Re:Firefly III: A free and open-source finance manager
by TheDong on Monday May 30, 2022 @08:28PM
(#31565014)
> Let's just say it is hard to trust a piece of software with my financial data after this.
Definitely don't upload your real financial data to the shared hosted demo. I definitely wouldn't trust the demo with real data.
... but for the actual app, you run it locally on a server you control. You can add whatever form of auth in front of it, whether that's nginx basic auth, or requiring a client certificate, or so on. The app's designed with that in mind, with the user being a trusted person, so of course it's fine for it to dump sqlstate for you to debug.
Since this is AGPL free software, and self hosted, it's about as trustworthy as can be for putting data into it, and if you don't trust it yet, you can read the code and gain such trust.
Re:Firefly III: A free and open-source finance manager
by Karawebnetwork on Tuesday May 31, 2022 @10:34AM
(#31569953)
Very much fair.
Re:Firefly III: A free and open-source finance manager
by JC5 on Monday May 30, 2022 @11:39PM
(#31565891)
Apologies. Firefly III tracks the IP's you login with and warns you when a new one appears. For a demo site that gets slashdotted, that is less than convenient. The issue is fixed and the site is back up.
It outputs an error log.
Whoops! An error occurred. Unfortunately, this error was not recoverable :(. Firefly III broke. The error is:
Could not save preference: SQLSTATE[22001]: String data, right truncated: 1406 Data too long for column 'data' at row 1 (SQL: update `preferences` set `data` = [{"ip":"00.000.00.00","time":"2022-05-30 20:02:06","notified":false},{"ip":"00.000.00.00","time":"2022-05-30 20:02:10","notified":false},{"ip":"00.000.00.00","time":"2022-05-30 20:02:15","notified":false},{"ip":"00.000.00.00","time":"2022-05-30 20:02:16","notified":false}, ...
My IP was in the list.
Let's just say it is hard to trust a piece of software with my financial data after this.
(I changed all the IP addresses for 00.000.00.00 to preserve some anonymity.)