Hello! I administer mander.xyz

This is what I currently see when I try to access the VPS:

Which translates to: Data center failure: location resources unavailable

A few days ago, the server came “temporarily” down and this message appeared:

Since usually these issues resolve after a bit of time, I decided to just wait it out.

Yesterday the website (serverspace.io) stopped responding for a few hours, and so I decided to look into it deeper… They have not provided information to me directly nor via their website, and so I can only tell you what I have found so far:

Because I live in Amsterdam, I decided to make use of Serverspace.io renting server space in Amsterdam. Physically the servers reside at the “Amsterdam AM2” datacenter which belongs to Equinix. Equinix is a US-based company, and ‘Serverspace.io’ is run by the “Dutch” company ITGLOBAL.COM NL B.V.

However, the company ITGLOBAL.COM is Russian owned. The founder Dmitry Gachko was sanctioned on July of this year for his contribution to, and the director of the Dutch subsidiary has been allegedly imprisoned by Dutch authorities on September 15th. At this time Equinix allegedly shut off access to the infrastructure.

Here is a translated excerpt from one of the sources:

"The Russian IT corporation ITG announced its withdrawal from NATO countries following the arrest of the director of its Dutch subsidiary and the shutdown of equipment at its Amsterdam data center. ITG founder Dmitry Gachko declared the “basic rights” of Russian businesses in the West to be “trampled upon” and asserted that any director with Russian roots could now “automatically come under attack.” Furthermore, even before the current incident, the Dutch subsidiary of ITGLOBAL.COM was involved in a lawsuit filed by the American company ServiceNow over alleged theft of software code. Gachko himself was sanctioned by the EU in July as the owner of a company that supplies technology for the Russian surveillance system SORM. "

Here are the sources from which this info comes from (in Russian):

https://theins.ru/news/297340

https://www.comnews.ru/content/247454/2026-09-21/2026-w39/1007/globus-dlya-itglobal-umenshilsya

And here is the Russian sanctions list to which Dmitry was added this July (person 89): https://eur-lex.europa.eu/eli/dec/2024/1484/2026-07-13

I have not been able to find any official comments about this current situation from Equinix or Dutch authorities.

I am waiting for now. Without an official statement it is difficult to conclude whether this is directly a consequence of the sanctions on Gachko, if this is related to the ServiceNow lawsuit, or if there is some completely different reason and ITG is mis-characterizing the event.

You need to fetch the profile’s URL (https://group.lt/u/yuu) through mastodon

You can take a look at the lemmymap: https://lemmymap.feddit.de/

Click on “instance 30d” or “growth” so that the size of the points is proportional to their users or growth.

Originally posted here: https://feddit.de/post/184

I wish us the best of luck in the future 😅

PhD student renting in a big city in Europe. About 35%.

That’s very nice. Thank you for your hard work! I am curious about oauth. I did not know that 3 rd party clients needed to know the password, I will look into that!

This protects the database from a breach, but someone can set up an instance and collect the passwords from the logs:

As far as I can tell with my very limited experience, back-end encryption is the standard. One trusts the host not to steal their passwords from the logs, so protecting the data in the case of a breach is good enough. I think that it would make sense for the standard in the Fediverse to be different. Passwords should be encrypted by the client by default, and then re-hashed back-end.

It is also possible that what I am saying does not make sense in practical grounds - this is just something that surprised me while looking through the logs. I was under the wrong impression that plain text passwords were never accessible before looking into this topic.

Here’s the URL for ease: https://www.reddit.com/r/linux/wiki/mod_faq/mod_responses_on_major_events/how-to-use-reddit#wiki_consider_reddit_alternatives

I would be happy to see client-side password hashing implemented.

I understand that responsibility of using unique passwords falls on the user, and maybe a truly malicious instance would be able to remove the hashing (although I think that it would be possible to check if non-hashed passwords leave the client). However, the reality is that many people still re-use their password for many websites and do not use 2FA when not required. Password hashing would reduce the level of trust required of the instance makers.

On a similar vein, it would be nice to anonymize the ip addresses that are printed to the docker logs if possible, similar to the nginx logs. I think that this would be easier to undo for a malicious instance, but at least they would need to have a bit more technical knowledge to get to this information.

I have looked a bit into it. In case anyone is curious, I believe that the authorities found the e-mail in question (jmm18@protonmail.com) here:

https://paris-luttes.info/occupation-d-un-local-du-petit-14575?lang=fr

And/or here:

https://radar.squat.net/fr/event/paris/local-du-h/2021-02-24/ag-publique

Thank you!

Thanks! I installed 0.10.2 successfully.

EDIT: /instances does not show up anymore. It seems to also not be working for lemmy.ml

Cool, thanks. I meant the file that is linked in the tutorial on how to update:

https://raw.githubusercontent.com/LemmyNet/lemmy/main/docker/prod/docker-compose.yml

I will wait a bit longer for 0.10.2 then.

Aha, thanks. This might explain the gateway errors I experienced when trying to build using the 10.0.0 image.

I also notice that the docker-compose file still points to the lemmy-ui 0.9.9 - should I build using that version, or should I upgrade my UI image to the 10.0.1?

Last thing - if I pull the released lemmy and lemmy-ui tags (10.1.1) from github now and build my images from those, should those work fine? Or are these untested development versions?

Thank you!

Interesting perspective!

For me the dislike is not so much about the socialization, but rather the demand for immediate attention that the call requests. I always happen to get calls during work hours in the middle of experiments. I just let it ring and text back later, but I always make sure to take a bit longer than if they had just texted, hehe.

Awesome! Thanks!

I am curious, what do you think that I mean when I call something an “agenda”?

When people try to call me instead of sending me a message 😠😠😠

A massive news aggregator that uses AI to be able to categorize news from all around the world in a way that allows one to filter through news articles with specific biases. This would make it easier to get a more balanced picture of world events, and would be an excellent research tool to study propaganda.