Skip Navigation

JackbyDev

@ JackbyDev @programming.dev

Posts
18
Comments
2408
Joined
3 yr. ago

Any pronouns. 33.

Professional developer and amateur gardener located near Atlanta, GA in the USA.

I'm using a new phone keyboard, please forgive typos.

  • Women Dating Safety App 'Tea' Breached, Users' IDs Posted to 4chan

    Jump

  • One of the definitions of hacking is illegally gaining access to a computer system. It doesn't need to involve any sort of exploit. Stealing from an unlocked home is still stealing. Gaining access to a system by phishing is still hacking. Leaking data that is technically publicly accessible that isn't meant to be publicly accessible is still hacking.

    Not that I suspect anything good from 4chan but the proper thing to do would be to disclose to Tea that their data is public and allow them to fix the problem. The ethics of vulnerability disclosure still apply when the vulnerability is "hey you literally didn't secure this at all."

  • Women Dating Safety App 'Tea' Breached, Users' IDs Posted to 4chan

    Jump

  • Instead, just prove you have a credit card by submitting the details. Also totally safe. Be sure to include the CVV, please!

  • Women Dating Safety App 'Tea' Breached, Users' IDs Posted to 4chan

    Jump

  • Women Dating Safety App 'Tea' Breached, Users' IDs Posted to 4chan

    Jump

  • this arguably is not even largely a hack.

    While I agree in principle, I think we should still call it a hack. As in "to gain illegal access to (a computer network, system, etc.)" as Merriam-Webster puts it. It shouldn't be legal to do do this just because the website had horrible (non-existent) security. You shouldn't be allowed to rob a house just because the door wasn't locked.

  • Women Dating Safety App 'Tea' Breached, Users' IDs Posted to 4chan

    Jump

  • as a woman or woman categorized person

    Can't tell if you're being transphobic to trans femmes or supportive to femme leaning enbies.

  • Women Dating Safety App 'Tea' Breached, Users' IDs Posted to 4chan

    Jump

  • I've been seeing a lot of misogony here the past week or so. It's disheartening.

  • Women Dating Safety App 'Tea' Breached, Users' IDs Posted to 4chan

    Jump

  • I can't open the article, but I think I read that this was hosted on an unprotected bucket. Assuming that's correct I wouldn't say this was a breach. A better headline would be "Women dating safety app 'Tea' exposed women's PII".

    To be 100% clear, I'm not excusing the hackers. I don't believe it's morally correct to publicize something because it is exposed. For folks curious about that you can look into how to ethically disclose vulnerabilities. I still view this as doxxing. I still believe what the hackers did should be a criminal offense, it's just that I also believe the app holds a ton of the blame as well. How can you proclaim to be about keeping women safe while putting them at risk? That should be punished as well.

    Like if the storage facility you trusted to hold your stuff never had locks on the doors, shouldn't they take a lot of the blame as well as the thief who found out a door was unlocked?

  • LMAO

    Jump

  • The irony being this sort of thing will make people more used to sharing very sensitive information online and more likely to fall for phishing attempts. Like the parents who couldn't figure out parental controls in the first place probably are.

  • LMAO

    Jump

  • Parental controls: exist

    Law makers: But what if we made people submit really sensitive information instead of requiring websites to identify themselves as adult for the purpose of content filters?

  • “You can't be expected to have a successful AI program when every article, book or anything else that you've read or studied, you're supposed to pay for”, President Trump says

    Jump

  • Damn, I can't expect to enjoy my evening if I have to pay for media, therefore it should be free.

  • That's a quite interesting add-on

    Jump

  • Yes, the statement itself is not inherently sexual, but in the context of BDSM it is.

  • That's a quite interesting add-on

    Jump

  • I'd say the buttplug.io integration made it pretty clear.

  • That's a quite interesting add-on

    Jump

  • Don't kink shame.

  • Adblockers stop publishers serving ads to (or even seeing) 1bn web users - Press Gazette

    Jump

  • I feel like I'm taking crazy pills whenever I hear them say things like this! These things belong to me, I should be able to control them. My perception, my LITERAL GATEWAY FROM MY MIND TO REALITY is mine and I have a right to control what I see.

  • Adblockers stop publishers serving ads to (or even seeing) 1bn web users - Press Gazette

    Jump

  • What's frustrating to me is the idea that law makers and advertisers believe I don't have a right to alter data that comes onto things I own. And nobody chime in with the brain dead "☝️🤓 actually you don't own it." Because even if you wanna waste time with that stupid distraction, I own my computer. I built it from parts.

    Controlling my perception is my right. If I wanna use things that block ads that's my right. PERIOD. I NEED TO BLOCK ADS BECAUSE OF MY DISABILITY.

  • CSS Minecraft

    Jump

  • Back in my day you had to have flash enabled to play creative in the browser! 🧓

  • Muscle memory

    Jump

  • Three words: dip shit drivers.

    Four words: I can't spell well.

  • Muscle memory

    Jump

  • You never fucking know, dude. Better to be safe than sorry. The other driver can be at fault and still leave you with a permanent disability.

  • [No PHPun Intended] "I code in PHP"

    Jump

  • Worst I've seen was at an old job. Another team broke up their project so nearly every Java class (file) was a separate Maven module. For folks unfamiliar with Maven, you may think that just means a different folder. That would be a Java package. Maven modules are compilation units with an entire XML file explaining the project with dependencies. So instead of their code being in one or , you know, less than five or so modules there were dozens. I wanna say a hundred but I don't want to exaggerate and don't remember.

    Thankfully these were subprojects so they were still in one git repository and could all be built with a single invocation of Maven, but navigating it was a massive pain.

    I try not to make assumptions about "bad code" but I can't think of any legitimate reason for that layout of one class per Maven project.

  • No trickle...

    Jump

  • What does nth grade reading level even mean? Why doesn't it get corrected to an average of what is actual? In the context of adults I can understand, but I think I've heard things like Xrh graders having an average reading level as Yth graders. But if the average reading level of Xth grades is something (like some amount of words), why isn't that what an Xth grade reading level is?

    I hope that makes sense. Like if you everyone how their school experience is and they all believe they had a "worse than average" experience, clearly about half are incorrect.