperta delle distribuzioni Linux italiane presenti nel Fediverso.

^{FediLUG (FediLUG Italia)}

@FediLUG Italia - il Linux User Group ufficiale del fediverso @fuss

jolla 2 settimane fa • mastodon

The media in this post is not displayed to visitors. To view it, please go to the original post.

A heads up to everyone who has pre-ordered the new Jolla Phone.

The moment to complete your order is getting close and soon you will be able to finalize your full payment - personal email will follow soon.

Thank you for your trust and your patience. The Jolla Phone exists because of you. ❤️

#Jolla #SailfishOS #DigitalSovereignty #PrivacyFirst #CommunityPowered #European

#SailfishOS #jolla #DigitalSovereignty #European #privacyfirst #communitypowered

plant basEd * 2 settimane fa • mastodon

The media in this post is not displayed to visitors. To view it, please go to the original post.

Ogni tanto alcune cose dal CEdstino vanno pubblicate per forza anche qui.

GabrieleUnicaFede 2 settimane fa • mastodon

La tocca piano!

luca 2 settimane fa • mastodon

Condivido il concetto di base, ma sono di un'opinione diversa.
Visto il grande successo, mi capitò di vedere in TV il primo capitolo. Senza riuscire a guardarlo per intero: sembrava un'accozzaglia di concetti scopiazzati da vare saghe fantasy, ma senza un ordine narrativo, una chiave di lettura. Senza una vera sceneggiatura.
Provai quindi a leggere il libro (prestatomi) e scoprii che era esattamente tale e quale al film. Una compilation di tiktok a narrazione fantasy, senza stile o idee.

Matthew Haughey 2 settimane fa • mastodon

The media in this post is not displayed to visitors. To view it, please go to the original post.

early but strong contender for tweet of the year

Erik Vorhes 2 settimane fa • mastodon

oh my god

∴ esoterik ∴ 2 settimane fa • hometown

they burned the ships but lost the war anyway

:gif_pikachu_hi: 2 settimane fa • mastodon

The media in this post is not displayed to visitors. To view it, please go to the original post.

When you date people in an open source dating app...

#meme #chistemalo

#Meme #chistemalo

Questa voce è stata modificata (2 settimane fa)

Liam Proven 2 settimane fa • mastodon

Chest fridge

mtbest.net/chest-fridge/

Using vertical doors in refrigeration devices is an act against the Nature of Cold Air. Understanding and cooperating with Nature rather than acting against it leads to much better efficiency.

Chest fridge

Chest fridge Using vertical doors in refrigeration devices is an act against the Nature of Cold Air. Understanding and cooperating with Nature rather than acting against it leads to much better efficiency.

^mtbest.net

Nick East (Indie Writer) 2 settimane fa • mastodon

The media in this post is not displayed to visitors. To view it, please go to the original post.

I know some people say they don't read speculative fiction because it's "not realistic" well guess what 😜😂

@bookstodon @books
@worldbuilding @humor@fedigroups.social @humor@lemmy.world @aiop

#Dune
#SpeculativeFiction #FantasyBooks
#FantasyMemes #SciFiMemes #Fantasy #SciFi #Meme #Memes #Humor #Humour #Funny
#Low #High #Epic #Science #Opera #Hard #CottageCore #SolarPunk #Comedic #Whatever #GiveMeAllYouveGot
#Book #Books #Novel #Novels #Bookstodon #Bookworm #Bookwyrm #BookLove

#humour #funny #humor #science #fantasy #Meme #books #book #scifi #solarpunk #Novels #novel #memes #epic #dune #bookworm #Bookwyrm #cottagecore #speculativefiction #fantasybooks #opera #bookstodon #high #booklove #whatever #low #hard #fantasymemes #scifimemes #comedic #givemeallyouvegot @Worldbuilding @Bookstodon Group @books @AMUSING, INTERESTING, OUTRAGEOUS, or PROFOUND @For all things humorous @Humor

K. Reid Wightman 🌻 2 settimane fa • mastodon

The media in this post is not displayed to visitors. To view it, please go to the original post.

Lysander il breve 2 settimane fa • sharkey

cc @da_667@infosec.exchange

@da_667

Viss 2 settimane fa • mastodon

or like

HTTP 200

{"error": 404}

Daniele Figini 3 settimane fa • friendica (DFRN)

mbbrutman 4 settimane fa • mastodon

Greetings fans of DOS networking! I'm working on bug fixes for mTCP. If you have a bug report or a feature request now would be a great time to let me know. Send it by email or ping me here.

So far I've done a lot of "code golfing" (making things smaller and faster). Telnet will have SIXEL graphics enabled and a few bug fixes. TCP has a flow control improvement to help with the occasional stall. And there are a few other small fixes so far too.

#retrocomputing #mtcp

Petra 4 settimane fa • mastodon

Sir Terry Pratchett.

It has been 11 years since death inexplicably refused to give you back.

You still remain the person who has had the biggest influence on me.

Nanny Ogg teaches me to enjoy life.
Granny Weatherwax teaches me to trust in myself, and not to treat people as things
Magrat teaches me that it is ok not to know exactly what I am doing all the time, but to do things I think are important, even if those older and allegedly wiser don't really agree.
Vimes teaches me about determination, family and justice.

There are so many more lessons I learnt from the world you created, and I would not be me without the Discworld.

#GNUTerryPratchett #Discworld #Pratchett

#Pratchett #Discworld #gnuterrypratchett

1 6

BenderIsGreat34 4 settimane fa • gotosocial

@TheBreadmonkey Cohen the barbarian taught me to look after my teeth, and appreciate soft toilet tissue. Terry you are missed.

@Ben

Gina Häußge 4 settimane fa • mastodon

I'm currently making my way through the audio books of the Watch series (currently nearing the end of "Thud!") and am once more reminded of what an amazing author and human being Sir Terry was.

My running (tongue in cheek) theory is that him leaving us broke reality, explaining all the madness of the past decade.

Petra 4 settimane fa • mastodon

@foosel

I have the very same theory!

Terry dying unanchored us from the Discworld and that started the madness

@Gina Häußge

Wayne Werner 4 settimane fa • mastodon

@foosel he was the only thing keeping the disc balanced

@Gina Häußge

Frank Gronenberg 4 settimane fa • mastodon

@foosel Not ashamed to say that those audio books, especially those performed by Stephen Briggs, kept me sane & hopeful during difficult times nearly all by themselves.

#gnuterrypratchett

#gnuterrypratchett @Gina Häußge

Michael Stapelberg 🐧🐹😺 1 mese fa • mastodon

The media in this post is not displayed to visitors. To view it, please go to the original post.

I regularly use ~. but had never bothered to memorize the others. Neat!

Rebane

2026-03-09 15:59:47

did you know that SSH has a little-known secret menu?
i wrote a post about this on cohost a while back, but since that site shut down i'm posting it here too

Jack Rusher 1 mese fa • mastodon

“The LLM generated what was described, not what was needed.”

blog.katanaquant.com/p/your-ll…

Your LLM Doesn't Write Correct Code. It Writes Plausible Code.

One of the simplest tests you can run on a database:

^{Hōrōshi バガボンド (Vagabond Research)}

J👀 1 mese fa • mastodon

This is gold:

In the 1980 Turing Award lecture Tony Hoare said: “There are two ways of constructing a software design: one way is to make it so simple that there are obviously no deficiencies, and the other is to make it so complicated that there are no obvious deficiencies.”

Matthew Dockrey 1 mese fa • mastodon

The media in this post is not displayed to visitors. To view it, please go to the original post.

It took some doing (have I mentioned I'm not particularly great at electronics?), but I think I've worked out all the problems with the v2 prototype of the Conway's Life Cell. Biggest mistake: a completely wrong pin out on the buffer IC. Subtlest mistake: a very slightly different wiring of the second status LED from the breadboard version. On to v3, and then hopefully I can start working on the real boards finally.

Questa voce è stata modificata (1 mese fa)

Jo Shields 1 mese fa • glitchsoc

this year's British entry in eurovision is
a) aggressively british
b) also partially sung in german
c) by a youtuber, mostly famous for building a furby organ
youtu.be/niMKvJ-Itq8

LOOK MUM NO COMPUTER - Eins, Zwei, Drei | United Kingdom 🇬🇧 | Official Music Video | #Eurovision2026

Auf YouTube findest du die angesagtesten Videos und Tracks. Außerdem kannst du eigene Inhalte hochladen und mit Freunden oder gleich der ganzen Welt teilen.

^{Eurovision Song Contest (YouTube)}

Nicolas Dandrimont 1 mese fa • glitchsoc

That's... catchy! I love how much his orange mini is featuring in the music video. Very fond memories of his live performance at @emf in 2022, I hope he does well!

@Electromagnetic Field

Liam Proven 1 mese fa • mastodon

GateMate Personal Computer

A personal computer inspired by the IBM PC, built on the Olimex GateMate A1-EVB FPGA board. Text-mode interface, RISC-V CPU, custom BIOS, and a DOS-like operating system.

gitlab.com/gatemate/pc

(And the project is working on a mainframe, too!)

Personal Computer · GitLab

GateMate Personal Computer: collection of HDL (hardware description for FPGA) modules, software (BIOS, DOS) and documentation.

^GitLab

Damien de Lemeny 1 mese fa • mastodon

The media in this post is not displayed to visitors. To view it, please go to the original post.

I'm not sure if it's legit, but it's an amazing development regardless.

Diego Roversi 1 mese fa friendica (DFRN)

questo è un test di utf-8

💩

1 1

Elena ``of Valhalla'' 1 mese fa friendica (DFRN)

@rag. Gustavino Bevilacqua @Diego Roversi solo i 💩, senza i database di mezzo, giusto? :D

@Diego Roversi @rag. Gustavino Bevilacqua

1 1

rag. Gustavino Bevilacqua 1 mese fa • mastodon

@valhalla
Certo!

Ricordo che il classico augurio a chi fa teatro deriva dall'epoca in cui a teatro si andava in carrozza, e ciò che lesciavano i cavalli sotto al portico davanti al teatro non erano esattamente polveri sottili. E più ce n'era più gente era arrivata.

@Elena ``of Valhalla''

VessOnSecurity 1 mese fa • mastodon

The media in this post is not displayed to visitors. To view it, please go to the original post.

Slots machine vs vibe colding.

Liam Proven 1 mese fa • mastodon

"You don’t have to if you don’t want to."

scottsmitelli.com/articles/you…

<- perhaps the single most eloquent essay against LLM-bot development I've seen. Very long, very worth it.

You don't have to if you don't want to.

"In the year 5555, your arms are hangin' limp at your sides, your legs got nothing to do, some machine doin' that for you." Zager and Evans sang these words in 1969.

^{Scott Smitelli}

Liam Proven 1 mese fa • mastodon

@jtnystrom Fair enough. You do you.

There are legitimate use cases, such as automated translation -- but IMHO very very few of them.

@Johan Nyström-Persson

Jonathan Hartley 1 mese fa • mastodon

Look, I haven't even finished reading the article linked above, but it already dropped new phrase of the month "AIslop’s Fables", so I'm all in.

il Post 1 mese fa • flipboard

Il video del posizionamento del nuovo ponte sull'Arno a Firenze, in timelapse
https://www.ilpost.it/flashes/timelapse-nuovo-ponte-arno-firenze/?utm_source=flipboard&utm_medium=activitypub

Pubblicato su News @news-ilPost

Il video del posizionamento del nuovo ponte sull’Arno a Firenze, in timelapse

Sarà lungo circa 180 metri e collegherà Bellariva e il parco dell’Anconella

^{Il Post}

@News

Walter Tross 1 mese fa • mastodon

Magari qualcuno può votare per me (non ho e non voglio avere un account Instagram) nel sondaggio per il nome del nuovo ponte: "Margherita Hack"

Hacker Memes 1 mese fa • mastodon

The media in this post is not displayed to visitors. To view it, please go to the original post.

when you bruteforce the session cookie and suddenly hit on the admin token

Liam Proven 1 mese fa • mastodon

The Death of Curiosity

medium.com/@cupofcat/the-death…

How nine forces spent sixty years hollowing out the soul of software engineering — and why blaming AI misses the point.

Paulo Delgado 1 mese fa • mastodon

Thanks Liam. Maks' done a great job at eloquently breaking down the symptoms of this illness me and many others have seen in our industry. Now its up to us old farts to share the message and try to bring curiosity back to classrooms and juniors.

Rich Alderson 1 mese fa • mastodon

I thought it was me. It’s all of them, after all.

vitalis 1 mese fa • pleroma

The media in this post is not displayed to visitors. To view it, please go to the original post.

1 3

Questo sito utilizza cookie per riconosce gli utenti loggati e quelli che tornano a visitare. Proseguendo la navigazione su questo sito, accetti l'utilizzo di questi cookie.

Note sull'uso di cookie da parte di questo sito.