• 2 Posts
  • 137 Comments
Joined 10 months ago
cake
Cake day: January 24th, 2024

help-circle
  • I think you are being naive. The LofN failed, the UN is now failing too.

    None of them really can do much other than issue recommendations, which are then used for political plays for optics on the international stage. They by definition cannot solve problems. That said some related incentives have succeeded, such as the WHO. The idea of a United earth authority is not unappealing, but it needs to have teeth, and that’s not easy to achieve, because geopolitical power today stems from cultivating economic dependence and nuclear stockpiles, without both, the any United earth is out of the question.

    However, I think something like the European Federation is in theory, more feasible, these countries are not only dependant on each other, but they are culturally adjacent, an easier sell. However even that is extremely difficult, potentially impossible, in a world where national idea won over the solidarity idea. EU is failing too.



  • I mean, it could be very fun and perhaps even worth playing, but surely you understand that a game that on-paper doesn’t require the viewing of ads, but heavily incentivizes just that is still problematic?

    It’s like one of those “free-to-play” particularly grindy MMOs, sure, you don’t have to pay, just grind the “kill 10 goblin rats in a basement quest” for 250 hours and you’ll have all the loot you need to get to level 2, but the option to pay is there if you so-choose it.

    In such a case it is fairly obvious that there is not actually a choice when you are heavily incentivized towards one end.





  • None. Dashy’s authentication was famously literally security theatre even with Keycloak. You could just pause the load in browser and have full access to the config. Because it let you iframe whatever you could now do so with local services to enum. Somehow Jellyfin is unbustable though. So it’s a bit of a crapshoot. Look at past vulnerabilities. Stuff like XSS unless stored you don’t need to worry about, clickjacking, tab nabbing etc. On the other hand anything that’s arbitrary file read, SQLI, RCE, LFI, RFI, SSRF etc. I would look at seriously. E.g. don’t make your 13ft public because it can be used to literally enumerate your entire private network.









  • You can’t. You either go into work and learn to solve complex problems or pivot to something else. For me it was the latter, I’m IT brainlet now, but every time I come back to brushing up on programming there’s like no middle ground with projects, I don’t have the time or really energy to commit to building a 3D video game engine in C or an OS, and learning pointer arithmetic for multiple iterators all just to make a palindrome checker CLI feels lame and building a clone of Spotify but in some new webdev thing of the week to some tutorial is hard to be excited about.