HN user
I think it's not a matter of not wanting to pay, but not wanting to have your departments "we had to pay someone to fix your security bugs" metric go up.
That's also likely why issues in the core product are taken more seriously.
The membership API returns a 403 if no SAML session exists. Check the remedy section of the post.
This was an accidental find and GitHub has refused to document it.
My recent experience with GitHub regarding a security issue was not very positive either.[1] It turned out, unlike two vendors I notified that were affected, they just didn't care. And they didn't bother to even tell me that they didn't care.
It's a very edge-case issue in Enterprise SSO, so I wasn't really able to generate any blowback with disclosure either. But if you find an org with just the right setup it blows a huge hole into the SSO product, to the point of making it useless.
There also seems to be an asymmetry between the core product and everything else. GitHub Enterprise has issues that aren't even considered UX issues (i.e. notifications showing "3 of 0" notifications if no SAML session exists) that'd warrant bounties if they were in the core product.
[1] https://notes.acuteaura.net/posts/github-enterprise-security...
The problem is with attribution of the problem to you directly.
People almost universally know that severe obesity is bad for them. You don't need to tell them.
There are many reasons people are obese. For me it was mostly a psychological issue. Doctors need better training in this regard, because telling someone to stop being lazy and eat well will almost never lead to them to improvement. Dieting, in the long term, it almost universally a failure. It just doesn't work. It doesn't address the right issues.
Yet, for doctors and those unaffected it seems like such a trivial thing that any deviation seems self-inflicted. They must be doing it willingly. They must be shamed. But it is never is that simple.
It is an attitude they constantly carry into conversations with patients. They need to take that attitude and throw it into the trash, because all it does is make the patient feel horrible about the lack of control they have over their condition that they supposedly should have, according to their doctor.
Your comment makes no sense to me.
Failing to treat me is a professional failing with severe adverse effects for me. And it's entirely based on the judgemental assholeness of such doctors. If you can't stop blaming people for their conditions, find another job. I'm not my GPs therapist.
Also, they've been dead for close to a decade.
Hah, yeah. I had a big AFH tumor on my hand. "Probably ganglion". Thankfully these things rarely turn into full blown cancer and I got someone to take it serious (but only after it started necrotizing) before it did.
Warning is fine.
Cursing at me and telling me I will literally die in 10 years (I survived the guy by at least 10 years by now) and assuming the shock from that will get lazy me off the couch or something just put me into an extremely anxious state loop that didn't help me whatsoever. I didn't need to be told to eat less, I needed any coping mechanism that wasn't overeating. And I needed coping mechanisms a lot back then, the anxiety just contributed to that. I went through life for almost a decade just accepting my imminent death because I couldn't fix it.
They call it "trans broken arm syndrome" because this shit includes things that are obviously NOT hormone/obesity related. Things anyone else would get an immediate MRI for.
Exactly the kind of thoughtless answer that presumes I'm just angry about being told the hard truth or something I needed.
Being obese does NOT IN FACT lower your risk of every disease (except apparently heart failure?) that is not caused by obesity. Obese people need doctors for non-obesity related issues too.
I'm sure the amount of stress I've been exposed to from being yelled at by my physician "that i need to change or die young" at my diagnosis is pretty on par with this decreased life expectancy.
Not to mention I now have a general dislike for doctors and avoid them as much as possible, because inevitably everything I'd complain about would be blamed on excess weight or trans broken arm.
Love to see how empathetic doctors affect life expectancy. I'd assume quite a lot.
Being naive enough to have archived the board a decade ago for a short while: /v/ too. I’d strongly advise against using any part of that site.
PhotoDNA, but it requires a suite of lawyers since the material it uses to fingerprint is high res enough to make it identifiable again. Or create false positives.
WordPress has some serious edge cases, and lots of stale issues in Core, many with patches that just go stale themselves.
If it isn't prioritized by Automattic, it's not getting in.
I run deadinsi.de. Hi.
(please don't join if you're a bad person)
Wil is inside a reality distortion field. Someone got him with a low blow joke and he started reporting everyone from that instance (which was named after another joke of the type, bofa.lol)
this is a huge wall of text and I haven't necessarily read it all because I'm tired (I'll bookmark this I swear) but the case mentioned is a person with repeated persistent confirmed-by-lots-of-people manipulative bad behavior with at least two independent rape accusations on top of that.
If you're building a purely general purpose instance or a free speech themed one it's fine to not block this sort of instance.
It's okay to have this "net split". It's a system of curation. It encourages smaller instances.
Mastodon is also heavily used by minority / LGBT communities that deal with abuse and harassment a lot, often for merely existing. And often a "free speech" instance or worse a "no moderation" instance will attract that sort of person.
I only know one instance (awoo.space) that does whitelisting instead of blacklisting. Mastodon can't even do it out of the box (although pleroma can).
My instance bans the sort of instance described in the sibling comment to yours, like qoto (who advertised their Mastodon as "free speech twitter"... on twitter ads)
Mastodon instances are not public spaces. Users can pick how much they want to engage in political discussions by picking their instance or, if they can, hosting their own. (The second part of the argument is flawed because most people can't just throw up a rails app and maintain it, be it cost or lack of knowledge)
What most people don't get about "bubbles", mostly because it doesn't affect them, is that sometimes, if your mere existence is political, getting some rest from it can be quite hard.
I run deadinsi.de. I wrote some kubernetes definitions and they work, but in the end there was too much overhead, uncertainty about storage stability and cost to keep it running on k8s.
But if you have access to a cluster and want to try it, here you go: https://github.com/SerenityLaboratories/cluster
It includes a storage provider I wouldn't trust all too much yet and the docs are sparse, but you should be able to get it running if you know Kubernetes.