In The News

False security: Dashy's client-side authentication

CommunityNews

CommunityNews

False security: Dashy's client-side authentication

False security: Dashy’s client-side authentication.
Update 3/28: The devs have announced that the auth system is to be deprecated. See details below.
About a month ago, I went looking for a dashboard for my homelab—something to help visualize the services I run. I found Dashy, a popular (14.6k GitHub stars) dashboard designed for self-hosters. I deployed it and started configuring it, but noticed that something about its authentication felt off. I started digging and quickly found its security to be borderline useless, permitting unauthenticated reads and writes of its configuration.

Read in full here:

This thread was posted by one of our members via one of our news source trackers.

View thread on forum
/security#authentication
0 202 0

Popular General Dev topics Top

siddhant3030
General Dev Chat

Which vertical monitor do you use?
I’m thinking of buying a monitor that I can rotate to use as a vertical monitor? Also, I want to know if someone is using it for program...
#monitors#programming
51 4063 20
New
AstonJ
General Dev Chat

What are the most popular frameworks for these languages?
Just been adding some more portals, currently have the following languages: Apache Groovy C C# C++ Clojure CoffeeScript Crystal ...
26 1757 24
New
AstonJ
Hardware

Custom keyboard keycaps
There’s a whole world of custom keycaps out there that I didn’t know existed! Check out all of our Keycaps threads here: https://forum....
#hardware/keyboards#keycaps#mechanical-keyboards
15 7812 20
New
Margaret
Sales & Offers

Get 50% off these PragProg books during our Think Again Sale
Think Again 50% Off Sale » The theme of this sale is new perspectives on familiar topics. Enter coupon code ThinkAgain2021 at checkout t...
#community#pragprog/elixir/book-a-common-sense-guide-to-data-structures-and-algorithms-second-edition/book-programming-machine-learning/book-the-ray-tracer-challenge/book-forge-your-future-with-open-source/book-software-design-x-rays#algorithms/book-testing-elixir#machine-learning#sale/book-concurrent-data-processing-in-elixir/book-intuitive-python
8 5805 3
New
wmnnd
Blogs/Articles/Talks/Podcasts

Failing Big with Elixir and LiveView - A Post-Mortem
Here’s the story how one of the world’s first production deployments of LiveView came to be - and how trying to improve it almost caused ...
pentacent.com
/elixir/phoenix#blog-post#liveview
37 2483 15
New
First poster: bot
In The News

Send text messages for free using Python
alfredosequeida.com
/python
11 1713 6
New
AstonJ
Code Editors

Vim And Emacs Are The Most Important Skills You Should Learn
This was interesting: He’s definitely more of an Emacs fan (which is fine) and the thing I found interesting is how you wo...
youtube.com
/vim/emacs/neovim#doom-emacs
18 1855 8
New
AstonJ
General Dev Chat

Chris Seaton, the creator of TruffleRuby, has died
Chris Seaton, the creator of TruffleRuby has died. It appears from suicide :cry: He left this note on Twitter on the weekend: And one...
/ruby#mental-health
4 2126 3
New
First poster: bot
In The News

Introducing the ChatGPT/LLM error tracker
Large Language Models like ChatGPT say The Darnedest Things. The Errors They MakeWhy We Need to Document Them, and What We Have Decided ...
garymarcus.substack.com
#chatgpt#error
0 2593 1
New
First poster: bot
In The News

Zig now has built-in HTTP server and client in std
zig/http.zig at 7cf2cbb33ef34c1d211135f56d30fe23b6cacd42 · ziglang/zig. General-purpose programming language and toolchain for maintaini...
github.com
/zig#http
0 2432 1
New

Other popular topics Top

Devtalk
General Dev Chat

HELLO WORLD (Introductions thread!)
Hello Devtalk World! Please let us know a little about who you are and where you’re from :nerd_face:
#community
476 5517 111
New
DevotionGeo
Backend Developer Forum>Chat/Discussions

What is the reason behind Rust’s web framework, Rocket, not performing as well as expected in the Techempower benchmarks?
I know that these benchmarks might not be the exact picture of real-world scenario, but still I expect a Rust web framework performing a ...
/rust#web-frameworks
36 6151 11
New
Rainer
Journals & Book Clubs

Programming Erlang Book Club
My first contact with Erlang was about 2 years ago when I used RabbitMQ, which is written in Erlang, for my job. This made me curious and...
/erlang/book-programming-erlang-2nd-edition#book-club
195 6223 96
New
PragmaticBookshelf
Game Developer Forum>Learning Resources

Hands-on Rust: Effective Learning through 2D Game Development and Play
Rust is an exciting new programming language combining the power of C with memory safety, fearless concurrency, and productivity boosters...
#pragprog/rust#published-book/book-hands-on-rust
118 6884 31
New
PragmaticBookshelf
In The Spotlight

Spotlight: Noel Rappin (Author)
“Finding the Boundaries” Hero’s Journey with Noel Rappin @noelrappin Even when you’re ultimately right about what the future ho...
#author-spotlight#web-development/rails/book-modern-front-end-development-for-rails/book-rails-5-test-prescriptions
34 3628 22
New
AstonJ
Backend Developer Forum>Chat/Discussions

Rails console using 100% CPU in dev (fix)
If you are experiencing Rails console using 100% CPU on your dev machine, then updating your development and test gems might fix the issu...
/ruby/rails
3 3434 4
New
Help
Game Developer Forum>Questions/Help

Can I use Java to program a game for Nintendo switch?
I am trying to crate a game for the Nintendo switch, I wanted to use Java as I am comfortable with that programming language. Can you use...
/java#nintendo
8 3154 4
New
PragmaticBookshelf
In The Spotlight

Spotlight: Rebecca Skinner (Author) Interview and AMA!
Author Spotlight Rebecca Skinner @RebeccaSkinner Welcome to our latest author spotlight, where we sit down with Rebecca Skinner, auth...
#author-spotlight/haskell/book-effective-haskell
106 10209 29
New
DevotionGeo
General Questions/Help

Do you prefer regular mechanical keyboards or low profile mechanical keyboards and why?
I have always used antique keyboards like Cherry MX 1800 or Cherry MX 8100 and almost always have modified the switches in some way, like...
/keyboards#mechanical-keyboards
27 2388 10
New
PragmaticBookshelf
In The Spotlight

Spotlight: Bruce Tate (Author) Interview and AMA!
Author Spotlight: Bruce Tate @redrapids Programming languages always emerge out of need, and if that’s not always true, they’re defin...
/ruby/elixir/book-programming-phoenix-liveview/phoenix#liveview#book-seven-moreuages-in-seven-weeks#book-sevenuages-in-seven-weeks
54 4266 23
New
Back to top

Latest in General Dev

High-performance computing, with much less code
In The News
Curry - A Truly Integrated Functional Logic Programming Language
In The News
AI search engines give incorrect answers at an alarming 60% rate, study says
In The News
It's not cheating if you write the video game solver yourself | Robert Heaton
In The News
We should improve libzfs somewhat
In The News
Cursor told me I should learn coding instead of asking it to generate it + limit of 800 locs
In The News
Switching from pyenv to uv
In The News
I use Cursor daily - here's how I avoid the garbage parts
In The News
Real-World Kanban, Second Edition (PragProg)
General Learning Resources
The masters of Commodore 64 games
In The News
Tell Mozilla: It’s time to ditch Google
In The News
Hardware locks us in Apple's and Microsoft's monopoly cages
In The News
Practical UX for startups surviving without a designer
In The News
My teen years: The transputer operating system
In The News
Anthropic’s new AI search feature digs through the web for answers
In The News

View all threads ❯

Latest (all)

Tailwind v4.0.16 released!
Frontend News
React Native v0.77.2 released!
Hybrid News
High-performance computing, with much less code
In The News
Curry - A Truly Integrated Functional Logic Programming Language
In The News
Thinking Elixir 246 - Dark Mode Debugger and Its RAG Time
Blogs/Articles/Talks/Podcasts
React Native v0.79.0-rc.3 released!
Hybrid News
AI search engines give incorrect answers at an alarming 60% rate, study says
In The News
It's not cheating if you write the video game solver yourself | Robert Heaton
In The News
We should improve libzfs somewhat
In The News
Cursor told me I should learn coding instead of asking it to generate it + limit of 800 locs
In The News
New Debian Developers and Maintainers (January and February 2025)
Linux News
Senior full-stack Software Engineer job at Nedap, Groenlo, Netherlands / Hybrid
Backend Jobs
Front-end Developer job, Nedap, Groenlo, Netherlands / Hybrid
Frontend Jobs
Switching from pyenv to uv
In The News
I use Cursor daily - here's how I avoid the garbage parts
In The News

View all threads ❯

We ❤️ helpful members!

We reward our most helpful members via our MOTM scheme - by giving away a whopping 25 books per year!

Member of the Month

Devtalk Sponsors

Pragmatic Bookshelf

Practical resources that improve the lives of professional developers.

Erlang Solutions

We build trusted fault-tolerant systems that scale to billions of users.

AppSignal

Catch errors, track performance, monitor hosts and more.

WyeWorks

Enabling companies to succeed by building software people love.

Pragmatic Studio

Courses that'll move you from confusion to "Aha, now I get it!"

View all our sponsors ❯

Categories:

Popular Portals

Devtalk Sponsors

Pragmatic Bookshelf

Practical resources that improve the lives of professional developers.

Erlang Solutions

We build trusted fault-tolerant systems that scale to billions of users.

AppSignal

Catch errors, track performance, monitor hosts and more.

WyeWorks

Enabling companies to succeed by building software people love.

Pragmatic Studio

Courses that'll move you from confusion to "Aha, now I get it!"

View all our sponsors ❯

We're in Beta

About us Mission Statement See our Roadmap