In consulting, that’s called “after work”. Got to pump those billables
Honestly though, unless it’s a feature that is completely outside the domain of the application. If you have to re-write your entire app then your app was probably dog shit to begin with
This is the only way. Except some services don’t even accept those randomly generated ones. Only a slight inconvenience to add whatever special character they want or to trim the length.
Reminds me of “The Password Game” 😂
In my opinion, the project would benefit from static vulnerability scanning. Low hanging fruit like this XSS would have definitely been flagged.
Most of those providers even give it out for free for open source projects. So it wouldn’t hurt.
I just want to add a quick note:
From OPs screenshot, I noticed the JS code is attempting to extract the session cookie from the users that click on the link. If it’s successful, it attempts to exfiltrate to some server otherwise sends an empty value.
You can see the attacker/spammer obscures the url of the server using JS api as well.
May be how lemmy.world attackers have had access for a lengthy period of time. Attackers have been hijacking sessions of admins. The one compromised user opened up the flood gates.
Not a sec engineer, so maybe someone else can chime in.
Lemmy.world instance under attack right now. It was previously redirecting to 🍋 🎉 and the title and side bar changed to antisemitic trash.
They supposedly attributed it to a hacked admin account and was corrected. But the instance is still showing as defaced and now the page just shows it was “seized by reddit”.
Seems like there is much more going on right now and the attackers have much more than a single admin account.
Older scrum masters during the daily standup and trying to do live updates to the JIRA board
Turned 15 minute meeting into 30 minutes at times lol.
yea - same.
lemmy.world is not accessible for me
He did this in part because of the IBM/Redhat changes. It’s a lengthy book and looks like it’s worth the read if you are learning ansible.
I’ll keep it on my computer for reference.
In a way, cooking still has that “deprecation” feel. Like when you use a kitchen tool that is like 2 orders of magnitude above what you are currently using.
For me it was knives. It was a serrated knife set that was a gift and got me through college. Once I got a real job and could get something of quality. A friend recommended I change out my knives for a chef quality knives. Started out with some Global knives and have never went back to my old set. Been slowly adding over time (ie, bread knife, cleaver, paring).
Also, switched from non-stick to stainless steel because fuck PFOA. Also picked up a quality rice cooker from Zojirushi.
Technique can get you very far in cooking, but to make that dish perfect got to have the right tools.
There is always the option of setting up your own e-mail server. Have been using “docker mail server” for testing purposes and it’s relatively easy to setup locally.
Haven’t deployed it to a server yet though.
Probably referring to these reports:
Honestly, many of my colleagues need to use this instead of the balls of mud they manage to create.