Programmer Humor

33844 readers

1147 users here now

Welcome to Programmer Humor!

This is a place where you can post jokes, memes, humor, etc. related to programming!

For sharing awful code theres also Programming Horror.

Rules

Keep content in english
No advertisements
Posts must be related to programming or programmer topics
- If the mod doesn't find it funny, you're banned. Ha-ha!... For real: do not use the community for "statements". There are other places for such content. Keep it chill and funny.

founded 3 years ago

MODERATORS

anzo@programming.dev

Feyter@programming.dev

BurningTurtle@programming.dev

pylapp@programming.dev

1501

For all the ladies who'd fail this Satan's test (media.piefed.social)

submitted 1 day ago by Ek-Hou-Van-Braai@piefed.social to c/programmer_humor@programming.dev

162 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] balsoft@lemmy.ml 2 points 1 day ago* (last edited 1 day ago)

all i can say is that i need to log into outlook to log into teams, because logging into teams directly is broken, but the cross site cookie work…

Thankfully I don't even have an MS account, but I do implore you to check out the cookies and see for yourself that they will have a specific list of domains they are valid for.

Open the browser developer menu on an Outlook tab (F12), navigate to "Storage" → "Cookies" (may be named slightly differently in different browsers), and look at the "Domain" column in the table.

and reading stuff like adFection really doesn’t instill confidence in opening random websites.

The problem there is website operators selling their adspace to a literal israeli spyware company, which meant injecting adversarial javascript into their own pages. It was not a case of "user opening a random link", rather it was the website operator themselves forwarding the user malicious JS from the "ad company". As a user there's generally nothing you can do to prevent this kind of attack where the website itself was compromised; besides, without another vulnerability/attack vector the impact will be limited to the website in question.