447
700+ self-hosted Git instances battered in 0-day attacks with no fix imminent
(www.theregister.com)
this post was submitted on 10 Dec 2025
447 points (99.6% liked)
Selfhosted
53668 readers
659 users here now
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
Rules:
-
Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.
-
No spam posting.
-
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.
-
Don't duplicate the full text of your blog or github here. Just post the link for folks to click.
-
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
-
No trolling.
-
No low-effort posts. This is subjective and will largely be determined by the community member reports.
Resources:
- selfh.st Newsletter and index of selfhosted software and apps
- awesome-selfhosted software
- awesome-sysadmin resources
- Self-Hosted Podcast from Jupiter Broadcasting
Any issues on the community? Report it using the report flag.
Questions? DM the mods!
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
I'm not allowing random people hosting their git repos on mine but it's public and they can fork my own stuff on it in theoretically upload some bullshit.
Any time you have a server willing to process random data uploaded from randos, just expect it to be compromised eventually and prepare for the eventuality by isolating it, backing it up religiously, and setting up good monitoring of some sort. Doesnt matter if its a forge, a wiki, or like nextcloud or whatever. It will happen.
To anyone afraid of the above conclusion, a dedicated $5 VPS with automatic snapshots get you a long way.
if the server is compromised, all the data it stores is at risk of getting drleted or modified. so I don't think a VPS really solves the problem.
Got curious and lurked your profile. You might want to update your about from Lemmy to PieFed 🙂
Oh, there is still some Lemmy link somewhere? I'm trying to find it but couldn't, where did you see it?
Oh actually it’s on your homepage (jeena.net) in the About section on the left side
Aah, there it was, thanks! Fixed.
Way off topic, but I use to be a prolific brewer of beer. In fact the rig that I built can turn 50 gallons of wort in about 3 hours and it's ready to pitch the yeast in. Brewing beer is a very fascinating process. I also made meads, wines, and have dabbled in sake, tho I wouldn't say my sake was ready for prime time. LOL And you are a musician. I already like you and I don't even know you. LOL
Haha, yeah, although some of my hobbies slowed down a lot since I got a family. Small children really take up a lot of time.
Today for example the 2.5 years old ate a lot of potato's and schnitzel without really chewing. Then he drank a ton of milk after dinner. While his big sister already went to bed at 21:30 he was still jumping on the bed at 22:00 und suddenly he puked out everything on the bed. So we had to clean RhE bed, the floor, him and us, was everything, shower etc.
Now it's 23:00 and he is still excited about it and is singing in the freshly made bed instead of sleeping.
Actually we wanted to watch a episode of some TV series bit now it's way too late for this.
Yeah but that's awesome