Cloudron Demo

[girish]

@Teiluj yeah, I have noticed that too. We don't want to lock it too much either (app location, footer, usernames, group names, etc - lots of scope to put offensive things).

[User123456]

@girish In the demo, one of the characters is vandalizing things. He keeps creating spam containers.

[User123456]

@girish @nebulon @james and again, there were all apss deleted and replaced by others with funny photo and name.
Please act immediately.

[Lanhild]

@User123456 the demo being a demo is by nature very publicly accessible, making it prone to things like this. Unfortunately, there's not very much the team's able to do without locking a lot of the features, which in turn would make the demo unpleasant.

[joseph]

yeah, it really is complicated to lock down the server entirely. We considered re-imaging the server every night, but this will leave it open until that time. Only thing I can think of is maybe to have some cron job run analyze the current list of apps and various images via an LLM.

[User123456]

@joseph Can I find out and block the address of this?

[joseph]

@user123456 Good catch, looks like the eventlog is not showing the source IPs anymore! cc @girish

[girish]

@user123456 I have begrudgingly moved our demo instance to a totally different domain https://my.cloudron-demo.com . This way cloudron.io won't take a reputation hit for any misuse.

As for the real abuse itself, I am afraid nothing much we can do apart from sit it out

[User123456]

The user is still active at the new URL.

[User123456]

something is not right on the demo server if I have a container instrument that will be deleted after a short time or there will be an error

[jdaviescoates]

@User123456 it's not at all clear what issue you are reporting. Please elaborate so the Cloudron team can try to assist you.

[User123456]

No matter what I install, it's gone after 5 minutes, except for the webmail. Either there is a prankster on the loose or there is something wrong, no matter what I install.

[jdaviescoates]

@User123456 or it could be just resets every 5 mins?

[nebulon]

so that instance is a shared instance, which means everyone using the demo is using the same admin user. The more people who are at any point trying it, the more likely it is that apps get uninstalled. Mostly the demo is to showcase Cloudron not so much the app itself.

[User123456]

@nebulon You would also like to try out apps, setting up a nextcloud on your own is time-consuming if you do it correctly, and even more so if it is connected to others. It's just strange that apart from the webmail app, there are no other apps permanently there, even though something is always being installed in the logs. The high CPU usage is also strange for an app.

[User123456]

Es kotzt ein so en möchte man was machen ist gerade fertig und dan ist alles weg so ein drecks bulls...t, es kotzt mich an.

[jdaviescoates]

@User123456 if you want to have a proper play around why not just install Cloudron on a server? It's very simple and you can use it for free with 2 apps.

[joseph]

@user123456 I see the same behavior in the demo, but nothing we can do. As @jdaviescoates suggested best to do a test in your own custom server. The demo is really just a showcase and not for end user testing. Ultimately, the script kiddie will get bored and move on.