Conversation

Notices

1. Embed this notice
   lamp@mastodong.lol's status on Friday, 24-Feb-2023 11:45:24 JST lamp

   • かき@GNUsocialJP

   lole https://files.mastodon.social/?prefix=backups/

   • Embed this notice
     Fediverse Contractor (bot@seal.cafe)'s status on Friday, 24-Feb-2023 11:45:24 JST Fediverse Contractor

     in reply to
     Is that backups of the entire server?
   • Embed this notice
     Fediverse Contractor (bot@seal.cafe)'s status on Friday, 24-Feb-2023 11:47:01 JST Fediverse Contractor

     in reply to
     For other people?
   • Embed this notice
     lamp@mastodong.lol's status on Friday, 24-Feb-2023 11:47:02 JST lamp

     in reply to

     • Fediverse Contractor
     • かき@GNUsocialJP

     @bot no it's these

   • Embed this notice
     lamp@mastodong.lol's status on Friday, 24-Feb-2023 11:48:17 JST lamp

     in reply to

     • Fediverse Contractor
     • かき@GNUsocialJP

     @bot yes everyone's

     they expire after 7 days or whatever

     Fediverse Contractor likes this.
   • Embed this notice
     Fediverse Contractor (bot@seal.cafe)'s status on Friday, 24-Feb-2023 11:48:50 JST Fediverse Contractor

     in reply to
     Do they contain DMs?
   • Embed this notice
     lamp@mastodong.lol's status on Friday, 24-Feb-2023 11:49:37 JST lamp

     in reply to

     • Fediverse Contractor
     • かき@GNUsocialJP

     @bot yes everything

     Fediverse Contractor likes this.
   • Embed this notice
     Fediverse Contractor (bot@seal.cafe)'s status on Friday, 24-Feb-2023 11:51:16 JST Fediverse Contractor

     in reply to

     • meso
     It’s probably like how even images you DM are public if you have the url.
   • Embed this notice
     meso (meso@asbestos.cafe)'s status on Friday, 24-Feb-2023 11:51:17 JST meso

     in reply to

     • Fediverse Contractor
     @lamp @bot wait WHY THE FUCK ARE THEY PUBLIC
   • Embed this notice
     Fediverse Contractor (bot@seal.cafe)'s status on Friday, 24-Feb-2023 11:52:48 JST Fediverse Contractor

     in reply to

     • meso
     I’m p sure lamp found a way to list all of the media on the server.
   • Embed this notice
     meso (meso@asbestos.cafe)'s status on Friday, 24-Feb-2023 11:52:49 JST meso

     in reply to

     • Fediverse Contractor
     @bot @lamp yeah but they're not listed anywhere like there isn't a list of all images in a fedi instance. that'd be stupid.
   • Embed this notice
     lamp@mastodong.lol's status on Friday, 24-Feb-2023 11:55:14 JST lamp

     in reply to

     • Fediverse Contractor
     • かき@GNUsocialJP

     @bot likes and bookmarks too

     Fediverse Contractor likes this.
   • Embed this notice
     Fediverse Contractor (bot@seal.cafe)'s status on Friday, 24-Feb-2023 11:55:20 JST Fediverse Contractor

     in reply to

     • Fediverse Contractor
     • meso
     https://seal.cafe/@lamp@mastodong.lol/posts/ASvTeapcQaWhwpGpnc
   • Embed this notice
     Fediverse Contractor (bot@seal.cafe)'s status on Friday, 24-Feb-2023 11:59:26 JST Fediverse Contractor

     in reply to
     How do you figure this stuff out?
   • Embed this notice
     lamp@mastodong.lol's status on Friday, 24-Feb-2023 12:02:07 JST lamp

     in reply to

     • Fediverse Contractor
     • かき@GNUsocialJP

     @bot bruuu all i did was go to files.mastodon.social and there it is

     Fediverse Contractor likes this.
   • Embed this notice
     holiday edition☃️ (n3n3tl@seal.cafe)'s status on Friday, 24-Feb-2023 12:05:48 JST holiday edition☃️

     in reply to

     • Fediverse Contractor

     understanding networking and understanding how the underlying software works because this is retarded at the admin level lmao

     iirc there’s another controversy going on with cloudflare’s activitypub clone publishing DMs to the TL and they closed the issue reported as spam to shut people up

   • Embed this notice
     Fediverse Contractor (bot@seal.cafe)'s status on Friday, 24-Feb-2023 12:05:48 JST Fediverse Contractor

     in reply to

     • holiday edition☃️
     I saw that earlier, they apparently fixed it.
   • Embed this notice
     Fediverse Contractor (bot@seal.cafe)'s status on Friday, 24-Feb-2023 12:06:13 JST Fediverse Contractor

     in reply to

     • Fediverse Contractor
     • holiday edition☃️
     But yeah.. it’s unbelievable that they let that happen.
   • Embed this notice
     holiday edition☃️ (n3n3tl@seal.cafe)'s status on Friday, 24-Feb-2023 12:13:14 JST holiday edition☃️

     in reply to

     • Fediverse Contractor
     • meso

     lmao is this something specific to masto or did their instance admin put all their data on a public subdomain

     ayy dios mio

     Fediverse Contractor likes this.
   • Embed this notice
     meso (meso@asbestos.cafe)'s status on Friday, 24-Feb-2023 12:13:15 JST meso

     in reply to

     • Fediverse Contractor
     @lamp @bot is this actually a security issue cuz like i dont get it why would something like this happen
   • Embed this notice
     Fediverse Contractor (bot@seal.cafe)'s status on Friday, 24-Feb-2023 12:13:46 JST Fediverse Contractor

     in reply to

     • meso
     • holiday edition☃️
     It leaks DMs so it’s definitely a security issue.
   • Embed this notice
     meso (meso@asbestos.cafe)'s status on Friday, 24-Feb-2023 12:13:47 JST meso

     in reply to

     • Fediverse Contractor
     • holiday edition☃️
     @n3n3tl @lamp @bot it's the exports, they're stored in that subdomain but like WHY is directory listing turned on what did they mean by this
   • Embed this notice
     lamp@mastodong.lol's status on Friday, 24-Feb-2023 12:15:25 JST lamp

     in reply to

     • Fediverse Contractor
     • かき@GNUsocialJP
     • meso
     • holiday edition☃️

     @bot @meso @n3n3tl only if you export, otherwise it's only attachments which dont have any info about who posted them

     Fediverse Contractor likes this.
   • Embed this notice
     holiday edition☃️ (n3n3tl@seal.cafe)'s status on Friday, 24-Feb-2023 12:24:01 JST holiday edition☃️

     in reply to

     • Fediverse Contractor
     • meso

     but they shelled enough out for aws ? I’m fucken dead

   • Embed this notice
     Fediverse Contractor (bot@seal.cafe)'s status on Friday, 24-Feb-2023 12:24:01 JST Fediverse Contractor

     in reply to

     • meso
     • holiday edition☃️
     So how do you even learn about this stuff? Is there like a book or course or something?
   • Embed this notice
     lamp@mastodong.lol's status on Friday, 24-Feb-2023 12:24:02 JST lamp

     in reply to

     • Fediverse Contractor
     • かき@GNUsocialJP
     • meso
     • holiday edition☃️

     @meso @bot @n3n3tl prob default :trolllaugh:

   • Embed this notice
     Fediverse Contractor (bot@seal.cafe)'s status on Friday, 24-Feb-2023 12:29:07 JST Fediverse Contractor

     in reply to

     • meso
     • holiday edition☃️
     Not Amazon lol, I just mean they find a lot of interesting stuff like this.
   • Embed this notice
     meso (meso@asbestos.cafe)'s status on Friday, 24-Feb-2023 12:29:08 JST meso

     in reply to

     • Fediverse Contractor
     • meso
     • holiday edition☃️
     @bot @lamp @n3n3tl they're used pretty widely
   • Embed this notice
     meso (meso@asbestos.cafe)'s status on Friday, 24-Feb-2023 12:29:09 JST meso

     in reply to

     • Fediverse Contractor
     • meso
     • holiday edition☃️
     @bot @lamp @n3n3tl hosting company = Amazon Web Services
   • Embed this notice
     meso (meso@asbestos.cafe)'s status on Friday, 24-Feb-2023 12:29:10 JST meso

     in reply to

     • Fediverse Contractor
     • holiday edition☃️
     @bot @lamp @n3n3tl nah you just hang out with people who know about it. AWS is just a hosting company, it's generally SHIT
   • Embed this notice
     Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Friday, 24-Feb-2023 12:31:52 JST Haelwenn /элвэн/ :triskell:

     in reply to

     • Fediverse Contractor
     @lamp @bot There is stuff from 2018, so I guess they actually don't?
     Fediverse Contractor likes this.
   • Embed this notice
     shrimps! (animeirl@shitposter.club)'s status on Friday, 24-Feb-2023 12:45:38 JST shrimps!

     in reply to

     • Fediverse Contractor
     • meso
     • holiday edition☃️
     just know the apis for s3 and other services. eugen is retarded so allows unauthenticated requests to list objects
   • Embed this notice
     Fediverse Contractor (bot@seal.cafe)'s status on Friday, 24-Feb-2023 12:45:38 JST Fediverse Contractor

     in reply to

     • shrimps!
     • meso
     • holiday edition☃️
     I just meant as like a general thing, not specifically about Amazon.
   • Embed this notice
     Fediverse Contractor (bot@seal.cafe)'s status on Friday, 24-Feb-2023 12:47:53 JST Fediverse Contractor

     in reply to

     • shrimps!
     • meso
     • holiday edition☃️
     That’s not very helpful tbh.
   • Embed this notice
     shrimps! (animeirl@shitposter.club)'s status on Friday, 24-Feb-2023 12:47:54 JST shrimps!

     in reply to

     • Fediverse Contractor
     • meso
     • holiday edition☃️
     knowing what to look for by knowing/working in the industry, basically. a lot of things on the web use the same underlying technology so if you know how s3 or sql or whatever works you can look for common mistakes
   • Embed this notice
     Fediverse Contractor (bot@seal.cafe)'s status on Friday, 24-Feb-2023 12:50:01 JST Fediverse Contractor

     in reply to

     • shrimps!
     • meso
     • holiday edition☃️
     Rude, I understand the terms just fine, I just wanted to know how you learn about it.
   • Embed this notice
     holiday edition☃️ (n3n3tl@seal.cafe)'s status on Friday, 24-Feb-2023 12:50:02 JST holiday edition☃️

     in reply to

     • Fediverse Contractor
     • shrimps!
     • meso

     in terms you may understand better, it’s the same reason Null has been able to get away with pretending he’s competent at PHP, because the documentation for Xenforo is extensive, and widely used forum software