Cheers for that. Many of these issues allow an authenticated user to do admin actions if they do the right things, so it seems you should never allow a user that you don't fully trust to have an account.
But outside of this, there isn't anything in there that on its own worries me given the nature of the platform (that is, that if it all burnt down I could retrieve all data from other sources). I'm no expert but a cursory look shows a bunch of potential issues that may be layered with other issues but no clear attack path except with prior knowledge.
These should obviously be fixed but there's nothing that makes me want to rip my server off the open internet in a hurry.
I've never worried that much because it's not critical data and it's containerised in Docker, but I am curious about specifics because large numbers of people expose it to the internet (through reverse proxies).
A much nicer day today! It sucks about the health restructure, I know people working there and hear some crazy stories about a lack of staff, even (especially?) the front lines.
Bandcamp Friday is still on for the next few hours. Anything you buy, the artist gets the Bandcamp cut!
It's as real as bigfoot until someone gets a clear photo.
The guy mentioned in the article has spent 30 years looking for signs of a moose. The closest was some hair in 2002 (confirmed to be moose hair, but that moose hair found it's way to NZ is not evidence enough for me - plus if there was a moose it probably died of old age by now).
Given antlers were found 50 years+ ago and not a single further antler has been found - despite moose generally shedding antlers annually, well I guess I just find it hard to believe.
The fact that two separate groups of tourists said they saw a moose in the last month or so, and neither took a photo (or even tried to take a photo), that doesn't give me any confidence. If I saw a hippo in the Waikato I'd take a photo.
Call me a sceptic but after the extent of the searching that has been done to date, I'm going to need a picture.
The paywave one is an odd one. The technology is there, and they clearly already have agreements with banks. Is the only reason for not having EFTPOS paywave that the banks turn them down, whether due to user confusion (can paywave different cards at different places - seems not too different to using credit cards at some places and not others), or is it because they can't get the big banks on-board due to their contracts with Visa, etc?
And if so, how come they managed to get online EFTPOS?
Not quite, but the EFTPOS pricing model is different. No interchange fees. It used to be there were no transaction fees at all, you paid per terminal (and it wasn't much, like $20 a month) so long as you had internet access, but with more options like mobile phone connected stuff or wireless terminals it seems the pricing is a little more complicated. Still clearly a tiny fraction of the 2% or more of the price that you might see on Visa charges.
Yes my understanding is that you can use Mastodon to post to a community (by tagging it) or to respond to a post or comment. You can follow a Lemmy community as if it were a user.
However, to use a Lemmy account to interact with Mastodon, you are limited to replying to Mastodon users who have posted in a Lemmy community or commented on a Lemmy post.
Alternate title: "Visa, who has control over the contracts they have with banks to the point that our biggest bank ANZ doesn't offer Mastercard as an option, complains that their gouging of consumers for using paywave has led to merchants passing on the cost if customers want to use that method, which is encouraging people to use EFTPOS which doesn't charge for transactions. Visa proposes to go back to the gouging thing."
Interestingly with the popularity of surcharges, I notice way more places accepting credit cards (if you're willing to pay the fee).
My understanding of the current state is that with your Lemmy account, you can only interact with Lemmy-compatible activitypub services (Lemmy, Mbin, PieFed, Sublinks). Other services may be able to interact with Lemmy (I believe Mastodon and Friendica can, and Misskey may be able to as well).
There is no reason that Lemmy couldn't interact with other content, but it gets a little confusing when you are talking about following users and not communities, Lemmy doesn't work that way. You can't even follow another Lemmy user. So no one has implemented this in Lemmy yet.
Long store short, no you can't access in that direction yet, but there's no real reason why that couldn't come in the future. You could check out Mbin, which I believe supports more services. You can interact with Lemmy from other services (such as from Mastodon), but it gets a bit weird sometimes as they are different kinds of services.
Just curious, anyone using the lemmy.nz website, have you noticed less errors or freezing recently? I added an extra load balanced frontend container a few weeks back, I'm wondering if others have noticed an improvement (I have).
I suppose I’m really interested in locally-owned media outlets that receive their funding from the readers/grants thus avoiding the ownership of oligarchs/conglomerates.
Yeah so rnz.co.nz is government funded, so doesn't really meet this definition, which was the source of my question as it's my most trusted but not really "independent", though it's not billionaire owned.
Stuff.co.nz is probably the closest to what you've asked for. It's funded by ads, subscriptions, and user donations, among grants etc. But I wouldn't normally call them high quality, though they do occasionally impress me.
RNZ and Stuff are general news sites. They report on anything and everything and generally do 24 hours a day, with a lot syndicated from Reuters or Associated Press. They report on world news not just NZ.
The spinoff is funded from ads, grants, and donations, and is a lot smaller outfit. They don't do general news, they do more opinion pieces and long form journalism (and various other things). You wouldn't read them for news about the pope, it's more NZ focused and often opinionated or with a clear angle. They talk about important issues but pretty much all of their content should be read as if it were an opinion piece.
We must keep encouraging people to support local cooperatives, democratic participation, transparency and decentralization. We will need to be creative in how we defend democracy around the globe.
Yes for sure. I think NZ's democracy is certainly in a better state than the US and many other countries, I was just pointing out it's not a utopia of democracy. Something to learn from but not without it's own faults to correct for.
Dave @ Dave @lemmy.nz Posts 439Comments 5,075Joined 2 yr. ago 
Thanks!