• 6 Posts
  • 460 Comments
Joined 3 年前
cake
Cake day: 2023年7月1日

help-circle






  • python@lemmy.worldto196@lemmy.blahaj.zoneImpersonation rule
    link
    fedilink
    English
    arrow-up
    65
    arrow-down
    1
    ·
    5 天前

    I’m a React developer too and I went tf off on the project manager who suggested we replace the company’s perfectly fine Wordpress homepage with a self-built page running on React. Actually, never ever use React for anything that matters. It’s exclusively suited for making janky browser games and B2B applications.






  • python@lemmy.worldtomemes@lemmy.worldOK
    link
    fedilink
    arrow-up
    10
    ·
    16 天前

    I’ve recently learned that when an experienced doctor administers those tests you also get bonus points for being overly pedantic. As in, if you feel the need to clarify every single question, get frustrated about the questions being too vague or get annoyed at the answer options not being specific enough, that will push you towards the diagnosis even before any sort of score is counted.

    Oh, and most people with a false negative on the test get there by assuming that everyone feels like this. “I’m not abnormally sensitive to any sort of material. Just velvet and styrofoam are the worst, but everyone hates those so it’s normal”





  • Have you ever pressed F12? We technically weren’t allowed to see the config either, but LiteLLM literally returned a users password hash as part of the user data json in the version we were using. It was easy enough to see that it wasn’t salted.
    Another fun thing it does is that any user can see their entire teams token spend trough the network tab, even if they technically shouldn’t be allowed to do that. Oh and LiteLLM had a CVSS score 9.9 vulnerability recently where any user with any sort of write privilege (including the “privilege” to change any of your own data, like your password) could just change their own role to admin 🤷

    The pure incompetence of that software would be really funny if it wasn’t such a pain in the ass to be the person who has to convince coworkers to rotate compromised credentials…