I think this makes sense. Another sibling comment implied that this was a product-ified rollout of existing tech, which is of course a useful thing if you're into dnslink. :)
>In NewsBlur’s case, because NewsBlur is a home of free speech, allowing users in countries with censored news outlets to bypass restrictions and get access to the world at large, the continuing risk of supporting anonymous Internet traffic is worth the cost.
This, the backups, the write-up, all make it really hard for me to want to victim-blame the dev for not catching a very silly Docker default.
That having been said
- public ip?
- no fw?
- no password on the mongod instance?
Idk, couldn't be me, not even in dev, just take the 20 seconds to plumb the pw to both sides. Modding me down won't change these facts and won't keep you from being compromised if you take the same lazy steps
Please, someone help me understand. Why would I want this instead of ENS or a traditional domain?
Let's assume that we are interested in decentralization for the sake of censorship-resistance and lets imagine I want to run a website to allow people to share "extreme" political opinions that might not otherwise be normally tolerated on the clearnet web. I set it up with IPFS, and then I register:
1. a traditional domain name
2. ENS (Ethereum Name Service) domain
3. a Tor Onion Hidden v3 Service
4. IPDS "IPFS Subdomain"
After attracting attention of the FBI, the traditional domain gets redirected to an FBI seizure page, presumably.
The ENS domain is governed by a contract that would require a manual M-of-N override of the ENS contract. (I'd love to see a threat analysis of ENS from this angle). I've never heard of this happening and it seems like it would be a very notable event.
The hidden service is, short of attacks on Tor, quite resistant (though usability is quite poor).
And then finally, this submission, IPDS -- I'm not sure I believe that they will be any better than a traditional domain (given the warning at the bottom, and on the interest form).
Can someone help me understand? EDIT: The more I look at this, the more I'm struck by just another sign of how immature the IPFS ecosystem is. Seemingly destined to NIH every last thing. How can you put this landing page up without any other details or acknowledgement of alternatives and expect buy-in?
EDIT2: of course they're collaborating in a cleartext Telegram room. People, get your stuff together, open source collaboration belongs on Matrix. Not Discord. Not Telegram. Period.
The Aviron website clearly states that the device is still perfectly functional as an exercise device without the membership.
Also, I cannot fathom that I'm considering a subscription service for something like this, and yet I am... anything to make exercising fun, I guess.