- 1 Post
- 118 Comments
kolorafa@lemmy.worldto
Selfhosted@lemmy.world•Self-Host Weekly (3 October 2025)English
11·10 months agodeleted by creator
It’s not that bad that you might think, the db user just need to have readonly access permissions to specific database tables.
Ofc all data in tables ofc need to be public, so more like simple public facing page, app should not have any notion of users in any way, data probably populated by some automated system, and UI just to make it easier for anonymouse users to view that data in a friendly way.
On top of that it will be a hell for the sysops as they will need to know the whole db structure and such of even a single part of db would contain non-public data, but that overall the best guy to handle security in the first place.
And because all data is totally public in the first place you could give the task of creating frontend to any junior or LLM and it will be still secure.
But in truth it is very bad idea (even it it is possible), because most likely the database connections would be reused so you could for example change current connection session timezone or other params and that ofc would nit change the data in db but still could affect other users by showing wrongly formatted or shifted data.
kolorafa@lemmy.worldto
You Should Know@lemmy.world•YSK: It's Bandcamp Friday, 100% of proceeds go to artists today (until 12 a.m. PT)
21·10 months agoGood to know that it’s not every friday but specific days of year. So today and next one is in december.
kolorafa@lemmy.worldto
Technology@lemmy.world•Teen killed himself after ‘months of encouragement from ChatGPT’, lawsuit claimsEnglish
1·11 months agoFake news, CEO and all emplyes are getting pay’d in full, it doesn’t matter if they sell the product to its users or sell (user data) to their sponsors or share the data internaly, it doesnt matter that the service model itself is not profitable as they make the rest from selling a (fake?) promises.
Same with many others like Youtube, they are also “not profitable” on paper as a standalone service. It only mean they are using you, selling your data or selling some promises.
If they would actully not be profitable then they would rise prices or just disapear and some other company would arise but with srtategy that is at least sustainable.
Open source devs can be losing money, as the pay from their own pockets.
I would like to see at least one person in that company that is not getting money from it but fund it from own money.
kolorafa@lemmy.worldto
Privacy@lemmy.ml•Why are so many European countries getting worried about encryption and/or age verification? Why *now*?
12·11 months agoThey try to push Chat Control every year for some time now…
kolorafa@lemmy.worldto
Technology@lemmy.world•Google will block sideloading of unverified Android apps starting next yearEnglish
91·11 months agoI dont have an issue with a feature to allow my phone to automatically veirfy signatures. But there should be a way to import/configure more signature verification providers including my own authority and even then it should still allow imstall if user really want and trust it.
kolorafa@lemmy.worldto
Technology@lemmy.world•Google will block sideloading of unverified Android apps starting next yearEnglish
1·11 months agodeleted by creator
kolorafa@lemmy.worldto
Linux@lemmy.ml•Looking back at my transition from Windows to Linux in an anti-customer age
12·11 months agoOneDrive even silently reinstalled itself and moved one customer’s data to the cloud, all without consent. One day their data was on the local drive and the next it became online-only files that had to be downloaded from Microsoft’s servers.
External party (microsoft) uploaded some unknown code to user PC (hidden in update) and that code uploaded and deted all that data.
That sounds like stealing + (almost) ransomware?
kolorafa@lemmy.worldto
Technology@lemmy.world•Popup Ads in Your Pickup Truck? RAM Trucks Now Feature Scammy Ads on the Center DisplayEnglish
3·1 year agoI think all people that see that ads need to pickup a phone and call them asking stupid questions and waste their time, they clearly ask you to do that.
kolorafa@lemmy.worldto
Technology@lemmy.zip•Substack’s “Nazi problem” won’t go away after push notification apologyEnglish
1·1 year agoHence the issue we should target and fight is the closed/secret algorithm not only focus on the “Nazi incident”. But almost non is talking about it.
kolorafa@lemmy.worldto
Technology@lemmy.zip•Substack’s “Nazi problem” won’t go away after push notification apologyEnglish
2·1 year agoIt’s not a question what did they send but why. Is it just more automated marketing bullshit that is trying to guess what people might like and revomend shit to people? At least the post suggests that.
The whole notion on tracking people interests to promote shit should be banned in the first place IMHO. It only leads to promote shit while filling greedy people pockets.
Recommendations should always be personal like if you Like/subscibe to person X then it could suggest stuff that X thinks if should recommend and it should clearly say “X recommends:” so you know who recommends what, both that you can stop follow people that sold themselfs to highest bidder or have interests not alight with you.
Having automated magic recommendations is always a recipe for disaster (example above) and abuse by the algorithm owner.
kolorafa@lemmy.worldto
Technology@lemmy.zip•Dropbox is shutting down its password managerEnglish
21·1 year agoDropbox had an password manager? 🫣
kolorafa@lemmy.worldto
Technology@lemmy.zip•Substack’s “Nazi problem” won’t go away after push notification apologyEnglish
71·1 year agoI don’t use substack, didn’t even know it existed.
But what did they do exactly? Because this post is so nazi-filled that I think I’m missing the overall picture.
Did they just have an error and send push notifications of unrequested content to people or they started to spam random people with “random” content? Or maybe they did spam for a while now but now the content didn’t get curated enough ?
kolorafa@lemmy.worldto
Technology@lemmy.world•Adblockers stop publishers serving ads to (or even seeing) 1bn web users - Press GazetteEnglish
3·1 year agoStep 4 - success - Attention aquired. 😅
Better/fastest approch would be to check the last bit of the int and return the result. Second use modulo.
This? Dev should burn in hell. Who created this?
kolorafa@lemmy.worldto
Technology@lemmy.zip•Wimbledon replaces sharply dressed line judges with AI to call shotsEnglish
3·1 year agoThe arguments that the sound is to quiet, is valid but ofc not something that cant be fix/changed, they can always put an display/light to indicate stuff.
In Poland some banks directly use NFC for contactless payments, thanks to that I can pay with my degoogled phone (Murena Fairphone 5).
kolorafa@lemmy.worldto
Technology@lemmy.world•Why Denmark is dumping Microsoft Office and Windows for LibreOffice and LinuxEnglish
1·1 year agoI just hear that they move to LibreOffice but not to Linux, ateast not right now.



And then Motorola hijack your URs that your open on your phone and adding their something to the URL for profit…