![](https://feddit.win/pictrs/image/c2769602-e6aa-4cd5-8e80-d4d9650396e4.jpeg)
![](https://lemmy.dbzer0.com/pictrs/image/a18b0c69-23c9-4b2a-b8e0-3aca0172390d.png)
Looks like the instance is on the latest RC which includes the fix for the vulnerability.
Looks like the instance is on the latest RC which includes the fix for the vulnerability.
The one reserved for residential usage is home.arpa
.
Oops indeed. Lemmy needs a security audit 😬
I’d wager you’re likely fine if you’re using a mobile app when the affected image loads. Also, it appears they’re stealing auth tokens… not passwords or anything. At worst they could impersonate you until your token expires… but you’re not a high value target unless you’re an admin of an instance.
What kind of terrible markdown editor allows adding onload scripts to images though… it’s insane.
If it’s onload
then simply viewing the image runs that script. Yikes.
Extra content in exchange for an upvote 🤔
Try searching for https://lemdro.id/c/askandroid from vlemmy. You might be the first subscriber on that instance.
Connect is ridiculously stable and feature-complete for how new it is. Definitely deserves to be mentioned.
That’s awesome, glad you were able to find a solution!
Maybe an issue with ram? Could be loose, dusty, going bad.
FWIW their doc about the fediverse:
RubyMine, vscode is lacking for Ruby development unfortunately.
It sounds pretty awesome. Just wondering if adding additional complexity to the setup is worth it to obfuscate my home IP. Easily setting up redundancy is a good feature in that regard though.
Oooh thanks for the tip about frp
. Interesting.
It really depends on the company that you use to manage the domain’s DNS. As long as they have an API to update DNS records…
For example, I can have my domain at Porkbun and have its DNS managed at Cloudflare. Cloudflare allows updating DNS records via API…so there’s programs to update it. Some routers even support it.
Worst case, you can set up a service like duckdns and have your domain, via cname, point to the duck DNS subdomain.
There’s options.
It’s in the post body, Free Ad-supported Streaming.
I had found an old post which indicates that post thumbnails are cached. So I guess there’s that.
In case you didn’t see it, the OP of this thread realized they didn’t setup their pictrs
API key… so I guess it’s possible to omit that and lemmy should still work. Not sure about the downsides.
I like that imgur removes exif data, any recommendations that do that too?
I took a look at a few posted and they don’t appear to do so.