Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)M

markstos

@ markstos @lemmy.world

Posts
1
Comments
150
Joined
3 yr. ago

  • Californians Say X Blocked Them From Viewing Amber Alert About Missing 14-Year-Old

    Jump

  • Ironically, when I tried to load Wired’s story about this travesty, Wired quickly hid the content with pop-over asking me to subscribe.

  • Removed

    Can't relate at all.

    Jump

  • What do you check two hours later?

  • How do you solve dynamic DNS?

    Jump

  • ChatGPT is down

    Jump

  • This is the day after iOS 18.2 was released with native ChatGPT integration.

  • If you've ever interacted with someone who speaks a different language, what is the funniest misunderstanding you've had?

    Jump

  • We had two female black cats named Midnight and Luna,

    When guests would come over ask about our young children about the cats, a child would explain to the adult guests that Midnight and Luna were our ladies of the night, explaining that Luna means moon.

    This went on for years.

  • What do you host for your finances and why!

    Jump

  • It’s so old it’s not called self-hosted.

  • What do you host for your finances and why!

    Jump

  • Moneydance https://moneydance.com/

    Started using it close to twenty years ago and keep using it because it seems fine.

  • Trump picks Dr. Oz to be CMS administrator

    Jump

  • A content management system admin? Painful.

  • Is there any front end YouTube that can allow me to still comment?

    Jump

  • At one time there were browser extensions that allowed you to comment on any web page and allowed other extension users to see your comments.

    The comments were hosted through the extension and not on the pages themselves.

    Something like that would be possible but I don’t know anyone offering it now. I presume no one wants to moderate that.

  • Donut Receipt

    Jump

  • I had a friend who liked to sulk around in a trench coat. He bought a grocery store donut and promptly tossed the receipt.

    He was soon stopped by grocery security for theft. After some hassle they tracked down his receipt and let him go, but yeah that’s what donut receipts are for.

  • Immich Public Proxy: Safely share your photos and albums without exposing your Immich instance

    Jump

  • Good example. It’s true that an even a GET request not designed to mutate data might still fail to validate input, allowing a SQL injection attack or other attack that escalates to the privileges that the running app has.

  • Immich Public Proxy: Safely share your photos and albums without exposing your Immich instance

    Jump

  • Immich has a whole set of end-to-end automated tests to ensure they don't accidentally make public any URLs they went to be private:

    https://github.com/immich-app/immich/tree/main/e2e/src/api/specs

    As a popular open source project, that would be e glaring security hole.

    Using this proxy puts the trust in a far less popular project with fewer eyeballs on it, and introduces new risks that the author's Github account is hacked or there's vulnerability in he supply chain of this docker container.

    It's also not true that you "never need to touch it again" . It's based on Node whose security update expire every two years. New image should be built at least every two years to keep to update with the latest Node security updates, which have often been in their HTTP/HTTPS protocol implementations, so they affect a range of Node apps directly exposed to the internet.

  • Immich Public Proxy: Safely share your photos and albums without exposing your Immich instance

    Jump

  • Yes, there are broken uses of the HTTP protocol verbs where filtering to GET won’t work.

  • Immich Public Proxy: Safely share your photos and albums without exposing your Immich instance

    Jump

  • A simpler way to protect a private service with a reverse proxy is to only forward HTTP GET requests and only for specific paths.

    It’s extremely difficult to attack a service with only GET requests.

    The security of which URLS are accessible without authentication would be up to immich.

  • Preferred RSS/Newsfeed Reader Solutions?

    Jump

  • Although, If I have my own Amazon referral link in my blog post and they replace the referral code in their feed, I would not be happy about that.

  • Preferred RSS/Newsfeed Reader Solutions?

    Jump

  • They could be injecting their own ads or affiliate links into the content.

    For example, if a post links to Amazon.

    I have not looked at the source code.

  • Zellij 0.41.0 released with its solution for colliding keybindings

    Jump

  • I ended my Zellij eval when I ran into this dangerous bug when Sync and Fullscreen are combined.

    It potentially sends commands to a server in a hidden window you can’t see.

    https://github.com/zellij-org/zellij/issues/3458

    Tmux doesn’t have this problem.

  • Deleted

    Permanently Deleted

    Jump

  • The story hypes this to be a bit more than this is.

    Framework sent a laptop to the lead Mint dev. He’s going to try make sure it works well with Mint, but it already does.

    The more low key framing straight on the Mint blog is here:

    https://blog.linuxmint.com/?p=4762

  • Why systemd is a problem for embedded Linux

    Jump

  • It was not even 3%, it was a tenth of that: 0.3%

    Even with 1GB of RAM, it would be 1.2%.

    If the design cuts it so close that it can’t spare 1% of RAM, the system is in danger of crashing in production due to memory exhaustion.

    Sure, at some point the impact of systems will matter and you should choose something else. At the point, you may also want to reconsider traditional Linux altogether in favor of a special low-memory variant or alternative.