Andrew J. Caines

Security vulnerability: fixed path in o=rwx directory in .deb

6

The [preinst](https://github.com/andy-portmen/native-client/blob/master/apt/DEBIAN/preinst) and [postinst](https://github.com/andy-portmen/native-client/blob/master/apt/DEBIAN/postinst) files indicate the use of a fixed path in a world-writable directory and likely vulnerability to a symlink attack. Use of mktemp(1) is strongly recommended. I...

gpodder.net unresponsive on IPv6

4

https://gpodder.net service is unresponsive on its IPv6 address, `2605:2700:0:5::4713:9656`, but still responds on it IPv4 address, `71.19.150.86`, making it effectively unavailable to most dual stack clients, i.e. most clients. Failed...

auth/sign_up Password maxlength too small, inconsistently checked

3

### Steps to reproduce the problem 1. Visit [Sign up](https://mastodon.example/auth/sign_up) page 2. Enter good long (>72 characters) password in _Password_ field 3. Observe _Password_ field border turn approving green 4....

### Your use case #### What would you like to do? When removing a message, I would like to see the message, or at least the start of it, in...

To save a visit from the ministry of redundancy ministry, sync with 1Password's well-established [Passkeys .directory](https://passkeys.directory/). PS. The [issue templates](https://github.com/bitwarden/passkeys-index/tree/main/.github/ISSUE_TEMPLATE) are 404.