ohshit604

joined 5 months ago
MODERATOR OF
 

I’ve been working on adding security headers to my reverse proxy and so far I believe to have gotten most of them except for Content Security Policies, I honestly can’t find a simplified way to apply a CSP to 20+ docker applications and hope folks of Lemmy know the best way to go about this.

I want to note that I never worked with headers in the past, I tried interpreting the Traefik documentation and Mozilla documentation as well as a bunch of random YT videos but can’t seem to get it right.

    headers:
      headers:
        customRequestHeaders:
          X-Forwarded-Proto: https
        accessControlAllowMethods:
          - GET
          - OPTIONS
          - PUT
        accessControlMaxAge: 100
        hostsProxyHeaders:
          - "X-Forwarded-Host"
        stsSeconds: 31536000
        stsIncludeSubdomains: true
        stsPreload: true
        forceSTSHeader: true # This is a good thing but it can be tricky. Enable after everything works.
        customFrameOptionsValue: SAMEORIGIN # https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options
        contentTypeNosniff: true
        browserXssFilter: true
        contentSecurityPolicy: ""
        referrerPolicy: "same-origin"
        permissionsPolicy: "camera=(), microphone=(), geolocation=(), usb=()"
        customResponseHeaders:
          X-Robots-Tag: "none,noarchive,nosnippet,notranslate,noimageindex," # disable search engines from indexing home server
          server: "traefik" 
[–] ohshit604@sh.itjust.works 20 points 11 hours ago (5 children)

Pro-tip: buy it on steam, open it so that Steam recognizes play time, write heinous review, issue refund.

[–] ohshit604@sh.itjust.works 1 points 20 hours ago

I never understood the reason to reciprocate, if tariffs only effect Americans than wouldn’t Canada imposing tariffs only effect Canadians?

I sure bet there is a lot more American made products in Canada than vice versa.

[–] ohshit604@sh.itjust.works 6 points 23 hours ago (1 children)

So, a pedestrian collided with a car and the car was the fatality?

 

"The RCMP are making laws... and Ottawa's allowing it to happen."

[–] ohshit604@sh.itjust.works 21 points 2 days ago* (last edited 2 days ago)

A dev with some sense.

I mean, you’re not wrong. The dev does have some sense, not a lot, not a little, just some a very broad some.

Fuck Linux.

[–] ohshit604@sh.itjust.works 2 points 2 days ago* (last edited 2 days ago)

Bonus points if you can route your personal VPN server through your VPN provider, the flow looks a little like this:

Client <—> Personal VPN server <—> VPN Provider

[–] ohshit604@sh.itjust.works 46 points 2 days ago (7 children)

For the folks saying install Linux keep in mind you can indirectly be captured by this feature.

For example if you’re playing an online video game you’ll be captured or your chat messages in your messaging app.

[–] ohshit604@sh.itjust.works 4 points 3 days ago* (last edited 3 days ago)

Probably force an insecure or outdated protocol and market it as “top of the line”.

[–] ohshit604@sh.itjust.works 6 points 4 days ago* (last edited 3 days ago) (4 children)

It would be nice if companies accepted regional payment options, for example, Canada has Interac e-transfer to easily transfer funds from one bank account to another, local businesses in Canada have offered this as an option for payment but anything international it’s either PayPal or CC.

Interac E-transfer is so simple to use and definitely beats having to use third-party apps like Venmo and CashApp.

[–] ohshit604@sh.itjust.works 42 points 6 days ago* (last edited 6 days ago) (1 children)

Not a single soul asked for it, waste of company resources.

[–] ohshit604@sh.itjust.works 4 points 1 week ago (1 children)

If your reverse proxy is Traefik I would suggest This plugin which pulls the robot.txt from This GitHub repository.

I honestly should’ve setup a robots.txt a long time ago.

 

Full VOD can be found Here.

 

Hosted on: We Love Hip-Hop Network

 

cross-posted from: https://sh.itjust.works/post/42446891

When it comes to Canada's often tense debate around gun laws, most Canadians likely will not have heard of an RCMP database called the Firearms Reference Table, or FRT.

The FRT is a database used by the RCMP to help classify firearms. That classification determines whether a gun is non-restricted, restricted or prohibited.

Technically, the FRT isn't a legal instrument, but instead just an internal RCMP tool based on definitions set out in the Criminal Code and Firearms Act. But in practice?

"It's both the law and not the law," said A.J. Somerset, the author of Arms: The Culture and Credo of the Gun.

 

Key takeaway for Firearms owners —

Back in May 2020, Prime Minister Justin Trudeau’s government introduced an order-in-council banning over 1,500 models of Canadian firearms newly labeled as “assault-style.” At the time, the government projected it would cost $200 million to compensate lawful firearms owners for forcibly taking their legally purchased and owned property from them through a forced buyback initiative. 

More than five years later, according to a departmental plan released by Public Safety Canada, the original $200 million cost estimate is now $459.8 million and climbing, yet only 12,195 firearms (less than 10 per cent of the targeted number) have been collected. The program has fallen so far behind schedule that private gun owners still cannot participate because only businesses that possess firearms are currently eligible. A notice on the program’s official website states: “The program is not yet available for individuals.”

The Government of Ontario has said they will not divert stretched policing resources to cooperate with this initiative because of the fundamental flaws of the design of the program and the clear ineffectiveness of the policy in fighting gun crime. As noted by Ontario’s solicitor general, more than 90 per cent of guns used in crimes are illegally imported into Ontario from the United States and this program diverts vast financial and policing resources towards something that does not make the public safer. The lawful ownership of well-regulated firearms by law-abiding Canadians who are also heavily regulated and screened in the process of the privilege to purchase and own a firearm is not the reason for gun violence. 

Further, the National Police Federation — which represents 20,000 RCMP members — has said the buyback policy is a “misdirected effort when it comes to public safety.” The Canadian Sporting Arms & Ammunition Association, which represents firearms retailers, said it will have “zero involvement” in helping confiscate these firearms. And Canada Post, which is tasked by the current policy with receiving and warehousing firearms all across the country, wants nothing to do with the program because of fear of conflicts between their staff and gun owners and the ability of their facilities to safely store potentially hundreds of weapons in their facilities all across Canada.

The policy is in shambles, it lacks any operational common sense, there is no evidence of it contributing in any way to better public safety, stakeholders are opposed to the approach and the financial costs are spiralling out of control. This policy is begging to be abandoned by Prime Minister Carney’s government.

view more: next ›