🦊 helloyanis

I just found a security breach that can leak thousands of emails on a website!! Today, I snooped around on a website I won't mention the name of for privacy reasons, and they assign your account an user ID when you register. Well, with a very simple trick in the console I managed to get everyone else's email and account info (for example checking if they have a paid plan or not) by just lowering the user id, with no rate-limit on the endpoint! So a bad actor could send targetted phishing emails to people by telling them there is a problem with their payment! It's funny because on their homepage, they state they use "Military grade encryption" (whatever that means!), and their privacy policy says "We encrypt the transmission of that information" (does that just mean they do it over https?) So, moral of the story, don't trust companies with your personal info! I contacted the site, we'll see if they fix it. @privacy@lemmy.ml @privacy@lemmy.world @soatok@furry.engineer #cybersecurity #privacy #web #hacking

After fiddling around, I found how I can get my own website to show below my posts, instead of the "Mastodon for Android" text, with the link to my site as well! (But I could have set it to anything else).

Check it out by clicking on this post, or "View original page" if you are from another instance!

#mastodon #android

If you have a website, you can add a dark mode to it with this single #CSS rule :

html{
color-scheme: light dark
}

It will automatically adapt all background elements which don't have a background color already specified in the CSS, as well as the text color, to match the theme of the device! That's super useful if you spin up a quick project and don't want to spend a long time styling it! I use it on all of my new projects since I found this!

#web #dev #webdev

ChatGPT will now predict your age based on how you interact with it

It seems now #openai is doing age estimation too based on this email I received,

After Google who made the "Age signals API" into Android phones, now OpenAI will "predict your age based on how you interact with our services".

No, I don't want #chatgpt to analyze my age, thank you very much, (I always used the privage chat mode anyways, whatever impact it actually has on the data they use), so I will now switch to an alternative that doesn't do that : https://chat.mistral.ai

Don't misunderstand me, protecting children is a good idea, but if that implies having to be analyzed by an #AI and having your experience change based on that, I'm heavily against it.

Although it's convenient, if it starts analyzing my behaviour as well then I guess it will be a good time to start thinking a bit more on my own and only rely on AI as a last resort solution...

Their article https://help.openai.com/en/articles/12652064-age-prediction-in-chatgpt

@privacy@lemmy.ml @privacy@lemmy.world

#privacy

RE: https://piefed.zip/c/technology/p/1086069/google-criticizes-europe-s-plan-to-adopt-free-software

Well, that shows what #Google really cares about. That's a bit concerning. Hopefully #Europe keeps pushing #opensource #software !

[How to put emojis in your Gitlab username] Emojis are cool, but most sites like GitLab don't allow you to put emojis in your display name! But I found a way to get around that! - Delete your Gitlab account (or not if you want to create a new one) - Create a GitHub account with an username that doesn't exist on Gitlab yet. If you deleted your account, you need to wait for 7 days so you can do that, otherwise the next steps will fail. - Set the display name on the GitHub account to anything, including emojis. - Create a new account on Gitlab by connecting your GitHub account. Your name will include the emojis! Check it for yourself at https://gitlab.com/helloyanis Is that a lot to do just for emojis? Yes! Did I do it anyways? You bet!

Updates for my media downloader extension! Hi all! I'm the developer of my FOSS extension for Firefox : Media Downloader Unleashed!! It's been a while since I shared my progress about the developpment here but better late than never! - You can still download m3u8 and mpd streams as offline video files! - There is now an option to hide stream segments in the media list. In case you want to download the segments manually - Multiple updates to make the extension and its downloads faster : By listening to what the server responds when requesting media and saving it, the extension does not need to replay the network request. If you play half a video on a website and start a download, it will only need to download the other half! - There is support for multiple languages! Right now french and english are fully translated and german and portuguese are parially translated. Try it at https://addons.mozilla.org/addon/media-downloader-unleashed/?utm_source=fedi-share if you haven't yet! @technology @opensource #downloader #firefox #browser