I like Gnome because it doesn’t have a Desktop that I can crowd with Icons and random files. The few times I tried KDE I just didn’t really jive with it because the text and icons were super small by default and the whole handling was just…idk, too click-y? Yeah, it can all be adjusted and stuff, but default Gnome is just closer to my preferences than default KDE.
- 0 Posts
- 4 Comments
python@lemmy.worldto
Technology@lemmy.world•Terabytes of credentials leaked in massive supply-chain attackEnglish
3·15 days agoHave you ever pressed F12? We technically weren’t allowed to see the config either, but LiteLLM literally returned a users password hash as part of the user data json in the version we were using. It was easy enough to see that it wasn’t salted.
Another fun thing it does is that any user can see their entire teams token spend trough the network tab, even if they technically shouldn’t be allowed to do that. Oh and LiteLLM had a CVSS score 9.9 vulnerability recently where any user with any sort of write privilege (including the “privilege” to change any of your own data, like your password) could just change their own role to admin 🤷The pure incompetence of that software would be really funny if it wasn’t such a pain in the ass to be the person who has to convince coworkers to rotate compromised credentials…
python@lemmy.worldto
Technology@lemmy.world•Terabytes of credentials leaked in massive supply-chain attackEnglish
5·16 days agoEven better, LiteLLM does not salt their SHA256 password hashes by default. I had to make a huge fucking fuss over that fact until my org changed the configuration last month. Bet we’re in that leak, with password hashes that are easily cracked with a dictionary.

My parents are coming over today because their ZorinOS installation suddenly started acting up after an Ubuntu Kernel update. Thanks Ubuntu.