Salta al contenuto principale



Dell confirms breach of test lab platform by World Leaks extortion group


A newly rebranded extortion gang known as "World Leaks" breached one of Dell's product demonstration platforms earlier this month and is now trying to extort the company into paying a ransom.

https://www.bleepingcomputer.com/news/security/dell-confirms-breach-of-test-lab-platform-by-world-leaks-extortion-group/

Questa voce è stata modificata (1 mese fa)


Ex-officer sentenced to 33 months in prison in Breonna Taylor case


Brett Hankison, a former Kentucky police officer who was convicted in the death of Breonna Taylor, a 26-year-old emergency medical technician, was sentenced on Monday to 33 months in prison.

Taylor was shot and killed on March 13, 2020, during a botched drug raid authorized by the Louisville Metro Police Department. A Louisville detective at the time, Hankison, 46, was found guilty last November of violating Taylor's civil rights while executing a search warrant on her home, which resulted in the tragedy.

Hankison will not report directly to prison, with U.S. District Judge Rebecca Grady Jennings saying during Monday's sentencing hearing that the Bureau of Prisons will decide when his sentence begins, according to The Associated Press. His prison sentence will be followed by three years of supervised probation.

#USA


Tesla is the least-trusted car brand in America




I cant be the only one that sucks at playing against humans but am OK against bots???


basically, I have a lot of anxiety when playing with people, and my ranking is around 600ish, but whenever i play a bot the analysis suggests that i paid played at level 1100 or 1500.
in reply to 🍉 Albert 🍉

The moment you start playing for ELO instead of fun is the moment you should reconsider playing.


Sweden, Sex Work, Screens: The Criminalisation of Online Sex Work and Article 8 of the ECHR


Sweden has quietly taken a radical step: it is now illegal to purchase online sexual acts. This move advances Sweden’s long-standing “end demand” policy model for tackling sexual services from the physical realm, into the digital. Yet it seems to overlook the significant differences between the two spheres – in terms of behaviour models, profiles, and market dynamics – and how such differences may be taken into account when determining the persuasiveness of the law’s rationale. This becomes especially clear when measured against the protections enshrined under Article 8 of the European Convention on Human Rights (ECHR) and recent Strasbourg case law.

While the criminalisation of the purchase of in-person sexual services has been judged to be compatible with Article 8, the underlying reasoning rests on factors that do not translate to the online sphere: combatting prostitution and human trafficking, a lack of consensus on sex work policy across Europe, and an inability to parse the harms caused by the law from the harms caused by sex work itself. Sweden’s extension of its “end demand” policy into digital sex work thus risks overstepping the boundaries of Article 8 of the ECHR and reveals how laws that are directly transplanted from the offline to the online sphere without due thought may lead to the erosion of private digital rights.



Lavrov Issues Strong Warning Against Goading Ukraine Into Acts of Terrorism






in reply to icegladiator

You would have better luck figuring out the chemical composition of the material then tracking all sales of said material. Still would be next to impossible but that's a more likely means of identifying someone than the printer itself.
in reply to icegladiator

Use a different print head, sections of print bed, or just entirely new print beds and you defeat this 'tracing'


US withdraws from UNESCO over ‘anti-Israel bias’


in reply to daydrinkingchickadee

USA: Humanism and mercy are fine, but don’t use them too much, or for every group
in reply to daydrinkingchickadee

I look forward to the day that we can put our politicians on trial for supporting, enabling, and committing genocide .


How can I share/store sensitive data for family


I need to start making plans for when I am gone, much sooner than I thought, and I realized our finances are pretty opaque to my spouse. Our bank account is shared, but there are other sites that only I have access to.

The easiest solution would be to physically write down logins and what needs done, put it in an envelope, and tell my family where that envelope is. I'm not thrilled about that, because I would have to shred and rewrite it every time I update a password or a URL changes, and it'd be vulnerable to nosy guests.

Putting it in a shared Google Doc would be easiest for everyone. But then Google has that data. Even supposing I trust a cloud SaaS provider not to misuse the data (which is a big 'if') I do not trust them to never have a data breach.

Self-hosting seems like the next step, except I expect my home server to be the first thing to collapse once I'm gone. Filing login info with an estate attorney would still require frequent updates. Putting a document on a flash drive risks data loss, but is what I'm leaning towards.

Is there a solution I'm missing?

in reply to adhocfungus

I use Vaultwarden with two user accounts but with an "organization" that contains passwords that we both might need access to at some point. They then get updated at the same time the password is updated since it's where I store all passwords.
in reply to adhocfungus

I would use Keepass. You would have a single file, opened with a single password, that you could share with them however you want.

Wishing you the best

adhocfungus doesn't like this.


in reply to vermaterc

I quit my job in public accounting for many reasons, but the primary one was the forceful adoption of LLMs to replace associates.

I told the dimwits at the top that it was a mistake, because LLMs are incompetent even when the information fed to it was perfect, and that was rarely the case in practice.

Our ultra wealthy clients were notorious for giving us the most incomplete and asinine information, and it often took someone with decades of experience to decipher what the fuck their personal assistants are even talking about.

They went ahead anyway because of the high cost of wages, of course, and I made my exit because I did not wish to be complicit in such a monumental mistake.

Lmfao the LLM they laid associates off and paid half a million dollars for made up fake ledger accounts when accounts didn't reconcile, and none of the dumbasses left noticed in time because they hadn't done associate-level work in decades.

It also lied all the time, even when you asked it not to.

The damage was done and the biggest clients started leaving, so they begged us all to come back but I got obsessed with baking bread and I ain't about to neglect my sourdough starters to help a group of people who would lose a battle of wits against yeast.

reshared this





UN Statements Undercut New Israeli Report on 10/7 Sexual Violence


Major news organizations, most prominently the New York Times, have promoted the idea of systematic sexual violence at opportune moments to justify Israel’s ongoing genocide in Gaza. The first major salacious headlines and assertions emerged in late 2023, when Israel was campaigning to restart its killing during a brief ceasefire. The latest effort to revive this narrative follows the same pattern as its predecessors—and, indeed, is more overtly political, with the report spending less airtime on the well-being of women than on reasons we should roll back what is left of international law.

The UN, however, has stated multiple times that it does not have evidence of systematic sexual abuse by Hamas or any other militant group on October 7, 2023. A top United Nations official issued a statement last week that stands in direct contradiction to the new Israeli report.

Reem Alsalem, the UN Special Rapporteur on violence against women and girls, affirmed in her statement this week that though the UN had not found “systematic” sexual violence: "It is my understanding that neither the Commission nor any other independent human rights mechanism established that sexual or gender-based violence was committed against Israelis on or since the 7th of October as a systematic tool of war or as a tool of genocide," Alsalem wrote in the statement, first reported by NBC News.

In a move that is highly unusual, the Dinah Project report is now hosted on the UN’s website among its own reports on sexual violence and global conflict. Drop Site News asked Patten why she was hosting the report, but she did not respond. The UN fact-finding mission led by Patten and so dearly held by the Dinah Project, at times, directly contradicts what the Dinah Project argues.



basically every Jubilee video - Man Carrying Thing



in reply to LihmaLähmäLehmä

Probably part of their plan to get rid of ad blockers for good.
Questa voce è stata modificata (1 mese fa)
in reply to LihmaLähmäLehmä

It looks a lot like their smart TV interface which has always been less functional than their web or mobile app interface. They're probably trying to cut the UI down to just the bare minimum that the majority of casual users regularly use. In part I'd assume to reduce the maintenance overhead, but I'm sure it likely will also make things harder for ad blockers.

in reply to geneva_convenience

So if a Black person votes for something, all who vote for it are Black?
in reply to miss_demeanour

AOC says that progressives (including those who voted for the amendment) are welcoming Neo Nazis this is very clear cut.
Questa voce è stata modificata (1 mese fa)


KI-Tool ver­steckt Inkompetenz


Ein Vibe-Coder schreibt ohne es zu mer­ken auf X, wie kaputt Vibe-Coding ist: Ein Sta­­ging-Sys­­tem greift direkt auf die Pro­duk­ti­ons­da­ten­bank zu. Kei­ne Ver­si­ons­kon­trol­le mit Git. Tests funk­tio­nie­ren laut den Posts nur auf dem Pro­duk­ti­ons­sys­tem. Und der Höhe­punkt: Ein KI-Tool warnt expli­zit „I can not be trus­ted, I will vio­la­te the rules“ und „hire human deve­lo­pers you can trust“ – trotz­dem ver­wen­det der Typ das Tool weiter.

Da hab ich schon Mei­nung zu.

jascha.wtf/ki-tool-versteckt-i…

#Claude #Inkompetenz #KITools #MonsterEnergy #Softwareentwicklung #VibeCoding

Questa voce è stata modificata (1 mese fa)


Quanto costa un funerale oggi in Italia?


Organizzare un funerale in Italia può costare da 1.800 a oltre 6.000 euro. Scopri cosa è obbligatorio, cosa no e quali aiuti economici esistono.
#News

in reply to Lyra

Purtroppo me l'hanno regalato, quindi l'autore è stato pagato e non posso fare resi

16.50€ per questa porcheria!

All'interno altre gemme "ai slop" come fette di banana con il picciolo, petti di pollo con ossa, forchette dai denti storti, ecc

Questa voce è stata modificata (1 mese fa)
in reply to Moonrise2473

puoi usarlo come ferma porte o come sottobicchiere 🙂

L’angolo del lettore reshared this.




Ofcom (British Watchdog): Public service TV should work 'urgently' with YouTube.


Ofcom warns traditional public-service TV is endangered
Recommendation for prominence on third-party platforms part of six-point action plan
Urgent clarity needed from Government on how TV will be distributed to reach audiences in future
Broadcasters must work more together, and with global tech firms, to survive

Urgent steps must be taken to ensure that public service media content is easy to find and discover on third-party platforms, under new Ofcom recommendations to secure the system’s survival.

https://www.ofcom.org.uk/tv-radio-and-on-demand/public-service-broadcasting/public-service-content-should-be-findable-on-youtube

Questa voce è stata modificata (1 mese fa)

in reply to Davriellelouna

If openai can find a use for the government that'll be swell.

They tend to get it under everybody's feet otherwise.

Questa voce è stata modificata (1 mese fa)

in reply to sabreW4K3

But if you say that almost all adult Israelis are IDF militants, which is actually correct, everyone loses their mind.


Laura Santi è morta dopo aver avuto accesso al suicidio assistito, infine


Molto toccante anche la lettera lasciata da Laura Santi sul sito dell'associazione Luca Coscioni
#News

in reply to themachinestops

And Nintendo JP says that “Nintendo Switch and Nintendo Switch 2 cannot be remotely located, their users remotely identified nor disabled over the Internet” (tweet in Japanese warning people against accidentally losing or getting their consoles stolen over summer vacation)

twitter image

But I bet it is more like “Nintendo won’t disable them remotely even if people report ones stolen to them with serial numbers and police reports”, but they’ll happily do so if they caught you using the console in an unapproved manner in their eyes.

Questa voce è stata modificata (1 mese fa)
in reply to 1Fuji2Taka3Nasubi

This is by definition "we are just assholes"

Someone play for 5 minutes with a mig switch a legit dump of their own, legally purchased game, just for convenience, to have multiple games on the same cart? The console is now almost useless. You can't play any digital games that you purchased with real money, and physical games can't get any update. Game requires a 20gb day one patch to be playable? Though luck buddy, go to buy a new console!

They stole your console? Oh no! Yes, we absolutely could do the same, as it's bound to your Nintendo account and we could add a button "report as stolen and ban it from internet" in your profile. But we won't, go to buy a new console!

in reply to themachinestops

Guys hi, just looking for some support share, a Fantasy Adventure Story, for all ages and just some entertain with some storyes: - maybe you are curious (many was not very kind just for share a film), heartless with hatefull speach and respekt always


Lyle Lovett - Release Me (2012)


La sorte toccata da tempo ad altri colleghi è giunta anche per Lyle Lovett: il musicista texano scioglie il quasi trentennale rapporto con il colosso country della Curb records (seppure in anni recenti passato per le maglie della Lost Highway) per affrontare una inevitabile indipendenza... Leggi e ascolta...


Lyle Lovett - Release Me (2012)


immagine

La sorte toccata da tempo ad altri colleghi è giunta anche per Lyle Lovett: il musicista texano scioglie il quasi trentennale rapporto con il colosso country della Curb records (seppure in anni recenti passato per le maglie della Lost Highway) per affrontare una inevitabile indipendenza. Questione già affrontata e d'altronde dirimente in quest'epoca: come John Hiatt, Steve Earle e altri campioni dell'Americana il ruolo di Lovett non è più quello di capofila, né evidentemente le vendite e l'appeal dell'artista possono convincere un baraccone discografico a mantenere in piedi contratti che nella loro logica non fruttano i risultati di un tempo... rootshighway.it/recensioni/lov…


Ascolta: album.link/i/507810558


HomeIdentità DigitaleSono su: Mastodon.uno - Pixelfed - Feddit




A Self-hosted, BSD-native Gemini Protocol Server Stack


For those who are adventurous enough to explore the non-http corners of the Internet, the Gemini protocol is a delightful experience to use. It has been around a number of years, making the biggest bang around the time when discontent with the web’s gener

For those who are adventurous enough to explore the non-http corners of the Internet, the Gemini protocol is a delightful experience to use. It has been around a number of years, making the biggest bang around the time when discontent with the web’s general demise started to reach current heights (so maybe around 2022).

My “capsule”, Vigilia, is self-hosted, and has been since its inception. It used to run on a disused Macbook Pro running Fedora Server, under our TV at home, but since then I have become much more confident in using OpenBSD. It used to run on a little Python CGI script I wrote, which also started to feel too bloated and complex, with too many bells and whistles that I frankly had no need for. It was time to make a change, so I replaced the old Macbook with a Raspberry Pi, and Fedora with OpenBSD, and then took my time to figure out a new “status quo”.

0. Philosophy


I wished to create a more Unix-minded stack. The more I have been using OpenBSD and Unix systems the more I have been sold on the “everything is a file” philosophy, as well as opting to use internal tools as much as possible rather than reinvent the wheel on my own. That is to say, I’d much rather work with simple scripts and shell commands than write complicated and buggy code.

So with that in mind, here’s the stack that I settled on after a some trial and error:

1. Hardware


I have absolutely no intention to expose our home IP address via DynDNS or similar. However, I like to be in control of my data as much as possible: ideally as little of my data should be hosted on “someone else’s computer”. If I can’t unplug the hard disk and put it in a drawer, I can’t guarantee it’s security from a hack.

So Vigilia is actually two servers. The server with the actual data is at home, in running on a Raspberry Pi 4B. But as a “public front” vigilia runs a reverse-proxying gemini server on a standard VPS over at OpenBSD.amsterdam.

2. Network setup


I will not go into the intricacies of the dual-wan setup in this post I have at home; but to keep things connected to each other I am using Tailscale to tie the servers together in a Virtual LAN. This is incredibly handy because they get to have easy to remember static IP addresses, all over an encrypted channel.

So here’s the rough idea:

  • Vigilia.cc’s DNS records resolve to the OpenBSD.Amsterdam VPS running gmid
  • VPS and home server both run tailscale
  • VPS reverse-proxies incoming gemini connections to home server


3. Gemini server config


Both the VPS and the local server run [url=https://gmid.omarpolo.com]gmid[/url]. It’s a fast and simple gemini server that mirrors OpenBSD’s httpd; which means it is very easy to configure, it is stable and secure. It can run in chrooted environments, and as its own user, so it’s just a Good Thing all over. Most importantly, it can relay and reverse-proxy TCP connections with sni fields intact, which is something for example OpenBSD’s relayd, built primarily for HTTP, does not do.

My gmid config files look something like this:
### REMOTE_SERVER:/etc/gmid.conf#user "_gmid" # running it as its own user to achieve privilege separationchroot "/var/gemini" # and in a chroot so it can't just access random bits of the file systemlog { syslog # log to /var/log/messages}vigilia_pem = "/etc/ssl/PUBLICKEY.pem"vigilia_key = "/etc/ssl/private/PRIVATEKEY.key"public_ip = "46.23.93.41" # OpenBSD Amsterdam VPS' public addresshomeserver = "100.REDACTED.REDACTED.101" # TailScale IP of the home machine public_port = "1965"homeserver_port = "2965"server "vigilia.cc" { listen on $public_ip port $public_port cert $vigilia_pem key $vigilia_key proxy { proxy-v1 # this directive enables some advanced features like forwarding IP Addresses of visitors verifyname off # I found I need to specify this somehow, maybe because of self-signed certs sni "vigilia.cc" relay-to $homeserver $homeserver_port }}
This above allows to listen for connections to vigilia.cc:1965 and forward them to HOME_SERVER:2965. So thus the homeserver has the following configuration:
### HOME_SERVER:/etc/gmid.conf#user "_gmid" chroot "/var/gemini" log { syslog }internal_address = "100.REDACTED.REDACTED.101" # TailScale IP of the home machine internal_port = "2965"# The below are the same certificates that are in use on the VPSvigilia_pem = "/etc/ssl/PUBLICKEY.pem"vigilia_key = "/etc/ssl/private/PRIVATEKEY.key"server "vigilia.cc" { listen on $internal_address port $internal_port proxy-v1 # add proxy-v1 support for relayed connections cert $vigilia_pem key $vigilia_key log on location "*" { auto index on # enables directory listing }}

4. Getting the files to the Server


Because I am lazy I want to edit files locally and I want them to magically appear on my capsule. So I am using [url=https://syncthing.net/]syncthing[/url] to copy things over automagically from DESKTOP:~/public_gemini to HOME_SERVER:/var/gemini.

Syncthing runs most reliably as my own user, I found. To do this it is best to follow the documentation for the Syncthing OpenBSD package — but basically it involves starting it via the user’s crontab with the “@reboot” directive. But as it runs as my own user, I need to set the permissions properly. HOME_SERVER:/var/gemini is owned by the _gmid user in the _gmid group so I also added MYUSER on both machines to the same _gmid group, and made sure MYUSER has write access:
#!/bin/sh# HOME_SERVERusermod -G _gmid MUYSERchown -r _gmid /var/geminichmod -r ug=rwx,o=r /var/gemini
Then I set up syncthing on HOME_SERVER. As it is running headless, I needed to access the web interface, which I achieved via SSH tunneling:
$ ssh -L 9999:localhost:8384 HOME_SERVER
This way I could open a browser on DESKTOP and access the server’s Syncthing settings.

So here are the settings:

On the DESKTOP:

  • Syncthing web interface -> Add folder
  • Folder path: ~/public_gemini
  • Folder label: Gemini files (or something)
  • Ignore patterns: “*.sock” (Unix sockets might confuse the poor thing)
  • Sharing: HOME_SERVER
  • Pause syncing for now

On HOME_SERVER:

  • Establish ssh tunnel to HOME_SERVER as described above
  • Open remote Syncthing webinterface on DESKTOP: localhost:9999
  • Accept the incoming share request for “Gemini files” from DESKTOP; but point it to /var/gemini
  • Folder path: /var/gemini
  • Folder label Gemini files
  • Advanced: UNTICK “Wach for changes” because OpenBSD doesn’t seem to allow Syncthing to poke around in /var with those various Go modules and you’d just get errors, like I did
  • Check the Ignore patterns — if it didn’t synchronise “*.sock” then specify it manually

On DESKTOP:

  • Unpause syncing

Now any file you write into DESKTOP:~/public_gemini will sync across to HOME_SERVER:/var/gemini. Yay!

6. Setting up automatic static site generation


Now if you are content to maintain your capsule manually, you are done. As I said I am lazy so I want my little “ssg” script, Lumen, to create index pages for each directory for me. Lumen, I promise, will be made available once I tidy it up.

Lumen basically lists all files recursively and generates an index.gmi for each directory. This means that Lumen has to be re-run each time the folder changes. OpenBSD is acquiring some degree of file watching natively.1 However [url=https://openports.pl/path/sysutils/entr]entr[/url] already exists in ports.

It took a bit of tweaking but basically here’s the command I ended up using, adapted from one of the examples provided in the entr manpage:
$ while sleep 0.1; do find /var/gemini/vigilia.cc/* | entr -nd python3 /var/gemini/cgi/lumen.py -d /var/gemini/vigilia.cc; done
What it does is, in a loop it recursively lists all files every 0.1 seconds in /var/gemini/vigilia.cc, and feeds the output to entr. Then entr runs with -n to specify a non-interactive session (in interactive sessions it also responds to e.g. keystrokes and tty changes – so to be safe, I don’t want that); and with -d to specify it should be looking for changes in the parent folder of any changing files. The looping and the -d directive were added because sometimes I ran into issues when a file got deleted: entr just quit because it could not find the removed file in a “stale” file list it was provided on launch. Lumen needs a -d argument as well to specifiy which directory it needs to work on.

7. System config


Because there are a few other servers like “auld.vigilia.cc” also running on the home machine (the configs for wich aren’t reproduced above for brevity’s sake) and because those rely on a number of CGI scripts I have to start them on launch. I ended up using supervisord for these. Supervisor is a cool little daemon for launching things. I could use rc but supervisord allows me to specify a few extra bits more easily, like redirecting output to syslog and other things.

So for HOME_SERVER, here is my supervisord configuration:
#### HOME_SERVER:/etc/supervisord.conf## [... snip ...][program:gmid]command=/usr/local/bin/gmid -f ; the program (relative uses PATH, can take args)process_name=%(program_name)s ; process_name expr (default %(program_name)s)directory=/var/gemini/ ; directory to cwd to before exec (def no cwd)priority=100 ; the relative start priority (default 999)autostart=true ; start at supervisord start (default: true)startretries=3 ; max # of serial start failures when starting (default 3)autorestart=true ; when to restart if exited after running (def: unexpected)killasgroup=true ; SIGKILL the UNIX process group (def false)stdout_syslog=true ; send stdout to syslog with process name (default false)stderr_syslog=true ; send stderr to syslog with process name (default false)[program:lumen-vigilia_cc]command=/bin/ksh -c 'while sleep 0.1; do find /var/gemini/vigilia.cc/* | entr -nd python3 /var/gemini/cgi/lumen.py -d /var/gemini/vigilia.cc; done'process_name=%(program_name)sdirectory=/var/gemini/priority=102autostart=truestartretries=3autorestart=trueuser=MYUSERNAMEstderr_syslog=truestdout_syslog=true
There are other directives that start the CGI scripts for “auld.vigilia.cc” in the config, omitted here.

Note that you can specify “priority” to control in what order you want the scripts to run. I first want the gemini server to run (100); then I want it to run the CGI scripts (101 — left out of the above example); then I want to run the static site generator’s watcher (102). Notice I am telling explicitly it to run /bin/ksh with a command specified in -c; this is because simply feeding it a complex command confuses supervisord, as I discovered.

One nice feature of supervisord is that it can redirect both stderr and stdout to syslog, so any commands and processes supervisord runs will have their output sent to /var/log/messages, neatly tagged and organised.

Conclusion


So there you have it — my Gemini stack from start to finish. It was a really fun experiment to start to use OpenBSD, instead of reinventing the wheel, or relying on some monolithic CGI scripts. You can do quite a lot with just system internals and a few packages.


  1. The watch utility was added to 7.7-current on 2025-05-19; it will make its way into 7.8 hopefully. ↩︎

Adapted from the original article “Vigilia’s New Gemini Stack” published via Gemini at vigilia.cc on 21 July 2025.



Trying Guix: A Nixer's Impressions


One aspect of Guix I found to be really fascinating: That there is basically no conceptual difference between defining a package as a private build script, and using a package as part of the system.

Let me explain: Say you wrote a little program in Python which uses a C library (or a Rust library with C ABI) which is in the distribution. Then, in Guix you would put that librarie's name and needed version into a manifest.scm file which lists your dependency, and makes it available if you run guix shell in that folder. It does not matter whether you run the full Guix System, or just use Guix as s package manager.

Now, if you want to install your little python program as part of your system, you'll write an install script or package definition, which is nothing else than a litle piece of Scheme code which contains the name of your program, your dependency, and the information needed to call python's build tool.

The point I am making is now that the only thing which is different between your local package and a distributed package in Guix is that distributed packages are package definitions hosted in public git repos, called 'channels'. So, if you put your package's source into a github or codeberg repo, and the package definition into another repo, you now have published a package which is a part of Guix (in your own channel). Anybody who wants to install and run your package just needs your channel's URL and the packages name. It is a fully decentral system.

In short, in Guix you have built-in something like Arch's AUR, just in a much more elegant and clean manner - and in a fully decentralized way.

Questa voce è stata modificata (1 mese fa)
in reply to HaraldvonBlauzahn

I had a go at using guix as a package manager on top of an existing distro (first an immutable fedora, which went terribly, then OpenSUSE). Gave up for a few reasons:

  • As mentioned in the article, guix pull is sloow.
  • Packages were very out of date, even Emacs. If I understand correctly, 30.1 was only added last month, despite having been available since February. I get that this isn't the longest wait, but for the piece of software you can expect most guix users to be running, it doesn't bode well.
  • The project I was interested in trying out (Gypsum) had a completely broken manifest. Seems like it worked on the dev's machine though, which made me concerned about how well guix profiles actually isolate Dev environments. This was probably an error on the dev's part, but I'd argue such errors should be hard to make by design.

All in all I love the idea of guix, but I think it needs a bigger community behind it. Of course I'm part of the problem by walking away, but 🤷

in reply to samc

  • As mentioned in the article, guix pull is sloow.


This one has beem discussed on several forums discussing the original blog post, like here or also here on lobste.rs

Part of the reason for slow pulls is that the GNU projects savannah server, which Guix was using so far, is not fast, especially with git repos. Luckily, this is already being improved because Guix is moving to codeberg.org, a FOSS nonprofit org which is hosted in Europe. So if one changes the configured server URL, it is faster. (On top of that interested people might use the opportunity to directly take influence, and donate to codeberg so that they can afford even better hardware 😉).

Questa voce è stata modificata (1 mese fa)



Fedora Must (Carefully) Embrace Flathub


in reply to typhoon

Fedora maintains its own Flatpak repo that competes with Flathub. This is about merging them.



What is the exact meaning of the "Banned" label next to a user?


For example, I've come across this:

^[1]^

::: spoiler References
1. Type: User Page. Name: "CanadaRocks" ("@CanadaRocks@piefed.ca"). Publisher: ["Lemmy". "sh.itjust.works"]. Accessed: 2025-07-22T02:07Z. URI: sh.itjust.works/u/CanadaRocks@….
:::

in reply to Kalcifer

That's an instance ban.
Community bans are explicitly stated.
in reply to asudox

So the user is banned from the instance where that label is seen (eg my instance)? Does an instance banning a user not block that user and their content from that instance? If not, what's the point of the ban?
in reply to Kalcifer

The user cannot vote, post or comment on that instance1. If a user’s own instance bans them, then they can’t even log in.


  1. Due to a bug, currently the user can post & comment, but those posts & comments won’t federate beyond their own home instance. ↩︎
in reply to davel

[…] Due to a bug, currently the user can post & comment […]


Do you have a link to the bug?

in reply to Kalcifer

A hacky, incomplete solution has been running for a while: github.com/LemmyNet/lemmy/issu…

A full solution has been merged, but I don’t think it’s been released yet: github.com/LemmyNet/lemmy/pull…

in reply to davel

[…] A full solution has been merged, but I don’t think it’s been released yet: github.com/LemmyNet/lemmy/pull…


It looks like it's coming with Lemmy 1.0 ^[1]^.

::: spoiler References
1. Type: Comment. Author: "Nutomic". Publisher: [Type: Post. Title: "Open issues on popular lemmy apps to prepare for 1.0.0 release". Author: "dessalines". Publisher: ["GitHub". "LemmyNet/Lemmy"]. Published: 2025-03-15T13:17:39.000Z. URI: github.com/LemmyNet/lemmy/issu….]. Published: 2025-06-02T08:21:42.000Z. Accessed: 2025-07-22T06:26Z. URI: github.com/LemmyNet/lemmy/issu….
:::

in reply to Kalcifer

Yes. It "blocks" the user. Afaik it should prevent the banned user from interacting with communities from the instance they were banned from and also the instance will no longer accept any new interactions from the user (local users cant see new content of that user, like PMs, comments, etc.)

Additionally, their content can also be removed, but that is optional.

Questa voce è stata modificata (1 mese fa)
in reply to Kalcifer

The user was instance banned from sh.itjust.works: sh.itjust.works/modlog?actionT…
Questa voce è stata modificata (1 mese fa)
in reply to davel

Hrm, I have a suspicion that it was a false positive by the automod (maybe it didn't like "kill this idea"?):

^[1]^

Update (2025-07-22T02:37Z): The moderation action was a false positive, and has been reverted ^[2]^.

::: spoiler References
1. Type: Webpage. Title: "Modlog". Publisher: ["Lemmy". "sh.itjust.works"]. Accessed: 2025-07-22T02:31Z. URI: sh.itjust.works/modlog?actionT….
2. Type: Message. Author: "InEnduringGrowStrong" (@inenduringgrowstrong:matrix.org). Publisher: ["Matrix". "sh.itjust.works"]. Published: 2025-07-22T02:36Z. Accessed: 2025-07-22T02:40Z. URI: matrix.to/#%2F%21ftaqqnpOePvPw….


:::
Questa voce è stata modificata (1 mese fa)
in reply to davel

Does an instance ban block future posts by that user from being federated in?
in reply to Kalcifer

Correct, future posts/comments. It’s like getting banned from every community on that instance. They also can’t send direct messages to users on that instance.
in reply to davel

They also can’t send direct messages to users on that instance.


Can a user on the banning instance message the banned user? If so, can the banned user reply?

in reply to Kalcifer

Can a user on the banning instance message the banned user?


I’ve never tried it so I’m not sure.

If so, can the banned user reply?


I’ve never tried this either, but I highly doubt it.


in reply to crankyrebel

The newest American freedom! The freedom to mask and walk around without anyone telling who you might be... Specially at a McDonald's.


Bypass blocked VPN restrictions


I have recently been finding myself on a network (cellular) that blocks access to VPN. I have tried Wireguard on multiple ports using IVPN and Windscribe with no luck. Similarly tried OpenVPN and IKEv2.

I also tried using Windscribe’s “stealth” protocol and IVPN’s obfuscation protocol but again with no luck.

I refuse to rawdog the internet like that and was hoping to get advice on how to work around that nonsense.

I am on iOS if that matters.

in reply to moe93

You can use Tor: orbot.app/

Cheapest way to not be in this situation is to run an exit node on your home network and route your traffic through when you're travelling (dead simple with Tailscale).

Also try Mullvad's circumvention methods.

in reply to moe93

Try setting your vpn to listen on UDP, port 53 (usually used by DNS. If that fails, it's going to be some sort of deep packet inspection, yes.


Cliffside Stargazer [1-Bit] (OC)


My first (real) pixel art. I wanted to start with the limitation of monochrome to see if I could make something semi recognizable.
Questa voce è stata modificata (1 mese fa)

in reply to crankyrebel

Cap’n bears a striking resemblance to Joaquin Phoenix.
Questa voce è stata modificata (1 mese fa)


la volpe e la finestra fanno insieme il grande spacc (glitch Firefox coi freeze a caso)


Regà, aiuto. Io vorrei ogni giorno arrivare a fine giornata senza bestemmiare, ma purtroppo non è fottutamente mai possibile, perché c’è sempre qualcosa che non funziona!!! E boh, ultimamente allora non capisco se sono io che sto diventando sempre di più una calamita per gli insetti digitali di merda, o se tra le tante cose […]

octospacc.altervista.org/2025/…


la volpe e la finestra fanno insieme il grande spacc (glitch Firefox coi freeze a caso)


Regà, aiuto. Io vorrei ogni giorno arrivare a fine giornata senza bestemmiare, ma purtroppo non è fottutamente mai possibile, perché c’è sempre qualcosa che non funziona!!! E boh, ultimamente allora non capisco se sono io che sto diventando sempre di più una calamita per gli insetti digitali di merda, o se tra le tante cose è Firefox che è sempre più rotto… e stasera lui ha deciso di fare il seguente. 💩
💖💣, [21/07/2025 20:00]ci sta firefox che sta laggando perché sta consumando 2 GB di RAM... e stranamente non è nessuna scheda, è il processo GPU. WHAT💖💣, [21/07/2025 20:01]ho killato, è sparito dalla lista ma non ha liberato RAM, e infatti appare ancora in taskmgr di windows... wtf
Stavo facendomi i benedettissimi cazzi miei, quando così, dal nulla botto, noto che il merdardo inizia a laggare malissimamente e noto anche che uno dei tanti processi del programma stava prendendo circa 2 GB di RAM — per fare cosa, non si sa bene, visto che ho anche l’estensione che scarica dalla memoria le schede inattive. Nel task manager di #Firefox appariva come “GPU”, e infatti, quando ho cliccato sulla X per ucciderlo, la finestra ha flashato un attimo… ma invece per Windows il processo era rimasto, e qui escono le rogne. 💔

A questo punto (ovviamente, perché l’utente vittima sono io) ha iniziato a peggiorare sempre di più, a tratti freezandosi per interi secondi mentre cercavo di navigare o scrivere… addirittura, nel fare Alt+Tab da finestre di altre app ad una del browser, sembrava non accadesse nulla, perché a schermo la finestra non appariva subito, impiegava secondi. Tutto questo, però, nel mentre che il video di YouTube in riproduzione sull’altro schermo (sempre in Firefox) filava liscio… il che rende tutto ancora più insensato. 😭

Quindi (e menomale, così tutti possono vedere la schifezza!) ho filmato la cacca, e si vede bene come in certi momenti prende e si blocca — cosa che si riflette in quel processo scassato che prende un intero core della CPU e diventa irresponsivo agli occhi di #Windows — poi appena si riprende digita in un colpo solo tutto quello che avevo scritto o esegue tutti i click che avevo cercato di inviare… fa schifo alla merda, e che cazzo! E alla fine si è pure incazzato di quanti click stavo facendo, perché ha preso ed è crashato completamente, senza permesso, cosa che mi avrebbe pure fatto perdere le schede in incognito aperte se non le avessi salvate in tempo (e questo non so se sia un crash interno o se è stato Windows che lo ha ucciso, ma qualunque sia la causa non si può continuare così… Non ce la faccio più!!! 😫😣)

#bug #crash #Firefox #glitch #Windows




Fears of escalation after Israel hits Huthi-held Yemen port


Hodeida (Yemen) (AFP) – Israel pounded Yemen's Huthi-held port of Hodeida with air strikes on Monday for the second time in a month, stoking fears of escalation as it warned Yemen could face the same fate as Iran.

In its latest raids, Defence Minister Israel Katz said Israel struck "targets of the Huthi terror regime at the port of Hodeida" and aimed to prevent any attempt to restore infrastructure previously hit.

The renewed strikes on Yemen are part of a year-long Israeli bombing campaign against the Huthis, but the latest threats have raised fears of a wider conflict in the poverty-stricken Arabian Peninsula country.

"Yemen's fate will be the same as Tehran's," Katz said.

His warning was a reference to the wave of suprise strikes Israel launched on Iran on June 13, targeting key military and nuclear facilities.

A Gulf official told AFP there were "serious concerns in Riyadh... that the Israeli strikes on the Huthis could turn into a large, sustained campaign to oust the movement's leaders".

The Huthis withstood more a decade of war against a well-armed, Saudi-led international coalition, though fighting has died down in the past few years.

Any Israeli escalation could "plunge the region into utter chaos", said the official, requesting anonymity because he cannot brief the media.

The Huthis' Al-Masirah television reported "a series of Israeli air strikes on the Hodeida port".

A Huthi security official, requesting anonymity to discuss sensitive matters, told AFP that "the bombing destroyed the port's dock, which had been rebuilt following previous strikes."

On July 7, Israeli strikes hit Hodeida and two nearby locations on the coast, with targets including the Galaxy Leader cargo ship, captured in November 2023, which the Israelis said had been outfitted with a radar system to track shipping in the Red Sea.

A Yemeni port employee in Hodeida said the strikes targeted "heavy equipment brought in for construction and repair work after Israeli airstrikes on July 7... and areas around the port and fishing boats".

An Israeli military statement said that the targets included "engineering vehicles... fuel containers, naval vessels used for military activities" against Israel and "additional terror infrastructure used by the Huthi terrorist regime".

It said the port had been used to transfer weapons from Iran, which were then used by the Huthi rebels against Israel.

in reply to BrikoX

Considering you're calling an arab nation acting according to international law "terrorists" speaks volumes about you. Stop replying, you're a racist embarrassment
in reply to stink

Nowhere did I call arab nation terrorists. The Houthis are not a country. Once again you are attacking non-existent comment.
Questa voce è stata modificata (1 mese fa)


Bubble Trouble


This article describes what ive been thinking about for the last week. How will these billions of investments by big tech actually create something that is significantly better than what we have today already?

There are major issues ahead and im not sure they can be solved. Read the article.

in reply to 1984

tl;dr AI companies are slowly running out of data to train their models; synthetic data is not a viable alternative.

I can't remember where I saw it, but someone somewhere on YouTube suspected the next step for OpanAI and such would be to collect user data directly; recording conversations of users and using that data to train models further.

If I find the vid I will add a link here.

in reply to proceduralnightshade

Yeah that would be the logical end game since companies have invested billions into this trend now.


TIL about Fedi-Search, an open sourced frontend to easily search the Fediverse with a lot of mainstream engines


Learned about it thanks to the Fireside Fedi Podcast. Might just end up becoming a new way to find solutions/perspectives by real people, just as looking for reddit results has been in the past for many people.

in reply to sun

There's enough front page politics right now about conservatives all being and protecting child rapists, that I missed the title as "MAGA launches file host with no limits"
in reply to sun

"One for your friend. And one copy for the state. Thanks 😀"