Show newer
NEW by @rrix: Blocking Aggressive Scrapers at the Edge

In Limiting expensive to render nginx endpoints , I describe how to use a few nginx limit_req module to substantially limit the amount of aggressive scraping traffic to my Gitea instance without impacting "normal" "human" behavior.

There's three layered rate-limiters in here that are applied to only certain URIs:

One does a per-IP limit excluding my Tailscale network and some ASNs I connect from. Each IP can make one costly request per minute, otherwise receive a 503.
One tries to map certain cloud providers in to a single rate-limit key and gives each of these providers 1 RPM on these endpoints. Each group of cloud IPs can make one request per minute, otherwise receive a 503.
One puts a limit to 1 RPS of all traffic on each "site feature" in Gitea.

So now if you try to browse my Gitea instance http://code.rix.si or make a git clone over HTTP that will work just fine, but a handful of expensive endpoints will be aggressively rate-limited. If you want to look at the git blame for every file in my personal checkout of nixpkgs, you can do that on your own time on your own machine now.

So far installing this on my "edge" server seems to work really well, cutting the load of the small SSL terminator instance in half. Let's see if this is Good Enough.

https://cce.whatthefuck.computer/updates#20250320T130459.421338

Hot take: employers shouldn't be allowed to tell you what clothes you are permitted to wear at work.

(Don't bother responding if your analysis doesn't go beyond "but the company needs it!")

@gewt Aw! I'm really curious now, we don't have anything equivalent around here (in the Netherlands)

@Ninji (They are a major supplier of low-cost lightbulbs here, and practically the sole supplier of Action, a major discount store)

@Ninji lmao of course it's fucking Calex. Not the first time I've seen them come up with absurd branding for lighting products, though I don't recall the specifics of the previous cases anymore...

tesla inc shitpost 

@Dee You need to at least use automotive duct tape to pass the roadworthiness tests

That's a problem for future me. I'm sure future me will be angry at past me about it - but thankfully I am current me, and neither past nor future me, so therefore *I* will never have to deal with the consequences

video game recommendations? 

I’m gonna be extra sick for at least 2 wks, might as well get some dopamine as a treat.

Looking for game recs which meet the criteria

Req:
- easy or story mode, ideally changeable difficulty at any point
- subtitles
- accessibility options including no bright flickering lights
- unlikely to drown or fall and die
- PS5 or Switch

Fav games:
- Horizon Series
- Journey
- Ghost of Tsushima
- ACNH and the Sims (decorating/dress up)
- Hades
- Gris
- Stray
- Dream Daddy

Computer touchers shitpost about gremlins and shit when tech mysteriously fails, and I wonder how much of historical folklore is just this exact same thing happening for other stuff and some people taking the shitpost a little bit too seriously

Every Tesla is a surveillance device. This is worth knowing regardless of whether you plan to engage in protest activity.

This chart shows the locations and ranges of the cameras, presuming they have an unobstructed view.

Fashion tips for preserving your privacy around Teslas:

crimethinc.com/fashiontips

@echedellelr I've solved the problem for myself in the meantime by having a separate account on a less loaded server that only has a few chats open with people I want to stay in contact with at all times. Synapse's performance seems to get exponentially worse the more rooms you're in, so this works okay-ish.

Hey @hosting, I reported a mass spammer to you like 4 hours ago and they're still spamming people all over the place. What gives?

Surely you don't have such big moderation coverage gaps, given that you're running an open-signup instance?

@echedellelr I'm only using Element-derived things as a stopgap measure until I find a better option, for much the same reason - in fact, on some of the Element rewrites, I warned them of the outcome ahead of time, they dismissed the warning, and guess how it worked out...

I don't think either Signal or SimpleX are really the same kind of thing as Matrix, so I don't think they can serve as a plausible replacement for me. I've just been working (with others) on a protocol fork for a while now, to cut Element out of the picture entirely and establish some reasonable governance process.

But, that takes time to get to a usable result...

Yeah okay I guess I'm done with talking on Matrix for today, if the server can't manage to process my messages in less than 10 minutes

Show thread

Honestly why doesn't all restaurants have bondage rope and heavy duty batteries as an addon with your food

Show thread
Show older
Pixietown

Small server part of the pixie.town infrastructure. Registration is closed.