• 0 Posts
  • 17 Comments
Joined 2 years ago
cake
Cake day: June 17th, 2023

help-circle

  • When UK refuses to return the riches they stole, we just say it like that.

    When Belgia refuse to acknowledge genocide in Congo, we just say it.

    When we talk about France losing colonial wars in Vietnam and Algeria, we say it.

    When Israel starves an entire population in openly advertised genocide, we say it.

    When we talk about Japanese massacres in China, we just say it.

    When we talk about Chinese genocide of Uighurs, we just say it.

    When Canada systematically oppresses indigenous population, we just say it.

    But when Russia commits genocide and openly promises hellfire on the heads of those who would resist, don’t we dare say it!

    This is pure mental gymnastics.

    The fact that you straight ignored the core of my argument doesn’t add it any credibility either.



  • I’d probably add that for something like nextcloud granted scopes can be an „orthogonal”–for the lack of a better word–subset of requested scopes.

    The set of requestable scopes has to be defined by the system itself, not its specific configuration. E.g. „files:manage”, „talk:manage”, „mail:read” are all general capabilities the system offers.

    However, as a user I can have a local configuration that adds granularity to the grants I issue. E.g.: „files:manage in specific folders” or „mail:read for specific domains or groups only” are user trust statements that fit into the capability matrix but add an additional and preferably invisible layer of access control.

    It’s a fairly rare feature in the wild and is a potential UX pitfall, but it can be useful as an advanced option on the grant page, or as a separate access control for issued grants.












  • Slotos@feddit.nltoLinux@lemmy.mlssh reverse tunnel
    link
    fedilink
    arrow-up
    6
    arrow-down
    1
    ·
    5 months ago
    • ssh to remote, forwarding some remote port to your local ssh port (-R)
    • ssh from remote through the exposed port, starting socks proxy in the process (-D)
    • use socks proxy explicitly or find some tool that can route the traffic into it

    Similar approach can be used to establish VPN tunnel with no encryption (ssh already provides that), routing everything but your ssh connection through it.

    • ssh to remote, reverse forwarding your VPN-over-tcp server’s listening port
    • establish vpn connection on remote, route everything but your ssh connection through the newly established interface

    It will be wasteful, but it will work.