Sums up every Node project I’ve had the displeasure of looking at. The lock file being the only thing holding the twisted web of versions keeping that franken-app running between a minefield of incompatibilities and buggy hacks.
Info Sec - Software Engineer - Game Designer - Mod Dev - Digital Artist
Sums up every Node project I’ve had the displeasure of looking at. The lock file being the only thing holding the twisted web of versions keeping that franken-app running between a minefield of incompatibilities and buggy hacks.
Ah yes, just Australian wildlife things. We don’t have currawongs up here in QLD but we still have butcher birds earning their namesake.
Same with Express/Nord VPN sponsorships. Many people debunked the adverising BS they were spinning about blocking tracking when really it only masked a tiny subset.
As someone who studied infosec, those ads were infuriating. Now I just sponsor block it all because I’m beyond tired of it.
God help us all if we have to break out the Emus
Is it just me or are these stories getting a little bit ‘competitive’ on the worst possible accusations with lessening citations. All I could find on this are 15+yr old articles and Instagram/Tiktok influencers.
Hahaha, I wish.
You would be amazed at how ancient and poorly maintained many web servers are on the modern internet. SQL injection still consistently make the top 3 web app vulnerabilities as of 2021. If that isn’t being sanitized properly I don’t expect emojis would be handled much better.
Through a low tech social engineering attack referred to as SIM Jacking, an attacker can have your number moved to their SIM card, redirecting all SMS 2FA codes effectively making the whole thing useless as a security measure. Despite this, companies still implement it out of both laziness and to collect phone numbers (which is often why SMS MFA is forced)
Only if you call the deep-throating spez is giving him ‘mentoring’. It’s starting to make WSB loss porn look mild in comparison to the ongoing conga line of platform self-destruction.
I opted to switch to NewPipe and YMusic and haven’t looked back since.
Oh it was so much worse than that. Google indirectly banned every 3rd party app on the Play Store from streaming videos in the background to push that feature. Seemingly overnight every app that could do it vanished or cut the feature. Sure you can sideload a fix but your average non-savvy users got screwed into paying up.
This is why though I appreciate what DDG is doing, it’s not informing users about the context of what these permissions are used for, leading to a lot of fear over the wrong things. The data may not even be leaving the device but the implication DDG makes is that it is.
As a side note, I prefer to use DNS66 to filter data and ads by domain, then manually set my Android app permissions as needed.
I’d like to think Typescript does a lot of heavy lifting where JS fails when it comes to web development. On the otherhand there is no fixing fundamental flaws in PHP.
Sure bad programmers write bad code, but if a language tolerates something so obviously janky via implicit unseen magic, it’s just encouraging bad practices. PHP makes this worse by tweaking core behaviours in weird and wacky ways that can easily lead to security vulnerabilities.
I’ve been working with PHP for two years now (not by choice) but I still sometimes forget the weird behaviours these not-arrays cause. Recently I was pushing/popping entries in a queue and it fucked the indexing. I had programmed it like I would any other sane language and it wasn’t until I was stepping through the bug I realised I had forgotten about this.
I hate PHP for so many more reasons. It baffles me why anyone would think it was a good idea to design it this way. Thankfully my current job involves actively burning it down and preparing for its replacement.
As someone else who uses Tailscale behind a CGNAT, this indeed works. I use it for accessing my home server from the office for a year now. You can’t quite self host anything public facing but anything on your tailnet can talk to it just fine.
Theoretically a VPS proxy into the server over the VPN could work for devices not capable of running tailscale but your mileage may vary.
I’d be interested in something like a lightweight CDN/replication with OAuth2 for logging into other instances. Each instance ‘replicates’ your original account but isn’t itself the master. One can be promoted to master in the event of an outage effectively migrating your account.
Would make for some difficult security considerations given a rogue instance could attempt to hijack authority.
This naively assumes there aren’t malicious or extremists instances hell bent on brigading others in the fediverse. Without defederation, they can keep spinning up accounts to bypass individual bans until mods are overwhelmed.
Every instance retains their respective right to block who they deem a risk whether that’s an individual or instance. As an individual, you are more than welcome to create a separate account on another instances if you disagree with your current instance rules or bans, as is the nature of the fediverse.