@Dirk@lemmy.ml
@Dirk@lemmy.ml avatar

Dirk

@Dirk@lemmy.ml

🏠 Hamburg, Germany
🚃 Daily Commuter
🐧 Linux User
🎮 Part-time Gamer
💻 Hobbyist Coder
🔗 0x7be.de

🇬🇧 / 🇩🇪

This profile is from a federated server and may be incomplete. Browse more on the original instance.

Dirk,
@Dirk@lemmy.ml avatar

For science!

Dirk,
@Dirk@lemmy.ml avatar

Scientists of culture! So we meet again!

Dirk,
@Dirk@lemmy.ml avatar

So that means all the sites that hate their users will use it and in return I can be sure that sites I can visit are good? Good.

Dirk,
@Dirk@lemmy.ml avatar

Corporate does corporate things.

Hyprland is a toxic community (drewdevault.com)

Hyprland is an open source Wayland compositor based on wlroots, a project I started back in 2017 to make it easier to build good Wayland compositors. It’s a project which is loved by its users for its emphasis on customization and “eye candy” – beautiful graphics and animations, each configuration tailored to the unique...

Dirk,
@Dirk@lemmy.ml avatar

https://lemmy.ml/pictrs/image/e549d782-7799-4007-9eb9-940a05ae7160.png

Dirk,
@Dirk@lemmy.ml avatar

I have one (including hosting) at a local German provider and one (dynamic DNS based forwarding to my homelab) at another German provider.

Both are in the market for 20+ years and neither of them had any controversies or major issues.

Dirk,
@Dirk@lemmy.ml avatar

If you can switch mid-sentence to another language and continue the conversation on native speaker level.

Dirk,
@Dirk@lemmy.ml avatar

“X is not a meme”

Dirk,
@Dirk@lemmy.ml avatar

This is not Reddit.

Dirk,
@Dirk@lemmy.ml avatar

This explains why their results are so much worse than Google’s.

Dirk,
@Dirk@lemmy.ml avatar

I am pretty sure you can provide reliable sources that are not one blog article by one individual telling their opinion.

If it’s really “way too easy to hack” there should be plenty of souces.

Dirk,
@Dirk@lemmy.ml avatar

Since you don’t want to selfhost anyway just use the one built-in to your browser. Nowadays you can set up synch with a password

Dirk,
@Dirk@lemmy.ml avatar

You can search that on Google.

Dirk,
@Dirk@lemmy.ml avatar

Mmmh, not sure. Problably Outlaw.

Dirk,
@Dirk@lemmy.ml avatar

That’s the good thing with federation. You can participate in communities without visiting the instance even once.

What can a senior desktop support tech do who is burned out?

I am wondering what kind of career moves I have available to me because I am over the bullshit of desktop support. I have been brushing up on my Linux skills, learning docker, and doing a whole bunch of networking-related things. At this point, I am 46 years old. Would it benefit me to go back to school to learn a skill to help...

Dirk,
@Dirk@lemmy.ml avatar

With Docker and Linux you could check the opportunities in the field of IT operations.

Dirk,
@Dirk@lemmy.ml avatar

Also, strict CSP would prevent it entirely.

Dirk,
@Dirk@lemmy.ml avatar

Another reason to block this TLD in the firewall solution.

Dirk,
@Dirk@lemmy.ml avatar

To prevent execution of scripts not referenced with the correct nonce:

<pre style="background-color:#ffffff;">
<span style="color:#323232;">script-src 'self' 'nonce-$RANDOM'
</span>

To make it super strict, this set could be used:

<pre style="background-color:#ffffff;">
<span style="color:#323232;">default-src 'self';
</span><span style="color:#323232;">script-src 'nonce-$RANDOM'
</span><span style="color:#323232;">object-src 'none';
</span><span style="color:#323232;">base-uri 'none';
</span><span style="color:#323232;">form-action 'none';
</span><span style="color:#323232;">frame-ancestors 'none';
</span><span style="color:#323232;">frame-src 'none';
</span><span style="color:#323232;">require-trusted-types-for 'script'
</span>

Especially the last one might cause the most work, because the “modern web development environment” simply cannot provide this. Also: form-action ‘none’; should be validated. It should be set to self if forms are actually used to send data to the server and not handled by Javascript.

The MDN has a good overview: developer.mozilla.org/…/Content-Security-Policy

Dirk,
@Dirk@lemmy.ml avatar

Because .zip is a commonly used file extension.

Dirk,
@Dirk@lemmy.ml avatar

They can and they do. Using a commonly known and used file extension to “hide” a malicious URL is just easier.

www.youtube.com/watch?v=GCVJsz7EODA

Dirk,
@Dirk@lemmy.ml avatar

but in general, threat actors hope to confuse people into thinking this “.zip” TLDs are only referencing local files instead of web addresses. right?

Exactly!

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • localhost
  • All magazines
    •
    Loading…
    Loading the web debug toolbar…
    Attempt #