• insomniac@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      85
      ·
      1 year ago

      Probably good advice but not exactly relevant. The person was hosting a server in their house and got raided for unrelated reasons and all their electronics were seized. Had they hosted in a data center or at least had off premises back ups, this wouldn’t have happened.

      • JohnDClay@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        23
        arrow-down
        11
        ·
        1 year ago

        I thought one of the points of the fediverse was to not be centralized in data centers that are more easily controlled. It’s supposedly supposed to be easy and relatively cheap to spin up your own instance on your own hardware. Just outsourcing to a data center I think goes against what the fediverse promised.

        • PapstJL4U@lemmy.world
          link
          fedilink
          English
          arrow-up
          37
          arrow-down
          1
          ·
          1 year ago

          Fediverse does not use magic. They are bound cabels and cpu.

          In average any datacenter wil have a better connection to everywhere else.

        • kakes@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          28
          ·
          1 year ago

          I disagree.

          It’s about control of the platform. A datacenter isn’t going to start making administrative decisions about the “business direction” of your instance. They can shut the server down, but so could a thunderstorm on a home server.

          Even if the data center did (for whatever reason) administrate an instance, the idea of federation still holds because users get to decide if they like the decisions being made - regardless of who is making them.

        • insomniac@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          25
          arrow-down
          1
          ·
          1 year ago

          Like anything, it’s a trade off. The fact that you can do whatever you want is the good thing. As long as everyone isn’t in the same datacenter, it’s fine. There’s datacenters all over the planet.

          If you’re self hosting, you can mitigate the risks by having some kind of contingency plan though. Just having backups in another location would have made it possible to get back up after the interruption. Now, this instance is probably just screwed.

          Data centers aren’t inherently bad and neither is self hosting. But there’s different risks that need to be planned for.

          • Revan343@lemmy.ca
            link
            fedilink
            English
            arrow-up
            11
            ·
            1 year ago

            If you’re self hosting, you can mitigate the risks by having some kind of contingency plan

            Like a degaussing loop hidden in the door frame?

            Just having backups in another location would have made it possible to get back up after the interruption

            Oh. Not that kind of contingency plan

            • Arael15th@sh.itjust.works
              link
              fedilink
              English
              arrow-up
              3
              ·
              1 year ago

              Like a degaussing loop hidden in the door frame?

              I deeply enjoy that your mind has a rail for this train of thought to run on

        • Tylerdurdon@lemmy.world
          link
          fedilink
          English
          arrow-up
          4
          ·
          1 year ago

          Seems like a nice goal, but in the end aren’t you geographically limited to where ISP’s offer equivalent upstream bandwidth? Even then there are caps sometimes and other ways we still get controlled.

    • vd1n@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      10
      arrow-down
      20
      ·
      1 year ago

      As an American, feel free to just mute us. Watch the slow motion collapse from a distance.

      • DarkSpectrum@lemmy.world
        link
        fedilink
        English
        arrow-up
        18
        arrow-down
        17
        ·
        1 year ago

        I have dreamed about the ability to do this for so long. Cut US communications off and prohibit travel in/out. You can come out in 100 years when you’re ready to play nice.

        • Socsa@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          6
          ·
          edit-2
          1 year ago

          Lemmy: please do no use the term “Chinese shills” as this is sinophobic.

          Also Lemmy:

        • wanderingmagus@lemmy.world
          link
          fedilink
          English
          arrow-up
          4
          arrow-down
          3
          ·
          1 year ago

          Unfortunately, good old Uncle Sam may take offense at that, and his six-shooter contains somewhere on the order of a few thousand thermonuclear weapons, which he’s already used, twice. He’s also not afraid of ignoring national sovereignty and borders when it’s in his interests.

          Not saying this is a good thing by any means, and sorry for raining on your parade, but the situation is what it is. Hopefully sometime in the next few decades, if not sooner, some kind of change for the better can be made. Who knows?

  • Repossess6855@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    49
    arrow-down
    17
    ·
    1 year ago

    The US again continuing to flex its muscles that it truly does own and control half the world, as it so affectionately reminds us daily.

    It is absolutely hysterical how bad authoritarianism has engulfed all modern governments. This isn’t remotely a left vs right thing or a US thing, almost all modern governments have become this way.

    • Underwear@lemmy.world
      link
      fedilink
      English
      arrow-up
      53
      arrow-down
      1
      ·
      1 year ago

      The person referenced in the article was raided for completely unrelated charges. It just happened they took the server and backups as part of the raid. Had they hosted off-site or kept the backups off-site, the damage would have been minimal. This article brings up a good point, but it’s not the nefariousness that the title implies.

      • girlfreddy@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        28
        arrow-down
        10
        ·
        1 year ago

        Cops took what wasn’t needed and haven’t returned it (that we know of).

        I’d say that’s about as nefarious as it gets.

          • some_guy@lemmy.sdf.org
            link
            fedilink
            English
            arrow-up
            15
            arrow-down
            5
            ·
            1 year ago

            Any time they take all electronics, there’s bound to be something there that wasn’t needed. It’s overly broad.

            • Zorque@kbin.social
              link
              fedilink
              arrow-up
              15
              ·
              1 year ago

              And that’s often because what is needed isn’t in plain site, so it makes sense to just grab everything and take it back to their lab and have experienced techs go over it rather than having the site team sit on the computers going through files to find what they need.

          • xkforce@lemmy.world
            link
            fedilink
            English
            arrow-up
            7
            arrow-down
            6
            ·
            edit-2
            1 year ago

            How do you know that it was? Were you involved in this case enough to know something the rest of us dont? Or are you just a bystander playing devil’s advocate?

            EDIT: since I apparently cant reply to your comment below, you cant just claim that the hardware was involved in a crime by “just asking questions” then accuse me of “stirring up shit” after calling you out on making unsubstantiated claims. If you make a claim it is YOUR job to defend that claim. Not everyone elses’ job to disprove your assertion.

            • Zorque@kbin.social
              link
              fedilink
              arrow-up
              11
              arrow-down
              1
              ·
              1 year ago

              Were you involved enough to know that it wasn’t? There’s devil’s advocate, and then there’s devil’s PR. Why are you trying so hard to stir up shit where none exists? It’s not wrong to want more information before going on a paranoia bender.

            • ZodiacSF1969@sh.itjust.works
              link
              fedilink
              English
              arrow-up
              2
              ·
              1 year ago
              1. I’m not the person you can’t reply to below.

              2. I was literally just asking. If the warrant was in relation to a charge that they were hosting CSAM, then yes the seizure of the server would be appropriate.

      • Odo@lemm.ee
        link
        fedilink
        English
        arrow-up
        8
        arrow-down
        1
        ·
        1 year ago

        From what I read, it looks like they were hosting off-site, but had an unencrypted backup of the database locally at the time of the raid.

      • Bridger@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        2
        ·
        1 year ago

        But this is the strength of federation. One tiny bit of the fediverse was taken down. This did not affect the rest of it. There will always be bad actors, whether the cops, the administrators of a particular instance or the owners of a mega-forum like twitter or reddit. With a decentralized system the damage is localized and minimized.

        • Dave@lemmy.nz
          link
          fedilink
          English
          arrow-up
          7
          ·
          1 year ago

          It wasn’t even taken down. The dude was raided probably because of some electronic crime, they took his electronics to get evidence. Completely reasonable.

          On their backup hard drive happened to be a backup a mastodon instance, so by extension they got that too. The backed up data, not the server.

          It’s not some nefarious collusion, it’s completely reasonable actions.

          Now whether the backup should have been stored unencrypted on a hard drive at their house? Well that’s a server admin problem not an FBI issue, but the comments here come across like the FBI shouldn’t have done what they did.

          But I’d argue that you should not store anything on Mastodon where it would be an issue if it became public. It’s basic 90s internet safety. We know that the data isn’t encrypted (the same for Lemmy), don’t go sharing passwords on a site designed for public sharing.

          • Arael15th@sh.itjust.works
            link
            fedilink
            English
            arrow-up
            7
            ·
            1 year ago

            But I’d argue that you should not store anything on Mastodon where it would be an issue if it became public.

            One of the first things new fediverse users should be told is that the fediverse is not the darknet.

      • Repossess6855@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        1
        arrow-down
        2
        ·
        1 year ago

        I’d argue a great majority of the world has entered this era now, and consider it a standard. I hate it. They took 1984 and used it as an instruction manual.

  • CodeMonkeyDance@lemmy.world
    link
    fedilink
    English
    arrow-up
    18
    arrow-down
    1
    ·
    1 year ago

    Yeah, I want to know what these unrelated charges were for before I get up in arms about a nothing burger. Sound sus as hell.

    • traches@sh.itjust.works
      link
      fedilink
      English
      arrow-up
      1
      arrow-down
      1
      ·
      1 year ago

      It’s irrelevant to the EFF’s point here, because a database backup containing user data was seized by the FBI. Those users almost certainly had nothing to do with whatever the charges were.

  • Saki@monero.town
    link
    fedilink
    English
    arrow-up
    11
    arrow-down
    3
    ·
    edit-2
    1 year ago

    Get Tor Browser and/or Tails OS. When privacy is important and you need to be anonymous, use only Tor-friendly instances only via Tor (never once log in showing your real IP - if you accidentally do that, you’ll have to re-create your account another a different person).

    When an email address is necessary to sign up, get one anonymously (again using Tor Browser), from a privacy-centric company or group, e.g. Tutanota, Disroot. Needless to say never ever use Gmail. https://tosdr.org/en/service/217

  • KyRoLen@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    5
    ·
    1 year ago

    There should be a way to encrypt things when the server is off and then have a Killswitch for situations like this. Idk if it’d be overkill in this case thougj

  • Nowhereman@lemmy.stonansh.org
    link
    fedilink
    English
    arrow-up
    1
    ·
    1 year ago

    Is there anything instance owners can do? Are there things you can do with your server to get better security for your users (and yourself)