[-] Yeah2206@infosec.pub 6 points 1 year ago

XSS vulnerbility hack. From a mod:

https://lemmy.blahaj.zone/post/766402

35
submitted 1 year ago by Yeah2206@infosec.pub to c/asklemmy@lemmy.ml

Hello,

Since your Lemmy posts, comments, related activities, and your basic profile information will be stored in the databases across the fediverse, possibly never to be deleted (or kept by somebody who can), do you:

  1. Always use Tor/VPN with a fediverse app?
  2. Recommend others do the same?

If you feel that it is unnecessary, why do you feel that way? If you think it is necessary, why so?

Thanks. I am trying to get a feel of what I should do. For example, if my instance loses its data (due to a hack, sale, vulnerability, etc.), I am pretty sure all the information is lost (including my IP addresses). If other instances lose their data, or keep the data for their own purposes, then my posts/comments/related activities are lost (maybe excluding some of my profile information, my settings, and my IP addresses).

I look forward to hearing your thoughts.

[-] Yeah2206@infosec.pub 10 points 1 year ago* (last edited 1 year ago)

Damn it, I thought it was a real story ending suspiciously. The community name is definitely not the first thing you see here. Thanks, dad.

[-] Yeah2206@infosec.pub 11 points 1 year ago* (last edited 1 year ago)

I looked. I'd guess the ones with 0 votes are posts done by bots, possibly powered by AI. The one I looked closely posted and commented to get karma points to get past the filters to post promotions/scams in other subs. The mods, including spez himself, are not doing any filtering. I am not sure if any is done for protest, but I only looked closely at one.

edited: grammar

[-] Yeah2206@infosec.pub 5 points 1 year ago

Instruction: Put in water to return to normally fucked looking state.

[-] Yeah2206@infosec.pub 8 points 1 year ago

For on-line RSS reader, try https://www.inoreader.com . I love it. You can search for feeds right on the site, or can go to a specific site to look for a feed sign. For example, Lemmy has a feed URL right next the question mark on top, so you can read your Lemmy's subscriptions as a feed as well.

[-] Yeah2206@infosec.pub 5 points 1 year ago

One upvote means at least one person appreciates you. More than that, there are no karmas or anything. You can use the votes to see the most appreciated comments, though.

[-] Yeah2206@infosec.pub 6 points 1 year ago

Shh... The NSA is already working on it, and the EU won't sue the NSA either.

[-] Yeah2206@infosec.pub 5 points 1 year ago

I pledge allegiance...

[-] Yeah2206@infosec.pub 8 points 1 year ago

It's like, he doesn't know whether or not it's going to work, so delays paying anybody (except obviously the lawyers) as long as possible. When it really doesn't work out, nobody gets paid. If it somewhat works out, he negotiates the payment down. Do you want it, or do you want more delay?

1
submitted 1 year ago* (last edited 1 year ago) by Yeah2206@infosec.pub to c/lemmy_support@lemmy.ml

I have questions about the native web interface.

What do you do to keep track of posts you have seen? i.e. You like the post, would like to see more discussions, how to keep track of them? On Reddit, you can click the Bell button and be notified/emailed about the follow-ups. On Lemmy, I've been hitting the save button to go back and look.

What do you do to keep track of comments? On Reddit, you can "Follow" the comment and be notified/emailed about the responses. On Lemmy, ~~I can't keep track of them, except via the Save button for the entire post above~~ there is a save button on each comment as well..

Thanks!

edited: there is save button on each comment.

Partial solution: use Save button for Post or Comment, and sort the comments by whichever way to let you see new/interesting comments.

[-] Yeah2206@infosec.pub 9 points 1 year ago

This is most likely a sensational waste of time. For all accounts, they communicated every 15 mins via short messages, and the last recorded communication was at 11:15a, which is definitely different from the claimed "transcript."

[-] Yeah2206@infosec.pub 9 points 1 year ago* (last edited 1 year ago)

I also use Bitwarden. I would recommend it to anyone who can benefit from a cloud-based password manager because the basic functionality is free and the more advanced features (premium, family) are very affordable.

Using Bitwarden safely will make your digital life safer, but it will most likely be more complicated than it is now. You will need to:

  • Use a randomly generated password for the master password, which is unintuitive but increases your safety
  • Enable two-factor authentication (2FA) for all of your accounts that offer it.
  • Make an encrypted backup of your Bitwarden vault.
  • Create an emergency sheet with your master password, 2FA recovery key, and other important information.
  • Plan for what will happen to your passwords if you become sick or die.

You can think about increasing your safety/convenience step by step by keeping a book of password (which can be lost, so has to be kept secure and probably make backup) with

  1. Random password/passphrase generator
  2. Yubikey + recovery numbers
  3. Drop the book, use an offline password manager (which some consider safer)
  4. Switch to cloud-based cross-platform password manager, which maximizes convenience
[-] Yeah2206@infosec.pub 33 points 1 year ago

There are also more permanent alias services including Firefox Relay, SimpleLogin, AnonAddy, and DuckDuckGo. You can turn off each alias that you no longer need afterward.

view more: next ›

Yeah2206

joined 1 year ago