How would an instance block an IP without storing IPs?
They could be blocking entire IP ranges. So they wouldn’t have to store specific IPs. I’m not in the hosting industry but I would imagine there are groups tracking the CIDR blocks (IP ranges) that VPN providers use for their exit nodes. If such a list exists, a host could simply subscribe to accept whatever updates occur to those lists and implement the block for them.
Yes, when you ban. You can see IP addresses coming through, but the fediverse folks aren’t leveraging your IP for any kind of advantage. No tracking for ads or things. So what security precautions are we taking for Fediverse servers? I peraonnaly do the feel the need, but I’m sure there at valid reasons to do it. But if it’s just tracking and ads, they don’t exist here really.
Honestly, if security is a main concern for anyone here, you should run your own. Anyone can run any of this. Follow what you want, then all connections to Lemmy.world come from your server you control that you connect to. I’m on piefed.social, but I’m planning on running my own eventually.
The gamble of the fediverse is that you’re outside the realm of the blatantly bad actors like the Zucks and Muskerburgs, but you’re also off the edge of the map. No reason to believe that there be no dragons here. Anyone can run one, which includes bad actors. I wouldn’t be implicitly trusting that the hundreds of individual volunteers that keep the fediverse afloat all have good intentions. cough.ml serverscough
Not sure about that last paragraph. How would an instance block an IP without storing IPs?
They could be blocking entire IP ranges. So they wouldn’t have to store specific IPs. I’m not in the hosting industry but I would imagine there are groups tracking the CIDR blocks (IP ranges) that VPN providers use for their exit nodes. If such a list exists, a host could simply subscribe to accept whatever updates occur to those lists and implement the block for them.
Yes, when you ban. You can see IP addresses coming through, but the fediverse folks aren’t leveraging your IP for any kind of advantage. No tracking for ads or things. So what security precautions are we taking for Fediverse servers? I peraonnaly do the feel the need, but I’m sure there at valid reasons to do it. But if it’s just tracking and ads, they don’t exist here really.
Honestly, if security is a main concern for anyone here, you should run your own. Anyone can run any of this. Follow what you want, then all connections to Lemmy.world come from your server you control that you connect to. I’m on piefed.social, but I’m planning on running my own eventually.
The gamble of the fediverse is that you’re outside the realm of the blatantly bad actors like the Zucks and Muskerburgs, but you’re also off the edge of the map. No reason to believe that there be no dragons here. Anyone can run one, which includes bad actors. I wouldn’t be implicitly trusting that the hundreds of individual volunteers that keep the fediverse afloat all have good intentions. cough.ml serverscough
Your coughing might have caused you to not hear that those ml server folks literally wrote the software you are using…
the software is open source. we can verify it doesn’t do anything bad. the server is what you cannot trust.
False. I’m using piefed. Also, so what? Doesn’t make what I’ve said incorrect.