Stefano Marinelli on Nostr: This morning, while updating the FreeBSD jails, I kept an eye on the reverse proxy ...
This morning, while updating the FreeBSD jails, I kept an eye on the reverse proxy logs to make sure everything was running smoothly.
The number of Mastodon instances (some of them not small or technically inclined) still running on versions with serious vulnerabilities is higher than I expected.
In the past, when I noticed these issues, I tried to notify the admins (or some users I knew) about it, but I either got no response or, in a couple of cases, unpleasant replies like "mind your own business."
The spirit of the Fediverse is generally different, so I've come to realize that many admins may lack the technical skills to perform security updates. Mastodon doesn't get updated frequently (last release: December 5, 2023, but the last one with significant security updates was on October 10, 2023) - so it's not a matter of time wasted: 5 minutes every few months isn't much, especially considering the time required to manage and administer the instance.
#Mastodon #Fediverse #SecurityUpdates #Vulnerabilities
The number of Mastodon instances (some of them not small or technically inclined) still running on versions with serious vulnerabilities is higher than I expected.
In the past, when I noticed these issues, I tried to notify the admins (or some users I knew) about it, but I either got no response or, in a couple of cases, unpleasant replies like "mind your own business."
The spirit of the Fediverse is generally different, so I've come to realize that many admins may lack the technical skills to perform security updates. Mastodon doesn't get updated frequently (last release: December 5, 2023, but the last one with significant security updates was on October 10, 2023) - so it's not a matter of time wasted: 5 minutes every few months isn't much, especially considering the time required to manage and administer the instance.
#Mastodon #Fediverse #SecurityUpdates #Vulnerabilities