• 1 Post
  • 62 Comments
Joined 1 year ago
cake
Cake day: June 18th, 2023

help-circle
  • My bootstraps broke when I pulled them harder.

    Turns out the local company that made bootstraps for 125 years was bought out by a hedge fund, which promptly fired all of the workers and subcontracted manufacturing to a company in Sri Lanka who could make them much cheaper by using inferior materials and by paying the Sri Lankan workers in 6 months what a fired local worker made in a day.

    Ironically, the hedge fund CEO with the MBA he received as a legacy admission to Cornell only wears slippers because fuck you, I’m the boss.








  • Yes. Lemmy 2FA uses SHA256 TOTP digests, which are newer (and better) than the SHA1 digests used as default by most authenticator apps.

    Critically, Lemmy will not have you verify that the generated TOTP code works before locking it in, nor will it give you backup codes.

    You should check the documentation of your authenticator app to see if any changes need to be made in the app prior to adding Lemmy 2FA.

    If your app only supports SHA1, or you fail to follow your app’s procedures to add an SHA256 digest, and you add the 2FA token generated by Lemmy, you’re not getting back into that account.

    Link to GitHub issue about this














  • The dev apparently used the RedReader app to test a “spoofing” method of access for a proof of concept, but they don’t want to use that method either, because it would potentially cause problems for RedReader, which they didn’t want to do:

    If we do that, and cause a huge traffic boost under RedReader’s name, it might lose them their exempt status. I’d like to avoid that if I can - there’s no reason to paint a target on RedReader’s back unnecessarily (an independent, non-commercial app), especially since the equivalent can be done with the official app without the same risks.

    The real problem for Libreddit instance operators is going to be acquiring an API key. It doesn’t look like it’s an automated process like most other services - you have to fill out a form, which opens a ticket, and wait for someone from Reddit to get back to you.

    I run an instance, and I’m not sure I want to go to the trouble. But I’ll wait and see what happens.