Pro@programming.dev to Technology@lemmy.worldEnglish · edit-221 hours agoSlrpnk instance is down till mid July; they might relaunch their server on piefed.programming.devimagemessage-square74fedilinkarrow-up1468arrow-down114file-text
arrow-up1454arrow-down1imageSlrpnk instance is down till mid July; they might relaunch their server on piefed.programming.devPro@programming.dev to Technology@lemmy.worldEnglish · edit-221 hours agomessage-square74fedilinkfile-text
minus-squareKris@feddit.orglinkfedilinkEnglisharrow-up10·15 hours agoI think now that Piefed has an API for apps, we will see some of them adding support soon. Overall I think the benefits of a Piefed migration outweight the disadvantages, but it remains to be seen if it is doable.
minus-squareGreenKnight23@lemmy.worldlinkfedilinkEnglisharrow-up1·11 hours agoyou mean an API for bots…
minus-squareGreenKnight23@lemmy.worldlinkfedilinkEnglisharrow-up1arrow-down1·10 hours agowhy does everything need a mobile app?
minus-squaretfm@europe.publinkfedilinkEnglisharrow-up4·10 hours agoIt’s not just native Apps. Alternative web UIs like Thunder, Photon and Voyager need them too.
minus-squareGreenKnight23@lemmy.worldlinkfedilinkEnglisharrow-up1·9 hours agoyes, but those frontends are typically tied closer to the backend than a public API. things like CSRF can help block abuse of the back end.
minus-squaretfm@europe.publinkfedilinkEnglisharrow-up1·9 hours agoNope they all use the public API. Even the default Lemmy web client.
minus-squareGreenKnight23@lemmy.worldlinkfedilinkEnglisharrow-up1·8 hours agowell that’s poor planning and why bots are such a problem. I know CSRF tokens aren’t a silver bullet, but doing nothing to stop them does nothing to stop them.
minus-squaretfm@europe.publinkfedilinkEnglisharrow-up1·12 minutes agoCSRF protection is a security feature not bot prevention. A bot would just need to get a token first.
I think now that Piefed has an API for apps, we will see some of them adding support soon. Overall I think the benefits of a Piefed migration outweight the disadvantages, but it remains to be seen if it is doable.
you mean an API for bots…
Mobile Apps need an API too.
why does everything need a mobile app?
It’s not just native Apps. Alternative web UIs like Thunder, Photon and Voyager need them too.
yes, but those frontends are typically tied closer to the backend than a public API.
things like CSRF can help block abuse of the back end.
Nope they all use the public API. Even the default Lemmy web client.
well that’s poor planning and why bots are such a problem.
I know CSRF tokens aren’t a silver bullet, but doing nothing to stop them does nothing to stop them.
CSRF protection is a security feature not bot prevention. A bot would just need to get a token first.