This is hilariously timed considering the current panic at the hacked instances.
I think they're stealing auth tokens, not sure if 2fa would help. It looks like there may be a vulnerability in the markdown editor and being able to insert JavaScript. The JS being able to access your cookies to share them is the second issue.
Looks like it's issuing a GET to https://zelensky.zip/save/{ENCODED_JWT_TOKEN_AND_NAV_FLAG}.
The ENCODED_JWT_TOKEN is from btoa(document.cookie+nav_flag) where nav_flag is essentially 'navAdmin' if the account hit is an admin or '' if the user hit is not an admin (it checks if the admin button in the nav exists). Their server is likely logging all incoming requests and they just need to do a quick decoding to get jwt tokens and a flag telling them if it's an admin account.
I'd be hesitant to visit Lemmy on a browser atm ๐
Yep, Lemmy is filling a Reddit-shaped hole. It's a bit different but nice.
Hopefully there's more research done. It doesn't sound like it's "absolutely carcinogenic".
The "radiofrequency electromagnetic fields" associated with using mobile phones are "possibly cancer-causing". Like aspartame, this means there is either limited evidence they can cause cancer in humans, sufficient evidence in animals, or strong evidence about the characteristics.
The latest update addresses this in Settings under Privacy Information. No trackers in Connect, those are the trackers on the websites you're visiting when opening links via the app.
Tapping the post form submit button results in an error that says to pick one of the ten communities listed which I guess are those that horizontally scroll under the "community name" form field. So I guess I can only post to those.. not sure why it's limited. It's a bug unless I missed a new setting.
I had to create this post using Jerboa ๐
Connect version 1.0.69. Also applies to 1.0.71.
My instance restarted while browsing Lemmy. The error message output is raw html rather than a user-friendly message.
Not a huge deal but wanted to point it out.
Version 1.0.69
Connect is ridiculously stable and feature-complete for how new it is. Definitely deserves to be mentioned.
If interest rates are high, I'm sure they're hard up for capital. The free money they've grown to depend on is drying up and they need to make money themselves asap.
cross-posted from: https://beehaw.org/post/911506
Turns out my passion flower plant is gonna give me fruit this year ๐๐๐๐
For me at least.
Looks like they enforced rate limits an hour before midnight UTC.
Hilariously posted in the wrong thread I believe. ๐
cross-posted from: https://beehaw.org/post/790495
This is the first year it flowers, hoping to get fruit this year.
This is the first year it flowers, hoping to get fruit this year.
Yea! Jerboa certainly helped me leave Reddit. Well done and thanks devs!
I welcome the return of forums. What a simpler time.
What kind of terrible markdown editor allows adding onload scripts to images though.. it's insane.