Hi there,

I’ve upped it to 50 characters.

Hey everyone,

A few days ago when we were under bot attack I rolled out a script to help me mitigate the attack. This script essentially calculated that rate at which certain IPs were posting and added them to a block list. Some of the IPs from other instances such as lemmy.ml were falsely added to this block list. I’ve since gone through all of the IPs and removed the ones that shouldn’t have been there.

Please let me know if anyone is still having issues and I’ll do my best to review your particular case in a timely manner.

Hey all,

As others mentioned we did not have custom emojis so we were not affected by this particular attack. I have since upgraded our UI to 0.18.2-rc.1 which mitigates this XSS vulnerability.

The vulnerability appeared to be from a custom emoji that they were running. SJW does not use any custom emoji so we should not be affected. In either case lemmy.world has now been restored and is back online. I’ll keep an extra eye on this instance until the patch gets released shortly.

The 530 is 2U, the 630 is 1U size factor. Looking more at the 630

Something with Dual CPUs, at least 128GB ram, dual 750W PSUs, hardware raid (12Gbps) and 8 x 2.5" SAS/SATA slots for SSD Drives on a raid 10

This is what I’m currently working towards. Waiting for a Fiscal host to accept our application!

After the latest upgrade I have re-enabled captcha’s and remove the need to confirm via email.

If I were to do some rough math I’d say it would cost about $300/CAD per month.

My goal is once we are approved to start accepting donations that I can purchase dedicated hardware for this instance. I’d get a used server at about $2300 which would be sufficient a good amount of extra users and through it into its own dedicated shared colo at about $100/month. Factor in about $300-400 a year for drive replacements and we are left with $2300 / 12 month= 191.66 + 100/month for the shared 1u colo + a budget of $400 for drive failures throughout the year $33/month. 191.66 + 100 + 33 = $324.66/month for the first year dropping to about $133 per month after the first 12 months. It’s worth noting that this method would give us double the amount of resources and quite a bit of extra storage.

Ideally we don’t keep this instance on a single server forever and start to think about spreading it over multiple hosts at or after around 100K users (or less if the number of active users is high).

If someone wanted to host an instance they would not need to allocate as much resources as I have to this instance and depending on how active the instance gets could run off something a lot less powerful.

I very much appreciate you guys keeping pushing me on this. There is more involved than I had originally anticipated in being able to accept donations. We are currently waiting for a fiscal host on opencollective.org to approve our application which was submitted in June. Once it’s been approved this instance will be accepting donations!

Hey all,

I’ve been busy coding some counter measures for the attacks on this instance today. Most of the stuff has since been cleaned up. Have temporarily disabled community creation until we get some extra security implemented. The communities that you see above should all have been purged at this point. Thank you

Hi Nahvi.

Thanks for posting this well put together post. I can tell that you put some time and thought into this and I want you to know that I recognize that.

Regarding your concern, this is a topic that has been brought up numerous times over the past month. I’ve since moved towards being more community driven, letting users discuss and debate on topics that are important to them. These discussion move forward towards a vote over a 7 day period. This process will change over time as we come across flaws and look for ways solve them together.

One more thing I want to make clear regarding your tl;dr question Will I be blocking other instances for personal reasons? Short answer is no, I believe the community should determine what should or should not be blocked.

That being said I want to make myself clear that there are limitations, I will continue to defederate instances that openly promote or spreads hate speech, terrorism, CP, loli, trolling and instances that become bot instances. These shouldn’t be things that need to be justified, I think they fall under the “be a good human” category.

I hope this clarifies your concerns and you continue to make sh.itjust.works your home.

Locking this thread. This issue was related to the language selection found in the user profile.

This issue has been resolved.

Yes this is a great idea. I will definitely be doing this.

This is likely the case. Ive gotten a few people reach out to me with this same issue. The update is around the corner, hopefully it fixes a bunch of these bugs

Something I probably missed when I first spun up this instance to be honest. Should have been enabled from day 1.

From my understanding, the new version that should be released in the few weeks should fix a lot of these weird bugs

Alright most of the problem was related to not having and RDNS setup for the instance IP. I’ve since implemented an RDNS/PTR solution for the IP however DNS being DNS, it could take anywhere from 48-72 hours before we will see it applied globally.