441
700+ self-hosted Git instances battered in 0-day attacks with no fix imminent
(www.theregister.com)
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
this post was submitted on 10 Dec 2025
441 points (100.0% liked)
Selfhosted
61256 readers
155 users here now
A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.
Rules:
-
Be civil.
-
No spam.
-
Posts are to be related to self-hosting.
-
Don't duplicate the full text of your blog or readme if you're providing a link.
-
Submission headline should match the article title.
-
No trolling.
-
Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.
-
AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.
Resources:
- selfh.st Newsletter and index of selfhosted software and apps
- awesome-selfhosted software
- awesome-sysadmin resources
- Self-Hosted Podcast from Jupiter Broadcasting
Any issues on the community? Report it using the report flag.
Questions? DM the mods!
founded 3 years ago
MODERATORS
Good note, and good callout, we should always call out these things.
But yes if you're self hosting and you both have a public facing instance and allow open registration, you are a much much braver person than I.
I'm not allowing random people hosting their git repos on mine but it's public and they can fork my own stuff on it in theoretically upload some bullshit.
Got curious and lurked your profile. You might want to update your about from Lemmy to PieFed 🙂
Oh, there is still some Lemmy link somewhere? I'm trying to find it but couldn't, where did you see it?
Oh actually it’s on your homepage (jeena.net) in the About section on the left side
Aah, there it was, thanks! Fixed.
Way off topic, but I use to be a prolific brewer of beer. In fact the rig that I built can turn 50 gallons of wort in about 3 hours and it's ready to pitch the yeast in. Brewing beer is a very fascinating process. I also made meads, wines, and have dabbled in sake, tho I wouldn't say my sake was ready for prime time. LOL And you are a musician. I already like you and I don't even know you. LOL
Haha, yeah, although some of my hobbies slowed down a lot since I got a family. Small children really take up a lot of time.
Today for example the 2.5 years old ate a lot of potato's and schnitzel without really chewing. Then he drank a ton of milk after dinner. While his big sister already went to bed at 21:30 he was still jumping on the bed at 22:00 und suddenly he puked out everything on the bed. So we had to clean RhE bed, the floor, him and us, was everything, shower etc.
Now it's 23:00 and he is still excited about it and is singing in the freshly made bed instead of sleeping.
Actually we wanted to watch a episode of some TV series bit now it's way too late for this.
Yeah but that's awesome
Any time you have a server willing to process random data uploaded from randos, just expect it to be compromised eventually and prepare for the eventuality by isolating it, backing it up religiously, and setting up good monitoring of some sort. Doesnt matter if its a forge, a wiki, or like nextcloud or whatever. It will happen.
To anyone afraid of the above conclusion, a dedicated $5 VPS with automatic snapshots get you a long way.
if the server is compromised, all the data it stores is at risk of getting drleted or modified. so I don't think a VPS really solves the problem.
https://git.30p87.de/users/sign_up uhm... oops