I think it's not a matter of not wanting to pay, but not wanting to have your departments "we had to pay someone to fix your security bugs" metric go up.
That's also likely why issues in the core product are taken more seriously.
1 karma · joined September 27, 2022
That's also likely why issues in the core product are taken more seriously.
This was an accidental find and GitHub has refused to document it.
It's a very edge-case issue in Enterprise SSO, so I wasn't really able to generate any blowback with disclosure either. But if you find an org with just the right setup it blows a huge hole into the SSO product, to the point of making it useless.
There also seems to be an asymmetry between the core product and everything else. GitHub Enterprise has issues that aren't even considered UX issues (i.e. notifications showing "3 of 0" notifications if no SAML session exists) that'd warrant bounties if they were in the core product.
[1]: https://notes.acuteaura.net/posts/github-enterprise-security...
People almost universally know that severe obesity is bad for them. You don't need to tell them.
There are many reasons people are obese. For me it was mostly a psychological issue. Doctors need better training in this regard, because telling someone to stop being lazy and eat well will almost never lead to them to improvement. Dieting, in the long term, it almost universally a failure. It just doesn't work. It doesn't address the right issues.
Yet, for doctors and those unaffected it seems like such a trivial thing that any deviation seems self-inflicted. They must be doing it willingly. They must be shamed. But it is never is that simple.
It is an attitude they constantly carry into conversations with patients. They need to take that attitude and throw it into the trash, because all it does is make the patient feel horrible about the lack of control they have over their condition that they supposedly should have, according to their doctor.
Failing to treat me is a professional failing with severe adverse effects for me. And it's entirely based on the judgemental assholeness of such doctors. If you can't stop blaming people for their conditions, find another job. I'm not my GPs therapist.
Also, they've been dead for close to a decade.
Cursing at me and telling me I will literally die in 10 years (I survived the guy by at least 10 years by now) and assuming the shock from that will get lazy me off the couch or something just put me into an extremely anxious state loop that didn't help me whatsoever. I didn't need to be told to eat less, I needed any coping mechanism that wasn't overeating. And I needed coping mechanisms a lot back then, the anxiety just contributed to that. I went through life for almost a decade just accepting my imminent death because I couldn't fix it.
Exactly the kind of thoughtless answer that presumes I'm just angry about being told the hard truth or something I needed.
Being obese does NOT IN FACT lower your risk of every disease (except apparently heart failure?) that is not caused by obesity. Obese people need doctors for non-obesity related issues too.
Not to mention I now have a general dislike for doctors and avoid them as much as possible, because inevitably everything I'd complain about would be blamed on excess weight or trans broken arm.
Love to see how empathetic doctors affect life expectancy. I'd assume quite a lot.
If it isn't prioritized by Automattic, it's not getting in.
(please don't join if you're a bad person)
If you're building a purely general purpose instance or a free speech themed one it's fine to not block this sort of instance.
It's okay to have this "net split". It's a system of curation. It encourages smaller instances.
Mastodon is also heavily used by minority / LGBT communities that deal with abuse and harassment a lot, often for merely existing. And often a "free speech" instance or worse a "no moderation" instance will attract that sort of person.
My instance bans the sort of instance described in the sibling comment to yours, like qoto (who advertised their Mastodon as "free speech twitter"... on twitter ads)
What most people don't get about "bubbles", mostly because it doesn't affect them, is that sometimes, if your mere existence is political, getting some rest from it can be quite hard.
But if you have access to a cluster and want to try it, here you go: https://github.com/SerenityLaboratories/cluster
It includes a storage provider I wouldn't trust all too much yet and the docs are sparse, but you should be able to get it running if you know Kubernetes.