Is there something requiring people to login to view anything posted from infosec.pub?

I created this post in mildly infuriating from this account but cannot click the share and share the link. You’re just taken to a login page. To share it I had to find the lemmy.world link.

Thanks!

The link https://infosec.pub/post/51688004

  • daveyOsborn@infosec.pub
    0·
    2 个月前

    Normally I would say the best link for sharing is that of the host for the community, not the host of your account. But in this case you posted in Lemmy.world, which is jailed in the exclusive walled-garden of Cloudflare™. I highly suggest not posting in Cloudflare. It’s a centralized walled garden by an oppressive US-based tech giant. Might as well use Facebook at that point.

    There is one open free-world “Mildlyinfuriating” community: [email protected]. I suggest posting there first, and then share that link. If you cannot stomach the idea of less reach/engagement or cannot resist the urge to use LW, at least make your first post in the free world and crosspost into the walled gardens so the ignorant walled-gardeners at least learn about the existence of free world communities.

    Now to answer your question, the infosec.pub admin is also the fedia.io admin. This post could¹ give some insight:

    https://fedia.io/m/fedia/t/2188602/Fedia-io-performance-issues-and-blocking-anonymous-access

    That is, anonymous access to infosec.pub could have been blocked for the same sort of reason.

    ¹ But you may need to create an account on fedia.io to read that… LOL.

    copy of linked post

    Hi all. Fedia.io has for a long time been subject to ddos attacks, including many that are “accidental”, caused by myriad scrapers constantly hammering the site. I gave up on trying to play whack-a-mole with blocking them based on IP address (they do not honor robots.txt and do not use a conspicuous user agent string) since I was inadvertently blocking some legitimate users. So, I’ve restricted access to the content of fedia.io to only those that are logged in. That will mean we don’t show up in search engines and whatnot, which for some will considered a good thing and will likely cause others to leave.

    There is a remaining problem related to the login form. Calls to the login page are breathtakingly expensive, computationally speaking, and so I also have a script that monitors unusual numbers of calls to that form and blocks at the firewall any offenders. I strongly suspect I’m catching some legitimate users with this too, and so I continue to try to tune it, but it’s maddening, y’all.

    These issues have been causing performance problems for everyone (despite the fedia.io app running on a dedicated 96 core, 256GB server with nvme disks), and became unavailable for certain people that accidentally tripped various thresholds. I’m hoping most of this is resolved now.

    Thanks for the patience.

    update

    Found this: https://infosec.pub/post/45546187

    I erroneously assumed you would have already looked in [email protected] so I did not initially look myself.

    • dmtalon@infosec.pubOP
      0·
      2 个月前

      I appreciate the response as it was quite confusing what was going on.

      I will say I find it interesting you are calling my use of [email protected] as not being open/the problem, but isn’t the isolation (setting as private) infosec.pub more of a walled-garden and less open? I can freely share the link of the community post I made even if it is hosted through cloudfare.

      I’ve been on Lemmy a while now. Moved here during the first great migration (aka API-gate), and I imagine [email protected] didn’t exist when I subscribed to lemmy.worlds community or maybe there were only 3 people in it. Surely the expectation is not to keep monitoring all my communities and check if a better version of said community pops up. Also, as an end user that is on Lemmy because I want a non techbro place to read news topics/share crap going on when appropriate, like yesterday this type of stuff explains very clearly why Lemmy is and will continue to be a ghost town in comparison. The barrier to entry/understanding is up there which is not welcoming imho.

      I picked infosec.pub as a ‘non lemmy.world’ instance because the growing pains of the migration influx and most users signing up there. I thought it made sense to join somewhere outside the main instances, and being in IT / dealing with infosec in my life I thought “that makes sense”.

      I get this is a big boy world and I have blocked instances that do not align with my opinions and after reading the attached thread, protecting the instance is top priority so I understand the temporary use of private instance, but that was 4mo ago now.

      Again, as an end user not playing politics of instances/communities (or trying not to) it’s hard to keep up. I did search before posting but did not use the search term ‘anonymous’ I was focused on terms like ‘login’ or ‘access’ and the like and missed anonymous and that post. I was in fact not a member of this community until I was searching to figure out why my post was not directly sharable using the icons within my app/browser. If it’s appropriate to share the community links, why does the link button not list that? OR why is there an option in the share to share instance link or community link? This, is of course a rhetorical question I don’t expect you to have that answer but it is yet another ‘barrier to entry’ that even after 3 years is biting me.