• 1 Post
  • 128 Comments
Joined 1 year ago
cake
Cake day: July 3rd, 2023

help-circle

  • That’s not how certificates work. In fact, the whole point of certificates is so a man in the middle can’t do that.

    When you try to visit a website at for example websiteA.com, your browser will look at the cert it receives for the website and make sure it was signed by a trusted CA, which your browser keeps a list of locally. A MiTM could make a fake CA to sign their fake websiteA.com certificate with, but your browser would obviously have no record of that fake CA and wouldn’t trust it.

    In order for the attack you’re suggesting to work, the attacker would have to gain access to your host itself and plant their fake CA cert on your computer. Or somehow compromise a real trusted CA which would be… a pretty huge deal.







  • That’s not “Windows phone” that’s “Windows mobile”, the precursor to Windows Phone, which didn’t release until 2010.

    Shifting to Windows Mobile now, in 2006, Windows Mobile 6 had only about 10% market share, behind both Palm OS and Symbian, the latter of which held a whopping 60%. I looked further back in time and I do see that Windows Mobile had a 34% market share in 2001, however it was again dwarfed by PalmOS. It’s also worth it to note that that 34% wasn’t comprised mainly of cellphones, but rather barcode scanning guns in warehouses and logistics, because you could make custom applications for them with relative ease. There are still warehouses today that use those old windows mobile scanner guns.




  • Incorrect. It applies only to the forums. It does not apply in any way, shape, or form to your VPS or the content on it. It’s one thing to be mistaken, but let’s not spread misinformation on purpose.

    A Reddit post incorrectly took portions of our Terms of Service out of context, which only pertain to content provided to Vultr on our public mediums (community-related content on public forums, as an example) for purposes of rendering the needed services – e.g., publishing comments, posts, or ratings. This is separate from a user’s own, private content that is deployed on Vultr services.

    Since our inception, Vultr has been committed to upholding and adhering to the strictest data privacy and protection standards across the world (including HIPAA, GDPR, and DPDPA). Our customers own 100% of their content.





  • To piggy back on your “You don’t need k8s or high availability”,

    If you want to optimize your setup in a way that’s actually beneficial on the small, self hosted scale, then what you should aim for is reproducibility. Docker compose, Ansible, NixOS, whatever your pleasure. The ability to quickly take your entire environment from one box and move it to another, either because you’re switching cloud providers or got a nicer hardware box from a garage sale.

    When Linode was acquired by Akamai and subsequently renamed, I moved all my cloud containers to Vultr by rsyncing the folder structure to the new VM over SSH, then running the compose file on the new server. The entire migration short of changing DNS records took like 5 minutes of hands-on time.


  • Caddy is so simple you don’t really need configuration examples. The extra configuration many docker services have you configure in Nginx are already done by default with Caddy. Though I have seen Caddy config examples around sometimes.

    If all you’re using it for is reverse proxying, you don’t need config examples for Nginx or Caddy, just understand how to configure them.