Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)N

nickwitha_k (he/him)

@ nickwitha_k @lemmy.sdf.org

Posts
5
Comments
442
Joined
3 yr. ago

  • Removed

    Whats a good Linux distro to dip my toe in with in a laptop running Windows 11? Is there a decent longer form guide to doing it successfully?

    Jump

  • Eh. It's a fine distro (I use it as one of my boots) but I really would steer new folks away from Arch as a first distro. The wiki is phenomenal but it's not very ergonomic for people who don't live in the terminal (like me), even with Discover.

  • Duckstation(one of the most popular PS1 Emulators) dev plans on eventually dropping Linux support due to Linux users, especially Arch Linux users.

    Jump

  • Yeah... But then it sucks for anyone not running Arch (btw) or derivative distros. I really don't have a dog in this merge conflict but really would feel bad for any packager maintainers.

  • Can any scientists confirm this important fact?

    Jump

  • My two meow at each other, humans, and the dog.

  • Duckstation(one of the most popular PS1 Emulators) dev plans on eventually dropping Linux support due to Linux users, especially Arch Linux users.

    Jump

  • Would have to go back to before the license change in September 2024. The current license basically forbids forks, from my reading.

  • Duckstation(one of the most popular PS1 Emulators) dev plans on eventually dropping Linux support due to Linux users, especially Arch Linux users.

    Jump

  • Yeah. That's a pretty shitty license to move to for endusers and others. Disallowing derivatives, etc. is within their rights but, really a dick move but, considering this commit message, not surprising.

  • Women’s ‘red flag’ app Tea is a privacy nightmare

    Jump

  • As I mentioned in other comments, I am a noob when it comes to web-sec; please forgive what may be dumb questions.

    There's nothing to forgive. Asking questions and being curious is how you learn this stuff.

    Is it really just permission rights "over-exposure" issue?

    From what I've read, it's more fundamental than that. It's a basic architecture issue. The datastore was publicly accessible, which it should never be. If they had it setup according to best practices, with an API to proxy access and auth, the datastore's permissions would be of minimal consequence, unless their network was compromised (still best practice to secure it and approach with a zero-trust mindset).

    Or does one need to also encrypt and then decrypt the data itself that must be sent to a database?

    Generally, cloud datastores handle encryption/decryption transparently, as long as the account accessing data has authorization to use the key. They probably also didn't have encryption setup.

    Also, if you have time, recommend any links to web/cloud/SaaS security best practices "for dummies"?

    Here are some more resources:

  • Women’s ‘red flag’ app Tea is a privacy nightmare

    Jump

  • I'd argue that it should not even be done in Dev. Dev, staging/testing, and prod environments should all be as close to one another as possible, especially for infra like datastores.

  • Women’s ‘red flag’ app Tea is a privacy nightmare

    Jump

  • I agree. Some sort of solution is necessary but this probably isn't it.

  • Women’s ‘red flag’ app Tea is a privacy nightmare

    Jump

  • On one hand, yes. On the other, women have, based upon crime statistics, legitimate reasons to avoid putting themselves in a situation where they may be assaulted or murdered for reporting problematic and/or worrisome behavior.

  • Women’s ‘red flag’ app Tea is a privacy nightmare

    Jump

  • Yup. It sounds like they were following security worst practices.

  • Women’s ‘red flag’ app Tea is a privacy nightmare

    Jump

  • Yeah. You also landed on a correct thought process for security. Cloud providers will let you make datastores public but that's like handing over a revolver with an unknown number of live chambers and saying "Have fun playing Russian roulette! I hope you win." Making any datastore public facing, without an API abstraction to control authN and authZ is not just a bad practice, it's a stupid practice.

  • Women’s ‘red flag’ app Tea is a privacy nightmare

    Jump

  • You've got the right ideas. Noone should ever be storing any password in plaintext. It should always be hashed and only the hash stored. That's like WEBDEV99 (remedial course, not even 101).

    Really. Despite your stated "noobishness", you basically landed in the territory of best practices right of the bat.

    If you're looking for a good source of best practices, the CIS benchmarks are great. https://www.cisecurity.org/

  • What is the best Power Outlet, and why?

    Jump

  • I like type F for the symmetry. However, type K is smiling.

  • Creative Title

    Jump

  • No. Conservatism has always only been about conserving aristocratic/oligarchic socio-economic power structures and establishing them where absent. Those are the only ideals they've ever had. All of the test was just a facade to pretend that their ideology has any place in a free, open, and equitable society.

  • Trump cranks up distraction machine but focus refuses to budge from Epstein

    Jump

  • He has too much slaver (for-profit prison) support to even come close to that.

  • Deleted

    Permanently Deleted

    Jump

  • Beat me to it.

  • Deleted

    Permanently Deleted

    Jump

  • They could be extensions of the scapula. This would make the renditions where pegasus appears to be galloping while flying more accurate.

  • Why do people always respond to depressed people, by recommending visiting a therapist or going to gym?

    Jump

  • As others have stated, it's general advice. I think that it is worth stating anyway because there is still stigma around mental health conditions and treatments.

    As for curing depression, it really depends on the type and cause of depression. Some people have differences in their brains that cause chemical imbalances that need medication and therapy to address. Some people come down with the mental health equivalent of the flu and need support to get through it. A mental health professional like a therapist or psychiatrist is trained to diagnose and formulate a treatment plan based upon what is observed.

    Depression can be fatal and I've known too many people who've succumbed to it. So, I will always recommend therapy to anyone going through depression, if they can afford it - sometimes sliding scales are available.

  • Venus Williams Admits She Came Back to Tennis at Age 45 for the Health Insurance

    Jump

  • COBRA is a fucking joke so that they can claim that you have the "option" to get health insurance while being completely unaffordable.