Back when I was in middle school in Israel the system used for communication between teachers students and parents was called Webtop. They actually went all the way to implement OS desktop experience in the browser (this is long long ago) it was very silly but cute
Webtop – Alpine,Ubuntu,Fedora,and Arch containers containing full desktop envs
31–40 of 81 posts
Re: Webtop – Alpine,Ubuntu,Fedora,and Arch containers containing full desktop envs
#32Earlier quoted context omitted.
Yeah, I made a mistake with my config. I had setup SWAG, with Authelia (i think?). Got password login working with 2fa. But my dumbass didn't realize I had left ports open. Logged in one day to find a terminal open with a message from someone who found my instance and got in. Called me stupid (I mean they're not wrong) and all kinds of things and deleted everything from my home drive to "teach me a lesson". Lesson pa…
There are operations that put cryptominers into any unauthenticated remote desktops they can find. Ask me how I know... Way friendlier than wiping your data though.
There are groups of people who hunt for writeable ftp servers to be used for random filesharing. At least this used to be a thing
Re: Webtop – Alpine,Ubuntu,Fedora,and Arch containers containing full desktop envs
#33Earlier quoted context omitted.
That warning applies to anything you run locally. And going further, in this day and age, I would never put up any home service without it being behind Cloudflare Access or some form of wireguard tunnel.
Just put up basic auth infront of your services and be done with it.
the fact that we have to keep reinventing kerberos all the time because it doesn't speak http is starting to legitimately annoy me.
Re: Webtop – Alpine,Ubuntu,Fedora,and Arch containers containing full desktop envs
#34And, of course, I decided to see what happened if I fired up firefox in webtop and loaded webtop in it. Oops.
Re: Webtop – Alpine,Ubuntu,Fedora,and Arch containers containing full desktop envs
#35> "Warning Do not put this on the Internet if you do not know what you are doing. By default this container has no authentication and the optional environment variables CUSTOM_USER and PASSWORD to enable basic http auth via the embedded NGINX server should only be used to locally secure the container from unwanted access on a local network. If exposing this to the Internet we recommend putting it behind a reverse pro…
Yeah, I made a mistake with my config. I had setup SWAG, with Authelia (i think?). Got password login working with 2fa. But my dumbass didn't realize I had left ports open. Logged in one day to find a terminal open with a message from someone who found my instance and got in. Called me stupid (I mean they're not wrong) and all kinds of things and deleted everything from my home drive to "teach me a lesson". Lesson pa…
> Lesson painfully learnt.
There are actually two lessons there:
1. Be careful what you open to the public internet, including testing to make sure you aren't accidentally leaving open defaults as they are.
2. Backups. Set them up, test them, make sure someone successfully gaining access to the source box(es) can't from there wipe all the backups.
Re: Webtop – Alpine,Ubuntu,Fedora,and Arch containers containing full desktop envs
#36I've been using the LSIO Webtop images for a few years. They're awesome for composable desktops that I run behind a VPN for a quick and easy dirty connection at home. Combine the Webtop images by forcing it's traffic through the Gluetun [0] container and you're up and running. These Webtop containers are nice and snappy as well thanks to Kasm. Awesome OSS. [0] https://github.com/qdm12/gluetun
This is me being rather lazy admittedly, but do you have a compose/similar for connecting them by chance?
Re: Webtop – Alpine,Ubuntu,Fedora,and Arch containers containing full desktop envs
#37Earlier quoted context omitted.
> deleted everything from my home drive to "teach me a lesson". Lesson painfully learnt. I had a mentor in my teenage year that was the same kind of person. To this day the only meaningful memory I have of him is that he was an asshole. You can teach a lesson and be empathetic towards people that make mistakes. You don't have to be an asshole.
The lessons we learn best are those which we are emotionally invested in and sometimes that emotion can be negative, but a lesson will be learned regardless.
Sure. But you don’t have to deliberately destroy all data and be mean about it as in GP‘s case to get an emotional reaction.
Re: Webtop – Alpine,Ubuntu,Fedora,and Arch containers containing full desktop envs
#38And, of course, I decided to see what happened if I fired up firefox in webtop and loaded webtop in it. Oops.
seems only natural, I sympathize
Re: Webtop – Alpine,Ubuntu,Fedora,and Arch containers containing full desktop envs
#39What are some use cases for this?
Re: Webtop – Alpine,Ubuntu,Fedora,and Arch containers containing full desktop envs
#40My pipedream is to have a containerized desktop environment like this that outputs directly to a physical monitor over HDMI/DP without needing an X server on the host machine. So far I haven't found any clear answers on whether that's possible at all.