From 49b014f28f39ac230633d77ee09db76602f8a523 Mon Sep 17 00:00:00 2001 From: Michael Jerger Date: Fri, 19 Jan 2024 16:33:59 +0100 Subject: [PATCH] add reply attack to blog --- docs/unsure-where-to-put/blog.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/docs/unsure-where-to-put/blog.md b/docs/unsure-where-to-put/blog.md index 079e2bb25e..7df67cf083 100644 --- a/docs/unsure-where-to-put/blog.md +++ b/docs/unsure-where-to-put/blog.md @@ -1,7 +1,9 @@ # 2024-01 Federated staring with Like Activity We did the next step. We now use a plain Like Activity for expressing the Star action. -In addition we fixed some bugs, made error responses more meaningful, improved security by validating every input we get on federation & mitigate identified threats (SlowLories, Block by future StartTime & various Replay Attacks). +In addition we fixed some bugs, made error responses more meaningful, improved security by validating every input we get on federation & mitigate identified threats (SlowLories, Block by future StartTime). + +Reply attacks we now mitigate in our k8s ingress. Find the code in our [PR for c4k-forgejo](https://repo.prod.meissa.de/meissa/c4k-forgejo/pulls/3). At https://federated-repo.prod.meissa.de/buero/star-me you can try out the current code the same way as described above with the following activity (maybe find an unused user by alternating the actors user-id).