• 8 Posts
  • 190 Comments
Joined 2 years ago
cake
Cake day: July 17th, 2023

help-circle
  • Wow, thats one kind of a project. I’m impressed. Though it doesn’t really fit my problem. It has to be something webbased, where everyone of us can use it without an app, without seeing each others information. From the github page it looks like a local tool. And also focused trading similar items. The presents in our secret santa are highly individualized, so randomly trading does not make much sense. And if the interface is too clunky, my non-tech siblings will just reject using it. I want to keep them from deciding for some free privacy nightmare app.

    But I thank you for the suggestion. Its an interesting project


  • Security noob here. Would it be sufficient (in addition to only local authorized access) to directly put the file in an unprivileged container, watching its log output? And of course limiting resource use and execution time of the container (don’t know if common container tools like docker or podman have a way to limit resources out of the box)

    So lets say a simple interface for the file upload behind an authentication service, based on lets say python cgi, ramping up an unprivileged nonroot docker container, killing the container after a fixed time (a few seconds).







  • Thanks for the suggestion. Seems like aa4mg either needs root (which I currently don’t have done on my phone, since my banking apps are allergic to that) or a custom ROM (which honestly is too much tinkering for my available time and a device I use so much)

    e/OS also uses microG. Do you know anything about the privacy implications of those google apps here? As my time is limited currently, I would either just install android auto as per instructions or not doing it at all. Long tinkering, that might easily break other things are not my focus at this time.






  • I’m currently also at that point, trying to decide what to buy.

    Does anyone have a good recommendation for a smart watch with good compatibility with gadgetbridge? I’m not sure where to look (gadgetbridges list is long).

    Something with a color display, maybe a week of battery life, being able to show my notifications and configuration without needing the manufacturers app




  • A while ago we had an interesting situation at work. At regular intervals our team has a call with our direct boss, for communicating how the business is going and to give little talks about out current technological challenges with our customers. At that time the results of the employee survey were published and our team had low levels on the statement “My work fills me with meaning” (not sure about the translation here). Our boss was curious about why. We had a few moments of silence until one of my senior coworkers said honestly, that at least he is not searching for his lifes meaning in work. Which is also true for me. Wasn’t a big thing after that. Our boss is totally fine with that.

    That being said, one important thing for our boss (and also for me, when coaching new coworkers) is seeing, that we have at least some fun and interest in our work. If you don’t have that, then both the quality of your work and the relations to coworkers can suffer quite a bit. Then maybe doing a different job is better for you.

    You can be honest about being there for getting money AND being passionate about your job (or at least part of it) at the same time. So show that to management. If they are still pissed, then they are in fact shitty. If you have other good opportunities, it might be time to head out then.






  • lucullus@discuss.tchncs.detoHarry Potter@lemmy.zipHagrid is the loyal one
    link
    fedilink
    English
    arrow-up
    4
    arrow-down
    1
    ·
    2 months ago

    “Risked his life saving baby Harry”? When did that happen. Last time I looked he just fetched baby Harry out of the empty ruins of the Potter house. Or you mean risking that a brink lands in his head, doing nothing to Hagrids half-giant head?

    Hagrid beat though. Better than the weirdo Snape, who was only bothered about people being murdered, when they got to the girl he got friendzoned by.



  • Otherwise, you need to be some kind of freaking retro-engineering expert.

    Nah, often software is stupidly easy to breach. Often its an openly accessable database (like recently with the Tea app), or that you can pull other data from the webapp just by incrementing or decrementing the ID in your webrequest (that commonly happened with quite a number of digital contact tracing platforms used during Covid).

    Very often the closed source just obscures the screaming security issues.

    And yeah, there are not enough people to thorouhly audit all the open source code. But there are more people doing that, than you think. And another thing to mind is, that reporting a security problem with a software/service can get you in serious legal trouble depending on your jurisdicting - justified or not. Corporations won’t hesitate to slap suit you out of existance, if they can hide the problems that way. With open source software you typically don’t have any problems like this, since collaboration and transparency is more baked in into it.