Posts by helloyanis@furries.club
 (DIR) Post #B41sHeNTg9PSRIjEC8 by helloyanis@furries.club
       1 likes, 0 repeats
       
       I just found a security breach that can leak thousands of emails on a website!!Today, I snooped around on a website I won't mention the name of for privacy reasons, and they assign your account an user ID when you register.Well, with a very simple trick in the console I managed to get everyone else's email and account info (for example checking if they have a paid plan or not) by just lowering the user id, with no rate-limit on the endpoint!So a bad actor could send targetted phishing emails to people by telling them there is a problem with their payment!It's funny because on their homepage, they state they use "Military grade encryption" (whatever that means!), and their privacy policy says "We encrypt the transmission of that information" (does that just mean they do it over https?)So, moral of the story, don't trust companies with your personal info!I contacted the site, we'll see if they fix it.@privacy@lemmy.ml @privacy@lemmy.world @soatok#cybersecurity #privacy #web #hacking
       
 (DIR) Post #B41sHtyBhwgenV1Fzs by helloyanis@furries.club
       1 likes, 0 repeats
       
       @CodenameDarlen I'm glad I write well enough to be confused with AI but no, I haven't even used any em dashes! 😉
       
 (DIR) Post #B41sOusYj3ebe0jP7I by helloyanis@furries.club
       0 likes, 0 repeats
       
       @hansolo Well, I can't really share more details without compromising the privacy of thousands of people who didn't ask for anything! I don't really know what else I can tell you? If the website does not fix it then I can disclose the vulnerability, but since there are accounts dating back to 2009 the code base must be super old and hard to fix so I'll give them some time.
       
 (DIR) Post #B41sOvDTTINsgsW6iW by helloyanis@furries.club
       0 likes, 0 repeats
       
       @hansolo Well it is not one of the largest companies in the world, I can tell you that. You don't really have to trust me (but why would I post it if that wasn't true?)
       
 (DIR) Post #B41sOvT4XIrRTFoZ1s by helloyanis@furries.club
       1 likes, 0 repeats
       
       @hansolo Well, don't trust me then. I'm just a random person online after all! I'm not going to fight to prove something that I know happened, that would just be a pointless argument and a waste of time, I think.
       
 (DIR) Post #B4zhJd6pvNOP4bHWWu by helloyanis@furries.club
       1 likes, 0 repeats
       
       And a happy (late) #easter to everyone! Don't eat too much chocolate! 🍫 :dragn_mlem:
       
 (DIR) Post #B51b6VM3EYKLqifzaS by helloyanis@furries.club
       1 likes, 1 repeats
       
       I'm making a #browser #extension for #firefox is pretty cool!But something that isn't listed anywhere, is how when you reach 10k users, all of the updates you make have to be manually reviewed by the #Mozilla #addon team.Usually, I'd be fine with this, but how long do you think it took for an update that was just approved today?Well, it took a little bit over 3 weeks for this one! With no position in queue whatsoever in the developer dashboard. It's quite a long timeframe, if there's a critical bug for example you need to be able to update fast!Apparently itns because there's a huge amount of malicious vibe-coded #AI submissions. I wonder what could be done to improve the review times? (Because ranting is useless unless you have a solution in mind!)Maybe increase team size? But that will cost lots of money. Use an AI to filter malicious submissions? But then you'd have people tricking it, and false positives. I don't really see a way...#dev #devlog #foss #opensource
       
 (DIR) Post #B5CamDOORcJh5Uek08 by helloyanis@furries.club
       1 likes, 0 repeats
       
       :firefox: My #firefox add-on just reached 100 stars on #github ! Yeahhhh!!!!That's a cool milestone for an #opensource personal project! :blobCat_blush: :dragnaww:(Yes I know stars are just a meaningless number! Let me have my moment! :dragnmlem: )https://github.com/helloyanis/media-downloader-unleashed#dev #web #extensions
       
 (DIR) Post #B5aDLJnEu653y6WOlU by helloyanis@furries.club
       1 likes, 0 repeats
       
       Ever wondered why #mastodon has different trending feeds on every instance?Do you want an easy way to see the posts for a same hashtag across many instances?Well I do! So I made my own #frontend that allows you to pick multiple instances or accounts and see a single timeline from all of them! It's a #wip for now so it's a bit rough around the edges. Take it as a beta!- The search bar currently only support direct post URLs- Custom emojis and some icons may be missing- Polls, videos and content warning text is not yet supported- Posting and replying is currently supper barebones- Some issues with scrolling- But you can see multiple timelines in one place!- Works offline once you loaded the app once!- Can favourite, boost and bookmark!- Material design! Takes your device's color scheme and applies it to the site!- When most of the stuff is fixed I'll open source it.Try it out! Tell me what you think!https://mastodon.xn--3s8h30f.ws/#fediverse #webdev #opensource #dev #fos#
       
 (DIR) Post #B5nF2a98bXU49FR9n6 by helloyanis@furries.club
       1 likes, 0 repeats
       
       #css #tip of the day!Set your site's font-family to system-ui and this will use the device's default font!Great for when :- You don't care about font but don't want Times New Roman because it looks bad- You want to integrate the site better with the user, as they may have a special font that they like on their system and you just reuse this!#font #dev #webdev
       
 (DIR) Post #B5nF536FvX5YWcGW2a by helloyanis@furries.club
       0 likes, 0 repeats
       
       @IceWolf For accessibility reasons! Some people might find some fonts hard to read, so since people's system fonts are usually readable for them, it can help with that!
       
 (DIR) Post #B6YRusrFaAbrhJqXMu by helloyanis@furries.club
       1 likes, 0 repeats
       
       @tirifto :awoo:
       
 (DIR) Post #B6dD5cTUJAOqY7Bzg8 by helloyanis@furries.club
       1 likes, 0 repeats
       
       Since I'm in the EU, I don't have the new AI stuff on Google everyone is talking about and saying is broken lately, but I have heard of a trick that will disable AI on the result page, and it's putting &udm=14 at the end of a google search URL. No idea if that works but you can try! (And tell me if it does!)#google #ai #noai #web
       
 (DIR) Post #B6nUtLQM5zZgJONDcm by helloyanis@furries.club
       1 likes, 0 repeats
       
       @tirifto I had this issue too, it happens when you shut down the program or PC without closing properly, and it leaves a lock file in the Android Studio directory that you have to manually delete before it works again, at least for me that fixed it!