the API endpoint GET [redacted] will return user data for any account - not just your own account - so long as you supply a valid, five-digit user ID. It doesn’t perform any authorization check or ownership validation. “Just increment the number and get someone else's data,” she wrote.
This data includes users’ email addresses, first and last names, country, dates of birth, and whether the account has been deleted, and the API exposes all 719,517 accounts on the prayer site. “With sequential user IDs and no rate limiting, an attacker could enumerate every single account on the platform,” the hacker explained. “One GET request per user. for i in range(1, 719518): scrape(). That's it. That's the exploit.”
My God, that's horrific. Plus it doesn't even delete your data if you delete your account, it's still vulnerable.
The way I always calculate doing any medical thing is a asking myself questions. My health is weird and complicated, and often it's nothing and I just go home, but sometimes it's something and I'm glad I went.
Don't answer these if you don't want to, just write it in a notebook.
What conditions are they checking for, specifically?
Look them up online.
What are the symptoms?
Do you have any of them?
Are these conditions urgent or dangerous?
What happens if you do have them and ignore them?
Can you monitor them at home and reliably detect if they're worsening?
Is there an actual treatment? Does a diagnosis change your life in any way or would it just be interesting?
Just look at your answers the next day and ask yourself if someone else told you this, what would you recommend to them? Forget the cost or "wasting resources"; actually look at what you wrote as if it's worth serious consideration. You deserve care.
They do, but you can't say "this isn't medical advice" and then turn around and give medical advice. Especially to the point of discouraging seeing a doctor.
They still have a good export tool, that's a reliable canary for enshittification in my experience. See: how Google butchered their export tools to be as annoying as possible for "security" reasons. The harder it is to leave, the more they care about trapping you via friction rather than keeping you via good customer experience
As far as I understand, it seems to sacrifice accuracy at larger numbers, for more accuracy at smaller numbers. As they say, that seems like a reasonable tradeoff, because we tend to mostly use smaller numbers in our software.
In my honest opinion though, if accuracy is a concern, I reach for decimal or integer based mathematical libraries. For example, in a JavaScript project that needed to handle currency, I used Dinero, because $0.1 + $0.2 needs to actually work properly. As far as I understand, it just does all math in integers, and then you can display it as a string in the UI or export it as an integer for storage as a realised decimal in the database.
Can you explain how this works exactly? Do you mean you have like a "third type" or "fraction": 3 and you just store 00 for 0/3, 01 for 1/3, 10 for 2/3, 11 for 3/3? If it's an object, struct, or class type to store the context, then it's not a primative and has a lot of overhead for arithmetic and I don't see how you could possibly even do simple things like 1/3 + 2/6
I don't even look at ads on the "general internet" and this is the only social media I still have which has no algorithm. But if I check the home page of services I use…
Coconut water
Yoghurt
Almond milk
Herbal tea
Canned tuna
Hemp seeds
Low carb protein powder
Pretty accurate of my habits I suppose. But it also has some shit I've literally never bought because it's too much sugar for my 'beetus.
Protein bars
Dark chocolate
Wraps
Ginger beer
Frozen Mac and cheese
Arrowroot biscuits
How to ditch your phone
Hugging face hacked
Hades 2 metal cover
A guide to build muscle
Hamster playing a harmonica
Why young people are getting colon cancer
Ocarina of Time randomiser but all enemies move at 2x speed
Common Moon physics mistakes
The algo really has no idea what I actually like so it just throws random shit at me. The OoT rando I might watch maybe but generally I don't bother with the home page and use my subscriptions tab. Shoutout to ZFG on YouTube.
Digimon adventures (ugh)
Spy x Family
Atelier Ryza
Blade runner blackout
Knights of sidonia
Kaguya sama love is war
Horimiya
Ouran high school host club
Chainsaw man
Kind of a rollercoaster of genres… but not totally inaccurate to my tastes
What do you mean by that? I can't even talk to you normally anymore, every conversation is an argument. Are you testing me? What do you even want me to say?
Yes this is what A.I. does. It shows you a somewhat glitchy alternate reality where that photo is coloured in instead of black and white. So it might do seemingly strange things like upgrading technology and clothes and stuff to match what people wore when colour photos were a thing.
However, it's relatively trivial to take the A.I. photo and use it as a colour-only layer in Photoshop, while preserving the original grayscale photograph as the source of truth. It might not line up perfectly but you can smudge it around a bit to fit.
Agreed. Back then, dictionaries were basically suggestions and fiction. People only really started caring about modern consistent spelling relatively recently (19th century), but it's assumed that's always been the case. People used to just make up words as it made sense, like colour. Someone just made up that word and now we all use it, but God forbid anyone get creative nowadays! There's been dozens of both successful and failed "spelling reforms". Some people just decided on this one spelling and we all now pretend it was gospel.
Then the grammar Nazis come out of the woodwork, as if they cannot possibly understand anything you wrote, because of this one small error. It's not helpful or interesting behaviour, it's like pointing out a smudge on an artwork.
Most other languages on Earth have an intuitive way of spelling and sounding out letters, with actual rules, to the point where you can understand how to say something just by reading it. English has no such feature, despite some efforts. Every word is it's own unique creature with it's own unique spelling and pronunciation and history.
All the helpful features of English to help you know how to pronounce something have been stripped out to make it "simplified". Ever wonder why they're called "simplified English dictionaries"? Because there used to be other kinds of English and dictionaries. Because it spells it "naive" instead of "naïve". The extra dot on the vowel used to mean that you say the vowels separately instead of smooshed together; na-i-ve.
Fucking dogshit language. It's my first language, but I found my second and third languages easier to learn and more logical and intuitive. Now that's saying something.
Also since you asked, capital letters were actually invented by the Romans, as a helpful optional feature to make things easier to read. They thought it looked cool to have Important Things be different.
I completely deleted my Reddit account, which is not a decision I took lightly, after more than 10 years of using that website frequently. I didn't use any of the purge apps, my comments can be fossilized under [deleted] incase it helps anyone.
Makes me wonder if that's a good indication of quality? I highly doubt bot accounts and astroturfers would ever delete their account, it's too valuable for them. Deleted users are kind of verified human in a way.
Well they are an orange cat…