Hi All!
Hope everyone is having a wonderful week!
Today I got permission from /u/omniiac to use his new “Tucson Flag” as our server icon.
Feel free to stop by his Insta for more cool art! https://www.instagram.com/omniiac/
The server icon should now be a LOT more identifiable in your browser tab list.
In other news:
Tucson.social is behind a cloudflare proxy for DDOS protection and such. I’d disabled the rules that were known to break Federation (the Kbin fiasco), but there were still some other rules that were causing issues. Notably, the OWASP rule set that attempts to protect us from malicious SQL injection, cookie spoofing, etc. However, this rule was blocking some federation activity as well as breaking image uploads.
In the short term, this ruleset has been disabled. In the long term, I will craft a more specific inclusion list so that we can protect ourselves while not also breaking things.
EDIT/UPDATE: More permanent exclusion list has been crafted, we’re now about as safe as we can be from bots/spam accounts using our instance as a home. I’ve also moved CAPTCHA duties off to Cloudflare as well since that’s going to be removed in an upcoming release.