MissGutsy

joined 6 months ago
[–] MissGutsy@lemmy.blahaj.zone 164 points 4 months ago* (last edited 4 months ago) (18 children)

Cybernews researchers have found that BDSM People, CHICA, TRANSLOVE, PINK, and BRISH apps had publicly accessible secrets published together with the apps’ code.

All of the affected apps are developed by M.A.D Mobile Apps Developers Limited. Their identical architecture explains why the same type of sensitive data was exposed.

What secrets were leaked?

  • API Key
  • Client ID
  • Google App ID
  • Project ID
  • Reversed Client ID
  • Storage Bucket
  • GAD Application Identifier
  • Database URL

[...] threat actors can easily abuse them to gain access to systems. In this case, the most dangerous of leaked secrets granted access to user photos located in Google Cloud Storage buckets, which had no passwords set up.

In total, nearly 1.5 million user-uploaded images, including profile photos, public posts, profile verification images, photos removed for rule violations, and private photos sent through direct messages, were left publicly accessible to anyone.

So the devs were inexperienced in secure architectures and put a bunch of stuff on the client which should probably have been on the server side. This leaves anyone open to just use their API to access every picture they have on their servers. They then made multiple dating apps with this faulty infrastructure by copy-pasting it everywhere.

I hope they are registered in a country with strong data privacy laws, so they have to feel the consequences of their mismanagement

[–] MissGutsy@lemmy.blahaj.zone 12 points 4 months ago (8 children)

With how many trans women name themselves after gemstones, more trans men should name themselves after metals

[–] MissGutsy@lemmy.blahaj.zone 6 points 4 months ago

Der war dann ja auch noch in Begleitung seiner 41 jährigen Tochter. Ich dachte mir den ganzen Artikel lang was die eigentlich dazu gesagt hat oder warum sie ihn nicht gestoppt hat. Stellt sich raus: sie wurde am Ende, nachdem die Polizei das Auto gestoppt hat, ins Krankenhaus gebracht weil sie einen "stark desorientierten Eindruck" gemacht hat (unter Drogen?)

[–] MissGutsy@lemmy.blahaj.zone 36 points 4 months ago (1 children)

Additional context: every time he points to the side hes talking directly to the politicians of the AFD, a far right, russia aligned party which heavily profited off of russian disinformation campaigns in the last election cycle

[–] MissGutsy@lemmy.blahaj.zone 16 points 4 months ago (2 children)

Who wants to bet how long they last before they get paused again?

[–] MissGutsy@lemmy.blahaj.zone 4 points 4 months ago (1 children)

Don't do this too often though! Prolonged dilation (>2 hours) can damage your sphincter and give you incontinence in the long run. Probably not a problem if done rarely, but if it happens regularly it can become a problem

[–] MissGutsy@lemmy.blahaj.zone 8 points 4 months ago (2 children)

Honest question: why can't both communities just exist separately? Isn't this the magic of the Fediverse?

Your biggest point is that the communities are identical in content and I disagree. Just looking at the top posts of the week, the feddit.uk version has a bunch of memes, while feddid.org seems more news focused. The Fediverse allows us to moderate these communities differently and to have different styles of communities, perfectly shown with this example. They are not identical.

We shouldn't build up just one community all the time. That just runs into the same problem why people disliked reddit: centralized moderation. It's not a problem now, but if it ever will be, why can't there be alternatives. Let's not try to become the next reddit, but become something better.

Also some people left reddit because it all became to big, they want small groups that actually feel like a community. If people prefer a smaller lemmy community, let them have it. They voted against merging, so let them have it. !buyeuropean@feddit.uk is already linked in their sidebar. Everybody that wants to can switch the community or subscribe to both (which is a possibility!!).

I think you're in the wrong here, at least on trying to grow the uk community over the org one.

[–] MissGutsy@lemmy.blahaj.zone 35 points 4 months ago (3 children)

Just so you know, "Bild" is a german right wing magazine. Imagine fox news as a newspaper. They are well known to report false information to smear left wing initiatives and further hurt victims if they are left wing. Since the victims of police brutality here are apparently pro-palastine, Bild cannot be trusted to report accurately

[–] MissGutsy@lemmy.blahaj.zone 9 points 5 months ago (1 children)

It also doesn't specify how often/quick you can do it, so you could still move at breakneck speeds, 7 inches at a time

[–] MissGutsy@lemmy.blahaj.zone 9 points 5 months ago

Make fascism an occupational hazard again

[–] MissGutsy@lemmy.blahaj.zone 1 points 5 months ago (1 children)

Let's just make a new text standard, call it "tinychar" or something. You don't need any personal notes when it's a known concept

[–] MissGutsy@lemmy.blahaj.zone 2 points 5 months ago (3 children)

We should all make up our personal character systems so we won't have to worry about this situation /s

view more: ‹ prev next ›