🇮🇹 🇪🇪 🖥
Lack of rate limiting is a code vulnerability if we are talking about an API endpoint.
Not that discussion makes any sense at all…
Also, “not securing” doesn’t mean much. Security is not a boolean. They probably have some controls, but they still have a gap in the lack of rate limiting.
Public financing of the press, newspapers stopping being garbage and selling subscriptions like they have always done, pay per article (cents), donations. Just some ideas of economically viable alternatives. There are good niche newspapers which survive with such models, it’s not like I am making it up.
I would say the opposite: advertising alone is not sustainable for the press because it creates wrong incentives (grab attention, clicks). This is why 90% of newspapers have the same garbage, short, generic articles. This is why you get rage baits, fake news etc. too, to some extent. So yes, you get websites online, but you get no information…
Also in Italy, but I think once the data protection agencies will get on it, it will be forbidden. It will take some time, but there is no way that’s a legitimate use of consent.
The GDPR says that if you use consent as the legal basis for processing data, such consent must be free. This means that there cannot be consequences if you give or not give the consent. If there are, then the consent is not free anymore. Paying money for a service is absolutely legal, obviously, what probably is not legal is extracting your consent by offering you a discount (which is the flipside of “pay to avoid tracking”).
I just wanted to specify a bit, not that you said anything incorrect.
No sorry, you said name as in the person’s name, I did not understand “username”.
I am not sure I understood. You called some mod by name and they removed the comment? If that’s the case, I perfectly understand and agree with the decision tbh.
That said, this is a general argument, not referred to any particular mod. I think that many people get angry when their content is moderated and they might want to harass/argue/avenge against the mod who took that action.
I complain about people who support Soviet-style dictatorships having full control over online platforms moderating exactly as one would expect
I will ask in good faith: given that those people started the whole project to have that space, but built it using federated technologies which allow others to run their places, what is exactly the basis for your complaint? As absurd as they might be, instances can decide their own moderation policies, whether you or I agree with them or not. Given the fundamentally distributed nature of this platform, there is no such thing as “having full control”, and instead we can choose instances based on our preferences, so we are free to not subject ourselves to those policies, they are free to do, and both a free to use the platform in the way we use. The code is open, there are plenty of other instances. What exactly is the complaint here?
It does, but it’s an online forum, not an essential service, and easy to replace. On the other hand, being there with your name or nickname exposes you to harassment from those pissed at you for your decision.
I would say it’s an acceptable evil given the circumstances.
As a side note: asking why after a mod action is almost universally pointless. Moderating is free work and a level of subjectivity is implied. I think not having the ability to argue is infuriating but understandable.
What does this have to do with showing mod log? Genuinely confused
They banned from the instance. Apparently the fact that you get banned from hosted communities is just a new feature.
See https://lemmy.world/comment/10467647
It seems this is just a new feature in the upcoming relase (the communities ban).
Tbh, also harass a mod. People get quite worked out when being moderated, and being a mod is enough work without people chasing you to argue with you or straight up harass you, I suppose. At least, I can see plenty of good reasons to hide the moderator name.
If you are cloudflare and you suspect they broke ToS you quote which ToS has been broken, you specify which country blocking the customer is trying or has tried to circumvent and you force the customer to either move away or enforce geo-blocking for those countries (or have a separate account for those with your own IPs). There is no reason to cancel the whole account if the blocking is country-specific and there is no way that 10k a month is anyway a sufficient benefit for cloudflare for their IPs to be blocked in a country (affecting potentially hundreds or thousand of customers).
I am a security professional. I would personally not care less to make the distinction, as both are very generic terms that are used very liberally in the industry.
So I don’t see any reason not to call this hacking. This was not an intended feature. It was a gap, which has been used to perform things that the application writer did not intended (not in this form). If fits with the definition of hacking as far as I can tell. In any case, this is not an academic discussion, it is a security advisory or an article that talks about it.