Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)ST
Posts
2
Comments
114
Joined
2 yr. ago

  • I'm not particularly familiar with XSS but I'm curious how a frontend exploit can compromise an instance?

    Presumably the injected XSS stores the admin's JWT somewhere for the exploiter?

    Then using that JWT they can effectively login as the admin which gives them access to whatever admin dashboard there is, but does that actually compromise the backend at all?

    edit: for anyone curious there's a bit of a breakdown of how it works here: https://feddit.win/comment/244427

  • A useful tip I picked up was to use ii instead of j for an inner loop. It's far more distinct than j.

    If for some terrible reason you have even more inner loops you can easily continue the trend i, ii, iii, iiii, iiiii - or iv, v if you're feeling roman

  • My first experience with snap was rather frustrating.

    The application kept failing to read the config file I provided without telling me why. After reading up it turns out snap can only read from the users home directory (and mounts, I think).

    Fine, frustrating but I vaguely understand it. So I move my config to the home directory. Still the same issue with no explanation.

    Finally it turns out it can't read dot files or dot directories even inside the home directory.

    Again, that's understandable but it was an incredibly frustrating, unintuitive experience. Vastly different than the Linux experience I was accustomed to.

  • A lot of sentiment seems to suggest that for Lemmy or the fediverse to succeed Reddit has to fail.

    I don't get that opinion at all. Reddit had become overwhelming bloated. A popular thread would have thousands of comments. Most of which would be near identical. Only the most up voted would ever be read and typically they had to have been commented while the thread was new.

    The internet is vast, there is plenty of room for multiple social media to exist.

    If you dislike what reddit has become then ignore it. If you still wish to use it then you can do so side by side with using Lemmy.