- 2 Posts
- 184 Comments
deleted by creator
It’s not that bad that you might think, the db user just need to have readonly access permissions to specific database tables.
Ofc all data in tables ofc need to be public, so more like simple public facing page, app should not have any notion of users in any way, data probably populated by some automated system, and UI just to make it easier for anonymouse users to view that data in a friendly way.
On top of that it will be a hell for the sysops as they will need to know the whole db structure and such of even a single part of db would contain non-public data, but that overall the best guy to handle security in the first place.
And because all data is totally public in the first place you could give the task of creating frontend to any junior or LLM and it will be still secure.
But in truth it is very bad idea (even it it is possible), because most likely the database connections would be reused so you could for example change current connection session timezone or other params and that ofc would nit change the data in db but still could affect other users by showing wrongly formatted or shifted data.
kolorafa@lemmy.worldto
You Should Know@lemmy.world•YSK: It's Bandcamp Friday, 100% of proceeds go to artists today (until 12 a.m. PT)
21·7 个月前Good to know that it’s not every friday but specific days of year. So today and next one is in december.
Sorry, didn’t read other comments, so it is already known bug :)
Found the cause for my observed issue, if you grab the timeline by the text box then the text is moved inside the box.
Recording: https://nextcloud.dlk.pl/s/qfzCXsGXXPHq5mD
Text size dorsnt change, the viewport gets bigger and the text get shifted to a correct position like fixing itself.
But i only saw that like handfull of times.
It’s some sorts of a bug, as it changes it size/offset if you interact with it in some ways. Has that multiple times but didn’t know how to reproduce it or if its not even only on my phone (fairphone 5)
kolorafa@lemmy.worldto
Opensource@programming.dev•A decentralized end-to-end encrypted chat app
12·8 个月前It have a very small amount of informations about it.
Would be nice to have some details about:
- Where messages and identities are stored?
- How the identity is managed?
- What topology does it use for the decentralization.
- If and how does it supoort multiple clients for the same identity.
- Does it handle multiple servers/identities?
- There is a home server, but does it store all informations in some way or is it just a encryoted storage and relay.
Only android and Desktop. But it’s a good start.
kolorafa@lemmy.worldto
Technology@lemmy.world•Teen killed himself after ‘months of encouragement from ChatGPT’, lawsuit claimsEnglish
1·8 个月前Fake news, CEO and all emplyes are getting pay’d in full, it doesn’t matter if they sell the product to its users or sell (user data) to their sponsors or share the data internaly, it doesnt matter that the service model itself is not profitable as they make the rest from selling a (fake?) promises.
Same with many others like Youtube, they are also “not profitable” on paper as a standalone service. It only mean they are using you, selling your data or selling some promises.
If they would actully not be profitable then they would rise prices or just disapear and some other company would arise but with srtategy that is at least sustainable.
Open source devs can be losing money, as the pay from their own pockets.
I would like to see at least one person in that company that is not getting money from it but fund it from own money.
kolorafa@lemmy.worldto
Privacy@lemmy.ml•Why are so many European countries getting worried about encryption and/or age verification? Why *now*?
12·8 个月前They try to push Chat Control every year for some time now…
kolorafa@lemmy.worldto
Technology@lemmy.world•Google will block sideloading of unverified Android apps starting next yearEnglish
91·8 个月前I dont have an issue with a feature to allow my phone to automatically veirfy signatures. But there should be a way to import/configure more signature verification providers including my own authority and even then it should still allow imstall if user really want and trust it.
kolorafa@lemmy.worldto
Technology@lemmy.world•Google will block sideloading of unverified Android apps starting next yearEnglish
1·8 个月前deleted by creator
kolorafa@lemmy.worldto
Linux@lemmy.ml•Looking back at my transition from Windows to Linux in an anti-customer age
12·8 个月前OneDrive even silently reinstalled itself and moved one customer’s data to the cloud, all without consent. One day their data was on the local drive and the next it became online-only files that had to be downloaded from Microsoft’s servers.
External party (microsoft) uploaded some unknown code to user PC (hidden in update) and that code uploaded and deted all that data.
That sounds like stealing + (almost) ransomware?
For steam, shutdown it and start it from terminal to see logs from steam and games on screen. Then start the game that doesn’t want to start and paste those logs. Because 99% of time clue for the reason why its failing is in the log.
You dont need to use this method to get the logs maybe there is a simpler one foe your setup, like look for those logs in journal or any other place but thats how I did investigate why some steam game didn’t start. But I did have native steam, not flatpak one. For flatpak you might need some
flatpak run something.somethingcommand, it should log a lot of text, if not then maybe need some --params to not go into background.Overall this method works for most stuff, logs are the holy grail of any app when debugging and (almost if not) all linux run app does output those :)
kolorafa@lemmy.worldto
Technology@lemmy.world•Popup Ads in Your Pickup Truck? RAM Trucks Now Feature Scammy Ads on the Center DisplayEnglish
4·9 个月前I think all people that see that ads need to pickup a phone and call them asking stupid questions and waste their time, they clearly ask you to do that.
kolorafa@lemmy.worldto
Technology@lemmy.zip•Substack’s “Nazi problem” won’t go away after push notification apologyEnglish
1·9 个月前Hence the issue we should target and fight is the closed/secret algorithm not only focus on the “Nazi incident”. But almost non is talking about it.
kolorafa@lemmy.worldto
Technology@lemmy.zip•Substack’s “Nazi problem” won’t go away after push notification apologyEnglish
2·9 个月前It’s not a question what did they send but why. Is it just more automated marketing bullshit that is trying to guess what people might like and revomend shit to people? At least the post suggests that.
The whole notion on tracking people interests to promote shit should be banned in the first place IMHO. It only leads to promote shit while filling greedy people pockets.
Recommendations should always be personal like if you Like/subscibe to person X then it could suggest stuff that X thinks if should recommend and it should clearly say “X recommends:” so you know who recommends what, both that you can stop follow people that sold themselfs to highest bidder or have interests not alight with you.
Having automated magic recommendations is always a recipe for disaster (example above) and abuse by the algorithm owner.
kolorafa@lemmy.worldto
Technology@lemmy.zip•Dropbox is shutting down its password managerEnglish
21·9 个月前Dropbox had an password manager? 🫣








Anti rollback shoud have exceptions for when new software is bad/broken, you would be able to unlock/disable this feature (with some boot alerts or something).