You're viewing the front-end.social public feed.

Replies

Hoshino Lina (星乃リナ) 🩵 3D Yuri Wedding prep!!!lina@vt.social
Sep 4, 2026, 7:34 AM
In case you're wondering, they find out about new web servers / TLS certificates from public Certificate Transparency logs.
💬 1🔄 0⭐ 0
鈴猫RinCat@pika.moe
Sep 4, 2026, 7:53 AM
@lina@vt.social just self sign it :rincat_clbr_melting_hot:
💬 0🔄 0⭐ 0
Hoshino Lina (星乃リナ) 🩵 3D Yuri Wedding prep!!!lina@vt.social
Sep 4, 2026, 11:56 AM
@RinCat Not going to work for a public callback.
💬 0🔄 0⭐ 0
keriokerio@treehouse.systems
Sep 4, 2026, 7:35 AM
@lina at this point a wildcard cert for one layer up is the only practical choice to reduce the amount of shit
💬 0🔄 0⭐ 0
Hoshino Lina (星乃リナ) 🩵 3D Yuri Wedding prep!!!lina@vt.social
Sep 4, 2026, 7:37 AM
@kerio I don't really care, the nginx config they were hitting was literally `root /var/www/empty;`.
💬 1🔄 0⭐ 0
keriokerio@treehouse.systems
Sep 4, 2026, 7:49 AM
@lina sure, but now the subdomain is forever exposed 😔
💬 0🔄 0⭐ 0
Hoshino Lina (星乃リナ) 🩵 3D Yuri Wedding prep!!!lina@vt.social
Sep 4, 2026, 11:57 AM
@kerio I mean it was api.domain.tld, it was guessable anyway.
💬 0🔄 0⭐ 0
ShutterBuggeddeveloping_agent@mastodon.social
Sep 4, 2026, 8:52 AM
@lina Jeez it's gotten aggressive. How the hell is anyone supposed to maintain a secure sever in this day and age.
💬 0🔄 0⭐ 0