

Maybe I should remove that from my comment lol, I feel like I’m contributing to a data breach or something


Maybe I should remove that from my comment lol, I feel like I’m contributing to a data breach or something


I don’t know much about GDPR… is it illegal to have badly written software like this? Technically the user is bypassing normal usage and “hacking” the API


They probably meant 6 digit and it was a typo. The rest of the article references 6 digits. If it’s just an integer (highly likely) it would go up to 10 digits or roughly 2 billion max users. My old coworkers and I used to joke that hitting INTEGER.MAX_VALUE for your customer ID is a good problem to have


the API endpoint GET
[]will return user data for any account - not just your own account - so long as you supply a valid, five-digit user ID. It doesn’t perform any authorization check or ownership validation. “Just increment the number and get someone else’s data,” she wrote.This data includes users’ email addresses, first and last names, country, dates of birth, and whether the account has been deleted, and the API exposes all 719,517 accounts on the prayer site. “With sequential user IDs and no rate limiting, an attacker could enumerate every single account on the platform,” the hacker explained. “One GET request per user. for i in range(1, 719518): scrape(). That’s it. That’s the exploit.”
My God, that’s horrific. Plus it doesn’t even delete your data if you delete your account, it’s still vulnerable.


I feel like people who “aren’t functionally impaired” are often just extremely good at masking, and don’t notice all the problems they deal with anymore. So it’s more like, they won’t diagnose or treat you because you’ve adapted to your limitations too well.
I had to do this with my ADHD. If I told people I struggle a lot, but I can get by with a million calendar alerts and reminders, they just tell me to go home. But if I phrased it instead as, I struggle severely with remembering things and meeting deadlines and appointments, they’re more interested. Then they ask if I have any supports, and I say calender reminders help a bit, but don’t resolve the underlying issue. Same problem, different presentation, with an emphasis on what I can’t do.
It sucks we have to do this to get noticed, but also I think autistic people like myself are prone to being “too honest” with doctors and accidentally down-playing our struggles. Like oh yeah I just don’t understand social norms at all, but I get by and figure it out you know? Instead of, actually this often makes life really hard and is a huge barrier especially if I’m in a new environment.


I remove my own default upvote from my comments because I’m a weirdo


Honestly just give them space. Not “no pressure, but”. Actually no pressure. Forget all about it, go back to treating them normally. You’ve given them something to think about, let them think about it without feeling pressured


Some people believe that ADHD, autism, etc aren’t actually disorders, they’re just different ways of thinking. Which only makes sense if you ignore the often severe issues people face in daily life. To me, it’s a problem if it’s a problem, simple as that.


The way I always calculate doing any medical thing is a asking myself questions. My health is weird and complicated, and often it’s nothing and I just go home, but sometimes it’s something and I’m glad I went.
Don’t answer these if you don’t want to, just write it in a notebook.
Just look at your answers the next day and ask yourself if someone else told you this, what would you recommend to them? Forget the cost or “wasting resources”; actually look at what you wrote as if it’s worth serious consideration. You deserve care.


They do, but you can’t say “this isn’t medical advice” and then turn around and give medical advice. Especially to the point of discouraging seeing a doctor.


It didn’t used to. There was the whole “memories” thing that it kept between conversations. I hated it


They still have a good export tool, that’s a reliable canary for enshittification in my experience. See: how Google butchered their export tools to be as annoying as possible for “security” reasons. The harder it is to leave, the more they care about trapping you via friction rather than keeping you via good customer experience


I don’t even look at ads on the “general internet” and this is the only social media I still have which has no algorithm. But if I check the home page of services I use…
Pretty accurate of my habits I suppose. But it also has some shit I’ve literally never bought because it’s too much sugar for my 'beetus.
The algo really has no idea what I actually like so it just throws random shit at me. The OoT rando I might watch maybe but generally I don’t bother with the home page and use my subscriptions tab. Shoutout to ZFG on YouTube.
Kind of a rollercoaster of genres… but not totally inaccurate to my tastes


This is a pretty good video that goes into the intricacies of it


Is it bad to reply to 2 week old comments? I thought it was fine here


Yes this is what A.I. does. It shows you a somewhat glitchy alternate reality where that photo is coloured in instead of black and white. So it might do seemingly strange things like upgrading technology and clothes and stuff to match what people wore when colour photos were a thing.
However, it’s relatively trivial to take the A.I. photo and use it as a colour-only layer in Photoshop, while preserving the original grayscale photograph as the source of truth. It might not line up perfectly but you can smudge it around a bit to fit.


Valve should put a big ugly icon on the store page when a game DELIBERATELY blocks Linux or Steam Deck. It’s one thing to be incompatible by apathy, it’s another to be actively hostile. Give them the ugly punishment sticker.


It’s really good for turning off the RGB


How did you get into hunting? That’s very different from gaming lol
I know, but a lot of people don’t click the article, they just look at headline + comments, so it’s still a reduction of visibility or an extra step. My comment is like exposing the endpoint right there front and centre. Plus, I don’t like being personally responsible for any data breach. Maybe it’s just a tiny thing but it felt like the right thing to do