@amju_wolf@pawb.social avatar

amju_wolf

@amju_wolf@pawb.social

This profile is from a federated server and may be incomplete. Browse more on the original instance.

amju_wolf,
@amju_wolf@pawb.social avatar

Yeah, just like headphone jacks. Oh wait…

amju_wolf,
@amju_wolf@pawb.social avatar

They aren’t really even in budget phones anymore. When you don’t want a notch and want a headphone jack there is almost nothing to choose from: www.gsmarena.com/results.php3?nYearMin=2023&chk35… :/

amju_wolf,
@amju_wolf@pawb.social avatar

It’s not just that they demand more, they demand more/faster growth all the time. It doesn’t matter that the economy has slowed down to borderline recession, it doesn’t matter that they pretty much captured all the market they can, they still need to make more and more money every quarter otherwise they’re considered a failure even if they are one of the biggest companies in the world.

amju_wolf,
@amju_wolf@pawb.social avatar

It generates code and then you can use a call to some runtime execution API to run that code, completely separate from the neural network.

amju_wolf,
@amju_wolf@pawb.social avatar

Life isn’t a zero sum game where you have to optimize material wealth. Some people do things for others just because they like doing it, because they have the means to do so, or because they simply want to help others.

Sure, there are costs involved, but that’s true for literally everything if you account for opportunity cost. The vast majority of people choose to waste time completely unproductively, with no objective benefits to their lives (often with objective disadvantages), so is it hard to imagine that some people aren’t like that and instead choose to help/provide for others whole perhaps having some other non-material benefits like learning something or just becoming liked within a community?

How do we know if there aren't a bunch of more undetected backdoors?

I have been thinking about self-hosting my personal photos on my linux server. After the recent backdoor was detected I’m more hesitant to do so especially because i’m no security expert and don’t have the time and knowledge to audit my server. All I’ve done so far is disabling password logins and changing the ssh port....

amju_wolf,
@amju_wolf@pawb.social avatar

…which shouldn’t be an issue in any way. For extra obscurity (and convenience) you can use wildcard certs, too.

amju_wolf,
@amju_wolf@pawb.social avatar

Have been for a long time. You just have to use the DNS validation. But you should do that (and it’s easy) if you want to manage “internal” domains anyway.

amju_wolf,
@amju_wolf@pawb.social avatar

What you can (and absolutely should) do is DNS delegation. On your main domain you delegate the _acme-challenge. subdomains with NS records to your DNS server that will do cert generation (and cert generation only). You probably want to run Bind there (since it has decent and fast remote access for changing records and other existing solutions). You can still split it with separate keys into different zones (I would suggest one key per certificate, and splitting certificates by where/how they will be used).

You don’t even need to allow remote access beyond the DNS responses if you don’t want to, and that server doesn’t have anything to do with anything else in your infrastructure.

amju_wolf,
@amju_wolf@pawb.social avatar

Yes, that’s one option. Then you only have to distribute the certificates and keys.

Or you allow remote access to that DNS server (Bind has a secure protocol for this), do the challenge requests and cert generation on some other machine. Depends on what is more convenient for you (the latter is better if you have lots of machines/certs).

Worst case if someone compromises that DNS server they can only generate certificates but not change your actual valuable records because these are not delegated there.

amju_wolf,
@amju_wolf@pawb.social avatar

Packages or dependencies with only one maintainer that are this popular have always been an issue, and not just a security one.

What happens when that person can’t afford to or doesn’t want to run the project anymore? What if they become malicious? What if they sell out? Etc.

amju_wolf,
@amju_wolf@pawb.social avatar

…or maybe they just don’t want a busy looking logo.

Does Reddit shadowban mentions of Lemmy?

In the months since I deleted my Reddit accounts and joined Lemmy, the lack of user base growth has made it clear that we need some users to stay on Reddit as a means of shepherding more users over on an ongoing basis. Otherwise, Reddit simply got what it wanted: less users who make a fuss about how it manages its platform...

amju_wolf,
@amju_wolf@pawb.social avatar

“Removed by Reddit” implies admin action though.

Android phone saving metadata for screenshots (i.ibb.co)

I always remove this data from my screenshots before sharing, but is there any way to prevent this from happening in the first place? I’ve searched and searched, but all I can find is information about how to remove the data after the fact, which I already know how to do, but it would sure be nice if it never got added in the...

amju_wolf,
@amju_wolf@pawb.social avatar

A precise android version could for example be used to target you with an exploit for that version.

I agree with OP, it shouldn’t behave like this because the expectation with screenshot software is that it doesn’t add any metadata and if it would it should be explicit and probably opt-in.

amju_wolf,
@amju_wolf@pawb.social avatar

Except you aren’t questioning anyone’s views, you’re making an argument that barely touches the subject it responds to. And doing so in a very argumentative and condescending way.

So yeah, it doesn’t really belong in a civil discussion.

amju_wolf,
@amju_wolf@pawb.social avatar

Waiting for Proton to acknowledge and fix critical bugs that can cause data loss was way more painful… took them years with the solution being “just wait for the bridge rewrite it will be (most likely) fixed there”.

amju_wolf,
@amju_wolf@pawb.social avatar

If you ask a user to show you a “core dump” they’re more likely to shit on their floor and send you a photo than do what you actually mean.

Telemetry is absolutely crucial in determining what to focus on in development, to fix issues the users might not even realize exist. Especially for projects that aim at the general public. As long as it’s communicated clearly, used truly only for development purposes and an opt-out is available there’s nothing wrong about it.

amju_wolf,
@amju_wolf@pawb.social avatar

Chrome dev tools are better for JS debugging, but Firefox wins with everything else, IMO. Especially their flexbox, grid and font visualizations and debug tools are amazing.

amju_wolf,
@amju_wolf@pawb.social avatar

Security is always applied in layers. If you aren’t inconvenienced by it, it’s a really solid layer to use. Doesn’t matter how ‘paranoid’ you are, it’s a solid strategy.

amju_wolf,
@amju_wolf@pawb.social avatar

Their quality is adequate for the price and they are open enough to be used with any NVR.

If you are worried about privacy you should segment the cameras onto their own network (VLAN) or at the very least block them on the firewall from accessing the internet, which you should do anyway.

amju_wolf,
@amju_wolf@pawb.social avatar

That’s not something that’d likely scale enough to bring any meaningful sum of money.

Even then it targets a tiny, tiny minority of their even current userbase, let alone if they want to approach more “average” users.

amju_wolf,
@amju_wolf@pawb.social avatar

…and there is no way to do that, currently.

amju_wolf,
@amju_wolf@pawb.social avatar

On the contrary, it’s the only comparison you can make, since they are literally the only options.

amju_wolf,
@amju_wolf@pawb.social avatar

Anything that can compute can do it. The important part is that it has an associated non-insignificant cost.

amju_wolf,
@amju_wolf@pawb.social avatar

They also assert that Bluesky doesn’t federate (it currently doesn’t, but the protocol is designed for federation!) when it’s clear that it now does.

I’m not surprised about the skepticism there though. These are just promises, and we all know that a for-profit entity will happily sacrifice any promies if it means they make more money that way. Also depending on how exactly that federation will work it might be practically useless as well.

amju_wolf,
@amju_wolf@pawb.social avatar

Unfortunately not; the UK is more or less an exception because they were there very early and copied the US model.

Time has shown though that everyone wants second level domains anyway so even .uk is now open to anyone and they have the weird hold-over .co.uk and similar domains.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • JUstTest
  • ngwrru68w68
  • rosin
  • modclub
  • DreamBathrooms
  • InstantRegret
  • magazineikmin
  • khanakhh
  • osvaldo12
  • tacticalgear
  • Youngstown
  • everett
  • slotface
  • kavyap
  • anitta
  • thenastyranch
  • mdbf
  • tester
  • GTA5RPClips
  • provamag3
  • Leos
  • Durango
  • ethstaker
  • cisconetworking
  • normalnudes
  • megavids
  • cubers
  • lostlight
  • All magazines