[-] epicspongee 2 points 1 year ago

Yes, recently you took many steps backwards especially in Florida and the problems are real, but it is still a better situation than just a few years ago.

Tell me you're not following news in Florida without telling me you're not following news in Florida.

Seriously, it is just annoying at this point. It is ridiculous that you believe that you are somehow special and won’t be prosecuted by dictators like Putin, killed by Stalin for “anti communist behavior” etc.

Quite literally nobody is saying this. But to be completely fair, Cuba, a communist state, currently has better protections for LGBTQ+ people than any state in the US. ESPECIALLY Florida.

[-] epicspongee 3 points 1 year ago

Why are you commenting on this thread when you're not a member of the server?

[-] epicspongee 3 points 1 year ago

Why would a ton of conservatives commandeer an explicitly leftist instance, and why would a ton of conservatives have a bunch of pronouns in their bios + trans emotes

[-] epicspongee 8 points 1 year ago

I’m kinda disgusted by the amount of Russia apologia and pro war sentiment generally.

Where are you seeing this. Do you have links? I've seen people mentioning this a lot but have never seen any of this content personally.

[-] epicspongee 1 points 1 year ago

It not only verifies that any given incoming request is in the absolute correct format it also validates the timestamp in the user’s cookie (it’s a JWT thing).

This is false.

Lemmy's JWTs are forever tokens that do not expire. They do not have any expiration time. Here is the line of code where they disable JWT expiration verification.

Lemmy's JWTs are sent via a cookie and via a URL parameter. Pop open your browser console and look at it.

There is no way to revoke individual sessions other than changing your password.

If you are using a JWT cookie validation does not matter, you need to have robust JWT validation. Meaning JWTs should have short expiration times (~1hr), should be refreshed regularly, and should be sent in the header.

1422
AmeriRule (lemmy.blahaj.zone)
submitted 1 year ago by epicspongee to c/196
[-] epicspongee 1 points 1 year ago

I think they serve different purposes. Lemmy lets you follow communities in a Reddit-like way. Mastodon lets you follow people in a Twitter-like way. I have both and use them both for different things. But what’s nice is that I can follow my communities on Lemmy and on my Mastodon, and I get updates in both. And then I can reply from my mastodon and my reply shows up in Lemmy.

I get what you mean, but at the same time the fact that they’re all interoperable like that is actually kinda the point. I can jump around from space to space and spend time where I want, and then I can follow all those spaces in my other spaces.

[-] epicspongee 1 points 1 year ago

Yeah that article is really flawed. Mastodon instances do not federate with each and every other instance. It’s more like a web. Most of them will federate with mastodon.social, but even then they’re not getting all the content, just the content their users follow. No scaling problems on my server so far.

[-] epicspongee 1 points 1 year ago

LMAO yeah to be clear those exist. Mastodon has significantly better tools though for managing them. Reports get handled, you have extremely granular options for mutes, and you can block entire domains of people / instances if you want. If you don’t like those people, you’re able to limit access with them.

[-] epicspongee 7 points 1 year ago

Good luck admins!

epicspongee

joined 1 year ago