[-] example@reddthat.com 10 points 2 weeks ago

it doesn't seem to be server specific because once prompted there is no way to use the account again, even if you decided to just not use a server that may have these settings set.

[-] example@reddthat.com 11 points 7 months ago

you're not getting banned from steam, you're generally getting banned from participating in anti cheat secured lobbies of a single game or a group of games.

single player experience is generally not affected.

having a 3 strike system before getting banned from multiplayer just means it's 66% cheaper for a cheater to get a new copy of the game.

this is also not new and has been the case for the current family sharing system as well.

[-] example@reddthat.com 12 points 9 months ago

account deletion does not federate in general, only banning (+ content removal) does

[-] example@reddthat.com 13 points 9 months ago

I ate fiber but now my internet is down. what do I do?

[-] example@reddthat.com 11 points 9 months ago

The 90 days disclosure you're referencing, which I believe is primarily popularized by Google's Project Zero process, is the time from when someone discovers and reports a vulnerability to the time it will be published by the reporter if there is no disclosure by the vendor by then.

The disclosure by the vendor to their users (people running Lemmy instances in this case) is a completely separate topic, and, depending on the context, tends to happen quite differently from vendor to vendor.

As an example, GitLab publishes security advisories the day the fixed version is released, e.g. https://about.gitlab.com/releases/2024/01/11/critical-security-release-gitlab-16-7-2-released/.
Some vendors will choose to release a new version, wait a few weeks or so, then publish a security advisory about issues addressed in the previous release. One company I've frequently seen this with is Atlassian. This is also what happened with Lemmy in this case.

As Lemmy is an open source project, anyone could go and review all commits for potential security impact and to determine whether something may be exploitable. This would similarly apply to any other open source project, regardless of whether the commit is pushed some time between releases or just before a release. If someone is determined enough and spends time on this they'll be able to find vulnerabilities in various projects before an advisory is published.

The "responsible" alternative for this would have been to publish an advisory at the time it was previously privately disclosed to admins of larger instances, which was right around the christmas holidays, when many people would already be preoccupied with other things in their life.

[-] example@reddthat.com 10 points 9 months ago

requiring an app to open chests? what?

I'm glad I've been avoiding Ubisoft like the plague they are for all the other issues already.

[-] example@reddthat.com 10 points 10 months ago

you sound like you're not even washing coconuts

[-] example@reddthat.com 12 points 10 months ago

those aren't actually gifs.
they're frequently webms.

various people don't care or don't know the difference between media formats though, so they'll just call anything remotely gif-like a gif.

[-] example@reddthat.com 16 points 11 months ago

it worked in the past

[-] example@reddthat.com 11 points 1 year ago

I've been using case insensitive fs on macOS for years and the only software having issues with this is onedrive.

can't say i'm surprised.

view more: ‹ prev next ›

example

joined 1 year ago
MODERATOR OF