mccJun 30, 2023
Entire Internet is dying at once https://www.androidauthority.com/youtube-confirm-three-strikes-policy-ad-blocking-test-3340826/
YouTube confirms three-strikes test for ad blocking, here's how it works

YouTube has confirmed that it's testing a three-strikes policy for blocking ads. It's also outlined how this policy will work.

Android Authority
Show threadmccJun 30, 2023

2006 - 2022: Corporate content hosts are so cheap and easy that no one has an incentive to learn to self-host content, and people who were previously self-hosting content move over to big "social" platforms

2022 - … : Platforms close off in every imaginable way and start taking every opportunity to extract rents from users, benefits that originally got people to move over now gone, but the network effects are such you can no longer switch to open alternatives or convince other people to do so

Show threadTheriacJun 30, 2023
@mcc

I'd say the biggest drawback to self hosting now is how much time you need to stay up on security issues and patches for vulnerabilities.
Show threadlil5  🚲 🇳🇱

@Theriac @mcc

InfoSec like to say that security is hard, that’s true for large companies, but for one person: just enable auto updates…done

Jul 1, 2023 at 5:04amWeb
Show threadTheriacJul 1, 2023
@lil5 @mcc

To be clear I'm talking as someone who feels computer literacy is essential in this day and age.

I agree smaller scale means you don't lose days at a time. However compared to when I first started messing about with servers, the time invested has increased exponentially.

Security is a race condition. Most patching happens retroactively not proactively. There is always a window where you may be exposed.

And then there are the fish-hook updates where legacy software is depreciated, which might break something else that depends on the now depreciated software.
Show threadLatte macchiato  Jul 1, 2023
@lil5 @[email protected] @mcc Things like quick patching are a given. Stuff like setting up DMZs, least privilege, etc is what truly matters. You're always going to be reactive, while large companies often get the privilege of having a patch available before the CVE is even public.

Selfhosters don't have the resources to prevent zero days, but what happens afterwards, including even recognizing a breach, is what really matters. ​​