They probably meant 6 digit and it was a typo. The rest of the article references 6 digits. If it’s just an integer (highly likely) it would go up to 10 digits or roughly 2 billion max users. My old coworkers and I used to joke that hitting INTEGER.MAX_VALUE for your customer ID is a good problem to have

the API endpoint GET https://api/[.]clicktopray.org/user/users/%7Bid%7D will return user data for any account - not just your own account - so long as you supply a valid, five-digit user ID. It doesn’t perform any authorization check or ownership validation. “Just increment the number and get someone else’s data,” she wrote.

This data includes users’ email addresses, first and last names, country, dates of birth, and whether the account has been deleted, and the API exposes all 719,517 accounts on the prayer site. “With sequential user IDs and no rate limiting, an attacker could enumerate every single account on the platform,” the hacker explained. “One GET request per user. for i in range(1, 719518): scrape(). That’s it. That’s the exploit.”

My God, that’s horrific. Plus it doesn’t even delete your data if you delete your account, it’s still vulnerable.

Social credit attitude in shambles

I feel like people who “aren’t functionally impaired” are often just extremely good at masking, and don’t notice all the problems they deal with anymore. So it’s more like, they won’t diagnose or treat you because you’ve adapted to your limitations too well.

I had to do this with my ADHD. If I told people I struggle a lot, but I can get by with a million calendar alerts and reminders, they just tell me to go home. But if I phrased it instead as, I struggle severely with remembering things and meeting deadlines and appointments, they’re more interested. Then they ask if I have any supports, and I say calender reminders help a bit, but don’t resolve the underlying issue. Same problem, different presentation, with an emphasis on what I can’t do.

It sucks we have to do this to get noticed, but also I think autistic people like myself are prone to being “too honest” with doctors and accidentally down-playing our struggles. Like oh yeah I just don’t understand social norms at all, but I get by and figure it out you know? Instead of, actually this often makes life really hard and is a huge barrier especially if I’m in a new environment.

Honestly just give them space. Not “no pressure, but”. Actually no pressure. Forget all about it, go back to treating them normally. You’ve given them something to think about, let them think about it without feeling pressured

Some people believe that ADHD, autism, etc aren’t actually disorders, they’re just different ways of thinking. Which only makes sense if you ignore the often severe issues people face in daily life. To me, it’s a problem if it’s a problem, simple as that.

They do, but you can’t say “this isn’t medical advice” and then turn around and give medical advice. Especially to the point of discouraging seeing a doctor.

It didn’t used to. There was the whole “memories” thing that it kept between conversations. I hated it

They still have a good export tool, that’s a reliable canary for enshittification in my experience. See: how Google butchered their export tools to be as annoying as possible for “security” reasons. The harder it is to leave, the more they care about trapping you via friction rather than keeping you via good customer experience

I don’t even look at ads on the “general internet” and this is the only social media I still have which has no algorithm. But if I check the home page of services I use…

This is a pretty good video that goes into the intricacies of it

https://youtu.be/2DOd4RLNeT4

Is it bad to reply to 2 week old comments? I thought it was fine here

If we make fun of monster girl foxussy hentai we can also make fun of monster boy smut vampenis

Yes this is what A.I. does. It shows you a somewhat glitchy alternate reality where that photo is coloured in instead of black and white. So it might do seemingly strange things like upgrading technology and clothes and stuff to match what people wore when colour photos were a thing.

However, it’s relatively trivial to take the A.I. photo and use it as a colour-only layer in Photoshop, while preserving the original grayscale photograph as the source of truth. It might not line up perfectly but you can smudge it around a bit to fit.

Valve should put a big ugly icon on the store page when a game DELIBERATELY blocks Linux or Steam Deck. It’s one thing to be incompatible by apathy, it’s another to be actively hostile. Give them the ugly punishment sticker.

Airlines are already barely profitable. Most of their income is not actually related to tickets sold.

https://youtu.be/ggUduBmvQ_4

If you can get food addiction I think you can get porn addiction.

I get the distinction you’re trying to make between behavioral addictions and chemical (? I forget the name) ones like alcohol addiction. But behavioral addictions by definition can be almost anything. I’d wager a good portion of us are addicted to our phones, for example.

How did you get into hunting? That’s very different from gaming lol

The path to the dark side is quicker, easier, and far more seductive.

I completely deleted my Reddit account, which is not a decision I took lightly, after more than 10 years of using that website frequently. I didn’t use any of the purge apps, my comments can be fossilized under [deleted] incase it helps anyone.

Makes me wonder if that’s a good indication of quality? I highly doubt bot accounts and astroturfers would ever delete their account, it’s too valuable for them. Deleted users are kind of verified human in a way.