Zak

joined 1 year ago
MODERATOR OF
[–] [email protected] 1 points 1 day ago

nobody is refusing to offer their sevices on linux because it is vulnerable

That's not quite true, though in that case it's about the service provider being unable to verify that the user isn't running a operating system configured or modified to work against the interests of the service provider.

[–] [email protected] 0 points 2 days ago

No doubt it is for many. They're probably going to vote Democrat even if they find the candidate's stance on immigration unreasonably harsh because [insert long rant about plurality voting and the two-party system].

[–] [email protected] -1 points 2 days ago (9 children)

I have the impression quite a few Democratic voters are a bit anti-immigrant too.

[–] [email protected] 7 points 3 days ago

easiest way to fix this would be to stop making voting a state by state thing

Maybe that's easy from a certain perspective, but passing the required constitutional amendment would be anything but.

[–] [email protected] 27 points 4 days ago

General aviation airports often have little or no staff and only rudimentary access controls. People walking around aircraft are expected to be responsible for their own safety.

[–] [email protected] 2 points 5 days ago

Maybe, but the archetypal non-technical user, my mother does want to run a third-party ROM. Her phone is out of its official support period, and she knows that security updates are important and would like a way to get them. Most people, at least in wealthy countries do have a technical person in their lives they can ask things like that. She doesn't want to buy a new phone because it would be too big and lack a headphone jack, a position I share.

I had to recommend against running what I run (LineageOS, Magisk, Play Integrity Fix). Without PIF, too many apps will refuse to run on LineageOS. She doesn't need root for much else (maybe adblocking) and doesn't have the knowledge to make good decisions about whether to grant root permissions to an app that asks (Magisk doesn't have an allowlist-only mode, but it should). Finally, keeping root through an update is fussy. It's not hard, but it's an extra step that has to be done in the right order every week or two.

Unlike Firefox in 2024, a third-party Android build that's easy enough to install and isn't sabotaged by Safetynet would something many non-technical users care about: an extended useful life for their devices.

[–] [email protected] 3 points 5 days ago

Last time I used one was because I forgot my physical wallet and needed to pay for something. I don't want to tell Google about my shopping habits, but I like to have options in case of emergency.

I'm running LineageOS (with GMS), Magisk, and Play Integrity Fix.

[–] [email protected] 3 points 5 days ago (1 children)

Can you cite examples of rooted smartphones leading to significant data breaches or financial losses? When the topic comes up, I always see hypotheticals, never examples of it actually happening.

It seems to me a good middle ground would be to make it reasonably easy (i.e. a magic button combination at boot followed by dire warnings and maybe manually typing in a couple dozen characters from a key signature) for users to add keys so that they can have a verified OS of their choice. Of course, there's very little profit motive to do such a thing.

[–] [email protected] 32 points 6 days ago* (last edited 6 days ago) (3 children)

Google doesn't want distributions of open source Android without Google services to be a viable option for mainstream users because that would reduce their ability to extract profits from the Android ecosystem.

While the focus is surely more on OEMs than end users at this point, I'm sure Google wants to keep the difficulty level for end users high enough that it remains niche.

[–] [email protected] 70 points 6 days ago (8 children)

I think the main reason third-party ROMs aren't more popular is that Google and certain app developers fuck with people who use them. The article addresses the difficulties later on, but comes up short in my view on just how much of a hassle it is for someone who isn't a tech enthusiast who wants, for example to keep an older phone up to date for security reasons.

I think the main motivation for Google is limiting user control over the experience. More user control leads to unprofitable behaviors like blocking ads and tracking, which is also the motivation for recent changes to the Chrome web browser that make content blocking extensions less effective. In all cases, companies that try to take away user control claim the motivation is security, usually for the benefit of the user.

[–] [email protected] 13 points 1 week ago

Zero.

I mainly look at my subscribed feed, which contains mostly topics I want to see in communities moderated well enough I rarely see anybody being horrible.

[–] [email protected] 8 points 2 weeks ago (1 children)

He's already a convicted felon, and yet he remains free.

If you're referring to the Logan act, nobody has ever been convicted under it in more than two centuries, and it's probably unconstitutional. Is it bad that Trump chats with Putin? Absolutely. It is a crime? Unlikely.

 
  • Old leather wallet
  • Flashlight (Skilhunt H150)
  • Knife (Spyderco UKPK)
  • Pepper spray (Sabre Red, with a pocket clip from a random flashlight)
  • Phone (Pixel 4A)
  • Keys, and another flashlight (Skilhunt EK1)
  • Flash drive (Sandisk 128gb)
  • 1.38€
15
submitted 4 months ago* (last edited 4 months ago) by [email protected] to c/[email protected]
 

I've been self-hosting email with Maddy for a bit, but haven't shared any of the addresses widely yet in part because I haven't set up a spam filter. I'm pleased with Maddy; there's much less to learn to get a server up and running with sane default behavior than with the email software of old.

Ideally, I'd like to go beyond just spam filtering and have something with arbitrary categories like newsletters and password resets. I would prefer that it learn categories when I move messages to IMAP folders from a mail client. Maddy can feed messages into arbitrary programs and pick a destination folder based on their output.

Web searches turn up a ton of classification programs, most of which seem to be more interested in playing accuracy golf with well-known corpora than expanding functionality beyond simple spam filtering.

 

I often use a commercial VPN service, which I suspect is not rare among Lemmy users. Most of the time, I'm able to post to lemmy.world, but on occasion I am not. The default web UI provides zero feedback, just a spinning submit button forever, but if I look in the browser dev tools, I can see it's being blocked.

I understand that some limitations are necessary to prevent spam and other abuse, however this is a very blunt instrument. The fact that I have a 10 month old account with consistent activity should outweigh any IP address reputation issues.

Perhaps the VPN limitations could be narrowed in scope to cover only account creation and posts from young accounts.

 

If I want to quickly pitch "you should follow X, Y, and Z using RSS because [problems with social media]" to people who have never heard of RSS, what readers should I recommend?

I want at least web (not self-hosted), Android, and iOS options. Native apps for Mac and Windows would be nice as well. Linux users probably already know what RSS is.

There absolutely must be a free option good for at least 25 feeds because unfamiliar tech is a hard enough sell without having to pay. I'll grudgingly accept ads if that's the tradeoff for something beginner-friendly.

 

When I attempt to upload images to lemmy.world via the desktop web UI, I get the following error message:

SyntaxError: JSON.parse: unexpected character at line 1 column 1 of the JSON data

Looking at network traffic in dev tools, I see that I'm getting a 403 page from Cloudflare saying:

Sorry, you have been blocked You are unable to access lemmy.world Why have I been blocked? This website is using a security service to protect itself from online attacks....

I also get error messages when trying to upload images using Connect and Sync on an Android device. I successfully uploaded images in the past.

 

We just hit 2000 subscribers! I’d like to thank everyone for showing up here to create a new community, and what better way than giving stuff away?

I’m giving away the Nitecore MH10 v2 I reviewed. I can ship it anywhere in the USA or EU, but EU winners will have to wait until mid September. This is a basic, beginner-friendly flashlight that can accept almost all 18650 and 21700 batteries.

To enter, leave a top-level comment on this post before midnight UTC on Sunday, August 27, 2023. Only accounts that have posted or commented on /c/flashlight prior to this being posted are eligible to win.

 
  • Skilhunt M150 v2 (519A swap)
  • Kershaw Launch 5
 

I just updated my Mastodon server to the latest version due to a security vulnerability. I got a 500 page and error:0308010C:digital envelope routines::unsupported in the logs from mastodon-web.

I could reproduce by running bin/webpack from the command line. Some searching led me to try Node 16 LTS, but then I get an apparently blank page when I load the site and call to eval() blocked by CSP in the browser console.

The API works normally; this only affects the website.

1
submitted 1 year ago* (last edited 1 year ago) by [email protected] to c/[email protected]
 

I want a folding knife that can get away with most most of the things I know better than to do with a folding knife. That leads to specific criteria:

  • Price: under $100, lower is better. I might break it.
  • Lock: crossbar, backlock, compression, or something similarly strong. Not liner/frame/button. I might want to trust the lock more than is prudent.
  • Steel: tough stainless like AEB-L, 14C28N, or Nitro-V. I might baton through salt-driftwood with it and put it away wet. See toughness chart.
  • Blade: Ideally 3.25-2.5" (85-90mm) and a tip that isn't dainty. I might pry with it.
  • Pivot: washers, not bearings. I might get mud in it.
  • I dislike thumbstuds, but will accept them if they're not in the cutting path.
view more: next ›