• 0 Posts
  • 8 Comments
Joined 1 year ago
cake
Cake day: June 25th, 2023

help-circle
  • Have you ever had coca tea? It’s amazing - way better than caffeine. It’s more gentle, but stronger - like it gives you more energy, but you don’t get a hard crash, it’s less likely to make it hard to sleep, plus it has all sorts of health benefits - being able to adjust to high altitude for one

    Cocaine probably shouldn’t be sold at the drug stores, but it would be amazing if we treated it like caffeine - you need a license to buy it, but you can get the leaves or products made for it

    Plus we could make a path to legitimize cartels and stop getting people killed over the the war on drugs, which would be nice






  • So what’s going on is the adversaries continuously hitting the lemmy.world server. On its own, a DDOS like that would be manageable - they’re much more defeatable these days

    But they found request paths that run expensive db functions, giving them enough bang for their buck to make an impact, even tucked behind cloudflare.

    As for mitigation, cloudflare and a larger server help, but ultimately lemmy needs some refactoring - right now it’s very liberal with the database calls. It needs to divide those up and get more granular with API calls, look at what can be optimized on the DB side, maybe do some caching/memoization… Basically, it needs to become a more mature piece of software in a hurry

    Going further, there’s things like horizontal scaling - there’s even thoughts of how we could leverage the nature of the fediverse to share the load through federation.

    I’m a dev, I don’t know much about administration so I’m not sure how you could help, but there’s plenty of work to go around. I think a database expert would be the most useful right now.

    There’s messing with configs to tune everything for better performance - that’s out of my expertise, but I’m under the impression that there’s some significant gains to be had there

    If it’s in your wheelhouse, you could look at different technologies that might give better performance - the current stack seems like it was chosen mostly with ease of development in mind, if you could make a strong argument for changing some of it out it might get traction.

    As far as cyber security in general, if you want to get started - step 1 is basically locking things down, and then setting up monitoring tools and getting experience with them. Basically reading logs taken to the next level. I’m pretty sure they have that handled here, but this problem will never go away



  • IDK if you can convince it to run on Linux, but I’ve been pretty happy with paint.net lately

    It’s basically a newer project like gimp. It’s got the core abilities and appearance of Photoshop. Feature wise, it’s less than gimp or Photoshop, but what it has works decently well

    Most importantly for me, the UX is much better than gimp… Not as good as Photoshop, but I find stuff is usually where I’d expect it to be

    Obviously it’s built on .net, so theoretically it could run native on Linux… Not sure if anyone has done the work to make that actually happen