2
45
MissGutsy

@lemmy.blahaj.zone

MissGutsy 171 points 2 years ago

Cybernews researchers have found that BDSM People, CHICA, TRANSLOVE, PINK, and BRISH apps had publicly accessible secrets published together with the apps’ code.

All of the affected apps are developed by M.A.D Mobile Apps Developers Limited. Their identical architecture explains why the same type of sensitive data was exposed.

What secrets were leaked?

  • API Key
  • Client ID
  • Google App ID
  • Project ID
  • Reversed Client ID
  • Storage Bucket
  • GAD Application Identifier
  • Database URL

[...] threat actors can easily abuse them to gain access to systems. In this case, the most dangerous of leaked secrets granted access to user photos located in Google Cloud Storage buckets, which had no passwords set up.

In total, nearly 1.5 million user-uploaded images, including profile photos, public posts, profile verification images, photos removed for rule violations, and private photos sent through direct messages, were left publicly accessible to anyone.

So the devs were inexperienced in secure architectures and put a bunch of stuff on the client which should probably have been on the server side. This leaves anyone open to just use their API to access every picture they have on their servers. They then made multiple dating apps with this faulty infrastructure by copy-pasting it everywhere.

I hope they are registered in a country with strong data privacy laws, so they have to feel the consequences of their mismanagement

path: 0 16119473, hotness: undefined, score: 171, children: 21
MissGutsy 73 points 2 years ago

feddit.org is a German hosted instance that has to abide by the German law. By that law, your comment falls into a grey-zone of legality. As much as I agree with you, they were right in removing your comment, as they are legally obligated to. They could get into trouble if they don't.

To quote the feddit.org sidebar:

Content that is illegal in Germany, Austria or Switzerland will be deleted and can lead to an immediate ban of the account.

path: 0 15127962, hotness: undefined, score: 73, children: 39
MissGutsy 56 points 2 years ago

Damn, the render distance is so small over there

path: 0 16463407, hotness: undefined, score: 56, children: 2
MissGutsy 42 points 2 years ago

If you leave out the 9% of undecided voters, the poll is 93.4% against joining the US.

But the poll is also just a representative sample of 497 people, just about 0.88% of the greenland population. So an actual vote might be very different. The poll claims to have an uncertainty between "1.9 and 4.4 percentage points", so the result could be as high as 98% against joining the US

path: 0 14759957, hotness: undefined, score: 42, children: 0
MissGutsy 38 points 2 years ago

Just so you know, "Bild" is a german right wing magazine. Imagine fox news as a newspaper. They are well known to report false information to smear left wing initiatives and further hurt victims if they are left wing. Since the victims of police brutality here are apparently pro-palastine, Bild cannot be trusted to report accurately

path: 0 15575979 15577061 15579262, hotness: undefined, score: 38, children: 3
MissGutsy 36 points 2 years ago

Additional context: every time he points to the side hes talking directly to the politicians of the AFD, a far right, russia aligned party which heavily profited off of russian disinformation campaigns in the last election cycle

path: 0 15774622, hotness: undefined, score: 36, children: 1
MissGutsy 30 points 2 years ago

This might be a controversial opinion, but please hear me out: this guy is absolutely overhyped.

I saw the entire ZA/UM situation from the outside without having ever played Disco Elysium before, so I don't have any stake or bias in what happened. In my personal opinion there are 2 important notes: Yes, Kurvitz is responsible for the creation of one of the best games of all time. He also is a massive asshole who abuses his workers. Both of these can be true and don't contradict each other.

I can really recommend the Documentation by People Make Games about it, I think they made great and very neutral reporting on it, getting everybody's side of the story. But one think becomes increasingly clear throughout the video: the original creator is a huge egomaniac.

I came to dislike him the more I heard him talk. He spouts how he comes from this underground punk scene, but also betrays every value that he should hold. He doesn't think his workers are important and that they should just endure his wrath at all times. He doesn't see how multiple people can be of importance to a project besides him of course. As soon as the money came in he threw every value he said he'd hold aside to become a huge capitalist, even going so far as making his own shell company that preemptively held the rights to a sequel just so he can profit from it more.

This entire situation is his fault. A "punk" ignores all his anticapitalist values, gives all his intellectual property to a capitalist, capitalism ensues and he becomes bitter because he didn't get a greater slice of the pie.

Let me be clear: I think a sequel should involve him. But I also believe he shouldn't be in a lead game designer position, more of a "lead story designer/writer". He has shown to not be all to competent in that and he WILL abuse his workers again. Somebody needs to be above him to manage his insanity.

Nothing against you, but I think endlessly hyping him up won't lead to that or even a good outcome. He will squander everything that he will be given. He is not a good person, he is a "Rockstar Developer" and I mean that as an insult.

path: 0 15038893 15039709, hotness: undefined, score: 30, children: 5
MissGutsy 22 points 2 years ago

Not that directly, but saying they have "zero worth" might be against GG Article 1

Human dignity is inviolable

Pretty sure dehumanizing can be prosecuted under this, even if its rather tame. Also there have been some laws over the last few years that criminalize violent speech on the internet and that give people the ability to report comments directly to agencies. These might make it quite dangerous for the instance to keep up these comments.

I assure you, German leftist often say way more intense stuff on a daily basis, but not on publicly hosted servers

path: 0 15127962 15128737 15128854, hotness: undefined, score: 22, children: 34
MissGutsy 20 points 2 years ago

You got your numbers mixed around.

1m liters/340m men = 0.00294 liters per day

That's just under 3ml, which is very little, but still seems high. Assuming that not every man is using only the urinal, the number per urinal usage is even higher. But I also don't know american public bathrooms, are they that filthy?

path: 0 16419848 16420074 16420202, hotness: undefined, score: 20, children: 5
MissGutsy 17 points 2 years ago

Can't you run it locally because it's open source? Like yeah, don't implement software running on servers you don't control, duh! Same thing is true with ChatGPT, with the exception that you cannot run that yourself, so Deepseek is actually safer for companies. All these products that just send requests to Open AI servers are stupid anyways. They are working closely with a fascist government now, you really want your personal data to go through them?

path: 0 14798592, hotness: undefined, score: 17, children: 3
MissGutsy 17 points 2 years ago

I feel like flirting isn't really something people do while dating nowadays. I (and probably some other women) find it more annoying if you wanna get to know the other person. Most flirting I like is after you're already in a relationship, because you can be sure that the other person is safe and not a creep. Of course you still need to find a way to show interest

path: 0 15128725, hotness: undefined, score: 17, children: 2
MissGutsy 16 points 2 years ago

Who wants to bet how long they last before they get paused again?

path: 0 15628682, hotness: undefined, score: 16, children: 2
MissGutsy 14 points 2 years ago

So you just query an AI, just like any other AI, but it posts your request and response publicly on your fedi account????? This shit is fucking stupid. Why would you ever want that

path: 0 16253984, hotness: undefined, score: 14, children: 0
MissGutsy 14 points 2 years ago

Seems like they are only posting 4chan greentexts? I wouldn't categorize them any way for that, it's far more likely that they are making fun of 4chan users. You should also probably just block the greentexts community instead

path: 0 16263379, hotness: undefined, score: 14, children: 2
MissGutsy 13 points 2 years ago

Auf geht's, Lesben! 🇩🇪

path: 0 14690476, hotness: undefined, score: 13, children: 0
MissGutsy 12 points 2 years ago

With how many trans women name themselves after gemstones, more trans men should name themselves after metals

path: 0 16058124 16058275, hotness: undefined, score: 12, children: 8
MissGutsy 9 points 2 years ago

Honest question: why can't both communities just exist separately? Isn't this the magic of the Fediverse?

Your biggest point is that the communities are identical in content and I disagree. Just looking at the top posts of the week, the feddit.uk version has a bunch of memes, while feddid.org seems more news focused. The Fediverse allows us to moderate these communities differently and to have different styles of communities, perfectly shown with this example. They are not identical.

We shouldn't build up just one community all the time. That just runs into the same problem why people disliked reddit: centralized moderation. It's not a problem now, but if it ever will be, why can't there be alternatives. Let's not try to become the next reddit, but become something better.

Also some people left reddit because it all became to big, they want small groups that actually feel like a community. If people prefer a smaller lemmy community, let them have it. They voted against merging, so let them have it. !buyeuropean@feddit.uk is already linked in their sidebar. Everybody that wants to can switch the community or subscribe to both (which is a possibility!!).

I think you're in the wrong here, at least on trying to grow the uk community over the org one.

path: 0 15603384, hotness: undefined, score: 9, children: 2
MissGutsy 9 points 2 years ago

Well, she did previously recommend and endorse "political activists" (transphobes) who then turned out to be huge nazis, white supremacists, holocaust deniers, etc.

path: 0 15061176 15065859, hotness: undefined, score: 9, children: 0
MissGutsy 9 points 2 years ago

Make fascism an occupational hazard again

path: 0 15497648, hotness: undefined, score: 9, children: 0
MissGutsy 9 points 2 years ago

It also doesn't specify how often/quick you can do it, so you could still move at breakneck speeds, 7 inches at a time

path: 0 15526214 15534245, hotness: undefined, score: 9, children: 1

thanks for using Leebra!

go to feed...