• 0 Posts
  • 18 Comments
Joined 1 year ago
cake
Cake day: May 22nd, 2025

help-circle




  • Most Commonwealth countries, Canada is different because of our close connection with the US.

    There’s a group of Indians near me who play cricket every weekend so sometimes I’ll go by and bother them. “You’re playing the game wrong, you know. Have you guys never watched baseball before?” They’re always super nice and will spend ages explaining everything about the sport. They have a level of zeal for the sport which cannot be matched by even us hockey fans. Last summer we went down to the Galapagos and our group was mostly Brits and I would wait until late in the evening after they had started drinking and ask if they play soccer over there, and that is just as much fun to me.








  • … What artificial facade? Canada has a history as a country of brutal soldiers. For us the Geneva Convention is more of a checklist. We’re very polite: Surrendering Germans got a bullet to the head as a thank you.

    We had such a bad reputation the government shut down the Canadian Airborne Regiment (Our equivalent of the Marines) and pivoted us into a peacekeeping role to change perceptions.

    We have upcoming trade renegotiations, and pissing off the orange turd before they start just isn’t in the cards. We’ll support international efforts in a way that doesn’t piss off our brother to the south.



  • Canada and the US aren’t just allies, we’re tightly integrated militarily.

    It may look like two separate countries on the political stage, but behind the scenes we operate together. When Canadian personnel are already embedded in command structures in the region, it’s not realistic to expect Canada to fully denounce the conflict


    1. Fixed credential-exfiltration risk in /api/proxy/image: Previously the endpoint could:
    • accept arbitrary auth_id
    • load stored API keys
    • forward them to attacker-controlled URLs
    1. Enforced outbound host allowlist globally Previously:
    • allowlist existed
    • but outgoingFetch() didn’t enforce it
    • plugins/engines could bypass it
    1. Fixed extension store path traversal Previously a malicious store manifest could:
    • inject … paths
    • escape install directories
    • reference arbitrary files
    1. Hardened proxy IP trust Previously:
    • rate limiting trusted any X-Forwarded-For header
    • clients could spoof their IP
    1. Fixed inconsistent settings authentication Previously:
    • settings UI stored an auth token
    • but the settings modal didn’t send it when saving
    1. Implemented Improved proxy deployment support
    • Added proxy-aware behavior:
    • DEGOOG_PUBLIC_BASE_URL for canonical URLs
    • secure cookie handling when X-Forwarded-Proto=https

    Additional Improvements:

    • suggestion fetching hardened
    • DuckDuckGo suggestion parsing fixed
    • unified outbound request handling
    • install state guard properly cleaned up

    Made some other changes for my specific deployment. Very happy with your work so far. Thanks so much