Trying to spread the idea that humans need to evolve beyond our current stage based on mutual exploitation and learn to again live on this planet sustainably and without coercion.

  • 0 Posts
  • 11 Comments
Joined 2 years ago
cake
Cake day: July 21st, 2023

help-circle





  • These are interesting thought experiments.

    If I live in say Oregon, and own 20 acres in Montana. Am I responsible for an hourly or daily sweep of my distant property to ensure no CSAM exists lest I be held responsible? Would I need to hire guards to ensure nobody uses a hole in a tree on my property to stash CSAM otherwise be responsible?

    IMHO, it is or should be more what’s reasonable. Obviously hourly sweeps of acres or property is ridiculous but if you run a magazine stand then it should be have some processes to ensure what is sold is legal. Similarly, so long as a lemmy server operator is running by current best practices and isn’t grossly negligent it seems like a bad idea to hold them responsible. As time goes on, best practices will evolve better methods of keeping shit out.

    TBH, my worry is that the owners of Reddit could pay some bad actors to post CSAM to lemmy servers to take out their competition.






  • This is a common pattern, typically called a “jump host” or “bastion host”.

    a script to cat my priv key through the relay

    When it comes to security, I typically recommend against rolling your own. SSH already has agent forwarding option to do this securely and the -J option to accomplish the same without even needing to forward the key. The agent can seem complex at first, it’s actually pretty simple and worth learning.

    Feel free to message me if you have more questions, I’ve got lots of experience w/ SSH.


  • Are you initiating SSH connections from all these hosts?

    If you just need to SSH to these hosts, use a single key and copy the public key only to the hosts you need to connect to. If you don’t want to copy the pubkeys to target hosts, use LDAP + SSSD or certificates.

    Then, if you do need to initiate connections from these hosts and use an SSH agent you can forward your agent and SSH to another host

    client> ssh -A host1
    host1> ssh host2
    host2>
    
    client> ssh -A host1
    host1> ssh -A host2
    host2> ssh -A host3
    host3>