GET https://kbin.spritesserver.nl/u/@kristoff@infosec.pub/threads/active/%E2%88%9E/all

Security

Token

There is no security token.

Firewall

main Name
Security enabled
Stateless

Configuration

Key Value
provider security.user.provider.concrete.app_user_provider
context main
entry_point App\Security\KbinAuthenticator
user_checker App\Security\UserChecker
access_denied_handler (none)
access_denied_url (none)
authenticators
[
  "two_factor"
  "remember_me"
  "App\Security\KbinAuthenticator"
  "App\Security\FacebookAuthenticator"
  "App\Security\GoogleAuthenticator"
  "App\Security\GithubAuthenticator"
  "App\Security\KeycloakAuthenticator"
]

Listeners

Listener Duration Response
Symfony\Component\Security\Http\Firewall\ChannelListener {#723
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
  -logger: Monolog\Logger {#783 …}
  -httpPort: 80
  -httpsPort: 443
}
0.00 ms (none)
Symfony\Component\Security\Http\Firewall\ContextListener {#706
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorage {#1017 …}
  -sessionKey: "_security_main"
  -logger: Monolog\Logger {#783 …}
  -userProviders: Symfony\Component\DependencyInjection\Argument\RewindableGenerator {#705 …}
  -dispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
  -registered: false
  -trustResolver: Scheb\TwoFactorBundle\Security\Authentication\AuthenticationTrustResolver {#780 …}
  -sessionTrackerEnabler: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage::enableUsageTracking(): void {#703 …}
}
0.22 ms (none)
Symfony\Component\Security\Http\Firewall\AuthenticatorManagerListener {#584
  -authenticatorManager: Symfony\Component\Security\Http\Authentication\AuthenticatorManager {#595 …}
}
0.00 ms (none)
Scheb\TwoFactorBundle\Security\Http\Firewall\TwoFactorAccessListener {#582
  -twoFactorFirewallConfig: Scheb\TwoFactorBundle\Security\TwoFactor\TwoFactorFirewallConfig {#842 …}
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -twoFactorAccessDecider: Scheb\TwoFactorBundle\Security\Authorization\TwoFactorAccessDecider {#581 …}
}
0.05 ms (none)
Symfony\Component\Security\Http\Firewall\AccessListener {#579
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -accessDecisionManager: Symfony\Component\Security\Core\Authorization\TraceableAccessDecisionManager {#937 …}
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
}
0.00 ms (none)
Symfony\Component\Security\Http\Firewall\LogoutListener {#786
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -options: [
    "csrf_parameter" => "_csrf_token"
    "csrf_token_id" => "logout"
    "logout_path" => "app_logout"
  ]
  -httpUtils: Symfony\Component\Security\Http\HttpUtils {#841 …}
  -csrfTokenManager: Symfony\Component\Security\Csrf\CsrfTokenManager {#1015 …}
  -eventDispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
}
0.00 ms (none)

Authenticators

No authenticators have been recorded. Check previous profiles on your authentication endpoint.

Access Decision

affirmative Strategy
# Voter class
1
"Symfony\Component\Security\Core\Authorization\Voter\AuthenticatedVoter"
2
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
3
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
4
"Symfony\Component\Security\Core\Authorization\Voter\ExpressionVoter"
5
"App\Security\Voter\EntryCommentVoter"
6
"App\Security\Voter\EntryVoter"
7
"App\Security\Voter\MagazineVoter"
8
"App\Security\Voter\MessageThreadVoter"
9
"App\Security\Voter\MessageVoter"
10
"App\Security\Voter\NotificationVoter"
11
"App\Security\Voter\OAuth2UserConsentVoter"
12
"App\Security\Voter\PostCommentVoter"
13
"App\Security\Voter\PostVoter"
14
"App\Security\Voter\UserVoter"

Access decision log

# Result Attributes Object
1 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
2 DENIED moderate
App\Entity\Entry {#1576
  +user: App\Entity\User {#261 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1726 …}
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#1680 …}
  +slug: "selfhosted-service-to-share-files-to-SSO-authenticated-users"
  +title: "selfhosted service to share files to SSO-authenticated users ?"
  +url: null
  +body: """
    Hi all,\n
    \n
    Well, my question is in the title of of post. :-)\n
    \n
    Does somebody know if there exists an easy sollution to share files to users (e.g. members of an organisation), based on the fact that the user is known in a SSO (authentik) ?\n
    \n
    I know nextcloud would be an option, but that would create a nextcloud account for all the users, … which is quite overkill for what is needed here.\n
    \n
    I know we can probably build something based on apache, PHP or so, … but if there would be a ready-to-use service for this, that would be nice. (and probably a lot more secure then what I would build myself :-) ).\n
    \n
    Kr.
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 5
  +favouriteCount: 21
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1725895744 {#1423
    date: 2024-09-09 17:29:04.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#1689 …}
  +votes: Doctrine\ORM\PersistentCollection {#1691 …}
  +reports: Doctrine\ORM\PersistentCollection {#1705 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1720 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1719 …}
  +badges: Doctrine\ORM\PersistentCollection {#2422 …}
  +children: []
  -id: 30457
  -titleTs: "'authent':9 'file':5 'selfhost':1 'servic':2 'share':4 'sso':8 'sso-authent':7 'user':10"
  -bodyTs: "'account':58 'apach':81 'authentik':44 'base':32,79 'build':77,112 'creat':55 'e.g':27 'easi':20 'exist':18 'fact':35 'file':24 'hi':1 'know':15,46,73 'known':40 'kr':114 'lot':105 'member':28 'need':70 'nextcloud':47,57 'nice':101 'option':51 'organis':31 'overkil':66 'php':82 'post':12 'probabl':76,103 'question':5 'quit':65 'readi':92 'ready-to-us':91 'secur':107 'servic':95 'share':23 'sollut':21 'somebodi':14 'someth':78 'sso':43 'titl':9 'use':94 'user':26,38,62 'well':3 'would':48,54,88,99,111"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1705329382
  +visibility: "visible             "
  +apId: "https://infosec.pub/post/7164519"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705251882 {#1645
    date: 2024-01-14 18:04:42.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS DENIED
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
3 DENIED edit
App\Entity\Entry {#1576
  +user: App\Entity\User {#261 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1726 …}
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#1680 …}
  +slug: "selfhosted-service-to-share-files-to-SSO-authenticated-users"
  +title: "selfhosted service to share files to SSO-authenticated users ?"
  +url: null
  +body: """
    Hi all,\n
    \n
    Well, my question is in the title of of post. :-)\n
    \n
    Does somebody know if there exists an easy sollution to share files to users (e.g. members of an organisation), based on the fact that the user is known in a SSO (authentik) ?\n
    \n
    I know nextcloud would be an option, but that would create a nextcloud account for all the users, … which is quite overkill for what is needed here.\n
    \n
    I know we can probably build something based on apache, PHP or so, … but if there would be a ready-to-use service for this, that would be nice. (and probably a lot more secure then what I would build myself :-) ).\n
    \n
    Kr.
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 5
  +favouriteCount: 21
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1725895744 {#1423
    date: 2024-09-09 17:29:04.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#1689 …}
  +votes: Doctrine\ORM\PersistentCollection {#1691 …}
  +reports: Doctrine\ORM\PersistentCollection {#1705 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1720 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1719 …}
  +badges: Doctrine\ORM\PersistentCollection {#2422 …}
  +children: []
  -id: 30457
  -titleTs: "'authent':9 'file':5 'selfhost':1 'servic':2 'share':4 'sso':8 'sso-authent':7 'user':10"
  -bodyTs: "'account':58 'apach':81 'authentik':44 'base':32,79 'build':77,112 'creat':55 'e.g':27 'easi':20 'exist':18 'fact':35 'file':24 'hi':1 'know':15,46,73 'known':40 'kr':114 'lot':105 'member':28 'need':70 'nextcloud':47,57 'nice':101 'option':51 'organis':31 'overkil':66 'php':82 'post':12 'probabl':76,103 'question':5 'quit':65 'readi':92 'ready-to-us':91 'secur':107 'servic':95 'share':23 'sollut':21 'somebodi':14 'someth':78 'sso':43 'titl':9 'use':94 'user':26,38,62 'well':3 'would':48,54,88,99,111"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1705329382
  +visibility: "visible             "
  +apId: "https://infosec.pub/post/7164519"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705251882 {#1645
    date: 2024-01-14 18:04:42.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS DENIED
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
4 DENIED moderate
App\Entity\Entry {#1576
  +user: App\Entity\User {#261 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1726 …}
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#1680 …}
  +slug: "selfhosted-service-to-share-files-to-SSO-authenticated-users"
  +title: "selfhosted service to share files to SSO-authenticated users ?"
  +url: null
  +body: """
    Hi all,\n
    \n
    Well, my question is in the title of of post. :-)\n
    \n
    Does somebody know if there exists an easy sollution to share files to users (e.g. members of an organisation), based on the fact that the user is known in a SSO (authentik) ?\n
    \n
    I know nextcloud would be an option, but that would create a nextcloud account for all the users, … which is quite overkill for what is needed here.\n
    \n
    I know we can probably build something based on apache, PHP or so, … but if there would be a ready-to-use service for this, that would be nice. (and probably a lot more secure then what I would build myself :-) ).\n
    \n
    Kr.
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 5
  +favouriteCount: 21
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1725895744 {#1423
    date: 2024-09-09 17:29:04.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#1689 …}
  +votes: Doctrine\ORM\PersistentCollection {#1691 …}
  +reports: Doctrine\ORM\PersistentCollection {#1705 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1720 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1719 …}
  +badges: Doctrine\ORM\PersistentCollection {#2422 …}
  +children: []
  -id: 30457
  -titleTs: "'authent':9 'file':5 'selfhost':1 'servic':2 'share':4 'sso':8 'sso-authent':7 'user':10"
  -bodyTs: "'account':58 'apach':81 'authentik':44 'base':32,79 'build':77,112 'creat':55 'e.g':27 'easi':20 'exist':18 'fact':35 'file':24 'hi':1 'know':15,46,73 'known':40 'kr':114 'lot':105 'member':28 'need':70 'nextcloud':47,57 'nice':101 'option':51 'organis':31 'overkil':66 'php':82 'post':12 'probabl':76,103 'question':5 'quit':65 'readi':92 'ready-to-us':91 'secur':107 'servic':95 'share':23 'sollut':21 'somebodi':14 'someth':78 'sso':43 'titl':9 'use':94 'user':26,38,62 'well':3 'would':48,54,88,99,111"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1705329382
  +visibility: "visible             "
  +apId: "https://infosec.pub/post/7164519"
  +editedAt: null
  +createdAt: DateTimeImmutable @1705251882 {#1645
    date: 2024-01-14 18:04:42.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS DENIED
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
5 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
6 DENIED moderate
App\Entity\Entry {#2359
  +user: App\Entity\User {#261 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1726 …}
  +image: Proxies\__CG__\App\Entity\Image {#1874 …}
  +domain: Proxies\__CG__\App\Entity\Domain {#1410 …}
  +slug: "what-if-your-cloud-provider-gets-hacked"
  +title: "what if your cloud=provider gets hacked ?"
  +url: "https://www.bleepingcomputer.com/news/security/hosting-firm-says-it-lost-all-customer-data-after-ransomware-attack/"
  +body: """
    Hi all,\n
    \n
    As self-hosting is not just “home-hosting” I guess this post should also be on-topic here.\n
    \n
    Beginning of the year, bleeping-computers published an interesting post on the biggest cybersecurity stories of 2023.\n
    \n
    Item 13 is an interesing one. (see URL of this post). Summary in short A Danish cloud-provider gets hit by a ransomware attack, encrypting not only the clients data, but also the backups.\n
    \n
    For a user, this means that a senario where, not only your VM becomes unusable (virtual disk-storage is encrypted), but also the daily backups you made to the cloud-provider S3-storage is useless, might be not as far-fetches then what your think.\n
    \n
    So … conclussion ??? If you have VMs at a cloud-provider and do daily backups, it might be usefull to actually get your storage for these backups from a different provider then the one where your house your VMs.\n
    \n
    Anybody any ideas or remarks on this?\n
    \n
    (*) [bleepingcomputer.com/…/the-biggest-cybersecurity-…](https://www.bleepingcomputer.com/news/security/the-biggest-cybersecurity-and-cyberattack-stories-of-2023/)
    """
  +type: "link"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 29
  +favouriteCount: 96
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1721456735 {#2377
    date: 2024-07-20 08:25:35.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#1926 …}
  +votes: Doctrine\ORM\PersistentCollection {#2391 …}
  +reports: Doctrine\ORM\PersistentCollection {#1907 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1883 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2369 …}
  +badges: Doctrine\ORM\PersistentCollection {#2392 …}
  +children: []
  -id: 27807
  -titleTs: "'cloud':4 'get':6 'hack':7 'provid':5"
  -bodyTs: "'/news/security/the-biggest-cybersecurity-and-cyberattack-stories-of-2023/)':176 '/the-biggest-cybersecurity-':173 '13':43 '2023':41 'actual':146 'also':18,74,99 'anybodi':165 'attack':66 'backup':76,102,140,152 'becom':90 'begin':24 'biggest':37 'bleep':29 'bleeping-comput':28 'bleepingcomputer.com':172 'client':71 'cloud':59,108,135 'cloud-provid':58,107,134 'comput':30 'concluss':127 'cybersecur':38 'daili':101,139 'danish':57 'data':72 'differ':155 'disk':94 'disk-storag':93 'encrypt':67,97 'far':120 'far-fetch':119 'fetch':121 'get':61,147 'guess':14 'hi':1 'hit':62 'home':11 'home-host':10 'host':6,12 'hous':162 'idea':167 'interes':46 'interest':33 'item':42 'made':104 'mean':81 'might':115,142 'on-top':20 'one':47,159 'post':16,34,52 'provid':60,109,136,156 'publish':31 'ransomwar':65 'remark':169 's3':111 's3-storage':110 'see':48 'self':5 'self-host':4 'senario':84 'short':55 'storag':95,112,149 'stori':39 'summari':53 'think':125 'topic':22 'unus':91 'url':49 'useful':144 'useless':114 'user':79 'virtual':92 'vm':89 'vms':131,164 'www.bleepingcomputer.com':175 'www.bleepingcomputer.com/news/security/the-biggest-cybersecurity-and-cyberattack-stories-of-2023/)':174 'year':27"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1704716431
  +visibility: "visible             "
  +apId: "https://infosec.pub/post/6884026"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704630031 {#2360
    date: 2024-01-07 13:20:31.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS DENIED
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
7 DENIED edit
App\Entity\Entry {#2359
  +user: App\Entity\User {#261 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1726 …}
  +image: Proxies\__CG__\App\Entity\Image {#1874 …}
  +domain: Proxies\__CG__\App\Entity\Domain {#1410 …}
  +slug: "what-if-your-cloud-provider-gets-hacked"
  +title: "what if your cloud=provider gets hacked ?"
  +url: "https://www.bleepingcomputer.com/news/security/hosting-firm-says-it-lost-all-customer-data-after-ransomware-attack/"
  +body: """
    Hi all,\n
    \n
    As self-hosting is not just “home-hosting” I guess this post should also be on-topic here.\n
    \n
    Beginning of the year, bleeping-computers published an interesting post on the biggest cybersecurity stories of 2023.\n
    \n
    Item 13 is an interesing one. (see URL of this post). Summary in short A Danish cloud-provider gets hit by a ransomware attack, encrypting not only the clients data, but also the backups.\n
    \n
    For a user, this means that a senario where, not only your VM becomes unusable (virtual disk-storage is encrypted), but also the daily backups you made to the cloud-provider S3-storage is useless, might be not as far-fetches then what your think.\n
    \n
    So … conclussion ??? If you have VMs at a cloud-provider and do daily backups, it might be usefull to actually get your storage for these backups from a different provider then the one where your house your VMs.\n
    \n
    Anybody any ideas or remarks on this?\n
    \n
    (*) [bleepingcomputer.com/…/the-biggest-cybersecurity-…](https://www.bleepingcomputer.com/news/security/the-biggest-cybersecurity-and-cyberattack-stories-of-2023/)
    """
  +type: "link"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 29
  +favouriteCount: 96
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1721456735 {#2377
    date: 2024-07-20 08:25:35.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#1926 …}
  +votes: Doctrine\ORM\PersistentCollection {#2391 …}
  +reports: Doctrine\ORM\PersistentCollection {#1907 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1883 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2369 …}
  +badges: Doctrine\ORM\PersistentCollection {#2392 …}
  +children: []
  -id: 27807
  -titleTs: "'cloud':4 'get':6 'hack':7 'provid':5"
  -bodyTs: "'/news/security/the-biggest-cybersecurity-and-cyberattack-stories-of-2023/)':176 '/the-biggest-cybersecurity-':173 '13':43 '2023':41 'actual':146 'also':18,74,99 'anybodi':165 'attack':66 'backup':76,102,140,152 'becom':90 'begin':24 'biggest':37 'bleep':29 'bleeping-comput':28 'bleepingcomputer.com':172 'client':71 'cloud':59,108,135 'cloud-provid':58,107,134 'comput':30 'concluss':127 'cybersecur':38 'daili':101,139 'danish':57 'data':72 'differ':155 'disk':94 'disk-storag':93 'encrypt':67,97 'far':120 'far-fetch':119 'fetch':121 'get':61,147 'guess':14 'hi':1 'hit':62 'home':11 'home-host':10 'host':6,12 'hous':162 'idea':167 'interes':46 'interest':33 'item':42 'made':104 'mean':81 'might':115,142 'on-top':20 'one':47,159 'post':16,34,52 'provid':60,109,136,156 'publish':31 'ransomwar':65 'remark':169 's3':111 's3-storage':110 'see':48 'self':5 'self-host':4 'senario':84 'short':55 'storag':95,112,149 'stori':39 'summari':53 'think':125 'topic':22 'unus':91 'url':49 'useful':144 'useless':114 'user':79 'virtual':92 'vm':89 'vms':131,164 'www.bleepingcomputer.com':175 'www.bleepingcomputer.com/news/security/the-biggest-cybersecurity-and-cyberattack-stories-of-2023/)':174 'year':27"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1704716431
  +visibility: "visible             "
  +apId: "https://infosec.pub/post/6884026"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704630031 {#2360
    date: 2024-01-07 13:20:31.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS DENIED
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
8 DENIED moderate
App\Entity\Entry {#2359
  +user: App\Entity\User {#261 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1726 …}
  +image: Proxies\__CG__\App\Entity\Image {#1874 …}
  +domain: Proxies\__CG__\App\Entity\Domain {#1410 …}
  +slug: "what-if-your-cloud-provider-gets-hacked"
  +title: "what if your cloud=provider gets hacked ?"
  +url: "https://www.bleepingcomputer.com/news/security/hosting-firm-says-it-lost-all-customer-data-after-ransomware-attack/"
  +body: """
    Hi all,\n
    \n
    As self-hosting is not just “home-hosting” I guess this post should also be on-topic here.\n
    \n
    Beginning of the year, bleeping-computers published an interesting post on the biggest cybersecurity stories of 2023.\n
    \n
    Item 13 is an interesing one. (see URL of this post). Summary in short A Danish cloud-provider gets hit by a ransomware attack, encrypting not only the clients data, but also the backups.\n
    \n
    For a user, this means that a senario where, not only your VM becomes unusable (virtual disk-storage is encrypted), but also the daily backups you made to the cloud-provider S3-storage is useless, might be not as far-fetches then what your think.\n
    \n
    So … conclussion ??? If you have VMs at a cloud-provider and do daily backups, it might be usefull to actually get your storage for these backups from a different provider then the one where your house your VMs.\n
    \n
    Anybody any ideas or remarks on this?\n
    \n
    (*) [bleepingcomputer.com/…/the-biggest-cybersecurity-…](https://www.bleepingcomputer.com/news/security/the-biggest-cybersecurity-and-cyberattack-stories-of-2023/)
    """
  +type: "link"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 29
  +favouriteCount: 96
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1721456735 {#2377
    date: 2024-07-20 08:25:35.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#1926 …}
  +votes: Doctrine\ORM\PersistentCollection {#2391 …}
  +reports: Doctrine\ORM\PersistentCollection {#1907 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1883 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2369 …}
  +badges: Doctrine\ORM\PersistentCollection {#2392 …}
  +children: []
  -id: 27807
  -titleTs: "'cloud':4 'get':6 'hack':7 'provid':5"
  -bodyTs: "'/news/security/the-biggest-cybersecurity-and-cyberattack-stories-of-2023/)':176 '/the-biggest-cybersecurity-':173 '13':43 '2023':41 'actual':146 'also':18,74,99 'anybodi':165 'attack':66 'backup':76,102,140,152 'becom':90 'begin':24 'biggest':37 'bleep':29 'bleeping-comput':28 'bleepingcomputer.com':172 'client':71 'cloud':59,108,135 'cloud-provid':58,107,134 'comput':30 'concluss':127 'cybersecur':38 'daili':101,139 'danish':57 'data':72 'differ':155 'disk':94 'disk-storag':93 'encrypt':67,97 'far':120 'far-fetch':119 'fetch':121 'get':61,147 'guess':14 'hi':1 'hit':62 'home':11 'home-host':10 'host':6,12 'hous':162 'idea':167 'interes':46 'interest':33 'item':42 'made':104 'mean':81 'might':115,142 'on-top':20 'one':47,159 'post':16,34,52 'provid':60,109,136,156 'publish':31 'ransomwar':65 'remark':169 's3':111 's3-storage':110 'see':48 'self':5 'self-host':4 'senario':84 'short':55 'storag':95,112,149 'stori':39 'summari':53 'think':125 'topic':22 'unus':91 'url':49 'useful':144 'useless':114 'user':79 'virtual':92 'vm':89 'vms':131,164 'www.bleepingcomputer.com':175 'www.bleepingcomputer.com/news/security/the-biggest-cybersecurity-and-cyberattack-stories-of-2023/)':174 'year':27"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1704716431
  +visibility: "visible             "
  +apId: "https://infosec.pub/post/6884026"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704630031 {#2360
    date: 2024-01-07 13:20:31.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS DENIED
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
9 DENIED ROLE_USER
null
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
ACCESS DENIED
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS ABSTAIN
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
10 DENIED moderate
App\Entity\Entry {#2457
  +user: App\Entity\User {#261 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1726 …}
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#1680 …}
  +slug: "authentik-how-to-backup"
  +title: "authentik .. how to backup ?"
  +url: null
  +body: """
    Hi all,\n
    \n
    Short question. Does somebody here run authentik as single sign-on provider? (dockerised?)\n
    \n
    I’m looking for information on how to best backup a authentik server? Just do a backup of the postgres database and the docker-compose file? Something else? How crucial is the dump.rdb file of the redis container?\n
    \n
    Kr.
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 3
  +favouriteCount: 24
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1712720939 {#2448
    date: 2024-04-10 05:48:59.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#2452 …}
  +votes: Doctrine\ORM\PersistentCollection {#2460 …}
  +reports: Doctrine\ORM\PersistentCollection {#2468 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2469 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2471 …}
  +badges: Doctrine\ORM\PersistentCollection {#2363 …}
  +children: []
  -id: 27721
  -titleTs: "'authentik':1 'backup':4"
  -bodyTs: "'authentik':9,28 'backup':26,33 'best':25 'compos':42 'contain':55 'crucial':47 'databas':37 'docker':41 'docker-compos':40 'dockeris':16 'dump.rdb':50 'els':45 'file':43,51 'hi':1 'inform':21 'kr':56 'look':19 'm':18 'postgr':36 'provid':15 'question':4 'redi':54 'run':8 'server':29 'short':3 'sign':13 'sign-on':12 'singl':11 'somebodi':6 'someth':44"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1704648332
  +visibility: "visible             "
  +apId: "https://infosec.pub/post/6863776"
  +editedAt: DateTimeImmutable @1712542756 {#2465
    date: 2024-04-08 04:19:16.0 +02:00
  }
  +createdAt: DateTimeImmutable @1704579832 {#2453
    date: 2024-01-06 23:23:52.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS DENIED
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
11 DENIED edit
App\Entity\Entry {#2457
  +user: App\Entity\User {#261 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1726 …}
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#1680 …}
  +slug: "authentik-how-to-backup"
  +title: "authentik .. how to backup ?"
  +url: null
  +body: """
    Hi all,\n
    \n
    Short question. Does somebody here run authentik as single sign-on provider? (dockerised?)\n
    \n
    I’m looking for information on how to best backup a authentik server? Just do a backup of the postgres database and the docker-compose file? Something else? How crucial is the dump.rdb file of the redis container?\n
    \n
    Kr.
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 3
  +favouriteCount: 24
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1712720939 {#2448
    date: 2024-04-10 05:48:59.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#2452 …}
  +votes: Doctrine\ORM\PersistentCollection {#2460 …}
  +reports: Doctrine\ORM\PersistentCollection {#2468 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2469 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2471 …}
  +badges: Doctrine\ORM\PersistentCollection {#2363 …}
  +children: []
  -id: 27721
  -titleTs: "'authentik':1 'backup':4"
  -bodyTs: "'authentik':9,28 'backup':26,33 'best':25 'compos':42 'contain':55 'crucial':47 'databas':37 'docker':41 'docker-compos':40 'dockeris':16 'dump.rdb':50 'els':45 'file':43,51 'hi':1 'inform':21 'kr':56 'look':19 'm':18 'postgr':36 'provid':15 'question':4 'redi':54 'run':8 'server':29 'short':3 'sign':13 'sign-on':12 'singl':11 'somebodi':6 'someth':44"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1704648332
  +visibility: "visible             "
  +apId: "https://infosec.pub/post/6863776"
  +editedAt: DateTimeImmutable @1712542756 {#2465
    date: 2024-04-08 04:19:16.0 +02:00
  }
  +createdAt: DateTimeImmutable @1704579832 {#2453
    date: 2024-01-06 23:23:52.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS DENIED
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details
12 DENIED moderate
App\Entity\Entry {#2457
  +user: App\Entity\User {#261 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1726 …}
  +image: null
  +domain: Proxies\__CG__\App\Entity\Domain {#1680 …}
  +slug: "authentik-how-to-backup"
  +title: "authentik .. how to backup ?"
  +url: null
  +body: """
    Hi all,\n
    \n
    Short question. Does somebody here run authentik as single sign-on provider? (dockerised?)\n
    \n
    I’m looking for information on how to best backup a authentik server? Just do a backup of the postgres database and the docker-compose file? Something else? How crucial is the dump.rdb file of the redis container?\n
    \n
    Kr.
    """
  +type: "article"
  +lang: "en"
  +isOc: false
  +hasEmbed: false
  +commentCount: 3
  +favouriteCount: 24
  +score: 0
  +isAdult: false
  +sticky: false
  +lastActive: DateTime @1712720939 {#2448
    date: 2024-04-10 05:48:59.0 +02:00
  }
  +ip: null
  +adaAmount: 0
  +tags: null
  +mentions: null
  +comments: Doctrine\ORM\PersistentCollection {#2452 …}
  +votes: Doctrine\ORM\PersistentCollection {#2460 …}
  +reports: Doctrine\ORM\PersistentCollection {#2468 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2469 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2471 …}
  +badges: Doctrine\ORM\PersistentCollection {#2363 …}
  +children: []
  -id: 27721
  -titleTs: "'authentik':1 'backup':4"
  -bodyTs: "'authentik':9,28 'backup':26,33 'best':25 'compos':42 'contain':55 'crucial':47 'databas':37 'docker':41 'docker-compos':40 'dockeris':16 'dump.rdb':50 'els':45 'file':43,51 'hi':1 'inform':21 'kr':56 'look':19 'm':18 'postgr':36 'provid':15 'question':4 'redi':54 'run':8 'server':29 'short':3 'sign':13 'sign-on':12 'singl':11 'somebodi':6 'someth':44"
  +cross: false
  +upVotes: 0
  +downVotes: 0
  +ranking: 1704648332
  +visibility: "visible             "
  +apId: "https://infosec.pub/post/6863776"
  +editedAt: DateTimeImmutable @1712542756 {#2465
    date: 2024-04-08 04:19:16.0 +02:00
  }
  +createdAt: DateTimeImmutable @1704579832 {#2453
    date: 2024-01-06 23:23:52.0 +01:00
  }
}
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\EntryVoter"
ACCESS DENIED
"App\Security\Voter\MagazineVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageThreadVoter"
ACCESS ABSTAIN
"App\Security\Voter\MessageVoter"
ACCESS ABSTAIN
"App\Security\Voter\NotificationVoter"
ACCESS ABSTAIN
"App\Security\Voter\OAuth2UserConsentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostCommentVoter"
ACCESS ABSTAIN
"App\Security\Voter\PostVoter"
ACCESS ABSTAIN
"App\Security\Voter\UserVoter"
ACCESS ABSTAIN
Show voter details