dee 🏳️‍⚧️

Sebres has emailed and said thank you to me for my post, and I'm a bit overwhelmed it went so wide and got so much attention. They've read all the replies, and one thing they said WRT being paid stood out: money does indeed play an important role as a motive force, my main motivation is mostly to justify the OSS-work to my wife, so I'd never have to explain myself when I sit at the PC until late at night or see my family late As someone in OSS myself, that resonated. #oss

@vampirdaddy@chaos.social fail2ban also helps block IPs of credential stuffers over HTTP endpoints. you might have once used it for SSH, but it is also the simple defence that most people roll out against credential stuffing. yes one could use an IP based rate limiter counting the HTTP status 403 and then blocking, but to a lot of people and projects this is more complicated than sudo apt install fail2ban and then copy pasting that config they found on an online guide... and it's hard to say they're wrong when it works and is trivially deployed.

@Angle@anticapitalist.party this is starting to exist, Geomys @geomys@abyssdomain.expert by @filippo@abyssdomain.expert is doing this... it's a challenge to take it on and change the landscape to one that funds and support OSS, and of course they have to start small and do what they can so it definitely will not have some project that people feel should be in there. https://words.filippo.io/dispatches/geomys/

@dev_ric@fosstodon.org everything needs maintenance, and it's not just firewall rules changing, but standard log file formats and inputs evolving, or the desire to sent notifications through different channels. this software does one thing, but it's still subject to bitrot. besides, Python, the dependencies age fairly fast in Python, not as quick as the World of npm, but far quicker than the Worlds of C or Go.

@npub19mlfs9frfy7t2ch4kckf56frksj33ps0vm8hpeywuxtak7eqyl6qdtw8pg@momostr.pink Sure, but I assume if someone has created a Sponsor page, configured it to show on a project, that they do seek some monetary compensation, if only as a proxy for "we are appreciate what you're doing here" that is more meaningful than a Github star.

@lili@hachyderm.io if you need anything from Grafana and the various teams just say

@txt_file@chaos.social I'm sure sebres would appreciate a PR for an updated set of good defaults.

@dirkhh@hachyderm.io well done you!