this post was submitted on 06 Jul 2023
28 points (96.7% liked)

Programming.dev Meta

2466 readers
5 users here now

Welcome to the Programming.Dev meta community!

This is a community for discussing things about programming.dev itself. Things like announcements, site help posts, site questions, etc. are all welcome here.

Links

Credits

founded 1 year ago
MODERATORS
snowe@programming.dev
Ategon@programming.dev
28
Alternative front end UI for Lemmy (looks like old.reddit) (mlmym.org)
submitted 1 year ago by ruffsl@programming.dev to c/meta@programming.dev
7 comments fedilink hide all child comments
 

cross-posted from: https://programming.dev/post/428156

Discovered from this Hacker News post:

you are viewing a single comment's thread
view the rest of the comments
[โ€“] RonSijm@programming.dev 7 points 1 year ago (1 children)

Really neat, was hoping someone would build something like this. I'm not the biggest fan of the default Lemmy skin.

But the login is a bit sketchy... I checked the network, and logging in just sends your credentials to their site (POST https://mlmym.org/programming.dev/) with the password in cleartext.

Not saying that the developer has any bad intentions, but if anything is misconfigured, like nginx logging incoming requests or something, it would be a security disaster if someone would somehow be able to access it

I don't know if this is a limitation of Lemmy / ActivityPub but I'd prefer if the auth happened directly to the Lemmy instance.

[โ€“] ruffsl@programming.dev 2 points 1 year ago

Yeah, I'd be hesitant to ever login to a third party client I couldn't self host. Hopefully O-Auth might be a future feature for Lemmy.