qaz@lemmy.world to memes@lemmy.worldEnglish · edit-27 months agoPermanently Deletedlemmy.worldimagemessage-square61linkfedilinkarrow-up1288file-text
arrow-up1288imagePermanently Deletedlemmy.worldqaz@lemmy.world to memes@lemmy.worldEnglish · edit-27 months agomessage-square61linkfedilinkfile-text
minus-squaremushroomman_toad@lemmy.dbzer0.comlinkfedilinkarrow-up16·7 months agoWhy the fuck can pyfed instance admins impersonate others? https://codeberg.org/rimu/pyfedi/src/commit/5780de95a86ed87b7f88c8570cfd9bb68786f053/app/admin/routes.py#L2227 Was this written by Spez?
minus-squareJackbyDev@programming.devlinkfedilinkEnglisharrow-up19·7 months agoIf they have DB access they already can.
minus-squareFiery@lemmy.dbzer0.comlinkfedilinkarrow-up9·7 months agoBut this makes it as easy as surfing to a url
minus-squaremushroomman_toad@lemmy.dbzer0.comlinkfedilinkarrow-up1·7 months agoNot without a lot of manual work or noticeably resetting a user’s password. Distributing these tools as a feature is asking for abuse.
Why the fuck can pyfed instance admins impersonate others?
https://codeberg.org/rimu/pyfedi/src/commit/5780de95a86ed87b7f88c8570cfd9bb68786f053/app/admin/routes.py#L2227
Was this written by Spez?
If they have DB access they already can.
But this makes it as easy as surfing to a url
Not without a lot of manual work or noticeably resetting a user’s password. Distributing these tools as a feature is asking for abuse.