Skip Navigation

User banner
Grendel @ grendel84 @tiny.tilde.website
Posts
0
Comments
9
Joined
3 yr. ago

Turns out living paycheck to paycheck is better than working in corpo tech.

I'm loving the home school stay-at-home parent life

Luxuries be damned, I'll never regret trading my windowless office for being with my kids everyday.

  • IFS=$'\n'

    Jump

  • @WizardPope oh yeah they do that for everyone. It's a safety feature called puny code.

    people were using weird chars to impersonate well known domains for phishing, so if you register a domain using unusual or mixed language characters it renders it as puny code to prevent spoofing.

  • IFS=$'\n'

    Jump

  • I wonder if this was made by AI or a shit programmer

    Jump

  • @SpaceCowboy

    Then how do I know what I am not allowed to access?

    In this specific case there was no (formal) indication that the data was out of bounds.

    I can't put 10 pdf files in a web dir and claim 5 are public and 5 are private, then charge you with a crime for viewing them.

    You can't have "unauthorized access" when there's no authorization at all

  • I wonder if this was made by AI or a shit programmer

    Jump

  • @iii

    Yeah the internet by design is a public space, and we must be responsible and treat it as such when handling sensative data.

    Again, it was very wrong for people to take that data and especially to post like that.

    The company also has to do their part and produce at least some kind of barrier to the data.

    Even using UUIDs and making sure the data wasn't query-able would have been something.

  • I wonder if this was made by AI or a shit programmer

    Jump

  • @SpaceCowboy @JackbyDev

    In a legal context there's also the concept of a "reasonable expectation of privacy". The computer abuse and fraud act defines hacking as accessing data or systems you are not authorized to access.

    A better analogy is putting your journal in a public library and getting mad when somone reads it.

    I'm not saying what these ass holes did was right, I'm saying that the company weakened their legal position by not protecting the data.

  • I wonder if this was made by AI or a shit programmer

    Jump

  • @01189998819991197253 @ConstantPain

    Security isn't binary, it's a spectrum. You apply the level of security that is appropriate for each situation.

    Of course it's possible to brute force it, but by the same logic you could brute force jwt tokens, or api keys, or even ssl certs.

    It's literally impossible to apply "max security" to everything, so you have to prioritize.

    What happened was unconscionable, but insisting uuid are mathematically breakable isn't helpful, and can make it worse.

  • I wonder if this was made by AI or a shit programmer

    Jump

  • @EmilyIsTrans @lena

    sounds like firebase itself is a hack.

    I'm honestly embarrassed by my fellow devs more often than not these days.

    What the fuck happened to craftsmanship? Or taking pride in your work?

    oh right, techbro startup culture garbage ended it.

  • "Source code file"

    Jump

  • Coding chess

    Jump

  • @VoidJuiceConcentrate @maris

    Right?

    pretty sure there are more possible chess positions than atoms in the earth (universe?), so even if every atom of our planet were converted to transistors there'd be no way to fully represent all possibilities.