Seirdy

Seirdy, 1 month ago to random

For CSS Naked Day, I decided to do something a little different. I didn’t want to actually disable my stylesheet: very long lines of small text aren’t terribly accessible, and fingerprinting-averse readers of my Onion site may not wish to zoom in (I know for a fact that these people exist; I’ve spoken to them, and I don’t like reducing my readers to numbers in an analytics dashboard).

Instead, I made CSS Naked Day participation opt-in with a new a query parameter to the URLs: Just add ?sandbox=broken to the end of any URL on seirdy.one. This query parameter sets a maximally-restrictive Content-Security-Policy header, instructing your browser to block CSS, images, media, and more from loading. The only thing that the CSP will allow is submitting forms (Webmentions). See my CSP Bug Reproduction page for other values you can give the sandbox parameter on seirdy.one and its Onion location.

This does not apply to mirrors of my site, such as the envs.net mirror.

---

Originally posted on seirdy.one: See Original (POSSE). #CSSNakedDay

Seirdy, 1 month ago to random

ACAB includes the Paw Patrol

Seirdy, 1 month ago to Blog

New #blog post: MDN’s AI Help and lucid lies.

This article on AI focused on the inherent untrustworthiness of LLMs, and attempts to break down where LLM untrustworthiness comes from. Stay tuned for a follow-up article about AI that focuses on data-scraping and the theory of labor. It’ll examine what makes many forms of generative AI ethically problematic, and the constraints employed by more ethical forms.

Excerpt:

I don’t find the mere existence of LLM dishonesty to be worth blogging about; it’s already well-established. Let’s instead explore one of the inescapable roots of this dishonesty: LLMs exacerbate biases already present in their training data and fail to distinguish between unrelated concepts, creating lucid lies.

A lucid lie is a lie that, unlike a hallucination, can be traced directly to content in training data uncritically absorbed by a large language model. MDN’s AI Help is the perfect example.

---

Originally posted on seirdy.one: see original. #MDN #AI #LLM #LucidLies

Seirdy, 1 month ago to Blog

New #blog post: MDN’s AI Help and lucid lies.

This article on AI focused on the inherent untrustworthiness of LLMs, and attempts to break down where LLM untrustworthiness comes from. Stay tuned for a follow-up article about AI that focuses on data-scraping and the theory of labor. It’ll examine what makes many forms of generative AI ethically problematic, and the constraints employed by more ethical forms.

Excerpt:

I don’t find the mere existence of LLM dishonesty to be worth blogging about; it’s already well-established. Let’s instead explore one of the inescapable roots of this dishonesty: LLMs exacerbate biases already present in their training data and fail to distinguish between unrelated concepts, creating lucid lies.

A lucid lie is a lie that, unlike a hallucination, can be traced directly to content in training data uncritically absorbed by a large language model. MDN’s AI Help is the perfect example.

---

Originally posted on seirdy.one: see original. #MDN #AI #LLM #LucidLies

Seirdy, 1 month ago to random

the sheer terror of knowing that one of my text/html webpages isn’t well-formed XHTML5 right now.

cassidy, 1 month ago to GNOME

IT’S (maybe) HAPPENING! https://gitlab.gnome.org/Teams/Design/initiatives/-/issues/152

#GNOME #GNOMEdesign #Inter #font

18+ Seirdy, 1 month ago to random

some people find the term “user” problematic but i still use it because it’s better than “people, robotgirls, puppyboys, foxenbies, shadowy horrors beyond mortal comprehension, Waluigi, etc”

volpeon, 1 month ago to random

The internet is like 90% ads and SEO, what even is the point ​:woozy_baa:​

Seirdy, 1 month ago to random

A really brief #FediBlock:

If you blocked shitposter.club, it now has a related instance shitposter.world. If you don’t find SPC block-worthy, you can ignore this post.

• SPW shares many members.
• If your blocklist is public and was picked up by a blocklist-scraper, SPW probably already proactively blocked you. If it didn’t or if you want to cover your bases, you’ll need to update your entry.
• Receipts for the original SPC instance.

#FediBlockDetails.

Seirdy, 1 month ago to random

mail servers phasing out tlsv1.0 and tlsv1.1 sounds like a great idea until your landlord wonders why you didn’t receive emails from their tlsv1.0-only server about them increasing your rent, or until you never get the offer letter from the place you applied to, or 500 other things that most people have to deal with at some point.

18+ Seirdy, 1 month ago to random

The xz/liblzma thing is a big deal if your distro builds from tarballs and patches openssh to integrate with systemd, which links to them. the backdoor could then compromise ssh auth.

if your distro doesn’t, it might still be bad in other unknown ways so you still need to avoid the impacted versions. you’re just probably safer and can calm down a little.

#xz #backdoor

Seirdy, 1 month ago to random

10000 posts, AMA

mnot, 1 month ago to random

RFC 9421 specified HTTP Signatures -- try it out online here: https://httpsig.org

18+ Seirdy, 1 month ago to random

bugzilla is good actually

Seirdy, 2 months ago to random

In light of recent events, some people asked me for VPS advice.

uh

i don’t know what I did to deserve this reputation; it’s been years since i’ve rented from a new provider. i will say:

go wild for your fun projects, but if it’s important:

please oh please check the ToS, SLA, customer support, staff hours, data processing agreement (if it exists), and user reviews (paying special attention to how different providers cancel service) before you pick that too-cheap-to-be-true VPS provider to host your most important projects. If they’re a small provider, see who else uses them (you probably don’t want to share a box with someone too shady).

if you’re hosting a large community or your livelihood, talk to staff before you commit to an upstart provider. ask about any of the above you couldn’t find on your own.

Oh, and use a custom ISO if you’re not familiar with your provider’s customizations to OOTB images. Providers nowadays preconfigure their images a lot with questionable regard for security.

With that preface out of the way: Server Hunter is a great resource for finding new low-cost providers. Remember that below a certain price (like $3/mo), you probably get what you pay for. I won’t pay less than that for anything important with a fixed IPv4.

FediPact, 2 months ago to FediPact

my new favorite thing is people on lemmy talking about the design of https://fedipact.online lmao

#FediPact #meta #threads

Demigodrick https://fedipact.online/ Warning: very bright WizzCaleeba@lemm.ee Eyes have to adjust after looking at that site Demigodrick Everything looks wrong for a minute or two afterwards I can only hope that in some senior Meta management meeting they pulled this website up as an issue/concern, and a bunch of overpaid middle managers had to stare at the pinkness for hours upon end in a depressing corporate boardroom.

Seirdy, 2 months ago to random

Sorry for skipping February’s emote update. For March, we added 429 new emotes. :march:

New packs:

• Added 5 Pochita emotes :pochita_happy:
• Added 56 neorat emotes by @onemuri :neorat:
• Added 10 Pinkiemme emotes :pinkiemme_peek:
• Added 152 yingmotes (default ying color scheme) by @mynotaurus (v2.2, not v3.0 yet) :ying:
• Added 53 akemi emotes :akemi_happy:
• Added 13 Alpaca emotes :alpaca_wah:
• Added 29 floof emotes by @volpeon :floof:

Updates to existing packs:

• Added 63 new blobfox emotes (h/t to @aris) :blobfoxboopgoogly:
• Added 4 blobfox_extra emotes :blobfox_yum:
• Added 28 neofox_extra emotes :neofox_think_about_it:
• Added 8 neocat_extra emotes :neocat_catmask:
• Added 1 new xenia emote by @rinidisc :xenia_smug:
• Added 7 custom emotes (inc. :high_five: by @aris)

Thanks to @aris and @starshine for updates to the the unofficial neofox-, neocat-, and blobfox-extra packs! See the README for more credits!

We’re at 5272 emotes now!

RE: https://pleroma.envs.net/objects/05b04bf1-53bc-4863-9673-0caba9b6e078

Seirdy, 2 months ago to random

i should make a set of WCAG violation bingo cards and invite a bunch of friends over for wcag bingo on random websites.

if any of my friends knew what wcag meant.

Seirdy, 2 months ago to random

I recently learned that Star Labs’ laptops support Coreboot, apparently with v-boot support (FOSS verified boot that’s much better than Secure Boot). And the prices seem better than those for a Framework, even with aftermarket parts.

I guess my plans for a Framework are on hold.

joel, 2 months ago (edited 2 months ago) to android

Just a bit of a ramble on #android and #apple and #privacy and #security inspired by a recent post by @beardedtechguy.

It's a bit of a ranty post, but not trying to be mean :blobfoxheart:

This is day 19 of #100DaysToOffload

https://joelchrono.xyz/blog/apple-android-security-and-features/