@jeffalo

error carried forward
Wall

hello world!

Factual

the world becomes so much more saturated and vibrant once you desaturate your phone

2 days ago
15 1 1
2 days ago
18 0 2

world eras i am living through

  • post 9/11 - pre covid

  • post covid - pre AI

  • we are now living in the post AI

if i had infinite time and money i’d shoot so much film.

or we’re all at school lol

4 hours with no post, wasteof died

neovim users want a minimal editor and then spend days making it less minimal

spent the past weekend making a neovim config from nothing, to lsp support and themes, plugins, etc.

if i had to rate it, 9/10 experience, it’s fun and everyone should give it a try if they want to lol

ai writing web apps feels like the universe balancing itself. web security was getting a little too good for a whiie

least creepy wasteof post

having your flashlight on accidentally is the modern equivalent of having your fly down

this is what no notepad does to a programmer

I literally can’t write html without Emmet abbreviations help me

i guess we doin circles now

1600 here we go!!!!! (I got at least 3 questions wrong lol)

Aug 24, 2024, 9:30 AM
15 0 2

am I weird if I say that as much as I love music, I’d want to work without headphones?

somewhat related but I’ve been at my first desk job which means I can have headphones while working and wow choosing my own background noise makes 40 hours go by so much easier

love that i can choose the background music at work

actin’ goofy; comic sans.

also yes, wasteof (and everything else i host) is currently slow for everyone, for some reason past my modem there’s 50%+ packet loss to the internet. it could be up to a week before we see any improvement.

bad news everyone, wasteof is actually EXTREMELY insecure because this guy just listed a bunch of vulnerabilities from the first page of google.

warning!

From the tests i have done, there are many vulnerabilities on this website, there are also a lot of bugs. Example: when posting something, if you spam click `post` it will create a post for every time you click the button, there should be an implementation to limit the time between posts and to make the button a one time click. (THIS BUG MAKES THE SITE LAG!). its also a pain to delete all of the posts if you accidentally do so as the site refreshes but will still lag and there is a small chance that the post will not be deleted. There is also a password vulnerability… maybe don’t have the user’s passwords get stored as a plain document.

THERE ARE VULNERABILITIES IN THE REPO!; Yes, even tho the repo is the legacy site and isn’t used anymore it is still good to state the vulnerabilities on the repo as people might use the template to make their own site like this and wont know of the vulnerabilities in the code:

List of the vulnerabilities on the repo: SQL Injection, Cross-Site Scripting (XSS), Insecure Direct Object Reference (IDOR), Lack of Input Validation, Insecure, Outdated Dependencies, Lack of Error Handling, Insecure Session Managemen, Storage of Sensitive Data(user and password information: Insecure Password Storage, Weak Password Hashing, Lack of Password Salting, Insecure Password Verification, Missing Password Complexity Requirements, insecure Password Reset Token Generation, insecure Password Storage in Sessions), Lack of Secure Communication… sry <3