Unless there’s a detail in here that I’m missing, I think what you want is to have your POST endpoint set the cookie on the flask side via response.set_cookie.

Then you can write a @login_required decorator to add to your login-gated routes that confirms the JWT is valid and unexpired.

They abuse the fuck out of their monopoly, basically.

They made changes to limit the usefulness of adblockers (Manifest V3), they tried to force a remote attestation API (WEI API) a few years back that would let them do stuff like fully block users who aren’t running locked-down operating systems from using online banking software or accessing Youtube, they added many chrome-specific web APIs that are extremely helpful for fingerprinting and lock users into the chrome ecosystem, etc.

And if you’re running stock chromium, there’s a fuckton of telemetry calling home to Google servers constantly.

Can you link us to the bug thread?

Yeah, it’s just mature software.

There’s not much to depth to flask login; it’s a small convenience layer. You can roll your own user management with werkzeug’s password_hash and cookies if you want.

Sure, but it’s much easier to get some form of RCE on public hosts in order to make practical use of the LPE.

Lemmy has many servers, with varying levels of uptime, load, and performance.

Sopuli tends to fare much better than lemmy.world.

I’ve never had that be an issue in practice. The NV DC drivers cover this need quite well IME: https://wiki.debian.org/NvidiaGraphicsDrivers

It’s also the best route I’ve found for setting up CUDA, so two birds, one stone.

I’ve been gaming on Debian stable for 6-7 years now; works great.

Sure, 100% with you from a technical POV.

But Logitech is looking at it from a product management lens, and deciding they don’t want to support a heterogeneous mess of a web API for a niche user base that already has their own parallel tooling.

logiwebconnect.com is not some cherished keystone of their product suite either, afaict.

Logitech is actually one of the most Linux-friendly brands out there.

This issue shown is just outdated UA sniffing, which is quite reasonable in context, given the spotty rollout of WebUSB across different distros in years prior, and the fact that the ecosystem is more or less dead in current years due to non-chrome browsers declining to add support.

Logitech products have plenty of Linux-friendly tooling like Solaar and G810-led because Logitech tacitly makes it easy to reverse engineer and hack on their hardware.

What are you basing that on?

The linked article roundly suggests that the protestors in question are staunchly anti-war and largely a non-zionist cohort.

From the outset, we protested because the consequences of this unlawful war were clear. It threatened to ignite a regional conflict that would claim countless civilian lives across the Middle East. To us, its stated objectives echoed past catastrophic Western attempts at regime change that produced nothing but prolonged instability and devastation.

Prominent figures of the Zionist left like Yair Golan, and members of anti-government protest groups like “Brothers and Sisters in Arms” (who previously declared their refusal to show up for reserve duty in protest of Netanyahu’s judicial overhaul) failed to show up for a simple reason: They do not oppose the war. The sobering reality is that, beyond a handful of Palestinian and non-Zionist Jewish MKs, there is no genuine parliamentary opposition to the war.

Technically that’s a bootsplash, which also works better for branding purposes.

Honestly tragic to find out this wasn’t an ironic Jon Lajoie post.

Seconding draw.io as the swiss-army-knife that’ll do this and more…

But honorable mention to graphviz if you want dead-simple, low-friction charts: https://zackees.github.io/webgraphviz/

Okay, how would you connect the UDHR’s core principles to FOSS in a meaningful, concrete way?

It’s great as a set of guidelines, but their implementation is very much left as an exercise to the reader, which I think is what the GP is getting at.

You’re barking up the right tree. Add a relative import call to your top-level __init__.py and they’ll get namespaced in the way you’re wanting.

E.g. adding from .file import SomethingInFile as Newthing will let you run import package and reference package.Newthing.

See the docs for the __all__ dunder as well.

What am I missing?

Beastmaster ranger

You magically summon a primal beast, which draws strength from your bond with nature. Choose its stat block: Beast of the Land, Beast of the Sea, or Beast of the Sky. You also determine the kind of animal it is, choosing a kind appropriate for the stat block. Whatever beast you choose, it bears primal markings indicating its supernatural origin.

Druid familiar summon

You gain the service of a familiar, a spirit that takes an animal form you choose: Bat, Cat, Frog, Hawk, Lizard, Octopus, Owl, Rat, Raven, Spider, Weasel, or another Beast that has a Challenge Rating of 0. Appearing in an unoccupied space within range, the familiar has the statistics of the chosen form, though it is a Celestial, Fey, or Fiend (your choice) instead of a Beast. Your familiar acts independently of you, but it obeys your commands.

Summon beast

You call forth a bestial spirit. It manifests in an unoccupied space that you can see within range and uses the Bestial Spirit stat block. When you cast the spell, choose an environment: Air, Land, or Water. The creature resembles an animal of your choice that is native to the chosen environment, which determines certain details in its stat block. The creature disappears when it drops to 0 Hit Points or when the spell ends.

https://meldmerge.org/

SSH tunnels suffer from TCP over TCP, but it’s not too much worse than OpenVPN or wg over TCP on the whole. E.g. https://asciinema.org/a/347146.

Nothing OP mentioned in the post required preserving the source IP, but as your root comment alludes to, standard practice is to set an X- header on the reverse proxy to keep source IP.