Symfony Profiler

Security

Token

There is no security token.

Firewall

main Name

Security enabled

Stateless

Configuration

Key	Value
provider	security.user.provider.concrete.app_user_provider
context	main
entry_point	App\Security\KbinAuthenticator
user_checker	App\Security\UserChecker
access_denied_handler	(none)
access_denied_url	(none)
authenticators	[`"two_factor" "remember_me" "App\Security\KbinAuthenticator" "App\Security\FacebookAuthenticator" "App\Security\GoogleAuthenticator" "App\Security\GithubAuthenticator" "App\Security\KeycloakAuthenticator"`]

Listeners

Listener	Duration	Response
Symfony\Component\Security\Http\Firewall\ChannelListener {#723`-map: Symfony\Component\Security\Http\AccessMap {#722 …} -logger: Monolog\Logger {#783 …} -httpPort: 80 -httpsPort: 443`}	0.00 ms	(none)
Symfony\Component\Security\Http\Firewall\ContextListener {#706-tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorage {#1017 …} -sessionKey: "_security_main" -logger: Monolog\Logger {#783 …} -userProviders: Symfony\Component\DependencyInjection\Argument\RewindableGenerator {#705 …} -dispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …} -registered: false -trustResolver: Scheb\TwoFactorBundle\Security\Authentication\AuthenticationTrustResolver {#780 …} -sessionTrackerEnabler: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage::enableUsageTracking(): void {#703 …}}	1.60 ms	(none)
Symfony\Component\Security\Http\Firewall\AuthenticatorManagerListener {#584`-authenticatorManager: Symfony\Component\Security\Http\Authentication\AuthenticatorManager {#595 …}`}	0.00 ms	(none)
Scheb\TwoFactorBundle\Security\Http\Firewall\TwoFactorAccessListener {#582`-twoFactorFirewallConfig: Scheb\TwoFactorBundle\Security\TwoFactor\TwoFactorFirewallConfig {#842 …} -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …} -twoFactorAccessDecider: Scheb\TwoFactorBundle\Security\Authorization\TwoFactorAccessDecider {#581 …}`}	0.17 ms	(none)
Symfony\Component\Security\Http\Firewall\AccessListener {#579`-tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …} -accessDecisionManager: Symfony\Component\Security\Core\Authorization\TraceableAccessDecisionManager {#937 …} -map: Symfony\Component\Security\Http\AccessMap {#722 …}`}	0.00 ms	(none)
Symfony\Component\Security\Http\Firewall\LogoutListener {#786`-tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …} -options: [ "csrf_parameter" => "_csrf_token" "csrf_token_id" => "logout" "logout_path" => "app_logout" ] -httpUtils: Symfony\Component\Security\Http\HttpUtils {#841 …} -csrfTokenManager: Symfony\Component\Security\Csrf\CsrfTokenManager {#1015 …} -eventDispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}`}	0.00 ms	(none)

Authenticators

No authenticators have been recorded. Check previous profiles on your authentication endpoint.

Access Decision

affirmative Strategy


"Symfony\Component\Security\Core\Authorization\Voter\AuthenticatedVoter"
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
"Symfony\Component\Security\Core\Authorization\Voter\ExpressionVoter"
"App\Security\Voter\EntryCommentVoter"
"App\Security\Voter\EntryVoter"
"App\Security\Voter\MagazineVoter"
"App\Security\Voter\MessageThreadVoter"
"App\Security\Voter\MessageVoter"
"App\Security\Voter\NotificationVoter"
"App\Security\Voter\OAuth2UserConsentVoter"
"App\Security\Voter\PostCommentVoter"
"App\Security\Voter\PostVoter"
"App\Security\Voter\UserVoter"

#	Voter class
1	"Symfony\Component\Security\Core\Authorization\Voter\AuthenticatedVoter"
2	"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
3	"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
4	"Symfony\Component\Security\Core\Authorization\Voter\ExpressionVoter"
5	"App\Security\Voter\EntryCommentVoter"
6	"App\Security\Voter\EntryVoter"
7	"App\Security\Voter\MagazineVoter"
8	"App\Security\Voter\MessageThreadVoter"
9	"App\Security\Voter\MessageVoter"
10	"App\Security\Voter\NotificationVoter"
11	"App\Security\Voter\OAuth2UserConsentVoter"
12	"App\Security\Voter\PostCommentVoter"
13	"App\Security\Voter\PostVoter"
14	"App\Security\Voter\UserVoter"

Access decision log


null
"App\Security\Voter\UserVoter"
App\Entity\EntryComment {#2064
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#1402 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1883 …}
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#2033 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#2021 …}
  +body: """
    That interface is let any random app take screenshots of anything running on the same server without any way for the user to know it happens.\n
    \n
    I am so glad that interface is gone, especially when running proprietary apps.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 6
  +score: 0
  +lastActive: DateTime @1704297305 {#2094
    date: 2024-01-03 16:55:05.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@dd56@futurology.today"
    "@Chobbes@lemmy.world"
    "@AMDIsOurLord@lemmy.ml"
    "@amju_wolf@pawb.social"
    "@dd56@futurology.today"
    "@Chobbes@lemmy.world"
    "@AMDIsOurLord@lemmy.ml"
    "@amju_wolf@pawb.social"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2029 …}
  +nested: Doctrine\ORM\PersistentCollection {#2020 …}
  +votes: Doctrine\ORM\PersistentCollection {#2027 …}
  +reports: Doctrine\ORM\PersistentCollection {#2031 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1909 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1907 …}
  -id: 276769
  -bodyTs: "'anyth':11 'app':7,39 'especi':35 'glad':30 'gone':34 'happen':26 'interfac':2,32 'know':24 'let':4 'proprietari':38 'random':6 'run':12,37 'screenshot':9 'server':16 'take':8 'user':22 'way':19 'without':17"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/6106968"
  +editedAt: DateTimeImmutable @1711263846 {#1385
    date: 2024-03-24 08:04:06.0 +01:00
  }
  +createdAt: DateTimeImmutable @1704297305 {#2092
    date: 2024-01-03 16:55:05.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
App\Entity\EntryComment {#2064
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#1402 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1883 …}
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#2033 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#2021 …}
  +body: """
    That interface is let any random app take screenshots of anything running on the same server without any way for the user to know it happens.\n
    \n
    I am so glad that interface is gone, especially when running proprietary apps.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 6
  +score: 0
  +lastActive: DateTime @1704297305 {#2094
    date: 2024-01-03 16:55:05.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@dd56@futurology.today"
    "@Chobbes@lemmy.world"
    "@AMDIsOurLord@lemmy.ml"
    "@amju_wolf@pawb.social"
    "@dd56@futurology.today"
    "@Chobbes@lemmy.world"
    "@AMDIsOurLord@lemmy.ml"
    "@amju_wolf@pawb.social"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2029 …}
  +nested: Doctrine\ORM\PersistentCollection {#2020 …}
  +votes: Doctrine\ORM\PersistentCollection {#2027 …}
  +reports: Doctrine\ORM\PersistentCollection {#2031 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1909 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1907 …}
  -id: 276769
  -bodyTs: "'anyth':11 'app':7,39 'especi':35 'glad':30 'gone':34 'happen':26 'interfac':2,32 'know':24 'let':4 'proprietari':38 'random':6 'run':12,37 'screenshot':9 'server':16 'take':8 'user':22 'way':19 'without':17"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/6106968"
  +editedAt: DateTimeImmutable @1711263846 {#1385
    date: 2024-03-24 08:04:06.0 +01:00
  }
  +createdAt: DateTimeImmutable @1704297305 {#2092
    date: 2024-01-03 16:55:05.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
App\Entity\EntryComment {#2064
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#1402 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1883 …}
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#2033 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#2021 …}
  +body: """
    That interface is let any random app take screenshots of anything running on the same server without any way for the user to know it happens.\n
    \n
    I am so glad that interface is gone, especially when running proprietary apps.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 6
  +score: 0
  +lastActive: DateTime @1704297305 {#2094
    date: 2024-01-03 16:55:05.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@dd56@futurology.today"
    "@Chobbes@lemmy.world"
    "@AMDIsOurLord@lemmy.ml"
    "@amju_wolf@pawb.social"
    "@dd56@futurology.today"
    "@Chobbes@lemmy.world"
    "@AMDIsOurLord@lemmy.ml"
    "@amju_wolf@pawb.social"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2029 …}
  +nested: Doctrine\ORM\PersistentCollection {#2020 …}
  +votes: Doctrine\ORM\PersistentCollection {#2027 …}
  +reports: Doctrine\ORM\PersistentCollection {#2031 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1909 …}
  +notifications: Doctrine\ORM\PersistentCollection {#1907 …}
  -id: 276769
  -bodyTs: "'anyth':11 'app':7,39 'especi':35 'glad':30 'gone':34 'happen':26 'interfac':2,32 'know':24 'let':4 'proprietari':38 'random':6 'run':12,37 'screenshot':9 'server':16 'take':8 'user':22 'way':19 'without':17"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/6106968"
  +editedAt: DateTimeImmutable @1711263846 {#1385
    date: 2024-03-24 08:04:06.0 +01:00
  }
  +createdAt: DateTimeImmutable @1704297305 {#2092
    date: 2024-01-03 16:55:05.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
null
"App\Security\Voter\UserVoter"
App\Entity\EntryComment {#2093
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#2314 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1883 …}
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#2336 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#2334
    +user: App\Entity\User {#265 …}
    +entry: Proxies\__CG__\App\Entity\Entry {#2314 …}
    +magazine: Proxies\__CG__\App\Entity\Magazine {#1883 …}
    +image: null
    +parent: null
    +root: null
    +body: """
      Usig *anything* as root is a security risk.\n
      \n
      Using *any* UI application as root is a bigger risk. That’s because every UI toolkit loads plugins and what not from all over the place and runs the code from those plugins (e.g. plugins installed system wide and into random places some environment variables point to). Binary plugins get executed in the context of the application running and can do change every aspect of your program. I wrote a small image plugin to debug an issue once that looked at all widgets in the UI and wrote all the contents of all text fields (even those obfuscated to show only dots in the UI) to disk whenever some image was loads. Plugins in JS or other non-native code are more limited, but UI toolkits tend to have binary plugins.\n
      \n
      So if somebody manages to set the some env vars and gets root to run some UI application with those set (e.g. using sudo), then that attacker hit the jackpot. In fact some toolkits will not even bring up any UI when run as root to avoid this.\n
      \n
      Running any networked UI application as root is the biggest risk. Those process untrusted data by definition with who knows what set of plugins loaded.\n
      \n
      Ideally you run the UI as a normal user and then use sudo to run individual commands as root.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 8
    +score: 0
    +lastActive: DateTime @1711208212 {#2042
      date: 2024-03-23 16:36:52.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@HiddenLayer5@lemmy.ml"
    ]
    +children: Doctrine\ORM\PersistentCollection {#2341 …}
    +nested: Doctrine\ORM\PersistentCollection {#2191 …}
    +votes: Doctrine\ORM\PersistentCollection {#2329 …}
    +reports: Doctrine\ORM\PersistentCollection {#2325 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2326 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2328 …}
    -id: 276098
    -bodyTs: "'anyth':2 'applic':12,65,158,193 'aspect':72 'attack':167 'avoid':187 'bigger':17 'biggest':198 'binari':56,139 'bring':178 'chang':70 'code':38,129 'command':230 'content':99 'context':62 'data':203 'debug':83 'definit':205 'disk':115 'dot':110 'e.g':42,162 'env':149 'environ':52 'even':104,177 'everi':22,71 'execut':59 'fact':172 'field':103 'get':58,152 'hit':168 'ideal':214 'imag':80,118 'individu':229 'instal':44 'issu':85 'jackpot':170 'js':123 'know':208 'limit':132 'load':25,120,213 'look':88 'manag':144 'nativ':128 'network':191 'non':127 'non-nat':126 'normal':221 'obfusc':106 'place':34,50 'plugin':26,41,43,57,81,121,140,212 'point':54 'process':201 'program':75 'random':49 'risk':8,18,199 'root':4,14,153,185,195,232 'run':36,66,155,183,189,216,228 'secur':7 'set':146,161,210 'show':108 'small':79 'somebodi':143 'sudo':164,226 'system':45 'tend':136 'text':102 'toolkit':24,135,174 'ui':11,23,94,113,134,157,181,192,218 'untrust':202 'use':9,163,225 'user':222 'usig':1 'var':150 'variabl':53 'whenev':116 'wide':46 'widget':91 'wrote':77,96"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://programming.dev/comment/6099001"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704274379 {#2394
      date: 2024-01-03 10:32:59.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +body: """
    Plugins are a code execution vulnerability by design;-) Especially with binary plugins you can call/access/inspect everything the program itself can. All UI toolkits make heavy use of plugins, so you can not avoid those with almost all UI applications.\n
    \n
    There are non-UI applications with similar problems though.\n
    \n
    Running anything with network access as root is an extra risk that effects UI and non-UI applications in the same way.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 3
  +score: 0
  +lastActive: DateTime @1704285453 {#2088
    date: 2024-01-03 13:37:33.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
    "@hunger@programming.dev"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2072 …}
  +nested: Doctrine\ORM\PersistentCollection {#2137 …}
  +votes: Doctrine\ORM\PersistentCollection {#2332 …}
  +reports: Doctrine\ORM\PersistentCollection {#2337 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2335 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2343 …}
  -id: 276249
  -bodyTs: "'access':54 'almost':36 'anyth':51 'applic':39,45,68 'avoid':33 'binari':11 'call/access/inspect':15 'code':4 'design':8 'effect':62 'especi':9 'everyth':16 'execut':5 'extra':59 'heavi':25 'make':24 'network':53 'non':43,66 'non-ui':42,65 'plugin':1,12,28 'problem':48 'program':18 'risk':60 'root':56 'run':50 'similar':47 'though':49 'toolkit':23 'ui':22,38,44,63,67 'use':26 'vulner':6 'way':72"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/6103834"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704285453 {#2095
    date: 2024-01-03 13:37:33.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
App\Entity\EntryComment {#2093
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#2314 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1883 …}
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#2336 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#2334
    +user: App\Entity\User {#265 …}
    +entry: Proxies\__CG__\App\Entity\Entry {#2314 …}
    +magazine: Proxies\__CG__\App\Entity\Magazine {#1883 …}
    +image: null
    +parent: null
    +root: null
    +body: """
      Usig *anything* as root is a security risk.\n
      \n
      Using *any* UI application as root is a bigger risk. That’s because every UI toolkit loads plugins and what not from all over the place and runs the code from those plugins (e.g. plugins installed system wide and into random places some environment variables point to). Binary plugins get executed in the context of the application running and can do change every aspect of your program. I wrote a small image plugin to debug an issue once that looked at all widgets in the UI and wrote all the contents of all text fields (even those obfuscated to show only dots in the UI) to disk whenever some image was loads. Plugins in JS or other non-native code are more limited, but UI toolkits tend to have binary plugins.\n
      \n
      So if somebody manages to set the some env vars and gets root to run some UI application with those set (e.g. using sudo), then that attacker hit the jackpot. In fact some toolkits will not even bring up any UI when run as root to avoid this.\n
      \n
      Running any networked UI application as root is the biggest risk. Those process untrusted data by definition with who knows what set of plugins loaded.\n
      \n
      Ideally you run the UI as a normal user and then use sudo to run individual commands as root.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 8
    +score: 0
    +lastActive: DateTime @1711208212 {#2042
      date: 2024-03-23 16:36:52.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@HiddenLayer5@lemmy.ml"
    ]
    +children: Doctrine\ORM\PersistentCollection {#2341 …}
    +nested: Doctrine\ORM\PersistentCollection {#2191 …}
    +votes: Doctrine\ORM\PersistentCollection {#2329 …}
    +reports: Doctrine\ORM\PersistentCollection {#2325 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2326 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2328 …}
    -id: 276098
    -bodyTs: "'anyth':2 'applic':12,65,158,193 'aspect':72 'attack':167 'avoid':187 'bigger':17 'biggest':198 'binari':56,139 'bring':178 'chang':70 'code':38,129 'command':230 'content':99 'context':62 'data':203 'debug':83 'definit':205 'disk':115 'dot':110 'e.g':42,162 'env':149 'environ':52 'even':104,177 'everi':22,71 'execut':59 'fact':172 'field':103 'get':58,152 'hit':168 'ideal':214 'imag':80,118 'individu':229 'instal':44 'issu':85 'jackpot':170 'js':123 'know':208 'limit':132 'load':25,120,213 'look':88 'manag':144 'nativ':128 'network':191 'non':127 'non-nat':126 'normal':221 'obfusc':106 'place':34,50 'plugin':26,41,43,57,81,121,140,212 'point':54 'process':201 'program':75 'random':49 'risk':8,18,199 'root':4,14,153,185,195,232 'run':36,66,155,183,189,216,228 'secur':7 'set':146,161,210 'show':108 'small':79 'somebodi':143 'sudo':164,226 'system':45 'tend':136 'text':102 'toolkit':24,135,174 'ui':11,23,94,113,134,157,181,192,218 'untrust':202 'use':9,163,225 'user':222 'usig':1 'var':150 'variabl':53 'whenev':116 'wide':46 'widget':91 'wrote':77,96"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://programming.dev/comment/6099001"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704274379 {#2394
      date: 2024-01-03 10:32:59.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +body: """
    Plugins are a code execution vulnerability by design;-) Especially with binary plugins you can call/access/inspect everything the program itself can. All UI toolkits make heavy use of plugins, so you can not avoid those with almost all UI applications.\n
    \n
    There are non-UI applications with similar problems though.\n
    \n
    Running anything with network access as root is an extra risk that effects UI and non-UI applications in the same way.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 3
  +score: 0
  +lastActive: DateTime @1704285453 {#2088
    date: 2024-01-03 13:37:33.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
    "@hunger@programming.dev"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2072 …}
  +nested: Doctrine\ORM\PersistentCollection {#2137 …}
  +votes: Doctrine\ORM\PersistentCollection {#2332 …}
  +reports: Doctrine\ORM\PersistentCollection {#2337 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2335 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2343 …}
  -id: 276249
  -bodyTs: "'access':54 'almost':36 'anyth':51 'applic':39,45,68 'avoid':33 'binari':11 'call/access/inspect':15 'code':4 'design':8 'effect':62 'especi':9 'everyth':16 'execut':5 'extra':59 'heavi':25 'make':24 'network':53 'non':43,66 'non-ui':42,65 'plugin':1,12,28 'problem':48 'program':18 'risk':60 'root':56 'run':50 'similar':47 'though':49 'toolkit':23 'ui':22,38,44,63,67 'use':26 'vulner':6 'way':72"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/6103834"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704285453 {#2095
    date: 2024-01-03 13:37:33.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
App\Entity\EntryComment {#2093
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#2314 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1883 …}
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#2336 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#2334
    +user: App\Entity\User {#265 …}
    +entry: Proxies\__CG__\App\Entity\Entry {#2314 …}
    +magazine: Proxies\__CG__\App\Entity\Magazine {#1883 …}
    +image: null
    +parent: null
    +root: null
    +body: """
      Usig *anything* as root is a security risk.\n
      \n
      Using *any* UI application as root is a bigger risk. That’s because every UI toolkit loads plugins and what not from all over the place and runs the code from those plugins (e.g. plugins installed system wide and into random places some environment variables point to). Binary plugins get executed in the context of the application running and can do change every aspect of your program. I wrote a small image plugin to debug an issue once that looked at all widgets in the UI and wrote all the contents of all text fields (even those obfuscated to show only dots in the UI) to disk whenever some image was loads. Plugins in JS or other non-native code are more limited, but UI toolkits tend to have binary plugins.\n
      \n
      So if somebody manages to set the some env vars and gets root to run some UI application with those set (e.g. using sudo), then that attacker hit the jackpot. In fact some toolkits will not even bring up any UI when run as root to avoid this.\n
      \n
      Running any networked UI application as root is the biggest risk. Those process untrusted data by definition with who knows what set of plugins loaded.\n
      \n
      Ideally you run the UI as a normal user and then use sudo to run individual commands as root.
      """
    +lang: "en"
    +isAdult: false
    +favouriteCount: 8
    +score: 0
    +lastActive: DateTime @1711208212 {#2042
      date: 2024-03-23 16:36:52.0 +01:00
    }
    +ip: null
    +tags: null
    +mentions: [
      "@HiddenLayer5@lemmy.ml"
    ]
    +children: Doctrine\ORM\PersistentCollection {#2341 …}
    +nested: Doctrine\ORM\PersistentCollection {#2191 …}
    +votes: Doctrine\ORM\PersistentCollection {#2329 …}
    +reports: Doctrine\ORM\PersistentCollection {#2325 …}
    +favourites: Doctrine\ORM\PersistentCollection {#2326 …}
    +notifications: Doctrine\ORM\PersistentCollection {#2328 …}
    -id: 276098
    -bodyTs: "'anyth':2 'applic':12,65,158,193 'aspect':72 'attack':167 'avoid':187 'bigger':17 'biggest':198 'binari':56,139 'bring':178 'chang':70 'code':38,129 'command':230 'content':99 'context':62 'data':203 'debug':83 'definit':205 'disk':115 'dot':110 'e.g':42,162 'env':149 'environ':52 'even':104,177 'everi':22,71 'execut':59 'fact':172 'field':103 'get':58,152 'hit':168 'ideal':214 'imag':80,118 'individu':229 'instal':44 'issu':85 'jackpot':170 'js':123 'know':208 'limit':132 'load':25,120,213 'look':88 'manag':144 'nativ':128 'network':191 'non':127 'non-nat':126 'normal':221 'obfusc':106 'place':34,50 'plugin':26,41,43,57,81,121,140,212 'point':54 'process':201 'program':75 'random':49 'risk':8,18,199 'root':4,14,153,185,195,232 'run':36,66,155,183,189,216,228 'secur':7 'set':146,161,210 'show':108 'small':79 'somebodi':143 'sudo':164,226 'system':45 'tend':136 'text':102 'toolkit':24,135,174 'ui':11,23,94,113,134,157,181,192,218 'untrust':202 'use':9,163,225 'user':222 'usig':1 'var':150 'variabl':53 'whenev':116 'wide':46 'widget':91 'wrote':77,96"
    +ranking: 0
    +commentCount: 0
    +upVotes: 0
    +downVotes: 0
    +visibility: "visible             "
    +apId: "https://programming.dev/comment/6099001"
    +editedAt: null
    +createdAt: DateTimeImmutable @1704274379 {#2394
      date: 2024-01-03 10:32:59.0 +01:00
    }
    +__isInitialized__: true
     …2
  }
  +body: """
    Plugins are a code execution vulnerability by design;-) Especially with binary plugins you can call/access/inspect everything the program itself can. All UI toolkits make heavy use of plugins, so you can not avoid those with almost all UI applications.\n
    \n
    There are non-UI applications with similar problems though.\n
    \n
    Running anything with network access as root is an extra risk that effects UI and non-UI applications in the same way.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 3
  +score: 0
  +lastActive: DateTime @1704285453 {#2088
    date: 2024-01-03 13:37:33.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
    "@hunger@programming.dev"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2072 …}
  +nested: Doctrine\ORM\PersistentCollection {#2137 …}
  +votes: Doctrine\ORM\PersistentCollection {#2332 …}
  +reports: Doctrine\ORM\PersistentCollection {#2337 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2335 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2343 …}
  -id: 276249
  -bodyTs: "'access':54 'almost':36 'anyth':51 'applic':39,45,68 'avoid':33 'binari':11 'call/access/inspect':15 'code':4 'design':8 'effect':62 'especi':9 'everyth':16 'execut':5 'extra':59 'heavi':25 'make':24 'network':53 'non':43,66 'non-ui':42,65 'plugin':1,12,28 'problem':48 'program':18 'risk':60 'root':56 'run':50 'similar':47 'though':49 'toolkit':23 'ui':22,38,44,63,67 'use':26 'vulner':6 'way':72"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/6103834"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704285453 {#2095
    date: 2024-01-03 13:37:33.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
null
"App\Security\Voter\UserVoter"
Proxies\__CG__\App\Entity\EntryComment {#2334
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#2314 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1883 …}
  +image: null
  +parent: null
  +root: null
  +body: """
    Usig *anything* as root is a security risk.\n
    \n
    Using *any* UI application as root is a bigger risk. That’s because every UI toolkit loads plugins and what not from all over the place and runs the code from those plugins (e.g. plugins installed system wide and into random places some environment variables point to). Binary plugins get executed in the context of the application running and can do change every aspect of your program. I wrote a small image plugin to debug an issue once that looked at all widgets in the UI and wrote all the contents of all text fields (even those obfuscated to show only dots in the UI) to disk whenever some image was loads. Plugins in JS or other non-native code are more limited, but UI toolkits tend to have binary plugins.\n
    \n
    So if somebody manages to set the some env vars and gets root to run some UI application with those set (e.g. using sudo), then that attacker hit the jackpot. In fact some toolkits will not even bring up any UI when run as root to avoid this.\n
    \n
    Running any networked UI application as root is the biggest risk. Those process untrusted data by definition with who knows what set of plugins loaded.\n
    \n
    Ideally you run the UI as a normal user and then use sudo to run individual commands as root.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 8
  +score: 0
  +lastActive: DateTime @1711208212 {#2042
    date: 2024-03-23 16:36:52.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2341 …}
  +nested: Doctrine\ORM\PersistentCollection {#2191 …}
  +votes: Doctrine\ORM\PersistentCollection {#2329 …}
  +reports: Doctrine\ORM\PersistentCollection {#2325 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2326 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2328 …}
  -id: 276098
  -bodyTs: "'anyth':2 'applic':12,65,158,193 'aspect':72 'attack':167 'avoid':187 'bigger':17 'biggest':198 'binari':56,139 'bring':178 'chang':70 'code':38,129 'command':230 'content':99 'context':62 'data':203 'debug':83 'definit':205 'disk':115 'dot':110 'e.g':42,162 'env':149 'environ':52 'even':104,177 'everi':22,71 'execut':59 'fact':172 'field':103 'get':58,152 'hit':168 'ideal':214 'imag':80,118 'individu':229 'instal':44 'issu':85 'jackpot':170 'js':123 'know':208 'limit':132 'load':25,120,213 'look':88 'manag':144 'nativ':128 'network':191 'non':127 'non-nat':126 'normal':221 'obfusc':106 'place':34,50 'plugin':26,41,43,57,81,121,140,212 'point':54 'process':201 'program':75 'random':49 'risk':8,18,199 'root':4,14,153,185,195,232 'run':36,66,155,183,189,216,228 'secur':7 'set':146,161,210 'show':108 'small':79 'somebodi':143 'sudo':164,226 'system':45 'tend':136 'text':102 'toolkit':24,135,174 'ui':11,23,94,113,134,157,181,192,218 'untrust':202 'use':9,163,225 'user':222 'usig':1 'var':150 'variabl':53 'whenev':116 'wide':46 'widget':91 'wrote':77,96"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/6099001"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704274379 {#2394
    date: 2024-01-03 10:32:59.0 +01:00
  }
  +__isInitialized__: true
   …2
}
"App\Security\Voter\UserVoter"
Proxies\__CG__\App\Entity\EntryComment {#2334
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#2314 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1883 …}
  +image: null
  +parent: null
  +root: null
  +body: """
    Usig *anything* as root is a security risk.\n
    \n
    Using *any* UI application as root is a bigger risk. That’s because every UI toolkit loads plugins and what not from all over the place and runs the code from those plugins (e.g. plugins installed system wide and into random places some environment variables point to). Binary plugins get executed in the context of the application running and can do change every aspect of your program. I wrote a small image plugin to debug an issue once that looked at all widgets in the UI and wrote all the contents of all text fields (even those obfuscated to show only dots in the UI) to disk whenever some image was loads. Plugins in JS or other non-native code are more limited, but UI toolkits tend to have binary plugins.\n
    \n
    So if somebody manages to set the some env vars and gets root to run some UI application with those set (e.g. using sudo), then that attacker hit the jackpot. In fact some toolkits will not even bring up any UI when run as root to avoid this.\n
    \n
    Running any networked UI application as root is the biggest risk. Those process untrusted data by definition with who knows what set of plugins loaded.\n
    \n
    Ideally you run the UI as a normal user and then use sudo to run individual commands as root.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 8
  +score: 0
  +lastActive: DateTime @1711208212 {#2042
    date: 2024-03-23 16:36:52.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2341 …}
  +nested: Doctrine\ORM\PersistentCollection {#2191 …}
  +votes: Doctrine\ORM\PersistentCollection {#2329 …}
  +reports: Doctrine\ORM\PersistentCollection {#2325 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2326 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2328 …}
  -id: 276098
  -bodyTs: "'anyth':2 'applic':12,65,158,193 'aspect':72 'attack':167 'avoid':187 'bigger':17 'biggest':198 'binari':56,139 'bring':178 'chang':70 'code':38,129 'command':230 'content':99 'context':62 'data':203 'debug':83 'definit':205 'disk':115 'dot':110 'e.g':42,162 'env':149 'environ':52 'even':104,177 'everi':22,71 'execut':59 'fact':172 'field':103 'get':58,152 'hit':168 'ideal':214 'imag':80,118 'individu':229 'instal':44 'issu':85 'jackpot':170 'js':123 'know':208 'limit':132 'load':25,120,213 'look':88 'manag':144 'nativ':128 'network':191 'non':127 'non-nat':126 'normal':221 'obfusc':106 'place':34,50 'plugin':26,41,43,57,81,121,140,212 'point':54 'process':201 'program':75 'random':49 'risk':8,18,199 'root':4,14,153,185,195,232 'run':36,66,155,183,189,216,228 'secur':7 'set':146,161,210 'show':108 'small':79 'somebodi':143 'sudo':164,226 'system':45 'tend':136 'text':102 'toolkit':24,135,174 'ui':11,23,94,113,134,157,181,192,218 'untrust':202 'use':9,163,225 'user':222 'usig':1 'var':150 'variabl':53 'whenev':116 'wide':46 'widget':91 'wrote':77,96"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/6099001"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704274379 {#2394
    date: 2024-01-03 10:32:59.0 +01:00
  }
  +__isInitialized__: true
   …2
}
"App\Security\Voter\UserVoter"
Proxies\__CG__\App\Entity\EntryComment {#2334
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#2314 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1883 …}
  +image: null
  +parent: null
  +root: null
  +body: """
    Usig *anything* as root is a security risk.\n
    \n
    Using *any* UI application as root is a bigger risk. That’s because every UI toolkit loads plugins and what not from all over the place and runs the code from those plugins (e.g. plugins installed system wide and into random places some environment variables point to). Binary plugins get executed in the context of the application running and can do change every aspect of your program. I wrote a small image plugin to debug an issue once that looked at all widgets in the UI and wrote all the contents of all text fields (even those obfuscated to show only dots in the UI) to disk whenever some image was loads. Plugins in JS or other non-native code are more limited, but UI toolkits tend to have binary plugins.\n
    \n
    So if somebody manages to set the some env vars and gets root to run some UI application with those set (e.g. using sudo), then that attacker hit the jackpot. In fact some toolkits will not even bring up any UI when run as root to avoid this.\n
    \n
    Running any networked UI application as root is the biggest risk. Those process untrusted data by definition with who knows what set of plugins loaded.\n
    \n
    Ideally you run the UI as a normal user and then use sudo to run individual commands as root.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 8
  +score: 0
  +lastActive: DateTime @1711208212 {#2042
    date: 2024-03-23 16:36:52.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@HiddenLayer5@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2341 …}
  +nested: Doctrine\ORM\PersistentCollection {#2191 …}
  +votes: Doctrine\ORM\PersistentCollection {#2329 …}
  +reports: Doctrine\ORM\PersistentCollection {#2325 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2326 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2328 …}
  -id: 276098
  -bodyTs: "'anyth':2 'applic':12,65,158,193 'aspect':72 'attack':167 'avoid':187 'bigger':17 'biggest':198 'binari':56,139 'bring':178 'chang':70 'code':38,129 'command':230 'content':99 'context':62 'data':203 'debug':83 'definit':205 'disk':115 'dot':110 'e.g':42,162 'env':149 'environ':52 'even':104,177 'everi':22,71 'execut':59 'fact':172 'field':103 'get':58,152 'hit':168 'ideal':214 'imag':80,118 'individu':229 'instal':44 'issu':85 'jackpot':170 'js':123 'know':208 'limit':132 'load':25,120,213 'look':88 'manag':144 'nativ':128 'network':191 'non':127 'non-nat':126 'normal':221 'obfusc':106 'place':34,50 'plugin':26,41,43,57,81,121,140,212 'point':54 'process':201 'program':75 'random':49 'risk':8,18,199 'root':4,14,153,185,195,232 'run':36,66,155,183,189,216,228 'secur':7 'set':146,161,210 'show':108 'small':79 'somebodi':143 'sudo':164,226 'system':45 'tend':136 'text':102 'toolkit':24,135,174 'ui':11,23,94,113,134,157,181,192,218 'untrust':202 'use':9,163,225 'user':222 'usig':1 'var':150 'variabl':53 'whenev':116 'wide':46 'widget':91 'wrote':77,96"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/6099001"
  +editedAt: null
  +createdAt: DateTimeImmutable @1704274379 {#2394
    date: 2024-01-03 10:32:59.0 +01:00
  }
  +__isInitialized__: true
   …2
}
"App\Security\Voter\UserVoter"
null
"App\Security\Voter\UserVoter"
App\Entity\EntryComment {#2141
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#2349 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1883 …}
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#2347 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#2347 …}
  +body: """
    The one thing you can learn from sysv init isnthat asking devs to pitncode into their programs or into starter scripts does not work. They will not bother: Those will notmworkmcross platform.\n
    \n
    So you need to cebtralize that task. You can either write a wrapper program that sandboxes starts applications in a sandbox or do that whereever the programs as are started anyway.\n
    \n
    A separate sandboxing app that starts services complicates configuration: You basically need to configure two things the starter and the service. On the up-side you have the sandboxing code separate. Merging the sandboxing into the program starting the service makes configuration simple but adds moremcode into the the starter program.\n
    \n
    So it is basically a decision on what you value more. Systemd decided to favor simpler configuration. The cost for adding the sandboxing is small anyway: It’s all Linux kernel functionality that does need a bit of configuration to get rolling, with much of that code being in the systemd-init anyway: It uses similar functionality to actually separate the processes it starts from each other to avoid getting confused by programs restarted and thusnchanging PIDs – something still a thing in many other inits.\n
    \n
    I am convinced that making sandboxing easy does a lot formits adoption. No admin will change the entire startup configuration to add a sandboxing wrapper around the actual service. It is way more likely for them to drop in a override file with a couple of lines and without any problems when upstream changes command line options.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 10
  +score: 0
  +lastActive: DateTime @1702627462 {#2340
    date: 2023-12-15 09:04:22.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Chewy7324@discuss.tchncs.de"
    "@PseudoSpock@lemmy.dbzer0.com"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2351 …}
  +nested: Doctrine\ORM\PersistentCollection {#2348 …}
  +votes: Doctrine\ORM\PersistentCollection {#2350 …}
  +reports: Doctrine\ORM\PersistentCollection {#2040 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2132 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2129 …}
  -id: 223754
  -bodyTs: "'actual':175,229 'ad':136 'add':109,223 'admin':215 'adopt':213 'anyway':63,141,169 'app':67 'applic':50 'around':227 'ask':11 'avoid':185 'basic':74,119 'bit':152 'bother':28 'cebtral':37 'chang':217,255 'code':94,162 'command':256 'complic':71 'configur':72,77,106,132,154,221 'confus':187 'convinc':204 'cost':134 'coupl':246 'decid':128 'decis':121 'dev':12 'drop':239 'easi':208 'either':42 'entir':219 'favor':130 'file':243 'formit':212 'function':147,173 'get':156,186 'init':9,168,201 'isnthat':10 'kernel':146 'learn':6 'like':235 'line':248,257 'linux':145 'lot':211 'make':105,206 'mani':199 'merg':96 'moremcod':110 'much':159 'need':35,75,150 'notmworkmcross':31 'one':2 'option':258 'overrid':242 'pid':193 'pitncod':14 'platform':32 'problem':252 'process':178 'program':17,46,59,101,115,189 'restart':190 'roll':157 'sandbox':48,53,66,93,98,138,207,225 'script':21 'separ':65,95,176 'servic':70,84,104,230 'side':89 'similar':172 'simpl':107 'simpler':131 'small':140 'someth':194 'start':49,62,69,102,180 'starter':20,81,114 'startup':220 'still':195 'systemd':127,167 'systemd-init':166 'sysv':8 'task':39 'thing':3,79,197 'thusnchang':192 'two':78 'up-sid':87 'upstream':254 'use':171 'valu':125 'way':233 'whereev':57 'without':250 'work':24 'wrapper':45,226 'write':43"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/5727573"
  +editedAt: null
  +createdAt: DateTimeImmutable @1702627462 {#2342
    date: 2023-12-15 09:04:22.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
App\Entity\EntryComment {#2141
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#2349 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1883 …}
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#2347 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#2347 …}
  +body: """
    The one thing you can learn from sysv init isnthat asking devs to pitncode into their programs or into starter scripts does not work. They will not bother: Those will notmworkmcross platform.\n
    \n
    So you need to cebtralize that task. You can either write a wrapper program that sandboxes starts applications in a sandbox or do that whereever the programs as are started anyway.\n
    \n
    A separate sandboxing app that starts services complicates configuration: You basically need to configure two things the starter and the service. On the up-side you have the sandboxing code separate. Merging the sandboxing into the program starting the service makes configuration simple but adds moremcode into the the starter program.\n
    \n
    So it is basically a decision on what you value more. Systemd decided to favor simpler configuration. The cost for adding the sandboxing is small anyway: It’s all Linux kernel functionality that does need a bit of configuration to get rolling, with much of that code being in the systemd-init anyway: It uses similar functionality to actually separate the processes it starts from each other to avoid getting confused by programs restarted and thusnchanging PIDs – something still a thing in many other inits.\n
    \n
    I am convinced that making sandboxing easy does a lot formits adoption. No admin will change the entire startup configuration to add a sandboxing wrapper around the actual service. It is way more likely for them to drop in a override file with a couple of lines and without any problems when upstream changes command line options.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 10
  +score: 0
  +lastActive: DateTime @1702627462 {#2340
    date: 2023-12-15 09:04:22.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Chewy7324@discuss.tchncs.de"
    "@PseudoSpock@lemmy.dbzer0.com"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2351 …}
  +nested: Doctrine\ORM\PersistentCollection {#2348 …}
  +votes: Doctrine\ORM\PersistentCollection {#2350 …}
  +reports: Doctrine\ORM\PersistentCollection {#2040 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2132 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2129 …}
  -id: 223754
  -bodyTs: "'actual':175,229 'ad':136 'add':109,223 'admin':215 'adopt':213 'anyway':63,141,169 'app':67 'applic':50 'around':227 'ask':11 'avoid':185 'basic':74,119 'bit':152 'bother':28 'cebtral':37 'chang':217,255 'code':94,162 'command':256 'complic':71 'configur':72,77,106,132,154,221 'confus':187 'convinc':204 'cost':134 'coupl':246 'decid':128 'decis':121 'dev':12 'drop':239 'easi':208 'either':42 'entir':219 'favor':130 'file':243 'formit':212 'function':147,173 'get':156,186 'init':9,168,201 'isnthat':10 'kernel':146 'learn':6 'like':235 'line':248,257 'linux':145 'lot':211 'make':105,206 'mani':199 'merg':96 'moremcod':110 'much':159 'need':35,75,150 'notmworkmcross':31 'one':2 'option':258 'overrid':242 'pid':193 'pitncod':14 'platform':32 'problem':252 'process':178 'program':17,46,59,101,115,189 'restart':190 'roll':157 'sandbox':48,53,66,93,98,138,207,225 'script':21 'separ':65,95,176 'servic':70,84,104,230 'side':89 'similar':172 'simpl':107 'simpler':131 'small':140 'someth':194 'start':49,62,69,102,180 'starter':20,81,114 'startup':220 'still':195 'systemd':127,167 'systemd-init':166 'sysv':8 'task':39 'thing':3,79,197 'thusnchang':192 'two':78 'up-sid':87 'upstream':254 'use':171 'valu':125 'way':233 'whereev':57 'without':250 'work':24 'wrapper':45,226 'write':43"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/5727573"
  +editedAt: null
  +createdAt: DateTimeImmutable @1702627462 {#2342
    date: 2023-12-15 09:04:22.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
App\Entity\EntryComment {#2141
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#2349 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1883 …}
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#2347 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#2347 …}
  +body: """
    The one thing you can learn from sysv init isnthat asking devs to pitncode into their programs or into starter scripts does not work. They will not bother: Those will notmworkmcross platform.\n
    \n
    So you need to cebtralize that task. You can either write a wrapper program that sandboxes starts applications in a sandbox or do that whereever the programs as are started anyway.\n
    \n
    A separate sandboxing app that starts services complicates configuration: You basically need to configure two things the starter and the service. On the up-side you have the sandboxing code separate. Merging the sandboxing into the program starting the service makes configuration simple but adds moremcode into the the starter program.\n
    \n
    So it is basically a decision on what you value more. Systemd decided to favor simpler configuration. The cost for adding the sandboxing is small anyway: It’s all Linux kernel functionality that does need a bit of configuration to get rolling, with much of that code being in the systemd-init anyway: It uses similar functionality to actually separate the processes it starts from each other to avoid getting confused by programs restarted and thusnchanging PIDs – something still a thing in many other inits.\n
    \n
    I am convinced that making sandboxing easy does a lot formits adoption. No admin will change the entire startup configuration to add a sandboxing wrapper around the actual service. It is way more likely for them to drop in a override file with a couple of lines and without any problems when upstream changes command line options.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 10
  +score: 0
  +lastActive: DateTime @1702627462 {#2340
    date: 2023-12-15 09:04:22.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@Chewy7324@discuss.tchncs.de"
    "@PseudoSpock@lemmy.dbzer0.com"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2351 …}
  +nested: Doctrine\ORM\PersistentCollection {#2348 …}
  +votes: Doctrine\ORM\PersistentCollection {#2350 …}
  +reports: Doctrine\ORM\PersistentCollection {#2040 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2132 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2129 …}
  -id: 223754
  -bodyTs: "'actual':175,229 'ad':136 'add':109,223 'admin':215 'adopt':213 'anyway':63,141,169 'app':67 'applic':50 'around':227 'ask':11 'avoid':185 'basic':74,119 'bit':152 'bother':28 'cebtral':37 'chang':217,255 'code':94,162 'command':256 'complic':71 'configur':72,77,106,132,154,221 'confus':187 'convinc':204 'cost':134 'coupl':246 'decid':128 'decis':121 'dev':12 'drop':239 'easi':208 'either':42 'entir':219 'favor':130 'file':243 'formit':212 'function':147,173 'get':156,186 'init':9,168,201 'isnthat':10 'kernel':146 'learn':6 'like':235 'line':248,257 'linux':145 'lot':211 'make':105,206 'mani':199 'merg':96 'moremcod':110 'much':159 'need':35,75,150 'notmworkmcross':31 'one':2 'option':258 'overrid':242 'pid':193 'pitncod':14 'platform':32 'problem':252 'process':178 'program':17,46,59,101,115,189 'restart':190 'roll':157 'sandbox':48,53,66,93,98,138,207,225 'script':21 'separ':65,95,176 'servic':70,84,104,230 'side':89 'similar':172 'simpl':107 'simpler':131 'small':140 'someth':194 'start':49,62,69,102,180 'starter':20,81,114 'startup':220 'still':195 'systemd':127,167 'systemd-init':166 'sysv':8 'task':39 'thing':3,79,197 'thusnchang':192 'two':78 'up-sid':87 'upstream':254 'use':171 'valu':125 'way':233 'whereev':57 'without':250 'work':24 'wrapper':45,226 'write':43"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/5727573"
  +editedAt: null
  +createdAt: DateTimeImmutable @1702627462 {#2342
    date: 2023-12-15 09:04:22.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
null
"App\Security\Voter\UserVoter"
App\Entity\EntryComment {#2241
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#2066 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#2074 …}
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#2071 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#2067 …}
  +body: """
    To be fair: snaps can work for all kinds of things all over the stack from the kernel to individual applications, while flatpak just does applications. Canonical is building a lot around those abilities to handle lower level things, so I guess it makes sense for them.\n
    \n
    IMHO flatpak does the applications better and more reliably and those are what I personally care for, so I personally stay away from snaps.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 23
  +score: 0
  +lastActive: DateTime @1702457257 {#2060
    date: 2023-12-13 09:47:37.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@suy@programming.dev"
    "@DiabloD3@programming.dev"
    "@pkill@programming.dev"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2070 …}
  +nested: Doctrine\ORM\PersistentCollection {#2048 …}
  +votes: Doctrine\ORM\PersistentCollection {#2056 …}
  +reports: Doctrine\ORM\PersistentCollection {#2046 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2045 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2050 …}
  -id: 220346
  -bodyTs: "'abil':34 'applic':21,26,52 'around':32 'away':69 'better':53 'build':29 'canon':27 'care':63 'fair':3 'flatpak':23,49 'guess':42 'handl':36 'imho':48 'individu':20 'kernel':18 'kind':9 'level':38 'lot':31 'lower':37 'make':44 'person':62,67 'reliabl':56 'sens':45 'snap':4,71 'stack':15 'stay':68 'thing':11,39 'work':6"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/5676587"
  +editedAt: null
  +createdAt: DateTimeImmutable @1702457257 {#2344
    date: 2023-12-13 09:47:37.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
App\Entity\EntryComment {#2241
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#2066 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#2074 …}
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#2071 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#2067 …}
  +body: """
    To be fair: snaps can work for all kinds of things all over the stack from the kernel to individual applications, while flatpak just does applications. Canonical is building a lot around those abilities to handle lower level things, so I guess it makes sense for them.\n
    \n
    IMHO flatpak does the applications better and more reliably and those are what I personally care for, so I personally stay away from snaps.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 23
  +score: 0
  +lastActive: DateTime @1702457257 {#2060
    date: 2023-12-13 09:47:37.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@suy@programming.dev"
    "@DiabloD3@programming.dev"
    "@pkill@programming.dev"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2070 …}
  +nested: Doctrine\ORM\PersistentCollection {#2048 …}
  +votes: Doctrine\ORM\PersistentCollection {#2056 …}
  +reports: Doctrine\ORM\PersistentCollection {#2046 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2045 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2050 …}
  -id: 220346
  -bodyTs: "'abil':34 'applic':21,26,52 'around':32 'away':69 'better':53 'build':29 'canon':27 'care':63 'fair':3 'flatpak':23,49 'guess':42 'handl':36 'imho':48 'individu':20 'kernel':18 'kind':9 'level':38 'lot':31 'lower':37 'make':44 'person':62,67 'reliabl':56 'sens':45 'snap':4,71 'stack':15 'stay':68 'thing':11,39 'work':6"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/5676587"
  +editedAt: null
  +createdAt: DateTimeImmutable @1702457257 {#2344
    date: 2023-12-13 09:47:37.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
App\Entity\EntryComment {#2241
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#2066 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#2074 …}
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#2071 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#2067 …}
  +body: """
    To be fair: snaps can work for all kinds of things all over the stack from the kernel to individual applications, while flatpak just does applications. Canonical is building a lot around those abilities to handle lower level things, so I guess it makes sense for them.\n
    \n
    IMHO flatpak does the applications better and more reliably and those are what I personally care for, so I personally stay away from snaps.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 23
  +score: 0
  +lastActive: DateTime @1702457257 {#2060
    date: 2023-12-13 09:47:37.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@suy@programming.dev"
    "@DiabloD3@programming.dev"
    "@pkill@programming.dev"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2070 …}
  +nested: Doctrine\ORM\PersistentCollection {#2048 …}
  +votes: Doctrine\ORM\PersistentCollection {#2056 …}
  +reports: Doctrine\ORM\PersistentCollection {#2046 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2045 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2050 …}
  -id: 220346
  -bodyTs: "'abil':34 'applic':21,26,52 'around':32 'away':69 'better':53 'build':29 'canon':27 'care':63 'fair':3 'flatpak':23,49 'guess':42 'handl':36 'imho':48 'individu':20 'kernel':18 'kind':9 'level':38 'lot':31 'lower':37 'make':44 'person':62,67 'reliabl':56 'sens':45 'snap':4,71 'stack':15 'stay':68 'thing':11,39 'work':6"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/5676587"
  +editedAt: null
  +createdAt: DateTimeImmutable @1702457257 {#2344
    date: 2023-12-13 09:47:37.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
null
"App\Security\Voter\UserVoter"
App\Entity\EntryComment {#2058
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#2053 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1883 …}
  +image: null
  +parent: null
  +root: null
  +body: "It is the same as with all logins: It goes through the Pluggable Authentication Modules. So you need a service that uses PAM (they basically all do for a long time now) and the configuration of that service needs to include homed as an option to authenticate users. Check /etc/pam.d for the config files."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 5
  +score: 0
  +lastActive: DateTime @1701034512 {#2140
    date: 2023-11-26 22:35:12.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@luthis@lemmy.nz"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2125 …}
  +nested: Doctrine\ORM\PersistentCollection {#2041 …}
  +votes: Doctrine\ORM\PersistentCollection {#2100 …}
  +reports: Doctrine\ORM\PersistentCollection {#2105 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2111 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2102 …}
  -id: 168014
  -bodyTs: "'/etc/pam.d':50 'authent':14,47 'basic':25 'check':49 'config':53 'configur':35 'file':54 'goe':10 'home':42 'includ':41 'login':8 'long':30 'modul':15 'need':18,39 'option':45 'pam':23 'pluggabl':13 'servic':20,38 'time':31 'use':22 'user':48"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/5198365"
  +editedAt: null
  +createdAt: DateTimeImmutable @1701034512 {#2130
    date: 2023-11-26 22:35:12.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
App\Entity\EntryComment {#2058
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#2053 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1883 …}
  +image: null
  +parent: null
  +root: null
  +body: "It is the same as with all logins: It goes through the Pluggable Authentication Modules. So you need a service that uses PAM (they basically all do for a long time now) and the configuration of that service needs to include homed as an option to authenticate users. Check /etc/pam.d for the config files."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 5
  +score: 0
  +lastActive: DateTime @1701034512 {#2140
    date: 2023-11-26 22:35:12.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@luthis@lemmy.nz"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2125 …}
  +nested: Doctrine\ORM\PersistentCollection {#2041 …}
  +votes: Doctrine\ORM\PersistentCollection {#2100 …}
  +reports: Doctrine\ORM\PersistentCollection {#2105 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2111 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2102 …}
  -id: 168014
  -bodyTs: "'/etc/pam.d':50 'authent':14,47 'basic':25 'check':49 'config':53 'configur':35 'file':54 'goe':10 'home':42 'includ':41 'login':8 'long':30 'modul':15 'need':18,39 'option':45 'pam':23 'pluggabl':13 'servic':20,38 'time':31 'use':22 'user':48"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/5198365"
  +editedAt: null
  +createdAt: DateTimeImmutable @1701034512 {#2130
    date: 2023-11-26 22:35:12.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
App\Entity\EntryComment {#2058
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#2053 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1883 …}
  +image: null
  +parent: null
  +root: null
  +body: "It is the same as with all logins: It goes through the Pluggable Authentication Modules. So you need a service that uses PAM (they basically all do for a long time now) and the configuration of that service needs to include homed as an option to authenticate users. Check /etc/pam.d for the config files."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 5
  +score: 0
  +lastActive: DateTime @1701034512 {#2140
    date: 2023-11-26 22:35:12.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@luthis@lemmy.nz"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2125 …}
  +nested: Doctrine\ORM\PersistentCollection {#2041 …}
  +votes: Doctrine\ORM\PersistentCollection {#2100 …}
  +reports: Doctrine\ORM\PersistentCollection {#2105 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2111 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2102 …}
  -id: 168014
  -bodyTs: "'/etc/pam.d':50 'authent':14,47 'basic':25 'check':49 'config':53 'configur':35 'file':54 'goe':10 'home':42 'includ':41 'login':8 'long':30 'modul':15 'need':18,39 'option':45 'pam':23 'pluggabl':13 'servic':20,38 'time':31 'use':22 'user':48"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/5198365"
  +editedAt: null
  +createdAt: DateTimeImmutable @1701034512 {#2130
    date: 2023-11-26 22:35:12.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
null
"App\Security\Voter\UserVoter"
App\Entity\EntryComment {#2110
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#2107 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1883 …}
  +image: null
  +parent: null
  +root: null
  +body: """
    I use toolbox: Distrobox is a pretty horrible shell script and deleted parts of my home directory when I tried that.\n
    \n
    In the end I just pointed toolbox to a script named `podman` that just adjusts the setup to what I need, implementing the missing features I wanted that way.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1700389144 {#2054
    date: 2023-11-19 11:19:04.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@beta_tester@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2112 …}
  +nested: Doctrine\ORM\PersistentCollection {#2114 …}
  +votes: Doctrine\ORM\PersistentCollection {#2117 …}
  +reports: Doctrine\ORM\PersistentCollection {#2122 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2113 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2119 …}
  -id: 139515
  -bodyTs: "'adjust':36 'delet':12 'directori':17 'distrobox':4 'end':24 'featur':46 'home':16 'horribl':8 'implement':43 'miss':45 'name':32 'need':42 'part':13 'podman':33 'point':27 'pretti':7 'script':10,31 'setup':38 'shell':9 'toolbox':3,28 'tri':20 'use':2 'want':48 'way':50"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/4967685"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700389144 {#2052
    date: 2023-11-19 11:19:04.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
App\Entity\EntryComment {#2110
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#2107 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1883 …}
  +image: null
  +parent: null
  +root: null
  +body: """
    I use toolbox: Distrobox is a pretty horrible shell script and deleted parts of my home directory when I tried that.\n
    \n
    In the end I just pointed toolbox to a script named `podman` that just adjusts the setup to what I need, implementing the missing features I wanted that way.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1700389144 {#2054
    date: 2023-11-19 11:19:04.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@beta_tester@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2112 …}
  +nested: Doctrine\ORM\PersistentCollection {#2114 …}
  +votes: Doctrine\ORM\PersistentCollection {#2117 …}
  +reports: Doctrine\ORM\PersistentCollection {#2122 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2113 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2119 …}
  -id: 139515
  -bodyTs: "'adjust':36 'delet':12 'directori':17 'distrobox':4 'end':24 'featur':46 'home':16 'horribl':8 'implement':43 'miss':45 'name':32 'need':42 'part':13 'podman':33 'point':27 'pretti':7 'script':10,31 'setup':38 'shell':9 'toolbox':3,28 'tri':20 'use':2 'want':48 'way':50"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/4967685"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700389144 {#2052
    date: 2023-11-19 11:19:04.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
App\Entity\EntryComment {#2110
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#2107 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1883 …}
  +image: null
  +parent: null
  +root: null
  +body: """
    I use toolbox: Distrobox is a pretty horrible shell script and deleted parts of my home directory when I tried that.\n
    \n
    In the end I just pointed toolbox to a script named `podman` that just adjusts the setup to what I need, implementing the missing features I wanted that way.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1700389144 {#2054
    date: 2023-11-19 11:19:04.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@beta_tester@lemmy.ml"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2112 …}
  +nested: Doctrine\ORM\PersistentCollection {#2114 …}
  +votes: Doctrine\ORM\PersistentCollection {#2117 …}
  +reports: Doctrine\ORM\PersistentCollection {#2122 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2113 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2119 …}
  -id: 139515
  -bodyTs: "'adjust':36 'delet':12 'directori':17 'distrobox':4 'end':24 'featur':46 'home':16 'horribl':8 'implement':43 'miss':45 'name':32 'need':42 'part':13 'podman':33 'point':27 'pretti':7 'script':10,31 'setup':38 'shell':9 'toolbox':3,28 'tri':20 'use':2 'want':48 'way':50"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/4967685"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700389144 {#2052
    date: 2023-11-19 11:19:04.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
null
"App\Security\Voter\UserVoter"
App\Entity\EntryComment {#2160
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#2163 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1883 …}
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#2162 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#2044 …}
  +body: """
    Censorship is about you being limited in the actions you can take to express yourself. It is not about cushioning you from the consequences of those actions from the people around you.\n
    \n
    You obviously were allowed to take action: The contents was apparent upon on a forum and here as well. People reacted to your actions: Admins removed your contents and blocked you and I am telling you that your understanding of wayland as well as politics is limited.\n
    \n
    Deal with it.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1700224321 {#2106
    date: 2023-11-17 13:32:01.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@safefel556@sh.itjust.works"
    "@brunofin@lemm.ee"
    "@mintycactus@lemmy.world"
    "@hunger@programming.dev"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2128 …}
  +nested: Doctrine\ORM\PersistentCollection {#2126 …}
  +votes: Doctrine\ORM\PersistentCollection {#2139 …}
  +reports: Doctrine\ORM\PersistentCollection {#2224 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2223 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2216 …}
  -id: 133124
  -bodyTs: "'action':9,27,39,56 'admin':57 'allow':36 'appar':43 'around':31 'block':62 'censorship':1 'consequ':24 'content':41,60 'cushion':20 'deal':80 'express':14 'forum':47 'limit':6,79 'obvious':34 'peopl':30,52 'polit':77 'react':53 'remov':58 'take':12,38 'tell':67 'understand':71 'upon':44 'wayland':73 'well':51,75"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/4908407"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700224321 {#2103
    date: 2023-11-17 13:32:01.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
App\Entity\EntryComment {#2160
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#2163 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1883 …}
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#2162 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#2044 …}
  +body: """
    Censorship is about you being limited in the actions you can take to express yourself. It is not about cushioning you from the consequences of those actions from the people around you.\n
    \n
    You obviously were allowed to take action: The contents was apparent upon on a forum and here as well. People reacted to your actions: Admins removed your contents and blocked you and I am telling you that your understanding of wayland as well as politics is limited.\n
    \n
    Deal with it.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1700224321 {#2106
    date: 2023-11-17 13:32:01.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@safefel556@sh.itjust.works"
    "@brunofin@lemm.ee"
    "@mintycactus@lemmy.world"
    "@hunger@programming.dev"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2128 …}
  +nested: Doctrine\ORM\PersistentCollection {#2126 …}
  +votes: Doctrine\ORM\PersistentCollection {#2139 …}
  +reports: Doctrine\ORM\PersistentCollection {#2224 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2223 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2216 …}
  -id: 133124
  -bodyTs: "'action':9,27,39,56 'admin':57 'allow':36 'appar':43 'around':31 'block':62 'censorship':1 'consequ':24 'content':41,60 'cushion':20 'deal':80 'express':14 'forum':47 'limit':6,79 'obvious':34 'peopl':30,52 'polit':77 'react':53 'remov':58 'take':12,38 'tell':67 'understand':71 'upon':44 'wayland':73 'well':51,75"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/4908407"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700224321 {#2103
    date: 2023-11-17 13:32:01.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
App\Entity\EntryComment {#2160
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#2163 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1883 …}
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#2162 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#2044 …}
  +body: """
    Censorship is about you being limited in the actions you can take to express yourself. It is not about cushioning you from the consequences of those actions from the people around you.\n
    \n
    You obviously were allowed to take action: The contents was apparent upon on a forum and here as well. People reacted to your actions: Admins removed your contents and blocked you and I am telling you that your understanding of wayland as well as politics is limited.\n
    \n
    Deal with it.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 1
  +score: 0
  +lastActive: DateTime @1700224321 {#2106
    date: 2023-11-17 13:32:01.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@safefel556@sh.itjust.works"
    "@brunofin@lemm.ee"
    "@mintycactus@lemmy.world"
    "@hunger@programming.dev"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2128 …}
  +nested: Doctrine\ORM\PersistentCollection {#2126 …}
  +votes: Doctrine\ORM\PersistentCollection {#2139 …}
  +reports: Doctrine\ORM\PersistentCollection {#2224 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2223 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2216 …}
  -id: 133124
  -bodyTs: "'action':9,27,39,56 'admin':57 'allow':36 'appar':43 'around':31 'block':62 'censorship':1 'consequ':24 'content':41,60 'cushion':20 'deal':80 'express':14 'forum':47 'limit':6,79 'obvious':34 'peopl':30,52 'polit':77 'react':53 'remov':58 'take':12,38 'tell':67 'understand':71 'upon':44 'wayland':73 'well':51,75"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/4908407"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700224321 {#2103
    date: 2023-11-17 13:32:01.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
null
"App\Security\Voter\UserVoter"
App\Entity\EntryComment {#2230
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#2163 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1883 …}
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#2231 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#2232 …}
  +body: "Small communities have a hard time staying up to date. X11 was ported decades ago, when non Linux OSes had more mind share and commercial backing. I doubt anyone could port X11 if that was the new thing mainly developed on Linux today."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1700210862 {#2161
    date: 2023-11-17 09:47:42.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@safefel556@sh.itjust.works"
    "@sebsch@discuss.tchncs.de"
    "@db2@sopuli.xyz"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2229 …}
  +nested: Doctrine\ORM\PersistentCollection {#2252 …}
  +votes: Doctrine\ORM\PersistentCollection {#2189 …}
  +reports: Doctrine\ORM\PersistentCollection {#2311 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2293 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2309 …}
  -id: 132729
  -bodyTs: "'ago':15 'anyon':29 'back':26 'commerci':25 'communiti':2 'could':30 'date':10 'decad':14 'develop':40 'doubt':28 'hard':5 'linux':18,42 'main':39 'mind':22 'new':37 'non':17 'ose':19 'port':13,31 'share':23 'small':1 'stay':7 'thing':38 'time':6 'today':43 'x11':11,32"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/4904904"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700210862 {#2120
    date: 2023-11-17 09:47:42.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
App\Entity\EntryComment {#2230
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#2163 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1883 …}
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#2231 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#2232 …}
  +body: "Small communities have a hard time staying up to date. X11 was ported decades ago, when non Linux OSes had more mind share and commercial backing. I doubt anyone could port X11 if that was the new thing mainly developed on Linux today."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1700210862 {#2161
    date: 2023-11-17 09:47:42.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@safefel556@sh.itjust.works"
    "@sebsch@discuss.tchncs.de"
    "@db2@sopuli.xyz"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2229 …}
  +nested: Doctrine\ORM\PersistentCollection {#2252 …}
  +votes: Doctrine\ORM\PersistentCollection {#2189 …}
  +reports: Doctrine\ORM\PersistentCollection {#2311 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2293 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2309 …}
  -id: 132729
  -bodyTs: "'ago':15 'anyon':29 'back':26 'commerci':25 'communiti':2 'could':30 'date':10 'decad':14 'develop':40 'doubt':28 'hard':5 'linux':18,42 'main':39 'mind':22 'new':37 'non':17 'ose':19 'port':13,31 'share':23 'small':1 'stay':7 'thing':38 'time':6 'today':43 'x11':11,32"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/4904904"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700210862 {#2120
    date: 2023-11-17 09:47:42.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
App\Entity\EntryComment {#2230
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#2163 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1883 …}
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#2231 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#2232 …}
  +body: "Small communities have a hard time staying up to date. X11 was ported decades ago, when non Linux OSes had more mind share and commercial backing. I doubt anyone could port X11 if that was the new thing mainly developed on Linux today."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1700210862 {#2161
    date: 2023-11-17 09:47:42.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@safefel556@sh.itjust.works"
    "@sebsch@discuss.tchncs.de"
    "@db2@sopuli.xyz"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2229 …}
  +nested: Doctrine\ORM\PersistentCollection {#2252 …}
  +votes: Doctrine\ORM\PersistentCollection {#2189 …}
  +reports: Doctrine\ORM\PersistentCollection {#2311 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2293 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2309 …}
  -id: 132729
  -bodyTs: "'ago':15 'anyon':29 'back':26 'commerci':25 'communiti':2 'could':30 'date':10 'decad':14 'develop':40 'doubt':28 'hard':5 'linux':18,42 'main':39 'mind':22 'new':37 'non':17 'ose':19 'port':13,31 'share':23 'small':1 'stay':7 'thing':38 'time':6 'today':43 'x11':11,32"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/4904904"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700210862 {#2120
    date: 2023-11-17 09:47:42.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
null
"App\Security\Voter\UserVoter"
App\Entity\EntryComment {#2320
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#2163 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1883 …}
  +image: null
  +parent: null
  +root: null
  +body: "Yes, wayland by design does not let random applications grab events intended for other applications nor does it let random applications take screenshots at any point in time showing other applications screens. This requires applications to do screen sharing differently, and it indeed breaks random applications sending events to random other applications. That is basically all you wail about and an absolutely necessary property of any sensible system and it is very embarrassing that it took so long to get this."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 12
  +score: 0
  +lastActive: DateTime @1700210315 {#2225
    date: 2023-11-17 09:38:35.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@safefel556@sh.itjust.works"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2315 …}
  +nested: Doctrine\ORM\PersistentCollection {#2321 …}
  +votes: Doctrine\ORM\PersistentCollection {#2310 …}
  +reports: Doctrine\ORM\PersistentCollection {#2306 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2305 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2303 …}
  -id: 132713
  -bodyTs: "'absolut':62 'applic':9,15,21,31,35,46,52 'basic':55 'break':44 'design':4 'differ':40 'embarrass':73 'event':11,48 'get':80 'grab':10 'inde':43 'intend':12 'let':7,19 'long':78 'necessari':63 'point':26 'properti':64 'random':8,20,45,50 'requir':34 'screen':32,38 'screenshot':23 'send':47 'sensibl':67 'share':39 'show':29 'system':68 'take':22 'time':28 'took':76 'wail':58 'wayland':2 'yes':1"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/4904791"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700210315 {#2213
    date: 2023-11-17 09:38:35.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
App\Entity\EntryComment {#2320
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#2163 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1883 …}
  +image: null
  +parent: null
  +root: null
  +body: "Yes, wayland by design does not let random applications grab events intended for other applications nor does it let random applications take screenshots at any point in time showing other applications screens. This requires applications to do screen sharing differently, and it indeed breaks random applications sending events to random other applications. That is basically all you wail about and an absolutely necessary property of any sensible system and it is very embarrassing that it took so long to get this."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 12
  +score: 0
  +lastActive: DateTime @1700210315 {#2225
    date: 2023-11-17 09:38:35.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@safefel556@sh.itjust.works"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2315 …}
  +nested: Doctrine\ORM\PersistentCollection {#2321 …}
  +votes: Doctrine\ORM\PersistentCollection {#2310 …}
  +reports: Doctrine\ORM\PersistentCollection {#2306 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2305 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2303 …}
  -id: 132713
  -bodyTs: "'absolut':62 'applic':9,15,21,31,35,46,52 'basic':55 'break':44 'design':4 'differ':40 'embarrass':73 'event':11,48 'get':80 'grab':10 'inde':43 'intend':12 'let':7,19 'long':78 'necessari':63 'point':26 'properti':64 'random':8,20,45,50 'requir':34 'screen':32,38 'screenshot':23 'send':47 'sensibl':67 'share':39 'show':29 'system':68 'take':22 'time':28 'took':76 'wail':58 'wayland':2 'yes':1"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/4904791"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700210315 {#2213
    date: 2023-11-17 09:38:35.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
App\Entity\EntryComment {#2320
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#2163 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1883 …}
  +image: null
  +parent: null
  +root: null
  +body: "Yes, wayland by design does not let random applications grab events intended for other applications nor does it let random applications take screenshots at any point in time showing other applications screens. This requires applications to do screen sharing differently, and it indeed breaks random applications sending events to random other applications. That is basically all you wail about and an absolutely necessary property of any sensible system and it is very embarrassing that it took so long to get this."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 12
  +score: 0
  +lastActive: DateTime @1700210315 {#2225
    date: 2023-11-17 09:38:35.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@safefel556@sh.itjust.works"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2315 …}
  +nested: Doctrine\ORM\PersistentCollection {#2321 …}
  +votes: Doctrine\ORM\PersistentCollection {#2310 …}
  +reports: Doctrine\ORM\PersistentCollection {#2306 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2305 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2303 …}
  -id: 132713
  -bodyTs: "'absolut':62 'applic':9,15,21,31,35,46,52 'basic':55 'break':44 'design':4 'differ':40 'embarrass':73 'event':11,48 'get':80 'grab':10 'inde':43 'intend':12 'let':7,19 'long':78 'necessari':63 'point':26 'properti':64 'random':8,20,45,50 'requir':34 'screen':32,38 'screenshot':23 'send':47 'sensibl':67 'share':39 'show':29 'system':68 'take':22 'time':28 'took':76 'wail':58 'wayland':2 'yes':1"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/4904791"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700210315 {#2213
    date: 2023-11-17 09:38:35.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
null
"App\Security\Voter\UserVoter"
App\Entity\EntryComment {#2313
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#2163 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1883 …}
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#2316 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#2044 …}
  +body: "Removing dump stuff to keep a community relevant, on topic and with a good signal to noise ratio is not censorship. Claiming so is just dumb."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 11
  +score: 0
  +lastActive: DateTime @1700208468 {#2297
    date: 2023-11-17 09:07:48.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@safefel556@sh.itjust.works"
    "@brunofin@lemm.ee"
    "@mintycactus@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2292 …}
  +nested: Doctrine\ORM\PersistentCollection {#2290 …}
  +votes: Doctrine\ORM\PersistentCollection {#2295 …}
  +reports: Doctrine\ORM\PersistentCollection {#2283 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2282 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2276 …}
  -id: 132678
  -bodyTs: "'censorship':21 'claim':22 'communiti':7 'dumb':26 'dump':2 'good':14 'keep':5 'nois':17 'ratio':18 'relev':8 'remov':1 'signal':15 'stuff':3 'topic':10"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/4904384"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700208468 {#2302
    date: 2023-11-17 09:07:48.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
App\Entity\EntryComment {#2313
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#2163 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1883 …}
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#2316 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#2044 …}
  +body: "Removing dump stuff to keep a community relevant, on topic and with a good signal to noise ratio is not censorship. Claiming so is just dumb."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 11
  +score: 0
  +lastActive: DateTime @1700208468 {#2297
    date: 2023-11-17 09:07:48.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@safefel556@sh.itjust.works"
    "@brunofin@lemm.ee"
    "@mintycactus@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2292 …}
  +nested: Doctrine\ORM\PersistentCollection {#2290 …}
  +votes: Doctrine\ORM\PersistentCollection {#2295 …}
  +reports: Doctrine\ORM\PersistentCollection {#2283 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2282 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2276 …}
  -id: 132678
  -bodyTs: "'censorship':21 'claim':22 'communiti':7 'dumb':26 'dump':2 'good':14 'keep':5 'nois':17 'ratio':18 'relev':8 'remov':1 'signal':15 'stuff':3 'topic':10"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/4904384"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700208468 {#2302
    date: 2023-11-17 09:07:48.0 +01:00
  }
}
"App\Security\Voter\UserVoter"
App\Entity\EntryComment {#2313
  +user: App\Entity\User {#265 …}
  +entry: Proxies\__CG__\App\Entity\Entry {#2163 …}
  +magazine: Proxies\__CG__\App\Entity\Magazine {#1883 …}
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#2316 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#2044 …}
  +body: "Removing dump stuff to keep a community relevant, on topic and with a good signal to noise ratio is not censorship. Claiming so is just dumb."
  +lang: "en"
  +isAdult: false
  +favouriteCount: 11
  +score: 0
  +lastActive: DateTime @1700208468 {#2297
    date: 2023-11-17 09:07:48.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@safefel556@sh.itjust.works"
    "@brunofin@lemm.ee"
    "@mintycactus@lemmy.world"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2292 …}
  +nested: Doctrine\ORM\PersistentCollection {#2290 …}
  +votes: Doctrine\ORM\PersistentCollection {#2295 …}
  +reports: Doctrine\ORM\PersistentCollection {#2283 …}
  +favourites: Doctrine\ORM\PersistentCollection {#2282 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2276 …}
  -id: 132678
  -bodyTs: "'censorship':21 'claim':22 'communiti':7 'dumb':26 'dump':2 'good':14 'keep':5 'nois':17 'ratio':18 'relev':8 'remov':1 'signal':15 'stuff':3 'topic':10"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://programming.dev/comment/4904384"
  +editedAt: null
  +createdAt: DateTimeImmutable @1700208468 {#2302
    date: 2023-11-17 09:07:48.0 +01:00
  }
}
"App\Security\Voter\UserVoter"

Symfony Profiler

GET https://kbin.spritesserver.nl/index.php/u/@hunger@programming.dev/comments

Configuration Settings

Theme

Page Width

Security

Token

Firewall

Configuration

Listeners

Authenticators

Access Decision

Access decision log