• 0 Posts
  • 22 Comments
Joined 1 year ago
cake
Cake day: June 12th, 2023

help-circle



  • None of this forces you to use their imager though… It’s barely a hoop, most people running multiple pi’s as servers will have done this for a reason other than ssh anyway.

    And yes one solution to this security problem is to require changing the username and password, the more effective solution is to not have the process running at all, unless specifically enabled. I’m sure that sentence sounds familiar from your company’s security team.

    Raspberry pi’s serve a lot of purposes, many of those purposes don’t need ssh. But if you enable it by default that opens the pi up to being a target, which we saw be a huge problem before this change.

    Also, this is not the only distribution that has ssh disabled by default. It’s just the only popular distribution I’m aware of that doesn’t have a server image option 🤷‍♂️ it’s actually standard security procedure.

    For example, if you install Ubuntu desktop, it’ll have ssh disabled, because it is standard. Pretty much any distro should do this as well as long as it’s not their “server” ISO.

    In any case it’s a good practice to backup your images regardless of what hardware you’re running on, especially if you’re running a cluster, it allows for easy reproduction across the cluster.

















  • No problem, and it makes sense from a technical perspective if you care.

    Lemmy instances are not operated by a single entity, which means their uptimes are going to differ, possibly dramatically. If the federation simply linked to the other instances, then if say Lemmy world went down, all the instances that federate with it would have a lot of broken content.

    Instead, what happens is that the content is still interact able on the other instances, because there exists a copy. When Lemmy world comes back online, content gets synced and merged from the instances that were still available.

    It allows for a natural redundancy, so what you can do, is create another instance all your own, curate only the things you care about, and have that data populated on your instance. Then the next time we’re in an upgrade cycle you can still view previous content from Lemmy world and others instead of constantly just getting a 503 error.