Cis-gender comrades and non-binary comrades, I greet you this rainy day just to clear up this doubt:

Is it true that Lemmy Fediverso hates Mujicanos because they are retrograde misogynist racists, arrogant sons of an honorable mother?

If what I'm saying is true, it seems like a real lack of respect to me. Lemmy is a left-handed product of the idea of ​​freedom of expression and the tiredness of censorship.

Putting a community like mujico on their blacklist is going against the freedom of expression that the radical left that lives in this area of ​​the internet that we inhabit so much advocates.

Maybe they are just my ideas, maybe it's in me or in you, maybe it's in Maybelline

I won't entertain/bored you anymore, enjoy your day/night and take a delicious hot bath before going to work/sleep, left-handed comrades!

I just finished a proof of concept web app that emulates the same concept introduced by reddit place app: a shared pixel board.

Front-End: Flutter

Back-End: FastAPI, Uvicorn, SQLite, Pillow

Here you can try the beta

App Usage: Zoom In and Out the view, touch a pixel to bring up a color palette, select a color and voila, pixel's color has been changed!

Color palette menu only works if zoomed in more than 50% of the image

Front End design is a two layer view, background layer is loaded with a PNG of the pixel board, new changes are drawn over in the forebackground using canvas

This decision was to optimize bandwidth consumption,the grid is 1000x1000, that gives us 1 million pixels, sending the current grid as a PNG file weight 1.9mbs, which is better than sending a gzip json that weights 4.4mbs for coordinates and colors.

Also, flutter app design has to be imperative, that means, the view is going to be refreshed many times per second, if device screen can run 60fps, the view is going to be refresed 60 times.

Rendering the whole view painting 1 million pixels on canvas takes about 2 to 4 seconds, rekt, but loading a png is really fast.

I also implemented websockets so users can see live changes

webserver refreshes PNG file every 2 minutes.

Im open to suggestions, i will upload the code once a do some cleaning and do proper documentation.

Estas son las mejoras, entre ellas viene parchado el bug que permite inyectar codigo (XSS), parece que nuestro custom theme tiene problemas con la nueva version del frente, cambie a darkly compact porque esta genial!

Recientemente se descubrio un exploit en lemmy-ui que permitia correr codigo arbitrario (en la imagen sale el codigo) usando el alt text de los emojis

Es un problema de satinizacion de datos, el markdown procesa el html inyectado como valido y convierte el codigo inyectado en html valido y ejecutable.

En la imagen muestra una entrada que fue generada en otra instancia de lemmy

El codigo lo que hace es robar el JWT de tu navegador y mandarlo a una direccion que codifica para zelensky . zip

El problema fue en multiples instancias por lo que las tokens de todos estan comprometidas, especialmente las de admins.

Para su fortuna, elimina las entradas maliciosas de nuestra bd y renove el secret para que invalide todas las tokens actuales, habra que reloguearse.

No habra custom emojis hasta que no se resuelva este problema en futuras versiones

You cant modify rate limits if request application requierd is activated

Pongan propuestas para los emojis del sitio

200x200 de preferencia

Como este pikachu confundido