GET https://kbin.spritesserver.nl/index.php/m/privacy@lemmy.ml/t/20674/Librewolf-but-like-for-chromium/comment/208026/votes/up

Response
200 OK
IP
216.73.216.149
Profiled on
Token
cb9917

Security

Token

There is no security token.

Firewall

main Name
Security enabled
Stateless

Configuration

Key Value
provider security.user.provider.concrete.app_user_provider
context main
entry_point App\Security\KbinAuthenticator
user_checker App\Security\UserChecker
access_denied_handler (none)
access_denied_url (none)
authenticators 
[
  "two_factor"
  "remember_me"
  "App\Security\KbinAuthenticator"
  "App\Security\FacebookAuthenticator"
  "App\Security\GoogleAuthenticator"
  "App\Security\GithubAuthenticator"
  "App\Security\KeycloakAuthenticator"
]

Listeners

Listener Duration Response 
Symfony\Component\Security\Http\Firewall\ChannelListener {#723
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
  -logger: Monolog\Logger {#783 …}
  -httpPort: 80
  -httpsPort: 443
}
 0.00 ms (none) 
Symfony\Component\Security\Http\Firewall\ContextListener {#706
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\TokenStorage {#1017 …}
  -sessionKey: "_security_main"
  -logger: Monolog\Logger {#783 …}
  -userProviders: Symfony\Component\DependencyInjection\Argument\RewindableGenerator {#705 …}
  -dispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
  -registered: false
  -trustResolver: Scheb\TwoFactorBundle\Security\Authentication\AuthenticationTrustResolver {#780 …}
  -sessionTrackerEnabler: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage::enableUsageTracking(): void {#703 …}
}
 0.73 ms (none) 
Symfony\Component\Security\Http\Firewall\AuthenticatorManagerListener {#584
  -authenticatorManager: Symfony\Component\Security\Http\Authentication\AuthenticatorManager {#595 …}
}
 0.00 ms (none) 
Scheb\TwoFactorBundle\Security\Http\Firewall\TwoFactorAccessListener {#582
  -twoFactorFirewallConfig: Scheb\TwoFactorBundle\Security\TwoFactor\TwoFactorFirewallConfig {#842 …}
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -twoFactorAccessDecider: Scheb\TwoFactorBundle\Security\Authorization\TwoFactorAccessDecider {#581 …}
}
 0.03 ms (none) 
Symfony\Component\Security\Http\Firewall\AccessListener {#579
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -accessDecisionManager: Symfony\Component\Security\Core\Authorization\TraceableAccessDecisionManager {#937 …}
  -map: Symfony\Component\Security\Http\AccessMap {#722 …}
}
 0.00 ms (none) 
Symfony\Component\Security\Http\Firewall\LogoutListener {#786
  -tokenStorage: Symfony\Component\Security\Core\Authentication\Token\Storage\UsageTrackingTokenStorage {#1018 …}
  -options: [
    "csrf_parameter" => "_csrf_token"
    "csrf_token_id" => "logout"
    "logout_path" => "app_logout"
  ]
  -httpUtils: Symfony\Component\Security\Http\HttpUtils {#841 …}
  -csrfTokenManager: Symfony\Component\Security\Csrf\CsrfTokenManager {#1015 …}
  -eventDispatcher: Symfony\Component\EventDispatcher\Debug\TraceableEventDispatcher {#747 …}
}
 0.00 ms (none)

Authenticators

No authenticators have been recorded. Check previous profiles on your authentication endpoint.

Access Decision

affirmative Strategy
# Voter class
1 
"Symfony\Component\Security\Core\Authorization\Voter\AuthenticatedVoter"
2 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
3 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
4 
"Symfony\Component\Security\Core\Authorization\Voter\ExpressionVoter"
5 
"App\Security\Voter\EntryCommentVoter"
6 
"App\Security\Voter\EntryVoter"
7 
"App\Security\Voter\MagazineVoter"
8 
"App\Security\Voter\MessageThreadVoter"
9 
"App\Security\Voter\MessageVoter"
10 
"App\Security\Voter\NotificationVoter"
11 
"App\Security\Voter\OAuth2UserConsentVoter"
12 
"App\Security\Voter\PostCommentVoter"
13 
"App\Security\Voter\PostVoter"
14 
"App\Security\Voter\UserVoter"

Access decision log

# Result Attributes Object
1 DENIED ROLE_USER 
null
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"Symfony\Component\Security\Core\Authorization\Voter\RoleHierarchyVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
2 DENIED moderate 
App\Entity\EntryComment {#1379
  +user: Proxies\__CG__\App\Entity\User {#1367 …}
  +entry: App\Entity\Entry {#2404 …}
  +magazine: App\Entity\Magazine {#309
    +icon: Proxies\__CG__\App\Entity\Image {#289 …}
    +name: "privacy@lemmy.ml"
    +title: "privacy"
    +description: """
      A place to discuss privacy and freedom in the digital world.\n
      ============================================================\n
      \n
      Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.\n
      \n
      In this community everyone is welcome to post links and discuss topics related to privacy.\n
      \n
      ### Some Rules\n
      \n
      - Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post\n
      - Don’t promote proprietary software\n
      - Try to keep things on topic\n
      - If you have a question, please try searching for previous discussions, maybe it has already been answered\n
      - Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience\n
      - Be nice :)\n
      \n
      ### Related communities\n
      \n
      - [Lemmy.ml libre_culture](https://lemmy.ml/c/libre_culture)\n
      - [Lemmy.ml privatelife](https://lemmy.ml/c/privatelife)\n
      - [Lemmy.ml DeGoogle](https://lemmy.ml/c/degoogle)\n
      - [Lemmy.ca privacy](https://lemmy.ca/c/privacy)\n
      \n
      ### Chat rooms\n
      \n
      - [Matrix/Element]Dead\n
      - [Discord](https://discord.gg/8xfrVjvngh)\n
      \n
      much thanks to @gary_host_laptop for the logo design :)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 561
    +entryCommentCount: 7684
    +postCount: 6
    +postCommentCount: 73
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729582580 {#322
      date: 2024-10-22 09:36:20.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#280 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#276 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#265 …}
    +entries: Doctrine\ORM\PersistentCollection {#223 …}
    +posts: Doctrine\ORM\PersistentCollection {#181 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#243 …}
    +bans: Doctrine\ORM\PersistentCollection {#160 …}
    +reports: Doctrine\ORM\PersistentCollection {#146 …}
    +badges: Doctrine\ORM\PersistentCollection {#124 …}
    +logs: Doctrine\ORM\PersistentCollection {#114 …}
    +awards: Doctrine\ORM\PersistentCollection {#103 …}
    +categories: Doctrine\ORM\PersistentCollection {#90 …}
    -id: 85
    +apId: "privacy@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/privacy"
    +apPublicUrl: "https://lemmy.ml/c/privacy"
    +apFollowersUrl: "https://lemmy.ml/c/privacy/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "privacy"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583592 {#325
      date: 2024-10-22 09:53:12.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1699780272 {#321
      date: 2023-11-12 10:11:12.0 +01:00
    }
  }
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#2449 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#2450 …}
  +body: """
    Flatpaks are more and less secure. Their Sandbox improves 99% of apps security as other sandboxes are hard to setup and thus nearly nonexistent.\n
    \n
    Browsers have their own, so just dont use Flatpaks there.\n
    \n
    I am not sure about microcode, but processes running as root are maybe more critical, but it sounds like any process could have exploits if microcode is a problem. Also, RiscV or even ARM will be waaay better here, as their instruction set is not dozens of years old and extremely bloated.\n
    \n
    As we get our apps from secure repos, with projects keeping track of every Git commit etc, we just had no malware really.\n
    \n
    The only problem is that Flatpaks, like appimages, “just work” and dont have to evolve like the rest of the OS will. Their main goal is to work everywhere, and Devs always choose convenience over security.\n
    \n
    For example Portals are not implemented in most old big projects like Libreoffice, Gimp, Inkscape etc. Scribus is even X11 only. But developers will not remove the `filesystem=host` permission and replace it with “just all the media locations”. This will still be a problem, but at least apps could not read Kernel logs etc anymore.\n
    \n
    Also as they “just work” its easy to abandon them and dont update. The “outdated Runtime” Warning is a veeery good indicator of a project using old and probably insecure libraries. But afaik there is no automatic CVE patching in flatpak-builder which is a huge problem.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1701980466 {#1844
    date: 2023-12-07 21:21:06.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@spez@sh.itjust.works"
    "@Pantherina@feddit.de"
    "@Antiochus@lemmy.one"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2475 …}
  +nested: Doctrine\ORM\PersistentCollection {#2451 …}
  +votes: Doctrine\ORM\PersistentCollection {#2443 …}
  +reports: Doctrine\ORM\PersistentCollection {#2288 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1391 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2473 …}
  -id: 208026
  -bodyTs: "'99':10 'abandon':210 'afaik':234 'also':64,202 'alway':141 'anymor':201 'app':12,91,194 'appimag':117 'arm':68 'automat':238 'better':72 'big':155 'bloat':86 'browser':25 'builder':244 'choos':142 'commit':102 'conveni':143 'could':56,195 'critic':49 'cve':239 'dev':140 'develop':168 'dont':31,121,213 'dozen':80 'easi':208 'etc':103,161,200 'even':67,164 'everi':100 'everywher':138 'evolv':124 'exampl':147 'exploit':58 'extrem':85 'filesystem':173 'flatpak':1,33,115,243 'flatpak-build':242 'get':89 'gimp':159 'git':101 'goal':134 'good':222 'hard':18 'host':174 'huge':248 'implement':151 'improv':9 'indic':223 'inkscap':160 'insecur':231 'instruct':76 'keep':97 'kernel':198 'least':193 'less':5 'librari':232 'libreoffic':158 'like':53,116,125,157 'locat':184 'log':199 'main':133 'malwar':108 'mayb':47 'media':183 'microcod':40,60 'near':23 'nonexist':24 'old':83,154,228 'os':130 'outdat':216 'patch':240 'permiss':175 'portal':148 'probabl':230 'problem':63,112,190,249 'process':42,55 'project':96,156,226 'read':197 'realli':109 'remov':171 'replac':177 'repo':94 'rest':127 'riscv':65 'root':45 'run':43 'runtim':217 'sandbox':8,16 'scribus':162 'secur':6,13,93,145 'set':77 'setup':20 'sound':52 'still':187 'sure':38 'thus':22 'track':98 'updat':214 'use':32,227 'veeeri':221 'waaay':71 'warn':218 'work':119,137,206 'x11':165 'year':82"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.de/comment/5487169"
  +editedAt: DateTimeImmutable @1703374910 {#1927
    date: 2023-12-24 00:41:50.0 +01:00
  }
  +createdAt: DateTimeImmutable @1701980466 {#1374
    date: 2023-12-07 21:21:06.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
3 DENIED edit 
App\Entity\EntryComment {#1379
  +user: Proxies\__CG__\App\Entity\User {#1367 …}
  +entry: App\Entity\Entry {#2404 …}
  +magazine: App\Entity\Magazine {#309
    +icon: Proxies\__CG__\App\Entity\Image {#289 …}
    +name: "privacy@lemmy.ml"
    +title: "privacy"
    +description: """
      A place to discuss privacy and freedom in the digital world.\n
      ============================================================\n
      \n
      Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.\n
      \n
      In this community everyone is welcome to post links and discuss topics related to privacy.\n
      \n
      ### Some Rules\n
      \n
      - Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post\n
      - Don’t promote proprietary software\n
      - Try to keep things on topic\n
      - If you have a question, please try searching for previous discussions, maybe it has already been answered\n
      - Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience\n
      - Be nice :)\n
      \n
      ### Related communities\n
      \n
      - [Lemmy.ml libre_culture](https://lemmy.ml/c/libre_culture)\n
      - [Lemmy.ml privatelife](https://lemmy.ml/c/privatelife)\n
      - [Lemmy.ml DeGoogle](https://lemmy.ml/c/degoogle)\n
      - [Lemmy.ca privacy](https://lemmy.ca/c/privacy)\n
      \n
      ### Chat rooms\n
      \n
      - [Matrix/Element]Dead\n
      - [Discord](https://discord.gg/8xfrVjvngh)\n
      \n
      much thanks to @gary_host_laptop for the logo design :)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 561
    +entryCommentCount: 7684
    +postCount: 6
    +postCommentCount: 73
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729582580 {#322
      date: 2024-10-22 09:36:20.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#280 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#276 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#265 …}
    +entries: Doctrine\ORM\PersistentCollection {#223 …}
    +posts: Doctrine\ORM\PersistentCollection {#181 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#243 …}
    +bans: Doctrine\ORM\PersistentCollection {#160 …}
    +reports: Doctrine\ORM\PersistentCollection {#146 …}
    +badges: Doctrine\ORM\PersistentCollection {#124 …}
    +logs: Doctrine\ORM\PersistentCollection {#114 …}
    +awards: Doctrine\ORM\PersistentCollection {#103 …}
    +categories: Doctrine\ORM\PersistentCollection {#90 …}
    -id: 85
    +apId: "privacy@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/privacy"
    +apPublicUrl: "https://lemmy.ml/c/privacy"
    +apFollowersUrl: "https://lemmy.ml/c/privacy/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "privacy"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583592 {#325
      date: 2024-10-22 09:53:12.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1699780272 {#321
      date: 2023-11-12 10:11:12.0 +01:00
    }
  }
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#2449 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#2450 …}
  +body: """
    Flatpaks are more and less secure. Their Sandbox improves 99% of apps security as other sandboxes are hard to setup and thus nearly nonexistent.\n
    \n
    Browsers have their own, so just dont use Flatpaks there.\n
    \n
    I am not sure about microcode, but processes running as root are maybe more critical, but it sounds like any process could have exploits if microcode is a problem. Also, RiscV or even ARM will be waaay better here, as their instruction set is not dozens of years old and extremely bloated.\n
    \n
    As we get our apps from secure repos, with projects keeping track of every Git commit etc, we just had no malware really.\n
    \n
    The only problem is that Flatpaks, like appimages, “just work” and dont have to evolve like the rest of the OS will. Their main goal is to work everywhere, and Devs always choose convenience over security.\n
    \n
    For example Portals are not implemented in most old big projects like Libreoffice, Gimp, Inkscape etc. Scribus is even X11 only. But developers will not remove the `filesystem=host` permission and replace it with “just all the media locations”. This will still be a problem, but at least apps could not read Kernel logs etc anymore.\n
    \n
    Also as they “just work” its easy to abandon them and dont update. The “outdated Runtime” Warning is a veeery good indicator of a project using old and probably insecure libraries. But afaik there is no automatic CVE patching in flatpak-builder which is a huge problem.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1701980466 {#1844
    date: 2023-12-07 21:21:06.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@spez@sh.itjust.works"
    "@Pantherina@feddit.de"
    "@Antiochus@lemmy.one"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2475 …}
  +nested: Doctrine\ORM\PersistentCollection {#2451 …}
  +votes: Doctrine\ORM\PersistentCollection {#2443 …}
  +reports: Doctrine\ORM\PersistentCollection {#2288 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1391 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2473 …}
  -id: 208026
  -bodyTs: "'99':10 'abandon':210 'afaik':234 'also':64,202 'alway':141 'anymor':201 'app':12,91,194 'appimag':117 'arm':68 'automat':238 'better':72 'big':155 'bloat':86 'browser':25 'builder':244 'choos':142 'commit':102 'conveni':143 'could':56,195 'critic':49 'cve':239 'dev':140 'develop':168 'dont':31,121,213 'dozen':80 'easi':208 'etc':103,161,200 'even':67,164 'everi':100 'everywher':138 'evolv':124 'exampl':147 'exploit':58 'extrem':85 'filesystem':173 'flatpak':1,33,115,243 'flatpak-build':242 'get':89 'gimp':159 'git':101 'goal':134 'good':222 'hard':18 'host':174 'huge':248 'implement':151 'improv':9 'indic':223 'inkscap':160 'insecur':231 'instruct':76 'keep':97 'kernel':198 'least':193 'less':5 'librari':232 'libreoffic':158 'like':53,116,125,157 'locat':184 'log':199 'main':133 'malwar':108 'mayb':47 'media':183 'microcod':40,60 'near':23 'nonexist':24 'old':83,154,228 'os':130 'outdat':216 'patch':240 'permiss':175 'portal':148 'probabl':230 'problem':63,112,190,249 'process':42,55 'project':96,156,226 'read':197 'realli':109 'remov':171 'replac':177 'repo':94 'rest':127 'riscv':65 'root':45 'run':43 'runtim':217 'sandbox':8,16 'scribus':162 'secur':6,13,93,145 'set':77 'setup':20 'sound':52 'still':187 'sure':38 'thus':22 'track':98 'updat':214 'use':32,227 'veeeri':221 'waaay':71 'warn':218 'work':119,137,206 'x11':165 'year':82"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.de/comment/5487169"
  +editedAt: DateTimeImmutable @1703374910 {#1927
    date: 2023-12-24 00:41:50.0 +01:00
  }
  +createdAt: DateTimeImmutable @1701980466 {#1374
    date: 2023-12-07 21:21:06.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
4 DENIED moderate 
App\Entity\EntryComment {#1379
  +user: Proxies\__CG__\App\Entity\User {#1367 …}
  +entry: App\Entity\Entry {#2404 …}
  +magazine: App\Entity\Magazine {#309
    +icon: Proxies\__CG__\App\Entity\Image {#289 …}
    +name: "privacy@lemmy.ml"
    +title: "privacy"
    +description: """
      A place to discuss privacy and freedom in the digital world.\n
      ============================================================\n
      \n
      Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.\n
      \n
      In this community everyone is welcome to post links and discuss topics related to privacy.\n
      \n
      ### Some Rules\n
      \n
      - Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post\n
      - Don’t promote proprietary software\n
      - Try to keep things on topic\n
      - If you have a question, please try searching for previous discussions, maybe it has already been answered\n
      - Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience\n
      - Be nice :)\n
      \n
      ### Related communities\n
      \n
      - [Lemmy.ml libre_culture](https://lemmy.ml/c/libre_culture)\n
      - [Lemmy.ml privatelife](https://lemmy.ml/c/privatelife)\n
      - [Lemmy.ml DeGoogle](https://lemmy.ml/c/degoogle)\n
      - [Lemmy.ca privacy](https://lemmy.ca/c/privacy)\n
      \n
      ### Chat rooms\n
      \n
      - [Matrix/Element]Dead\n
      - [Discord](https://discord.gg/8xfrVjvngh)\n
      \n
      much thanks to @gary_host_laptop for the logo design :)
      """
    +rules: null
    +subscriptionsCount: 1
    +entryCount: 561
    +entryCommentCount: 7684
    +postCount: 6
    +postCommentCount: 73
    +isAdult: false
    +customCss: null
    +lastActive: DateTime @1729582580 {#322
      date: 2024-10-22 09:36:20.0 +02:00
    }
    +markedForDeletionAt: null
    +tags: null
    +moderators: Doctrine\ORM\PersistentCollection {#280 …}
    +ownershipRequests: Doctrine\ORM\PersistentCollection {#276 …}
    +moderatorRequests: Doctrine\ORM\PersistentCollection {#265 …}
    +entries: Doctrine\ORM\PersistentCollection {#223 …}
    +posts: Doctrine\ORM\PersistentCollection {#181 …}
    +subscriptions: Doctrine\ORM\PersistentCollection {#243 …}
    +bans: Doctrine\ORM\PersistentCollection {#160 …}
    +reports: Doctrine\ORM\PersistentCollection {#146 …}
    +badges: Doctrine\ORM\PersistentCollection {#124 …}
    +logs: Doctrine\ORM\PersistentCollection {#114 …}
    +awards: Doctrine\ORM\PersistentCollection {#103 …}
    +categories: Doctrine\ORM\PersistentCollection {#90 …}
    -id: 85
    +apId: "privacy@lemmy.ml"
    +apProfileId: "https://lemmy.ml/c/privacy"
    +apPublicUrl: "https://lemmy.ml/c/privacy"
    +apFollowersUrl: "https://lemmy.ml/c/privacy/followers"
    +apInboxUrl: "https://lemmy.ml/inbox"
    +apDomain: "lemmy.ml"
    +apPreferredUsername: "privacy"
    +apDiscoverable: true
    +apManuallyApprovesFollowers: null
    +privateKey: null
    +publicKey: null
    +apFetchedAt: DateTime @1729583592 {#325
      date: 2024-10-22 09:53:12.0 +02:00
    }
    +apDeletedAt: null
    +apTimeoutAt: null
    +visibility: "visible             "
    +createdAt: DateTimeImmutable @1699780272 {#321
      date: 2023-11-12 10:11:12.0 +01:00
    }
  }
  +image: null
  +parent: Proxies\__CG__\App\Entity\EntryComment {#2449 …}
  +root: Proxies\__CG__\App\Entity\EntryComment {#2450 …}
  +body: """
    Flatpaks are more and less secure. Their Sandbox improves 99% of apps security as other sandboxes are hard to setup and thus nearly nonexistent.\n
    \n
    Browsers have their own, so just dont use Flatpaks there.\n
    \n
    I am not sure about microcode, but processes running as root are maybe more critical, but it sounds like any process could have exploits if microcode is a problem. Also, RiscV or even ARM will be waaay better here, as their instruction set is not dozens of years old and extremely bloated.\n
    \n
    As we get our apps from secure repos, with projects keeping track of every Git commit etc, we just had no malware really.\n
    \n
    The only problem is that Flatpaks, like appimages, “just work” and dont have to evolve like the rest of the OS will. Their main goal is to work everywhere, and Devs always choose convenience over security.\n
    \n
    For example Portals are not implemented in most old big projects like Libreoffice, Gimp, Inkscape etc. Scribus is even X11 only. But developers will not remove the `filesystem=host` permission and replace it with “just all the media locations”. This will still be a problem, but at least apps could not read Kernel logs etc anymore.\n
    \n
    Also as they “just work” its easy to abandon them and dont update. The “outdated Runtime” Warning is a veeery good indicator of a project using old and probably insecure libraries. But afaik there is no automatic CVE patching in flatpak-builder which is a huge problem.
    """
  +lang: "en"
  +isAdult: false
  +favouriteCount: 0
  +score: 0
  +lastActive: DateTime @1701980466 {#1844
    date: 2023-12-07 21:21:06.0 +01:00
  }
  +ip: null
  +tags: null
  +mentions: [
    "@spez@sh.itjust.works"
    "@Pantherina@feddit.de"
    "@Antiochus@lemmy.one"
  ]
  +children: Doctrine\ORM\PersistentCollection {#2475 …}
  +nested: Doctrine\ORM\PersistentCollection {#2451 …}
  +votes: Doctrine\ORM\PersistentCollection {#2443 …}
  +reports: Doctrine\ORM\PersistentCollection {#2288 …}
  +favourites: Doctrine\ORM\PersistentCollection {#1391 …}
  +notifications: Doctrine\ORM\PersistentCollection {#2473 …}
  -id: 208026
  -bodyTs: "'99':10 'abandon':210 'afaik':234 'also':64,202 'alway':141 'anymor':201 'app':12,91,194 'appimag':117 'arm':68 'automat':238 'better':72 'big':155 'bloat':86 'browser':25 'builder':244 'choos':142 'commit':102 'conveni':143 'could':56,195 'critic':49 'cve':239 'dev':140 'develop':168 'dont':31,121,213 'dozen':80 'easi':208 'etc':103,161,200 'even':67,164 'everi':100 'everywher':138 'evolv':124 'exampl':147 'exploit':58 'extrem':85 'filesystem':173 'flatpak':1,33,115,243 'flatpak-build':242 'get':89 'gimp':159 'git':101 'goal':134 'good':222 'hard':18 'host':174 'huge':248 'implement':151 'improv':9 'indic':223 'inkscap':160 'insecur':231 'instruct':76 'keep':97 'kernel':198 'least':193 'less':5 'librari':232 'libreoffic':158 'like':53,116,125,157 'locat':184 'log':199 'main':133 'malwar':108 'mayb':47 'media':183 'microcod':40,60 'near':23 'nonexist':24 'old':83,154,228 'os':130 'outdat':216 'patch':240 'permiss':175 'portal':148 'probabl':230 'problem':63,112,190,249 'process':42,55 'project':96,156,226 'read':197 'realli':109 'remov':171 'replac':177 'repo':94 'rest':127 'riscv':65 'root':45 'run':43 'runtim':217 'sandbox':8,16 'scribus':162 'secur':6,13,93,145 'set':77 'setup':20 'sound':52 'still':187 'sure':38 'thus':22 'track':98 'updat':214 'use':32,227 'veeeri':221 'waaay':71 'warn':218 'work':119,137,206 'x11':165 'year':82"
  +ranking: 0
  +commentCount: 0
  +upVotes: 0
  +downVotes: 0
  +visibility: "visible             "
  +apId: "https://feddit.de/comment/5487169"
  +editedAt: DateTimeImmutable @1703374910 {#1927
    date: 2023-12-24 00:41:50.0 +01:00
  }
  +createdAt: DateTimeImmutable @1701980466 {#1374
    date: 2023-12-07 21:21:06.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS DENIED 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details
5 DENIED edit 
App\Entity\Magazine {#309
  +icon: Proxies\__CG__\App\Entity\Image {#289 …}
  +name: "privacy@lemmy.ml"
  +title: "privacy"
  +description: """
    A place to discuss privacy and freedom in the digital world.\n
    ============================================================\n
    \n
    Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.\n
    \n
    In this community everyone is welcome to post links and discuss topics related to privacy.\n
    \n
    ### Some Rules\n
    \n
    - Posting a link to a website containing tracking isn’t great, if contents of the website are behind a paywall maybe copy them into the post\n
    - Don’t promote proprietary software\n
    - Try to keep things on topic\n
    - If you have a question, please try searching for previous discussions, maybe it has already been answered\n
    - Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience\n
    - Be nice :)\n
    \n
    ### Related communities\n
    \n
    - [Lemmy.ml libre_culture](https://lemmy.ml/c/libre_culture)\n
    - [Lemmy.ml privatelife](https://lemmy.ml/c/privatelife)\n
    - [Lemmy.ml DeGoogle](https://lemmy.ml/c/degoogle)\n
    - [Lemmy.ca privacy](https://lemmy.ca/c/privacy)\n
    \n
    ### Chat rooms\n
    \n
    - [Matrix/Element]Dead\n
    - [Discord](https://discord.gg/8xfrVjvngh)\n
    \n
    much thanks to @gary_host_laptop for the logo design :)
    """
  +rules: null
  +subscriptionsCount: 1
  +entryCount: 561
  +entryCommentCount: 7684
  +postCount: 6
  +postCommentCount: 73
  +isAdult: false
  +customCss: null
  +lastActive: DateTime @1729582580 {#322
    date: 2024-10-22 09:36:20.0 +02:00
  }
  +markedForDeletionAt: null
  +tags: null
  +moderators: Doctrine\ORM\PersistentCollection {#280 …}
  +ownershipRequests: Doctrine\ORM\PersistentCollection {#276 …}
  +moderatorRequests: Doctrine\ORM\PersistentCollection {#265 …}
  +entries: Doctrine\ORM\PersistentCollection {#223 …}
  +posts: Doctrine\ORM\PersistentCollection {#181 …}
  +subscriptions: Doctrine\ORM\PersistentCollection {#243 …}
  +bans: Doctrine\ORM\PersistentCollection {#160 …}
  +reports: Doctrine\ORM\PersistentCollection {#146 …}
  +badges: Doctrine\ORM\PersistentCollection {#124 …}
  +logs: Doctrine\ORM\PersistentCollection {#114 …}
  +awards: Doctrine\ORM\PersistentCollection {#103 …}
  +categories: Doctrine\ORM\PersistentCollection {#90 …}
  -id: 85
  +apId: "privacy@lemmy.ml"
  +apProfileId: "https://lemmy.ml/c/privacy"
  +apPublicUrl: "https://lemmy.ml/c/privacy"
  +apFollowersUrl: "https://lemmy.ml/c/privacy/followers"
  +apInboxUrl: "https://lemmy.ml/inbox"
  +apDomain: "lemmy.ml"
  +apPreferredUsername: "privacy"
  +apDiscoverable: true
  +apManuallyApprovesFollowers: null
  +privateKey: null
  +publicKey: null
  +apFetchedAt: DateTime @1729583592 {#325
    date: 2024-10-22 09:53:12.0 +02:00
  }
  +apDeletedAt: null
  +apTimeoutAt: null
  +visibility: "visible             "
  +createdAt: DateTimeImmutable @1699780272 {#321
    date: 2023-11-12 10:11:12.0 +01:00
  }
}
 
"Scheb\TwoFactorBundle\Security\Authorization\Voter\TwoFactorInProgressVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\EntryVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MagazineVoter"
 ACCESS DENIED 
"App\Security\Voter\MessageThreadVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\MessageVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\NotificationVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\OAuth2UserConsentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostCommentVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\PostVoter"
 ACCESS ABSTAIN 
"App\Security\Voter\UserVoter"
 ACCESS ABSTAIN
Show voter details