Comment on YSK: If you set up a Lemmy instance, and follow the Docker setup instructions to the letter, it will send lemmy.ml your admin password during the setup process

• limer@lemmy.dbzer0.com ⁨1⁩ ⁨month⁩ ago

  Pretty sure it’s an oversight but devs are overworked, really overworked

  There are many more important things to fix before this.

  But an issue will put it in the todo list

  source

  • SatansMaggotyCumFart@piefed.world ⁨1⁩ ⁨month⁩ ago

    They’re so overworked that they spend most of their day policing other’s thoughts.

    source
  • PhilipTheBucket@ponder.cat ⁨1⁩ ⁨month⁩ ago

    Within the last hour, dessalines has posted three things about communism that are longer than the fix for this issue.

    source

    • locuester@lemmy.zip ⁨1⁩ ⁨month⁩ ago

      Wow you typed a LOT to defend not making a GitHub issue. That energy redirected to writing a GitHub issue would be stellar.

      source
    • dastanktal@lemmy.ml ⁨1⁩ ⁨month⁩ ago

      Go fix it yourself. You’re correct that’s the admin’s problem but if you’re so insistent that it takes a minute go submit a merge request real quick.

      Also it’s only a security breach if you don’t change the admin password or your domain which should be standard for setting things up on the Internet anyway.

      source

      • uranibaba@lemmy.world ⁨1⁩ ⁨month⁩ ago

        I would fix it if we had a link. This problem is not present in the main branch.

        github.com/LemmyNet/lemmy/…/docker-compose.yml

        environment:
              # this needs to match the hostname defined in the lemmy service
              - LEMMY_UI_LEMMY_INTERNAL_HOST=lemmy:8536
              # set the outside hostname here
              - LEMMY_UI_LEMMY_EXTERNAL_HOST=localhost:1236
              - LEMMY_UI_HTTPS=false
              - LEMMY_UI_DEBUG=true
        

        source

        • -> View More Comments
    • limer@lemmy.dbzer0.com ⁨1⁩ ⁨month⁩ ago

      Why don’t you a pull request and fix it yourself ? If you have the ability to recognize and know what to fix, and if you care, do it!

      I know I’m too lazy to help them, what is your excuse ?

      I swear, I might just get off the fence and help them myself on unrelated issues, it’s making me that unsettled

      source
  • Deceptichum@quokk.au ⁨1⁩ ⁨month⁩ ago

    I wouldn't give them the benefit of the doubt, the devs are dodgy fuckers.

    source

    • limer@lemmy.dbzer0.com ⁨1⁩ ⁨month⁩ ago

      But you use the software they make…

      source

      • Deceptichum@quokk.au ⁨1⁩ ⁨month⁩ ago

        I'm on PieFed for exactly that reason.

        source

        • -> View More Comments
• fishos@lemmy.world ⁨1⁩ ⁨month⁩ ago

  Oh I abso-fucking-lutely can imagine seeing someone spamming me with DMs or making a public post to try and shame me instead of commenting on the actual source project going straight into my “ignore this twat” pile. This post is just a cry for attention. You’re trying to be some sort of hero, saving us from evil or some shit.

  Go make a GitHub request like a reasonable normal person and stop cluttering up others feeds with this inane bs.

  source

  • PhilipTheBucket@ponder.cat ⁨1⁩ ⁨month⁩ ago

    I am not typing here in the hopes that they will fix it. I am typing here to communicate to other users what’s up with it. Whether or not to fix it is up to them. You’re welcome to your opinion.

    source

    • fishos@lemmy.world ⁨1⁩ ⁨month⁩ ago

      Bullshit. In another comment you literally complain about them posting comments and not fixing this because in your words it should take less time to just fix it. You also say that their response(or lack of) to this specific post is interesting to you as proof of their inner motivations.

      You’re so full of shit you can’t even keep it straight since you posted this an hour ago.

      source

      • PhilipTheBucket@ponder.cat ⁨1⁩ ⁨month⁩ ago

        A lot of people, I think, would appreciate knowing if there’s indication that their software might be doing something sketchy to them. You might feel that my appropriate response about it should be to shut up, shut up, shut up!, but I don’t think I will. When it comes to issues of trust and security in software, it’s usually not that good an idea to just silently fix it and not talk about it so nobody’s feelings will be hurt and no one will feel bullied.

        I’ve posted the patch and recommended that someone post a PR about it. I do think it would be good if it gets fixed. If the Lemmy devs claim that me being a twat is a good excuse for just leaving it as is, then like I said, that’s a super interesting turn of events.

        source

        • -> View More Comments