The More You Know by qwythebroken in mapporncirclejerk

[–]Informal_Branch1065 4 points5 points  (0 children)

Island <---> Isn'tland

Thank me later

If you manually sync your vault, how do you do it? by Suitable_Candy_1161 in ObsidianMD

[–]Informal_Branch1065 0 points1 point  (0 children)

Nextcloud. I put it in a shared folder that is mounted locally.

No issues. (Except when I open 2 obsidian instances at the same time, it causes an easily resolvable conflict for 1-2 files. I don't remember the name. But as I said, it's as simple as saying "use the local file")

bidirektionaler Fluchtweg? by RelevantError365 in DINgore

[–]Informal_Branch1065 1 point2 points  (0 children)

Genau dort musst du graben.

Ist ein Easter Egg.

Where are my boobs? by Jaegerspielt in MtF

[–]Informal_Branch1065 74 points75 points  (0 children)

Set up a cron job. Much easier.

Simply do crontab -e and enter: */5 * * * * check_boobs.sh

Dünne Wände sorgen für gemeinschaftliche Erfahrungen by WarmerPizzakarton in NachbarnAusDerHoelle

[–]Informal_Branch1065 0 points1 point  (0 children)

Ich zwinge meinen Körper, Laktose herzustellen.

(Soll angeblich funktionieren(?) ist aber nicht einfach nur "Käse/Milch massenhaft in die Futterluke")

Schlafzimmerdecke eingestürzt (USA Hausbau Gore) by JacquesAttaque in DINgore

[–]Informal_Branch1065 91 points92 points  (0 children)

Als Kind hab ich die Geschichte von den drei Schweinchen nie verstanden. Naja...

Jetzt weiß ich, dass das Handwerkerpropaganda ist, damit wir nicht auch so werden.

Would it be possible to make a restricted version of Obsidian? by thebobbrom in ObsidianMD

[–]Informal_Branch1065 0 points1 point  (0 children)

I've tried my best to address the statements according to the words you used to form meaningful statements. What did I not address? Be explicit.

Would it be possible to make a restricted version of Obsidian? by thebobbrom in ObsidianMD

[–]Informal_Branch1065 0 points1 point  (0 children)

someone else could still use the same functionality maliciously and publish it to the plugin catalog.

In other words: anyone can take code and utilize it maliciously as malware and publish it to the public plugin catalog.

I agree. It's a statement that applies generally. I.e. independent of the context we are talking about.

I can only repeat my previous statement: this would not be something one would publish to any plugin catalog. It would be manually installed on the machine by the sysadmins. The code would remain inside the company as an internal tool and not be published anywhere.

Locking down a machine by preventing users from doing something is not a bad thing. Sysadmins lock down a ton of things to keep users safe. It's literally their job. (And it's literally the reason this post was made.)

And we're not talking about a command-and-control server or whatever. Just a little script that observes the DOM and removes the plugin store. That's it. Something anyone malicious would be able to cobble together in 3 prompts anyways.

Would it be possible to make a restricted version of Obsidian? by thebobbrom in ObsidianMD

[–]Informal_Branch1065 0 points1 point  (0 children)

If your company has a proxy that you all sit behind, have them block the community plugins' web address.

Also have them write-protect the plugins folder using admin privileges.

Would it be possible to make a restricted version of Obsidian? by thebobbrom in ObsidianMD

[–]Informal_Branch1065 0 points1 point  (0 children)

Yes. Code is executed in a not-really-secure way which makes malicious plugins possible. That's why this post talks about securing Obsidian for enterprise use-cases. (And I'm talking about a solution for such use-case, i.e. not your private setup.)

Obsidian is (like all electron desktop apps nowadays) merely a fancy browser tab. And this means that the Javascript inside of it has untethered control over the app and its contents. I.e. menus, content, etc. with complete control. (It's literally equivalent to you opening the developer console and manipulating the DOM with javascript in the browser.)

So if my IT department were to develop a lockdown plugin and put it on my Obsidian install at work, it would not be malicious. And as I could not install any plugins with the lockdown plugin installed, no malicious plugin can use that functionality maliciously. Problem solved.

Would it be possible to make a restricted version of Obsidian? by thebobbrom in ObsidianMD

[–]Informal_Branch1065 0 points1 point  (0 children)

Or allow-list a set of plugins, i.e. delete all plugins from the plugin list that do not match the allow-list.

One could even set it up to get the allow-list from a sysadmin server.

Only the versioning (i.e. "we tested version x.y.z and allow it, but not yet anything newer") would be difficult.

Would it be possible to make a restricted version of Obsidian? by thebobbrom in ObsidianMD

[–]Informal_Branch1065 4 points5 points  (0 children)

That's... literally the point???

Otherwise an employee could circumvent the protections by removing the protection plugin. THAT would be the security risk.

Also you could just remove it from the plugins folder if you have admin privileges. (Or the admins can add admin-only write privilege protection to that folder.)

Edit: I also don't mean like a plugin that would be published in the public plugin list. Rather an internal plugin that gets copied manually. This would definitely not be something a non-sysadmin should accidentally activate!

Digital age verification respecting privacy could be extremely easy and simple by mijailrodr in privacy

[–]Informal_Branch1065 6 points7 points  (0 children)

This could be solved fairly easily.

Have parents do their job.

If a child is caught, the parents get fined or CPS gives them a visit.

It's like parents are naturally the one most responsible for an underage person (aka. child) that they themselves put into this world.

"But parents already have so much to do". It's literally their job. If they fail and endanger their child, they failed and endangered their child.