justcool393's recent activity

  1. Comment on Lemmy.world has been hacked and is currently down [UPDATE: It's back up] in ~tech

    justcool393
    Link Parent
    Looks like this is correct. The GitHub issue has a link to a live payload, which seems to be pretty simple. The alt text for the emoji is just injected into the page so you could have an emoji...

    These may have been on public comments and not DMs.

    Looks like this is correct. The GitHub issue has a link to a live payload, which seems to be pretty simple. The alt text for the emoji is just injected into the page so you could have an emoji with text like

    ![alt text" onload="evil();"](https://example.com/example.png)
    

    and it'd essentially render the HTML as

    <img src="https://example.com/example.png" alt="alt text" onload="evil();">
    

    From what it looks like the payload did a couple things, sent multiple requests with all of the cookies and then made another request if the ID navAdmin was present in the page

    Also proper CSPs could've prevented this relatively easily.

    Oh and the fact that the app could just run away with all the cookies from JavaScript is amazing too. The fact that the cookies are all set from JS and as such there could be no HttpOnly setting on the cookies exasperated the problem as well.

    11 votes
  2. Comment on I found the libertarian (ultra rationalist?) tildes! Themotte.org in ~tech

    justcool393
    Link Parent
    it was always a very active community, even when they were on reddit. they were a community and had a specific culture

    it was always a very active community, even when they were on reddit. they were a community and had a specific culture

    1 vote
  3. Comment on Reddit API Changes in ~tech

    justcool393
    (edited )
    Link
    I think this was probably inevitable and things like the removal of .compact 3 weeks ago shows the writing was on the wall. Reddit is going to want people to use their new dev platform. If I were...

    I think this was probably inevitable and things like the removal of .compact 3 weeks ago shows the writing was on the wall. Reddit is going to want people to use their new dev platform.

    If I were to guess, Reddit should probably look internally though if they're worried about API (ab)users. They're maintaining at least 7 different APIs by my count to access what's essentially text data in a database. I get that reddit can't just operate with "postgres and memcached" anymore, but it's a little absurd.

    The fact that they make about 10 different requests to 1 API build part of the current user's profile on the front page on new reddit is quite absurd

    9 votes
  4. Comment on <deleted topic> in ~tech

    justcool393
    Link Parent
    This is just untrue. People keep repeating that, but it's either never happened or there just happens to be absolutely 0 evidence of such. What I'm guessing happened is that during the 2015...

    This is just untrue. People keep repeating that, but it's either never happened or there just happens to be absolutely 0 evidence of such.

    What I'm guessing happened is that during the 2015 blackout, pics reopened or something and then people just assumed that the mod team couldn't've possibly made the decision to open up again.

    4 votes
  5. Comment on A GPT-3 bot was posting on /r/AskReddit for a week and routinely getting upvoted and replied to in ~tech

    justcool393
    Link Parent
    I think reddit kinda tried to do this somewhat with their April 1st thing this year, but who knows if it actually helped with anything.

    I think reddit kinda tried to do this somewhat with their April 1st thing this year, but who knows if it actually helped with anything.

    1 vote
  6. Comment on What the internet could be in ~tech

    justcool393
    (edited )
    Link Parent
    This and what it links to is relevant. This site loads better than most other sites I use, even ones that are pretty much just straight text. It's super bad that Medium articles, despite being...

    This and what it links to is relevant. This site loads better than most other sites I use, even ones that are pretty much just straight text.

    It's super bad that Medium articles, despite being text, takes seconds to load.

    2 votes
  7. Comment on What TLDs do you view the most positively? in ~comp

    justcool393
    Link
    .com, .net, are all fine .info seems spammy. Also look at this list and avoid these: https://www.spamhaus.org/statistics/tlds/

    .com, .net, are all fine

    .info seems spammy. Also look at this list and avoid these: https://www.spamhaus.org/statistics/tlds/

    3 votes
  8. Comment on Masnick's Impossibility Theorem: Content moderation at scale is impossible to do well in ~tech

    justcool393
    Link Parent
    It's kinda interesting to see it from both sides, both as a moderator and as a user. The mute feature is the most aggravating thing to me I've found as an end-user (same goes for any ban that...

    It's kinda interesting to see it from both sides, both as a moderator and as a user.

    The mute feature is the most aggravating thing to me I've found as an end-user (same goes for any ban that doesn't at least have a short description of what led to it). I've actually adjusted how I moderate because I know that it feels sucky to be on the side of an at least perceived unexplained moderator action.

    I've stopped using muting almost entirely when it isn't outright spam just because it never seems justified when weighed against how agitating it might be.

    I also pretty much always tend to give at least a short explanation and link if applicable if it's a ban. I've found that people won't read wall of text rules but may read

    banned conduct

    https://example.com/id/whatever/id

    It's a bit more work though and it's sometimes difficult to do if on mobile, but I don't tend to do much moderation work of any kind from there anyway.

    3 votes
  9. Comment on <deleted topic> in ~tech

    justcool393
    Link
    Mozilla having trouble is just bitter for me. As much as I didn't like IE and as much as I was kinda meh towards Edge, I was kinda glad that they're existing so that Google couldn't just run away...

    Mozilla having trouble is just bitter for me. As much as I didn't like IE and as much as I was kinda meh towards Edge, I was kinda glad that they're existing so that Google couldn't just run away with a huge monopoly in the industry.

    I don't think HTTP is going away anytime soon, for better or worse. It seems to be so embedded in everything if you want to do much on the internet. I've done stuff with other protocols and just writing a spec for a protocol for practice in that sort of design, but it's mostly theoretical.

    A lot of stuff I've found just uses straight HTTP or HTTP for part of the system.

    3 votes
  10. Comment on Masnick's Impossibility Theorem: Content moderation at scale is impossible to do well in ~tech

    justcool393
    Link Parent
    don't restrict hate speech on a governmental level. still don't allow violence.

    don't restrict hate speech on a governmental level. still don't allow violence.

    1 vote
  11. Comment on Masnick's Impossibility Theorem: Content moderation at scale is impossible to do well in ~tech

    justcool393
    Link Parent
    that's a pretty screwed up viewpoint if you think about it for more than half a second. speech, even such that may be considered hateful, should not at all do that. otherwise you'd just get people...

    should certainly open that person to being beaten to within an inch of their life. But not by the state. By people.

    that's a pretty screwed up viewpoint if you think about it for more than half a second. speech, even such that may be considered hateful, should not at all do that.

    otherwise you'd just get people who could actually learn from their mistakes to either resent you or enact violence towards you.

    3 votes
  12. Comment on Reddit announces "power-ups", their plan to have individual subreddits unlock features through members paying for a monthly subscription in ~tech

    justcool393
    Link Parent
    Yeah. The default I mod, a relatively forgotten one at that (/r/Documentaries), has 4 admin actions in the last 2 months. I counted another, more active subreddit, that I moderate (that still has...

    How often are we talking now? Multiple times a month?

    Yeah. The default I mod, a relatively forgotten one at that (/r/Documentaries), has 4 admin actions in the last 2 months.

    I counted another, more active subreddit, that I moderate (that still has rules about posting and is actively moderated, it isn't a "anything goes" playground) has over 30 admin actions in the last 90 days.

    it tends to scale with activity it seems (also on how often people have a tendency to report each other). i can't imagine the amount of actions on any decently sized political subreddit.

    Back then you would usually get a modmail for anything that wasn't dangerous/illegal.

    yeah, that's really uncommon nowadays. it's usually only if it becomes a systematic problem that they have to deal with (usually if you have dozens of admin actions but there are only like 20000 subscribers, that's when the community managers come to visit).

    1 vote
  13. Comment on Reddit announces "power-ups", their plan to have individual subreddits unlock features through members paying for a monthly subscription in ~tech

    justcool393
    Link Parent
    It's kinda funny. I noticed that even the CMs call it Reddit Gold and "gilding"

    It's kinda funny. I noticed that even the CMs call it Reddit Gold and "gilding"

    3 votes
  14. Comment on Reddit announces "power-ups", their plan to have individual subreddits unlock features through members paying for a monthly subscription in ~tech

    justcool393
    Link Parent
    I agree. I would say that I do a lot of stuff that most normal reddit users don't do such as moderating or whatnot. But like, the one time I turned RPAN on to kinda see what it was about, I was...

    I agree. I would say that I do a lot of stuff that most normal reddit users don't do such as moderating or whatnot. But like, the one time I turned RPAN on to kinda see what it was about, I was like "I see how this can be a time suck" and I ended up watching for like an hour.

    So... I don't know. I think they could be on to something with RPAN.

    7 votes
  15. Comment on Reddit announces "power-ups", their plan to have individual subreddits unlock features through members paying for a monthly subscription in ~tech

    justcool393
    Link Parent
    Anti-Evil Operations is pretty active on Reddit, and they've only gotten more aggressive. It used to still be pretty rare to see an admin removal in the log, but if you're a mod of a medium-size...

    Anti-Evil Operations is pretty active on Reddit, and they've only gotten more aggressive. It used to still be pretty rare to see an admin removal in the log, but if you're a mod of a medium-size subreddit, you can expect one pretty commonly.

    4 votes
  16. Comment on Reddit announces "power-ups", their plan to have individual subreddits unlock features through members paying for a monthly subscription in ~tech

    justcool393
    Link Parent
    What's interesting about that to me is that I know that they've had over 500 for a little bit as far back as September. I can't find the exact thing that mentioned this, but that seems about...

    What's interesting about that to me is that I know that they've had over 500 for a little bit as far back as September. I can't find the exact thing that mentioned this, but that seems about right.

    It's always seemed to have been a point among the Reddit community that "the site is down in the depths of the red" and while there was a point where that was just a rumor (that was actually seemingly to have been dispelled), that doesn't seem to be any longer the case.

    3 votes
  17. Comment on To a select minority of less than ten people: please stop getting judo'ed into defending white supremacy in ~talk

    justcool393
    Link Parent
    I think a problem with that is even the meta-discussion of it starts to derail the discussion in to that. I know this probably isn't what you're intending, but that's how it usually goes, and that...

    I think a problem with that is even the meta-discussion of it starts to derail the discussion in to that. I know this probably isn't what you're intending, but that's how it usually goes, and that is what @Deimos was hoping to avoid. Although seeing what happened here, that obviously isn't the case.

    I'm mostly surprised that the meta-meta-discussion of this hasn't completely derailed.

    3 votes
  18. Comment on Reddit — one of the world's most popular websites — is trying to cash in through advertising in ~tech

    justcool393
    Link Parent
    I wasn't super active on Reddit during the Physical_Removal debacle (aside from creating the parody subreddit Digital_Removal), but weren't they advocating killing people for their beliefs in a...

    I wasn't super active on Reddit during the Physical_Removal debacle (aside from creating the parody subreddit Digital_Removal), but weren't they advocating killing people for their beliefs in a manner that goes past the notion of "I don't like X, they should all die"?

    I seem to remember they were big on "helicoptering" people they disagreed with.

    1 vote
  19. Comment on Reddit — one of the world's most popular websites — is trying to cash in through advertising in ~tech