Benvenuto nel Poliverso

☆ Yσɠƚԋσʂ ☆ via Memes

2 settimane fa (Ricevuto 1 settimana fa) • •

☆ Yσɠƚԋσʂ ☆
2 settimane fa (Ricevuto 1 settimana fa) • •

The Trade Deal

#memes

in reply to ☆ Yσɠƚԋσʂ ☆

terrific

in reply to ☆ Yσɠƚԋσʂ ☆ • 2 settimane fa (Ricevuto 1 settimana fa) • •

Americans think that the US is the centre of the universe 🙄

like this

in reply to terrific

Cowbee [he/they]

in reply to terrific • 2 settimane fa (Ricevuto 1 settimana fa) • •

The US is the world's hegemonic empire, and Europe plays a secondary role within that empire.

in reply to Cowbee [he/they]

terrific

in reply to Cowbee [he/they] • 2 settimane fa (Ricevuto 1 settimana fa) • •

Oh it's you again. Last time we talked you lectured me about imperialism. I'm not really interested in a lecture today, or any day. We can have a conversation if you want, but I'm not going to subscribe to your dogma.

in reply to terrific

Cowbee [he/they]

in reply to terrific • 2 settimane fa (Ricevuto 1 settimana fa) • •

What a snide and dismissive way of responding. The meme we are both commenting on is about the relationship between the US and Europe in the context of imperialism. I'm not going to give you a "lecture," or anything, but immediately dismissing and insulting me as dogmatic is just plain rude.

in reply to Cowbee [he/they]

terrific

in reply to Cowbee [he/they] • 2 settimane fa (Ricevuto 1 settimana fa) • •

I'm sorry if I'm dismissive but I gotta tell you, last time we talked felt an awful lot like being lectured. You didn't really engage with anything I said but rather regurgitated endless theories and facts.

And you are a self-proclaimed Marxist-Leninist, is that not true? Subscribing to a particular narrative is IMO exactly what "dogmatic" means. I'm not saying it's wrong, it's truer than most dogmas. But still a dogma.

in reply to terrific

Cowbee [he/they]

in reply to terrific • 2 settimane fa (Ricevuto 1 settimana fa) • •

I don't remember you at all, if I'm being honest. I apologize if I was acting obnoxious, but I talk to many people and don't remember them all.

Secondly, I am a Marxist-Leninist, yes, but not a dogmatist. Dogma necessarily implies a rigid and inflexible understanding, not simply an agreement with a frame of analysis. Otherwise, nearly everyone would be a "dogmatist" for saying the Earth is round against the Flat Earthers.

Questa voce è stata modificata (2 settimane fa)

in reply to Cowbee [he/they]

terrific

in reply to Cowbee [he/they] • 2 settimane fa (Ricevuto 1 settimana fa) • •

Using phrasing such as "necessarily implies" is exactly what makes me call your conversation style "lecturing".

Is it normal to talk like this in your circles? In my culture it's a certain way to antagonize anyone who doesn't already agree with you.

in reply to terrific

Cowbee [he/they]

in reply to terrific • 2 settimane fa (Ricevuto 1 settimana fa) • •

I feel like that's just nitpicking, though. I'm a statesian, not everyone uses it but some do.

in reply to terrific

huquad

in reply to terrific • 2 settimane fa (Ricevuto 1 settimana fa) • •

Hello, is it me you're looking for?

in reply to terrific

0144927536231884

in reply to terrific • 2 settimane fa (Ricevuto 1 settimana fa) • •

At a really general level - you do know that you're posting this to a forum, right? Are you posting here to engage with other people, or are you just posting to fulfill your vanity?

I don't mean this in a snide sort of way. I hope that you can consider opportunities in future to be more charitable to people who are spending their time reading what you've posted and writing responses. It's genuinely feels better to engage that way than to assume the worst of people, and to treat them like they are purposefully antagonizing you.

in reply to 0144927536231884

terrific

in reply to 0144927536231884 • 2 settimane fa (Ricevuto 1 settimana fa) • •

It's a fair point. Your assessment is missing one crucial piece of context: my last conversation with CowBee. It was really quite painful and I'm just not in the mood for another treatment.

in reply to ☆ Yσɠƚԋσʂ ☆

vfreire85

in reply to ☆ Yσɠƚԋσʂ ☆ • 2 settimane fa (Ricevuto 1 settimana fa) • •

oh, their relation with their satraps...

geneva_convenience via World News

2 settimane fa (Ricevuto 1 settimana fa) • •

geneva_convenience
2 settimane fa (Ricevuto 1 settimana fa) • •

Journalist quits Reuters over 'role in Israel's assassination of Gaza journalists'

She made particular reference to Reuters' reporting on Israel's killing of prominent Al-Jazeera journalist Anas Al-Sharif and six other media workers on August 10, saying the agency had "perpetuate[d] Israel's propaganda". She said it had been "wilfully abandoning the most basic responsibility of journalism" by publishing the "baseless claim" from the Israel Defence Forces (IDF) that Al-Sharif was an operative for Hamas.

An initial report published by Reuters received backlash after running with the headline: "Israel kills Al Jazeera journalist it says was Hamas leader".

Zink said she could no longer wear her press pass without feeling "shame and grief", as she shared an image of her press card snapped in half alongside her statement.

Journalist quits Reuters over coverage of Gaza media killed by Israel

A REUTERS journalist has quit the news agency alleging it had a "role in justifying and enabling" Israel's "assassination" of…

^{Lucy Jackson (The National)}

#Worldnews

like this

in reply to geneva_convenience

eldavi

in reply to geneva_convenience • 2 settimane fa (Ricevuto 1 settimana fa) • •

every time i learn of stories like this, some part of me keeps thinking "it's about time" but i have to keep reminding myself that my own awakening to this reality was slow and recent process and that there's always someone else who's learning it about it now and for the first time.

in reply to eldavi

Arcane2077

in reply to eldavi • 2 settimane fa (Ricevuto 1 settimana fa) • •

You should know then that this has been happening ever since the terrorist state was created, and it’s terrible because every time there’s an exodus of decent human beings, be it just one person or dozens, at Reuters or NYT or anywhere else, the void is instantly filled by someone happy to oblige in propaganda.

Her resignation is a tragedy, just like the hundreds that came before hers, and it all helped get the world in this state.

Questa voce è stata modificata (2 settimane fa)

in reply to Arcane2077

eldavi

in reply to Arcane2077 • 2 settimane fa (Ricevuto 1 settimana fa) • •

I don't blame her for leaving; I've done something similar myself.

in reply to Arcane2077

jollyrogue

in reply to Arcane2077 • 2 settimane fa (Ricevuto 1 settimana fa) • •

the void is instantly filled by someone happy to oblige in propaganda.

That’s the part which makes this so hard. The position will get filled with some empty bootlicker eager to carry their water and curry favor.

Leaflet via Linux

2 settimane fa (Ricevuto 1 settimana fa) • •

Leaflet
2 settimane fa (Ricevuto 1 settimana fa) • •

“Add initial support for preinstalling flatpaks” merged

Add initial support for preinstalling flatpaks, v2 by swick · Pull Request #6116 · flatpak/flatpak

This is based on work by Kalev, taking over the PR: #5832 The configuration format and priority has been changed. Tests have been added. This version is already in use in RHEL. This adds new Flatp...

^GitHub

#linux

xoron via Self Hosted - Self-hosting your services.

2 settimane fa (Ricevuto 1 settimana fa) • •

xoron
2 settimane fa (Ricevuto 1 settimana fa) • •

Selhosted P2P File Transfer & Messaging

IMPORTANT NOTES (PLEASE READ!):
* These are NOT products. They are for testing and demonstration purposes only.
* They have NOT been reviewed or audited. Do NOT use for sensitive data.
* All functionality demonstrated is experimental.
* These are NOT meant to replace robust solutions like VeraCrypt, Simplexchat, Signal, Whatsapp, wetransfer. It's a proof-of-concept to show what's possible with browser APIs.
* Cyber security is full of caveats, so reach out for clarity on any details if they can't be found in the docs.

Aiming to create the worlds most secure messaging app.

positive-intentions.com/docs/p…

Open Source
Cross Platform
- PWA
- iOS, Android, Desktop (self compile)
- App store, Play store (coming soon)
- Desktop
  - Windows, MacOS, Linux (self compile)
  - Run index.html on any modern #browser
Decentralized
Secure
- No Cookies
- P2P E2EE encrypted
- Forward secrecy
- No registration
- No installing
Messaging
- Group Messaging (coming soon)
- Text Messaging
- Multimedia Messaging
- Screensharing (on desktop browsers)
- Offline Messaging (in research phase)
- File Transfer
- Video Calls
Data Ownership
- SelfHosted
- GitHub pages Hosting
- Local-only storage

For more information on "how it works", check out:
positive-intentions.com/blog/d…

(Degoogled links to the apps)
- P2P Chat: chat.positive-intentions.com/
- P2P File: file.positive-intentions.com/
- Encrypted drive storage: dim.positive-intentions.com/?p…

More:
- GitHub: github.com/positive-intentions
- Mastodon: infosec.exchange/@xoron
- Reddit: reddit.com/r/positive_intentio…

Decentralized Microfrontend Architecture

In the ever-evolving landscape of digital communication, decentralization has emerged as a powerful concept with diverse interpretations and applications.

^{xoron (positive-intentions)}

#selfhost

in reply to xoron

litchralee

in reply to xoron • 2 settimane fa (Ricevuto 1 settimana fa) • •

Aiming to create the worlds most secure messaging app

For anyone else that was looking for it, this is the link to the threat model: positive-intentions.com/docs/r…

That said, it seems quite thin on hard details, such as how identities (ie usernames) are managed -- eg are they unique? How can users cross-check an online identity to a real person? Fingerprints? QR codes? SHA256 hashes? -- and whether they are considered publicly-exchangeable. Plus how users are bootstrapped so they can find each other.

While a threat model is the minimum to even beginning an assessment of anything that utters the word "security", I do have to ask:

Was that document crafted for this project specifically?
Was it prepared by a cryptographer?
And was it generated using an AI/LLM?

Threat model | positive-intentions

⚠️ WARNING: This document is not finished. The details in this document are subject to change.

^{positive-intentions}

in reply to litchralee

xoron

in reply to litchralee • 2 settimane fa (Ricevuto 1 settimana fa) • •

thanks for taking a look.

firstly i would like to apologise for throwing the following blocks of AI text at you. i often used AI to create documentation for the project. im not much of a writer, im sure its more clear from AI than if i did it myself.

how the authentication works: positive-intentions.com/docs/r…
how security works: positive-intentions.com/blog/s…

the ID's are cryptographically random to make it reasonably certain that strangers cannot connect (because its an ungussable ephemental string). this is used with peerjs-server (open source and documented) to connect with a predictable ID. when this ID is shared "through some other trusted channel" (e.g. whatsapp, qrcode), the peers connect and establish encryptions keys (see links above). afer the first connection (expected to be secure!), the previously establish encryption keys can be used to authenticate the user (to prevent MITM).

Was that document crafted for this project specifically?

long story short... this is my sideproject and im trying to get it off the ground. as i post more about the project, i decieded to create a website to "document" the project. there are understandable questions like yours, so made sense to answer them in the website. this includes things like the threat-model... while one-shotting is a thing you can do with AI, the threat model took several days of learning, thinking and consideration. i also posted about it on reddit for feedback and updated it accordingly.

Was it prepared by a cryptographer?

am i a cryptographer yet? having worked on this project i must have picked some stuff up. i still find that i need to learn much more.

And was it generated using an AI/LLM?

i hope admitting i used AI doesnt undermine the effort i put in. i try to communicate details in places like lemmy and the code is open source. AI enables me to demonstrate granular functionality that is easier for me to test as well present to professionals; in contrast to presenting overwhelmingly complicated code on github. for example for my cryptography functionality i created a separate repo to try things out for my learning: cryptography.positive-intentio…

there are good and bad ways to using AI and i believe im doing it responsibly. i have been a coder for 15+ years. i can do it myself, i simply cant type as fast as AI making it indespensible when working on a project of this scale. i completely understand your concerns and im all ears for advice on a reddit post i asked: reddit.com/r/CyberSecurityAdvi…

(its why like in all my app, website and posts (like this), i try to strike caution.)

Security, Privacy and Authentication

In digital communication, security and privacy are the major initials. Our latest project—a chat application built with JavaScript—aims to provide a robust communication platform fortified with industry-grade encryption.

^{xoron (positive-intentions)}

Questa voce è stata modificata (2 settimane fa)

in reply to xoron

litchralee

in reply to xoron • 2 settimane fa (Ricevuto 1 settimana fa) • •

im not much of a writer, im sure its more clear from AI than if i did it myself

Please understand this in the kindest possible way: if you were not willing to write documentation yourself, why should I want to want review it? I too could use an AI/LLM to distill documentation rather than posting this comment but I choose not to, because I believe that open discussion is a central tenant of open-source software. Even if you are not great at writing in technical English, any attempt at all will be more germane to your intentions and objectives than what an LLM generate. You would have had to first describe your intentions and objectives to the LLM anyway. Might as well get real-life practice at writing.

It's not that AI and LLMs can't find their way into the software development process, but the question is to what end: using an AI system to give the appearance of a fully-flushed out project when it isn't, that is deceitful. Using an AI system to learn, develop, and revise the codebase, to the point that you yourself can adequately teach someone else how it works, that is divine.

With that out of the way, we can talk about the high-level merits of your approach.

how the authentication works: positive-intentions.com/docs/r…

What is the lifetime of each user's public/private keypair? What is the lifetime of the symmetric key shared between two communicating users? The former is important because people can and do lose their private key, or have a need to intentionally destroy the key. In such instance, does the browser app explicitly invalidate a key and inform the counterparty? Or do keys silently disappear and also take the message history with it?

The latter is important because the longer a symmetric key is used, the more ciphertext that a malicious actor can store-and-decrypt later in time, possibly in the future when quantum computers can break today's encryption. More pressing, though, is that a leak of the symmetric key means all prior and future messages are revealed, until the symmetric key is rotated.

how security works: positive-intentions.com/blog/s…

I take substantial notice whenever a promise of "true privacy" is made, because it either delivers a very strange definition of privacy, or relies upon the reader to supply their own definition of what privacy means to them. When privacy is on offer, I'm always inclined to ask: privacy from whom? From network taps? From other apps running in the same browser?

This document pays only lip service to some sort of privacy notion, but not in any concrete terms. Instead, it spends a whole section on attempting to solve secure key exchange, but simply boils down to "user validates the hash they received through a secure medium". If a secure medium existed, then secure key exchange would already be solved. If there isn't one, using an "a priori" hash of the expected key is still vulnerable to hash attacks.

this is my sideproject and im trying to get it off the ground

I applaud you for undertaking an interesting project, but you also have to be aware that many others have also tried their hand at secure messaging, with more fails than successes. The blog posts of Soatok show us the fails within just the basic cryptography, and that doesn't even get to some of the privacy issues that exist separately. For example, until Signal added support for username, it was mandatory to reveal one's phone number to bootstrap the user's identity. That has since been fixed, but they go into detail about why it wasn't easy to arrive at the present solution.

am i a cryptographer yet?

I recall a recent post I saw on Mastodon, where someone who was implementing a cryptographic library made sure to clarify that they were a "cryptography engineer" and not a cryptographer, because they themselves have to consult with a cryptography regarding how the implementation would work. That is to say, they recognized that although they are writing the code which implements a cryptographic algorithm, the guarantees comes from the algorithm itself, which are understood by and discussed amongst cryptographers. Sometimes nicely, and other times necessarily very bluntly. Those examples come from this blog post.

I myself am definitely not a cryptographer. But I can reference the distilled works of crypgraphers, such as from this 1999 post which still finds relevancy today:

The point here is that, like medicine, cryptography is a science. It has a body of knowledge, and researchers are constantly improving that body of knowledge: designing new security methods, breaking existing security methods, building theoretical foundations, etc. Someone who obviously does not speak the language of cryptography is not conversant with the literature, and is much less likely to have invented something good. It’s as if your doctor started talking about “energy waves and healing vibrations.” You’d worry.

I wish you the very best with this endeavor, but also caution as the space is vast and the pitfalls are manifold.

Security, Privacy and Authentication

In digital communication, security and privacy are the major initials. Our latest project—a chat application built with JavaScript—aims to provide a robust communication platform fortified with industry-grade encryption.

^{xoron (positive-intentions)}

in reply to litchralee

xoron

in reply to litchralee • 1 settimana fa • •

sorry for the delay in responding. personal matters required more focus and to reply to you i wanted to set aside some time to write well for clarity.

... Might as well get real-life practice at writing.

im not entirely bad at writing (technical or otherwise) to get to where i am now in the project, i usually write with my own words like now. the blog articles you see on the website are from old reddit posts. questions like your are understandably frequent and so it made sense to create the website and blog to address FAQ's. i think its important to note how im using AI here. while i can say to AI "here are some bullet points, now turn it into an article...", i have written the content and details myself and then have AI reword it for clarity. i think the resulting content is better for clarity.

What is the lifetime of each user’s public/private keypair? What is the lifetime of the symmetric key shared between two communicating users?

the implementation sits ontop of a webrtc connections which mandates its own encryption keys. my app adds an additional set of public/private keypair and symmetric keys. these are persisted to browser storage (indexedDB). the keys are cleared if the user performs a logout (its all client-side, so there is no actual "logout", it clears the local data).

key rotation is a work-in-progress and not testable in the app. while i can have a button that says "rotate keys", im planning to frame it as something like "block contact". this is because it makese to keep user ID's static, so that in future sessions, the app can automatically connect to "known peers". in the case you want to block someone, it makes sense to abandon that ID so they cannot ping you with it. when you connect to a "know peer" that doesnt know your new ID, it can use the previsously establish keys to verify each other and update the contact details accordingly.

its also possible to export the data to a file to then load from that profile. its currently static and unencrypted. there will be an option to have it all password encrypted.
reddit.com/r/cryptography/comm…

I take substantial notice whenever a promise of “true privacy” is made

completely understandable. as mentioned in the post cybersecurity is full of caveats. here is a previsous attempt to outline some details: reddit.com/r/cryptography/comm…

im also investigate various approaches to exchanging data offline with QR codes.

(written by me): reddit.com/r/positive_intentio…
(written by having AI transcribe my wording): positive-intentions.com/blog/q…

id also like to investigate other things a browsers can do like exchange encryption data over NFC.

it isnt use-friendly yet, but i also have some basic functionality around p2p broker connections to avoid needing the peerjs-server (which acts as the broker.). some unclear details which could do with AI clarification can be seen here: github.com/positive-intentions…

If a secure medium existed, then secure key exchange would already be solved

the existing key exchange should be already secure enough... but users would understandably want to be sure my code doesnt have a critical-bug and validating hashes provides that bit extra.

many others have also tried their hand at secure messaging, with more fails than successes.

i have seem some other myself, and i still believe my approach is unique. there are of course limitations in the webapp form-factor, but it also provides a lot of flexibility in just being able to run on a browser. while many try/succeed/fail, this is my attemp. i have been refining my approach with feedback and there is still much to do. at this point i dont consider it insecure, but the UI is pretty ugly and combined with various UI bugs, is deterring users. with the code being course source, i often try to present some concepts in a more digestable way with code examples as seen:

there is a lot to learn but by breaking things into small parts, i can better learn how it can all fit together.

“cryptography engineer” and not a cryptographer

i like that term. its new to me. i normally just call myself a webdeveloper to clarify my expertise. its more so the case than a cryptography engineer. i open sourcemy work for transparency, but also great for my own learning.

thanks for the good wishes. hopefully i get to a stage where its better presented as a product and not just a proof-of-concept.

Create webrtc wizard

(for testing purposes i use 2 separate browsers (not just windows) (there is a bug where you need a profile for this to work... you can ignore this bug for now, but for incognito, you will have to ...

^{xoron (GitHub)}

in reply to xoron

Ulrich

in reply to xoron • 1 settimana fa • •

self hosted
without servers

🤔🙋‍♂️

Also can you explain why we need yet another private and secure chat app?

in reply to Ulrich

xoron

in reply to Ulrich • 1 settimana fa • •

positive-intentions.com/blog/d…

this a yet another approach to a "private and secure chat app" because its a unique approach to the same problem which id like to investigate.

How to Install and Run Your Decentralized Chat App Across Multiple Platforms

In today’s digital age, the importance of privacy and data security cannot be overstated. Our decentralized chat app aims to provide a secure and private messaging experience akin to popular applications like WhatsApp, but with a significant differen…

^{xoron (positive-intentions)}

in reply to xoron

Ulrich

in reply to xoron • 1 settimana fa • •

What is the problem?

in reply to Ulrich

xoron

in reply to Ulrich • 1 settimana fa • •

“private and secure chat app”

I don't think it's a solved problem. There are countless nuances to it. So it's good to have various approaches.

☆ Yσɠƚԋσʂ ☆ via Android

2 settimane fa (Ricevuto 1 settimana fa) • •

☆ Yσɠƚԋσʂ ☆
2 settimane fa (Ricevuto 1 settimana fa) • •

Google will require developer verification to install Android apps, including sideloading

Google has announced that only apps from developers that have undergone verification can be installed on certified Android devices in 2026...

^{Abner Li (9to5Google)}

#androidofficial

in reply to ☆ Yσɠƚԋσʂ ☆

Cowbee [he/they]

in reply to ☆ Yσɠƚԋσʂ ☆ • 2 settimane fa (Ricevuto 1 settimana fa) • •

Yea, might have to. My phone is aging and doesn't support LineageOS, sadly.

in reply to Cowbee [he/they]

☆ Yσɠƚԋσʂ ☆

in reply to Cowbee [he/they] • 2 settimane fa (Ricevuto 1 settimana fa) • •

I'm still on Pixel 5 with LineageOS, but the battery is starting to go. Sadly, can't get Fairphone in Canada yet. Unfortunately, it doesn't seem like any of the Linux based phones are quite ready to be a daily driver either.

in reply to ☆ Yσɠƚԋσʂ ☆

Cowbee [he/they]

in reply to ☆ Yσɠƚԋσʂ ☆ • 2 settimane fa (Ricevuto 1 settimana fa) • •

I know, I was just looking into the state of linux phones last night. I'd love a genuine alternative, but I need my phone for work for things like 2FA, Teams, etc that I just can't use on linux phones yet it seems.

in reply to Cowbee [he/they]

☆ Yσɠƚԋσʂ ☆

in reply to Cowbee [he/they] • 2 settimane fa (Ricevuto 1 settimana fa) • •

Yup, the app ecosystem is just not quite there yet, and google app store is still the only place for some apps you can't do without.

in reply to ☆ Yσɠƚԋσʂ ☆

Cowbee [he/they]

in reply to ☆ Yσɠƚԋσʂ ☆ • 2 settimane fa (Ricevuto 1 settimana fa) • •

Still holding hope that it will get there! Huge respect to the devs for this undertaking.

in reply to Cowbee [he/they]

☆ Yσɠƚԋσʂ ☆

in reply to Cowbee [he/they] • 2 settimane fa (Ricevuto 1 settimana fa) • •

Indeed, having full blown Linux on the phone would honestly be the ideal option. I'm honestly surprised that nobody tried building hardware around this idea. You could have a single device that acts like a phone, but then you could make it dockable and the dock could add more ram and a better GPU, so then you could use it like a desktop. So, you'd just carry a single device around with you all the time and use it in different modes as needed. This would also avoid the need for using a lot of online services, like the calendar, which sync data across devices. You'd just always have all your data in one place.

in reply to ☆ Yσɠƚԋσʂ ☆

Cowbee [he/they]

in reply to ☆ Yσɠƚԋσʂ ☆ • 2 settimane fa (Ricevuto 1 settimana fa) • •

That's a cool perspective! Hadn't thought of it like that, moreso the utility of a purely FOSS system that can't be fucked with like Google does with AOSP.

in reply to Cowbee [he/they]

☆ Yσɠƚԋσʂ ☆

in reply to Cowbee [he/they] • 2 settimane fa (Ricevuto 1 settimana fa) • •

Exactly, and it's interesting to think how so many services exist simply because we constantly switch devices. If you just have one drive with all your data on it, then the whole problem goes away. And the dock could also have a raid built in, so every time you sync with the dock you make a backup of your system, so if your drive fails you just swap the other one in and keep going. I really would love to see local first future of computing.

in reply to ☆ Yσɠƚԋσʂ ☆

Avid Amoeba

in reply to ☆ Yσɠƚԋσʂ ☆ • 2 settimane fa (Ricevuto 1 settimana fa) • •

Fairphone in Canada: lemmy.ca/post/50071607

in reply to Avid Amoeba

☆ Yσɠƚԋσʂ ☆

in reply to Avid Amoeba • 2 settimane fa (Ricevuto 1 settimana fa) • •

You can't get it from their official store though last I looked.

in reply to ☆ Yσɠƚԋσʂ ☆

Avid Amoeba

in reply to ☆ Yσɠƚԋσʂ ☆ • 2 settimane fa (Ricevuto 1 settimana fa) • •

That's correct. So warranty and such is difficult. But if you need one, it seems it's available and it seems to work on Freedom. A friend is running an FP5 on Fido.

in reply to Avid Amoeba

☆ Yσɠƚԋσʂ ☆

in reply to Avid Amoeba • 2 settimane fa (Ricevuto 1 settimana fa) • •

I figure I'll hold out and see if it becomes officially available. My phone still works fine for the most part, and if battery holds out there's nothing too wrong with it really.

davel via Technology

2 settimane fa (Ricevuto 1 settimana fa) • •

davel
2 settimane fa (Ricevuto 1 settimana fa) • •

RFC 9839 and Bad Unicode

Unicode is good. If you’re designing a data structure or protocol that has text fields, they should contain Unicode characters encoded in UTF-8. There’s another question, though: “Which Unicode characters?” The answer is “Not all of them, please exclude some.”
This issue keeps coming up, so Paul Hoffman and I put together an individual-submission draft to the IETF and now (where by “now” I mean “two years later”) it’s been published as RFC 9839. It explains which characters are bad, and why, then offers three plausible less-bad subsets that you might want to use. Herewith a bit of background, but…
Please · If you’re actually working on something new that will have text fields, please read the RFC. It’s only ten pages long, and that’s with all the IETF boilerplate. It’s written specifically for software and networking people.
Source code · I’ve written a little Go-language library to validate incoming text fields against each of the three subsets that 9839 specifies, here. I don’t claim it’s optimal, but it is well-tested.
Details · Here’s a compact summary of the world of problematic Unicode code points and data formats and standards.
Notes:
[1] XML allows C1 controls.
[2] XML and YAML don’t exclude the noncharacters outside the Basic Multilingual Pane.
[3] YAML excludes all the legacy controls except for the mostly-harmless U+0085, another version of \n used in IBM mainframe documents.

RFC 9839: Unicode Character Repertoire Subsets

This document discusses subsets of the Unicode character repertoire for use in protocols and data formats and specifies three subsets recommended for use in IETF specifications.

^{www.rfc-editor.org}

#technology

in reply to memfree

davel

in reply to memfree • 2 settimane fa (Ricevuto 1 settimana fa) • •

I didn’t do anything; I’m just the messenger.

in reply to davel

Ŝan

in reply to davel • 2 settimane fa (Ricevuto 1 settimana fa) • •

Yeah, for a hot second I was excited þat Tim Bray was posting to Lemmy.

compostgoblin via Privacy

2 settimane fa (Ricevuto 1 settimana fa) • •

compostgoblin
2 settimane fa (Ricevuto 1 settimana fa) • •

Recommendations on a home alarm system

I am in the process of purchasing a home, and the house that it’s looking like I am likely to buy has a Ring alarm system and camera installed. I like the idea of having burglar alarms on the windows and doors, but I do not want to use Ring. Between their ownership from Amazon and sharing data with the cops, I don’t trust them.

Are there privacy-friendly home security systems out there that don’t require an ongoing subscription? Bonus points if the devices are HomeAssistant compatible.

#privacy

in reply to Screen_Shatter

ScoffingLizard

in reply to Screen_Shatter • 2 settimane fa (Ricevuto 1 settimana fa) • •

For cameras look for NVRs that let you hook up wired cameras to. I have yet to try it but have heards that installing Frigate lets you have complete control over the recordings. Riolink and Lorex both offer systems that dont require subscriptions and supposedly let you keep your data local.

So you mean to tell me these camera companies usually do not allow you to keep you data local? And you put them in or around your house?

in reply to ScoffingLizard

Screen_Shatter

in reply to ScoffingLizard • 2 settimane fa (Ricevuto 1 settimana fa) • •

Many home camera companies use subscriptions as an excuse to store your recordings in the cloud and allow you to view or access them remotely on a phone app. I havent put up any that do that, but a shitload of other people have.

Frigate is a custom OS for NVRs. The NVR stores the recordings, and the OS ideally puts you in complete control of the cameras and associated data. I am working on getting hardware that will let me install it, so I am only saying its worth taking a look at but am not endorsing it since I have not successfully uses it yet.

The reason I say to use wired cameras is because they are more secure and can get continuous power instead of worrying about rechargung batteries. You can run them with no internet connection and control your local recordings that way. The drawback is that its only accessible by direct physical means. If someone breaks in and steals that hard drive then the whole system is worthless.

geneva_convenience via World News

2 settimane fa (Ricevuto 1 settimana fa) • •

geneva_convenience
2 settimane fa (Ricevuto 1 settimana fa) • •

Australia expels Iranian diplomats, accuses country of directing antisemitic arson attacks

Melbourne, Australia — Australian Prime Minister Anthony Albanese accused Iran of organizing two antisemitic attacks in Australia and said the country was cutting off diplomatic relations with Tehran in response on Tuesday.

The Australian Security Intelligence Organization concluded the Iranian government had directed arson attacks on the Lewis Continental Kitchen, a kosher food company, in Sydney in October last year and on the Adass Israel Synagogue in Melbourne in December last year, Albanese said.

Iran's government denied the allegations.

Australia expels Iranian diplomats, accuses country of directing antisemitic arson attacks

Australian Prime Minister Anthony Albanese says Iran directed two antisemitic attacks in the country, and diplomatic relations will now end.

^{CBS News}

#Worldnews

like this

in reply to geneva_convenience

Cat_Daddy [any, any]

in reply to geneva_convenience • 2 settimane fa (Ricevuto 1 settimana fa) • •

Stay classy, Australia

like this

Cattypat via Linux

2 settimane fa (Ricevuto 1 settimana fa) • •

Cattypat
2 settimane fa (Ricevuto 1 settimana fa) • •

Does it get better?

I've tried switching to Linux from Windows 10 twice now. The first time went wonderfully (on Mint) until I found out that secure boot was stuck in the enabled mode and I had to completely reinstall my bios. This was absolutely necessary as everything was unbelievably slow, especially gaming (on a decent laptop). I understand this is totally my fault as almost every Linux guide says to make sure secure boot is disabled. After fighting with that for literal days, I finally reinstalled Linux mint. WiFi was suddenly completely nonfunctional, no networks were detected, and none of the proposed solutions I saw online worked. I have very little experience with Linux and other complicated tech nerd stuff besides that which comes with tinkering with computers occasionally. I do however have a great deal of patience and stubbornness. I spent maybe a week or 2 just working on this first attempt at making Mint work, until I ran out of patience. After coming back to it a month or 2 later, I decided to try Pop!_OS. Once again, it went incredibly at the start. Because I fixed the secure boot situation, I could now game better than I ever could when I had windows installed. Very few compatibility issues showed up that I couldn't conquer.
Suddenly, I try playing Enter the Gungeon after having already played it a couple of times. Nothing out of the ordinary, I had done this before. Suddenly the entire computer freezes and I can still hear just fine. I restart my computer and... no sound. Nothing from any possible source, not Discord, not Firefox, not even the media I have downloaded. I look up the problem, I see several people have had it before, and only a couple ever got a solution. I try EVERY proposed solution on any forum with even similar issues, and still nothing. I have been fighting with my computer for 3 or 4 hours now.
I've heard Linux praised for feeling like it is *your* computer that is subject to your will. I'd disagree right now, because it feels like there are spirits in my laptop trying to intentionally fuck me over every time I start enjoying the Linux experience.
Does it get better? Am I crazy? Am I haunted? How is this anyone's ideal experience?

edit: I'm on an MSI Thin GF63. Nvidia GPU, Intel CPU. Compatibility seemed fine WHILE this latest attempt was working, up until my sound got fucked. I have a hard time imagining if that could be related to anything besides my sound card and drivers, but I'm nowhere near savvy when it comes to Linux. I'm now installing Bazzite as some of you guys recommended so I can ease myself into this whole Linux thing. I'll give another update if this fixes it :3

edit edit: It's still happening. I can see the "Alder Lake PCH-P high definition audio controller" in my audio config GUI apps and I can see the meter moving when audio is playing. Still, nothing is played. I am not dual-booting. Ive seen people have had issues with this card before, but seemingly the only solution (that I've yet to try) is to buy a whole new laptop. I don't have the money to do that currently. If someone is particularly tech savvy I am willing to hear out proposed solutions, but know that I have tried nearly everything online even remotely related to broken audio on Linux. My computer is haunted and I'll need a proper qualified exorcist it seems.
note: it works with Bluetooth headphones. I haven't had a chance to test it with wired headphones but I will continue to give (near)real-time updates.

#linux

Questa voce è stata modificata (2 settimane fa)

in reply to Cattypat

dajoho

in reply to Cattypat • 2 settimane fa (Ricevuto 1 settimana fa) • •

Seconding just installing something easy and pre-setup. Try a desktop variant of Bazzite (I like the gnome flavour) and see if most of your issues just disappear.

in reply to dajoho

Cattypat

in reply to dajoho • 2 settimane fa (Ricevuto 1 settimana fa) • •

I'll give this a shot right now and update the post if the issue persists across operating systems.

in reply to Cattypat

dajoho

in reply to Cattypat • 2 settimane fa (Ricevuto 1 settimana fa) • •

Which variant are you trying? KDE? Gnome? Nvidia?

in reply to dajoho

Cattypat

in reply to dajoho • 2 settimane fa (Ricevuto 1 settimana fa) • •

I clicked on the KDE version because it said that would be closer to a classic "desktop" environment, and yes the Nvidia version

in reply to Cattypat

dajoho

in reply to Cattypat • 2 settimane fa (Ricevuto 1 settimana fa) • •

Cool beans. Let us know how your experience goes and if you have problems. I have it on four devices here and it has been very smooth every time.

in reply to dajoho

dajoho

in reply to dajoho • 2 settimane fa (Ricevuto 1 settimana fa) • •

I have just seen your edit. I had a similar problem with no audio but meter levels working on my toughbook. Could you start terminal, type alsamixer and turn all the volumes up? Press F6 to swap through sound cards.

For me I had to adjust the headphone volume.

in reply to Cattypat

rozodru

in reply to Cattypat • 2 settimane fa (Ricevuto 1 settimana fa) • •

When I first moved to linux I used Mint for a week and then moved to something else. As always by EVERYONE it was suggested to me as a "starter" distro and I really wish people would stop doing that.

I, like you, had issues with it. Sound issues, Wifi issues, GPU issues, and doing personal research and digging the consensus was always "it's an issue with Mint." I was about to go back to Windows 11 cause I was like "none of this linux shit works"

THEN I decided to try a different distro, CachyOS, and suddenly the sound was fixed, the wifi didn't randomly drop out, and my GPU worked flawlessly. I've distro hopped since then and those Mint/Ubuntu issues never came back.

Try something other than Mint. if you still have the issues go back to Windows.

stravanasu via Linux

2 settimane fa (Ricevuto 1 settimana fa) • •

stravanasu
2 settimane fa (Ricevuto 1 settimana fa) • •

Unbound as DNS resolver on a Linux laptop: tips/experiences?

[Edit: this question came out of my confusion. I thought Unbound could somehow substitute DNS servers (like CloudFlare), but it can't. Apologies for my ignorance.]

I've often heard about Unbound, and the possibility of using it as a DNS resolver on my laptop. So, to be clear, not as a DNS resolver in a local network; just in a single machine, also because I'd like to use it no matter where I bring my laptop.

The instructions given in the second link above seem quite complete. Does anyone here have other tips or experiences to share? I'm with Ubuntu on a Thinkpad.

Cheers!

Unbound by NLnet Labs — Unbound 1.23.0 documentation

^{unbound.docs.nlnetlabs.nl}

#linux

Questa voce è stata modificata (2 settimane fa)

in reply to eldavi

stravanasu

in reply to eldavi • 2 settimane fa (Ricevuto 1 settimana fa) • •

I'm starting to think that I've misunderstood what Unbound does. I thought I'd be a replacement for a DNS resolver (like CloudFlare). But from the replies here I'm starting to think it isn't?

in reply to stravanasu

eldavi

in reply to stravanasu • 2 settimane fa (Ricevuto 1 settimana fa) • •

oic, i was under the impression that you wanted it use it on your laptop; not as a service like cloudfare.

xoron via Privacy

2 settimane fa (Ricevuto 1 settimana fa) • •

xoron
2 settimane fa (Ricevuto 1 settimana fa) • •

Selhosted P2P File Transfer & Messaging

Aiming to create the worlds most secure messaging app.

positive-intentions.com/docs/p…

Open Source
Cross Platform
- PWA
- iOS, Android, Desktop (self compile)
- App store, Play store (coming soon)
- Desktop
  - Windows, MacOS, Linux (self compile)
  - Run index.html on any modern #browser
Decentralized
Secure
- No Cookies
- P2P E2EE encrypted
- Forward secrecy
- No registration
- No installing
Messaging
- Group Messaging (coming soon)
- Text Messaging
- Multimedia Messaging
- Screensharing (on desktop browsers)
- Offline Messaging (in research phase)
- File Transfer
- Video Calls
Data Ownership
- SelfHosted
- GitHub pages Hosting
- Local-only storage

For more information on "how it works", check out:
positive-intentions.com/blog/d…

(Degoogled links to the apps)
- P2P Chat: chat.positive-intentions.com/
- P2P File: file.positive-intentions.com/
- Encrypted drive storage: dim.positive-intentions.com/?p…

More:
- GitHub: github.com/positive-intentions
- Mastodon: infosec.exchange/@xoron
- Reddit: reddit.com/r/positive_intentio…

Decentralized Microfrontend Architecture

In the ever-evolving landscape of digital communication, decentralization has emerged as a powerful concept with diverse interpretations and applications.

^{xoron (positive-intentions)}

#privacy

in reply to upstroke4448

xoron

in reply to upstroke4448 • 1 settimana fa • •

its a work in progress and hope to get to a point its comparable to Signal and OnionShare.

for now, the purpose is to present open-source code to demonstrate a concept. like mentioned in the post it isnt ready to replace any existing tools.

in reply to xoron

upstroke4448

in reply to xoron • 1 settimana fa • •

Thanks for the clarification!

boredsquirrel via Linux

2 settimane fa (Ricevuto 1 settimana fa) • •

boredsquirrel
2 settimane fa (Ricevuto 1 settimana fa) • •

Debian, encrypted boot, how to increase password attempts?

Since Debian 13 (Trixie), when using the default FDE which uses grub to decrypt the luks partition, I have a single attempt

When the password is mistyped there is a long pause (over 10 seconds) and then the error appears.

I already tried increasing the max tries, which seems to be set to 1 when a keyfile is used.

The config/script seems to be in /usr/share/initramfs-tools/scripts/local-top/cryptroot.

I copied that to /etc/initramfs-tools/scripts/local-top/cryptroot and replaced the value CRYPTTAB_OPTION_tries=1 with 10 using find/replace (ansible stuff).

I think this has no effect though and doing so (might be a different issue) breaks boot entirely 💀

More info:
- by default when legacy boot (BIOS) is available, Debian will install grub to the MBR. This is where it happens
- when forcing or prioritizing legacy boot and using GPT, debian somehow boots from a 300MB efi partition, the same happens though, one attempt

#linux

Questa voce è stata modificata (2 settimane fa)

in reply to boredsquirrel

MimicJar

in reply to boredsquirrel • 2 settimane fa (Ricevuto 1 settimana fa) • •

After you updated the config did you update-initramfs or update-grub (I forget which flags might be needed off hand).

Since this is happening pre-boot it isn't reading from /etc.

in reply to MimicJar

boredsquirrel

in reply to MimicJar • 2 settimane fa (Ricevuto 1 settimana fa) • •

Hm, I only ran update-grub

Ran update-initramfs from the chroot trying to repair it

Found that there is a cleaner way in /etc/default/grub with grub commandline arguments. But that wants a source= variable which is weird to me as that hardcodes a drive in there that wasnt there first?

Tbh I will try this on a secondary laptop now, I reinstalled that thing like 5 times now and am a bit traumatized XD

Luckily we have more than enough

ell1e via Self Hosted - Self-hosting your services.

2 settimane fa (Ricevuto 1 settimana fa) • •

ell1e
2 settimane fa (Ricevuto 1 settimana fa) • •

[Question] Community maintained free IP geo lists

I'll be self-hosting a service with user submissions soon, so I'm worried about the howto.geoblockthe.uk/ situation.

Based on this I've wondered, are there any community maintained geo block lists that might be useful? All database options I found are either 1. an on-demand online service which seems questionable for privacy reasons, or 2. IPv4 only, or 3. have weird terms of use with a gag clause regarding the entire company making it and other weird stuff.

I'm not a fan of geo blocking in general, but the situation is what it is.

PS: Please don't discuss the Online Safety Act itself too much in the comments, or whether somebody should be using a geo ip to handle this. While I might appreciate useful input on that, I'm hoping this post can remain a resource for those who are looking for such a database for other reasons as well.

GeoBlockThe.UK

^{howto.geoblockthe.uk}

#selfhost

Questa voce è stata modificata (2 settimane fa)

Bobr via World News

2 settimane fa (Ricevuto 1 settimana fa) • •

Bobr
2 settimane fa (Ricevuto 1 settimana fa) • •

Ukraine responds to Polish president’s initiative to ban Ukrainian red and black flag

Just in case you want to read more about those very nice (and totally not Nazi) guys: en.m.wikipedia.org/wiki/Ukrain…

paramilitary wing of the Organization of Ukrainian Nationalists

^{Contributors to Wikimedia projects (Wikimedia Foundation, Inc.)}

#Worldnews

in reply to Bobr

PolandIsAStateOfMind

in reply to Bobr • 2 settimane fa (Ricevuto 1 settimana fa) • •

So... Poland is finally admitting that the hate symbol used by hate group is a hate symbol yet is still showering that group with money, weapons and other support.

Typical fucking Poland, mistaking enemy for an ally.

Questa voce è stata modificata (2 settimane fa)

u/lukmly013 💾 (lemmy.sdf.org) via Linux

2 settimane fa (Ricevuto 1 settimana fa) • •

u/lukmly013 💾 (lemmy.sdf.org)
2 settimane fa (Ricevuto 1 settimana fa) • •

UI regression in KDE Arianna - How can I back up and restore specific version of Flatpak package?

All I could find is how to make a list, and reinstall flatpaks from that list, as well as backup app data, however all of that assumes I want to do updates.

Meanwhile what I want is akin to extracting APK of a stable version of some app, backing it up and using it for years to come. For example that's how I joined these 2 screenshots, using JointPics from 2014 which isn't even on Play Store anymore, and targets API so low that it has to be installed via ADB. (Yeah, I am too dumb for GIMP)

As for the regression, you can see. On left is older Flatpak, on right is version from Arch repo. The Flatpak I originally installed as a hotfix for update that broke it completely at one point on Arch.
You can see the older version nicely fits the screen, splitting up text into columns.
Meanwhile the new version just does smaller page in middle of screen that doesn't even work properly with Breeze Dark theme, causing different background for text sections.

The only improvement is ability to flip pages rather than use arrows, but that's minimum.
Well, and maybe the progress keeping got fixed, but I didn't test that much.

Don't pay attention to the taskbar. I wish it could flip to vertical with different screen orientation. Yeah, the icons' clickability is a dice roll of what you tap.

#linux

in reply to u/lukmly013 💾 (lemmy.sdf.org)

infeeeee

in reply to u/lukmly013 💾 (lemmy.sdf.org) • 2 settimane fa (Ricevuto 1 settimana fa) • •

Are you sure not just the defaults changed? Or isn't it a problem on your end? On the project page the screenshot looks like the old version: invent.kde.org/graphics/ariann…

Have you contacted the developers? They have a matrix chat. Maybe you found a bug, and it would help others if you would report it.

Graphics / Arianna · GitLab

EPub Reader for mobile devices

^GitLab

in reply to infeeeee

u/lukmly013 💾 (lemmy.sdf.org)

in reply to infeeeee • 2 settimane fa (Ricevuto 1 settimana fa) • •

It still looks like that, aside from the datk mode issue, but only in landscape orientation.

in reply to infeeeee

unwarlikeExtortion

in reply to infeeeee • 2 settimane fa (Ricevuto 1 settimana fa) • •

Are you sure it's not a you problem? Or isn't it a you problem? Go read the docs.
Have you contacted the devs? Reporting a bug would be helpful.

Sorry to be so rude, but you really hit a nerve. It isn't even your fault.

Anyway, rant time:

KDE and bug reports. They always come to you like "Hey, bug reports are so really importsnt to us! And we'll guide you through it. Here's our lovely oh-so-helpful wizard!

Except it ain't lovely. Nor helpful. The only thing it does is pop up whenever a KDE app has an aneurysm and asks you for a backtrace. And then... backtrace is declsred useless.

Why even bother people with the stupid popup if in 90% of cases it's declared as useless. Why not do the backtrace silently and then annoy the user only once you declare the bug "useful".

Last instance of this: I was using my KDE desktop. For some reason, Plasma seems to really hate me, because I need to fix default apps every few weeks. For some reason, jpegs and pngs open in Krita by default.

So, wanting to close Krita, becuse I don't need an entire editor to look at a photo, with tools taking up 25% of the screen, when it asked me about the import resolution, I pressed 0. Krita proceeded to crash and open the report bug dialog.

Not having seen the KDE report wizard for quite some time, I felt inclined to go fill out the report. Got through the first few pages just fine. Then came the backtrace. Sure, do it. I'd like whoever debugs this not snooping through a data dump containing god knows what, but sure. Then it gets called useless. AFTER you've taken 30-ish seconds of my life on preliminary questions.

Look, if you're gonna ask people for input and discard said input if something unrelated happens, at least ask after the something unrelated decided it's not gonna be yeeted away. No need for the "Oh, wait, we don't really need this, it'll take too much time to play detective" after the user already passed three screens of interrogation.

Anyway, the point is:

KDE clearly doesn't care about bug reports. Because if they did, the guide on installing backtrace-enabled packages once the inevitable verdict of "useless" wouldn't be a wiki page with the generaal message of "find backtrace-enabled packages, you buffoon" when you could point to them.

Another problem with this is: when a bug happens without backtraceable packages, how is the user supposed to recreate it if they don't know how?

And besides, my bug is very recreateable. Open an image in Krita (preferably from Dolphin, after Plasma mangled the defaults, again and again). When prompted for some integer, enter "0". Instead of a generic error message, see the entire app sink into oblivion.

Anyway, if anyone feels like reporting the totally useless report with totally unrecreateable conditions, feel free. I won't. Just too much work, for it to be discarded just like that by some wizard no one even thought through.

And why would I contact the devs? Or rather, where could I do that? They're worse than government agencies, for god's sake. The right person or place just doesn't exist. Wherever you go to or ask, it's someone else's responsibility or your fault. And the wizard, that true single point of contact - refuses any contact just as consistently.

So tell people to call the devs. Tell them it's their fault. Tell them to make a bug report. Say it just might help not just you, but someone else when all hell will freeze over before anything like that becomes even a remote possibility.

Talk about adding insult to injury.

Questa voce è stata modificata (2 settimane fa)

in reply to unwarlikeExtortion

infeeeee

in reply to unwarlikeExtortion • 2 settimane fa (Ricevuto 1 settimana fa) • •

Wtf man, developers are also people. Most of them doing this for free in their free time. You are the kind of entitled user who makes foss devs burn out. Never thought I will find one in the wild.

I use krita frequently and never met your bug so it's not as recreatable or important as you think.

Noone forces you to use krita. If it doesn't fit your workflow or if you think developers are deliberately sabotaging your work, you can switch to another free or paid alternative. If you would switch to a paid one, you could speak to a manager.

In op's case I'm not sure it's a you problem. In your case I'm sure it is.

Questa voce è stata modificata (2 settimane fa)

in reply to infeeeee

unwarlikeExtortion

in reply to infeeeee • 2 settimane fa (Ricevuto 1 settimana fa) • •

Look, I get it. But I'm also burned out.

Noone forces you to use krita.

Krita's devs specifically? No. I respect devs by default. I don't doubt many of Krita's devs love what they develop. I also use Krita. I don't have it installed because I don't need it.

The problem that I keep running into is my (Plasma) defaults being changed for (some) reason. Krita usually gets the defsult for photos. Rhythmbox for audio and MPV for video. I prefer using Pix for photos and VLC for AV.

Noone forces you to use krita.

Plasma, kind of - does.

99% of people do not want a photo editor to be their defsult app for opeing photos. Some artists? Sure. But me? No.

Again, it's nor a Krita thing specifically - Plasma fucks with my defaults. It's a Plasma/KDE thing. Krita is just the unfortunate app to have become Plasma's senseless-default victm.

If it doesn't fit your workflow or if you think developers are deliberately sabotaging your work

Oh, Krita fits my workflow quite well. Personally am in the process of switxhing to it from GIMP. I know I wrote up a huge wall of mostly garbled text in a passionate rage, but reading just the first part of my rant should've made that clear.

I use krita frequently and never met your bug so it's not as recreatable as you think.

Of course you didn't. Because who in their right mind enters "0" as the target resolution? That's right - on one! Except for me, apparently. It's a stupid bug. One which doesn't mean anything. It opens no attack surface. It doesn't cause random crashes. It doesn't interfere with anyone's work.

However, you clearly haven't read my essay. Which is fine with me. It isn't quality reading material by any sensible metric. But, were you to have read it and tried to recreate the bug, you probably would've succeeded.

With that out of the way, my main point was how no - devs (especially KDE, and very transparently so) don't value your feedback as much as one might think.

Which is - understandable.

As you said, many keep FOSS software alive in their free time for nothing other than the moral gratification. Which is much more than merely commendable. And please, do not try to tell me I don't respect that when I do.

Where would devs be if they only replied to stupid questions from new users? That's right - in a tech support hub!

Which is obviously a waste of their time. The fact they don't do that isn't anything negative.

The problem, as always is - documentation. My little beef with KDE's crash wizard is but one example of this deeply-rooted problem.

As is seen in our (both mine and your) example, reading is hard. Writing - harder still. Were I able to read and fully comprehend the ill-fated link on the KDE wizard's "fuck you" page, you probably wouldn't be rading this. But alas, I am a human whose reading comprehension skills aren't top-notch.

Another, equally deeply rooted problem in FOSS is lack of general design thinking and logic. Am I calling KDE devs stupid? Of course not! But any UI (including the KDE crash wizard) should have a few eyes to assess it first. Then research on a batch of test users should be done. And then feedback from the general user population should be listened to. Is that a hard ask? Yes. Step 2 is expensive and as such out of reach of most FOSS projects, and not even Big Tech bothers with step 3.

But am I wrong in calling the KDE modal annoying and badly designed ("stupid") even, when it has already wasted my time in the same way on 15 occasions? Maybe not. I am angry and it may have been irrational. But I feel my perspective is at least understandable even if the wording isn't.

In the end, users can't live without developers and developing user-facing applications makes little sense without users. I'm not in the Linux community because I don't like FOSS, Linux or KDE. I'm percisely here to support them. However, sometimes issues arrise, and having a good community to help with fixing issues (because the devs can't (obviously) handle all that load themselves) is good.

Having a community where the answer to a simple, begginer question is basically "bother the devs, they have a Matrix", "it's probably your fault" isn't an answer. It's a fuck you. And once they find out they've been mislead (not even intentionally perhaps), they might go back to Big tech.

Saying to me that I don't support FOSS, that I don't like it and that I can go back to Big Tech (when I haven't been there for over 4 years now), is an even bigger one.

I like FOSS. Saying I don't respect them wben I truly do is an insult. I merely don't understand some of their decisions. Probably due to a lack of context and knowledge, which is on me.

But does giving a rant about, what are tiny problems in the running of a huge machine known as My Computer, spurred on by someone's unhelpful advice, given in hopes of starting a discussion and the wholly implausible odds of the issue at hand given as an example being fixed due to it call flr the reply "Go to Big Tech, there's clearly no room for you here"?

I'd hope not.

Questa voce è stata modificata (2 settimane fa)

in reply to unwarlikeExtortion

Samsy

in reply to unwarlikeExtortion • 2 settimane fa (Ricevuto 1 settimana fa) • •

There are plenty other DE or WM "fishies" out there.

in reply to u/lukmly013 💾 (lemmy.sdf.org)

Qwel

in reply to u/lukmly013 💾 (lemmy.sdf.org) • 2 settimane fa (Ricevuto 1 settimana fa) • •

If you already have the correct version of the flatpak installed, you can try flatpak build-bundle.

flatpak build-bundle LOCATION FILENAME NAME where
- LOCATION is the path of the repo on disk. Run flatpak info -l org.kde.arianna, and copy the part before /app
- FILENAME is the output file name, preferably .flatpak. Eg: arianna.flatpak
- NAME is the name of the app, here org.kde.arianna

The generated file can be installed with a double-click, or with flatpak install <file>

This is the equivalent of an Android .apk. It contains the app but depends on a runtime. If you want to install it in a few years, odds are the runtime will no longer be available. You can backup the runtime the same way with the --runtime option.

flatpak build-bundle --runtime LOCATION FILENAME NAME where
- LOCATION same as earlier
- FILENAME eg arianna-runtime.flatpak
- NAME is the name of the runtime, which you can get with flatpak info --show-runtime org.kde.arianna

This takes a while, for some reason. Maybe it's compressing stuff?

The runtime is installed the same way as the app: double click or flatpak install.

Note: I only did this once, and not specifically on Arianna. Hope it works.

in reply to u/lukmly013 💾 (lemmy.sdf.org)

MonkderVierte

in reply to u/lukmly013 💾 (lemmy.sdf.org) • 2 settimane fa (Ricevuto 1 settimana fa) • •

Questa voce è stata modificata (2 settimane fa)

qaz via World News

2 settimane fa (Ricevuto 1 settimana fa) • •

qaz
2 settimane fa (Ricevuto 1 settimana fa) • •

Dollar drops after Trump fires Fed's Cook

cross-posted from: lemmy.world/post/35025047

Gold hits 2-week high as dollar slips after Trump fires Fed's Cook
Trump orders removal of Federal Reserve governor Lisa Cook
What Trump’s firing of Fed governor means for central bank’s independence

What Trump’s move to fire Fed governor means for central bank’s independence

The US president has said he is firing Lisa Cook over mortgage fraud allegations – a move experts view as a means to exert more control

^{Heather Stewart (The Guardian)}

#Worldnews

like this

Pro via Programming

1 settimana fa • •

Pro
1 settimana fa • •

No, you don't want to hire "the best engineers" — I think this might be the meanest thing I've ever written.

cross-posted from: programming.dev/post/36758698

::: spoiler Comments
- Hacker News.
:::

Pro

2025-09-02 16:18:41

No, you don't want to hire "the best engineers" — I think this might be the meanest thing I've ever written.

::: spoiler Comments
- Hacker News.
:::

No, you don't want to hire "the best engineers" - Otherbranch
^{www.otherbranch.com}

#programming

like this

Pro via Firefox

1 settimana fa • •

Pro
1 settimana fa • •

What’s new with Firefox 142

cross-posted from: programming.dev/post/36758792

::: spoiler Comments
- Hacker News.
:::

Pro

2025-09-02 16:20:53

What’s new with Firefox 142

::: spoiler Comments
- Hacker News.
:::

What’s new with Firefox 142
^{www.mozilla.org}

#firefox

Pro via Firefox

1 settimana fa • •

Pro
1 settimana fa • •

What’s new with Firefox 142

cross-posted from: programming.dev/post/36758792

::: spoiler Comments
- Hacker News.
:::

Pro

2025-09-02 16:20:53

What’s new with Firefox 142

::: spoiler Comments
- Hacker News.
:::

What’s new with Firefox 142
^{www.mozilla.org}

#firefox

vimmiewimmie via Privacy

2 settimane fa (Ricevuto 1 settimana fa) • •

vimmiewimmie
2 settimane fa (Ricevuto 1 settimana fa) • •

Request, US Border Crossings, Privacy Guides

Hello,

I am trying to gather some information on steps, procedures, and options for increasing privacy while crossing into the US.

My girlfriend goes to school in Canada and crosses the borders frequently throughout the year for; long weekends, extended holiday breaks, semester breaks, and summer breaks.

She'll be going back to Canada for this next year and with everything happening she's asked me to help her find ways to limit her exposure to data being reviewed or stored as she's studying a more Social/Liberal Arts degree which could flag her as a target because of the current political climate.

I've also suggested possibly limiting border crossing instead of coming back as often as she used to.

I'm working through articles and finding things from EFF and ACLU, but would happily taken suggestions, guidance, or any direction from anyone willing to share.

I've considered trying to find a way for her to backup her devices, maybe store those backups in the cloud, create "decoy" states of her devices (elaboration below), then restore the original state of the devices once she's safely past the border.

Devices:

iPhone 11 [18.6]

MacBook Air 13 [Possibly Sequoia 15.5, as stated in her iCloud, she doesn't have it with her right now]

For "decoy" device states, I mean having some apps and data on the devices, but nothing identifying/or that might otherwise give agencies data to further search (online account names/services, stored passwords, large collections of contacts/message histories, etc.)

I've suggested trying to switch to android/PC devices to provide alternative privacy/security options, but her family pays for the devices so it's just the same brand as whatever they have. So, that's not an option at this point, but any statements regarding increased effectiveness, or even lack thereof, by switching to different brand devices may help with any future transition considerations.

Thank you very much for taking the time to read through my post and any guidance you might be able to provide is highly appreciated.

#privacy

in reply to vimmiewimmie

LemmyThinkAboutThat

in reply to vimmiewimmie • 2 settimane fa (Ricevuto 1 settimana fa) • •

This article is from The Guardian:

On the advice of various experts, people are locking down social media, deleting photos and private messages, removing facial recognition, or even traveling with “burner” phones to protect themselves.
In Canada, multiple public institutions have urged employees to avoid travel to the US, and at least one reportedly told staff to leave their usual devices at home and bring a second device with limited personal information instead.

It seems like you already know what you’re doing and I agree with everyone else: backup your data and reinstall later. Create an iCloud account specifically for travel purposes.

This article mentions someone who opted to delete their social media accounts before coming to the US. So don’t be surprised or offended when some of us start deleting our comments, lol. Good luck.

EDIT: As long as you have a travel account you shouldn’t need Advanced Data Protection but perhaps after you/she reaches her destination.

Burner phones, wiped socials: the extreme precautions for visitors to Trump’s America

Horror stories about detainments at the border have also soured some from visiting during Trump’s second term

^{Josie Harvey (The Guardian)}

Questa voce è stata modificata (2 settimane fa)

in reply to vimmiewimmie

Majestic

in reply to vimmiewimmie • 2 settimane fa (Ricevuto 1 settimana fa) • •

Three basic options exist:

1) Burner: Take a device that isn't a normally used device for each category. Make sure it has nothing you care about on it, no incriminating web history, no accounts logged in or saved as cookies that are incriminating, etc, etc. This is simplest, most expensive, but also most fool-proof against all possible threats.

2) Wiped: Wipe the device before travel, possibly backing things up in the cloud to download after arriving. You'll have to back up again with any changes you make and wipe again before traveling back then at your final destination again restore the device from backups. If you have serious fears of close inspection or forensic analysis then it would behoove you to use a secure erase feature on the drive and reinstall the OS rather than just trying to delete problematic files. For smartphones especially doing this and restoring from a cloud back-up can be pretty easy, for laptops it's more of a pain.

3) Mail ahead: Take the devices to a package service, UPS, FedEx, DHL, etc ahead of time, mail them ahead of or just behind you so they arrive just before or slightly after you. For this to work you need a fixed accommodation that can accept packages and which you trust to store them and give them to you. This technically doesn't prevent mail interception but unless you're a high value target that's unlikely at present as its kind of a multi-agency intentional effort thing. Still I'd mail the device in a fully encrypted state.

No other feasible options exist. You can encrypt yes and if you are a US citizen you cannot be denied re-entry (non-citizens can be not only denied entry but barred for years after for refusing to decrypt a device/cooperate) but they can seize your device and hold it for up to a year while trying to crack it and you'll have to expend effort to get it back at the end of that period. They can also put you in a holding cell for hours or hypothetically up to a couple days if they really want to press it accuse you of something and be unpleasant during that time.

gnuplusmatt via Linux

2 settimane fa (Ricevuto 1 settimana fa) • •

gnuplusmatt
2 settimane fa (Ricevuto 1 settimana fa) • •

Adding Plasma Discover to Bazzite via Systemd Sysext

Instructions to add Plasma Discover package manager back into Bazzite using a Systemd Sys-Ext. Based on Travier's Fedora Sys-Ext work at travier.github.io/fedora-sysex… and relies on his base images on quay.

I'm really excited about the application of SysExts to bridge the gap many perceive in adopting atomic distros! This seemed like a fantastic solution to adding this tool back for those who want it, without the overhead of package layering

GitHub - mmcnutt/Bazzite-Discover-Sys-Ext: Instructions to add Plasma Discover package manager back into Bazzite using a Systemd Sys-Ext

Instructions to add Plasma Discover package manager back into Bazzite using a Systemd Sys-Ext - mmcnutt/Bazzite-Discover-Sys-Ext

^GitHub

#linux

in reply to gnuplusmatt

Takahe

in reply to gnuplusmatt • 2 settimane fa (Ricevuto 1 settimana fa) • •

This is interesting, Bazzite abandoning Discover was the final straw for me to dump Bazzite on my TV pc and move back to Kubuntu. I don't have GameMode anymore but the feeling of being in control is worth it so won't be switching back

in reply to Takahe

gnuplusmatt

in reply to Takahe • 2 settimane fa (Ricevuto 1 settimana fa) • •

I thought so, and its not something Ublue has started using yet to my knowledge - there's some good potential that a lot of stuff they add could just become a set of extensions you can plug in like Lego bricks

in reply to gnuplusmatt

quarterlife

in reply to gnuplusmatt • 2 settimane fa (Ricevuto 1 settimana fa) • •

The issue with them right now is there's no update mechanism. If you use something as a system extension that depends on a library in the image, and that library gets updated, you could have an unbootable system or at the very least a non-functioning application until you can update your system extension manually.

Ideally that update mechanism needs to be a part of bootc so if your system extension is part of your boot process it can be updated ahead of time before the image is loaded.

We've looked at it since it's inception and it's something we really want, it's just nowhere near ready yet.

Questa voce è stata modificata (2 settimane fa)

in reply to gnuplusmatt

Luffy

in reply to gnuplusmatt • 2 settimane fa (Ricevuto 1 settimana fa) • •

But why tho? Bazaar (the few times I use it instead of cli) actually works without randomly freezing while loading, searching, downloading, deleting, just about everything, unlike when I tried using Discover on Arch, Opensuse, Kubuntu, Fedora, and Fedora Atomic.

in reply to Luffy

gnuplusmatt

in reply to Luffy • 2 settimane fa (Ricevuto 1 settimana fa) • •

I've never had issues with Discover on Fedora KDE and then even when I moved to Kinoite. I didnt have any issues using it on my Bazzite machine. I wanted it back, I also wanted to see if it was something I could do with a SysExt, which as I said is something I'm excited about, as I have started using them to add stuff on my Kinoite work machine.

It doesn't take Bazaar away, it just puts the items back for anyone who wants it. Spoiled for choice

in reply to Luffy

Kory

in reply to Luffy • 2 settimane fa (Ricevuto 1 settimana fa) • •

Bazaar lacks some basic functionality like update notifications and doesn't integrate so well with KDE.

funkajunk via Linux

2 settimane fa (Ricevuto 1 settimana fa) • •

funkajunk
2 settimane fa (Ricevuto 1 settimana fa) • •

You won't be missed

I changed my main machine over to Linux in the beginning of April, setting it up on its own NVMe so I could keep my other drive with Windows 10 intact and dual boot when needed.

I've been having a blast - ricing hyprland, better workflows, great gaming experiences.

Then yesterday I realized that I hadn't actually bothered to dual boot once since testing out the Windows entry in my systemd-boot menu when I first set it up.

Guess who just gained a 1TB drive to install more games?

I wiped out the Windows drive with no remorse. Damn, that felt good.

Goodbye Windows, you won't be missed.

#linux

in reply to obnomus

funkajunk

in reply to obnomus • 2 settimane fa (Ricevuto 1 settimana fa) • •

Some of my games are bigger than 60gb 😂

in reply to funkajunk

obnomus

in reply to funkajunk • 1 settimana fa • •

I have 2 ssds.
1st ssd has 512MB partition for both Windows and Linux bootloaders and rest of the storage for data, games etc.
2nd ssd has both Windows ans Linux OS on different partitions and some more partitions for data.

unicornBro via Privacy

3 settimane fa (Ricevuto 1 settimana fa) • •

unicornBro
3 settimane fa (Ricevuto 1 settimana fa) • •

Does Google keep logs of my text messages(RCS)?

In the past, I've heard about how Google can keep records of all your Google phone's past locations and text messages.

What about RCS messages which supposedly are encrypted from Android to Android? I know that it's possible that they secretly keep a log behind the scenes, but as far as the regular consumer knows is there any record being kept with regard to the contents of these RCS messages?

#privacy

in reply to EveryMuffinIsNowEncrypted

artyom

in reply to EveryMuffinIsNowEncrypted • 2 settimane fa (Ricevuto 1 settimana fa) • •

I am not misunderstanding you. You just do not understand what E2EE means. Th server is not a sender or a recipient. It is not an "end".

in reply to artyom

EveryMuffinIsNowEncrypted

in reply to artyom • 2 settimane fa (Ricevuto 1 settimana fa) • •

Okay, so, originally, I was going to look it up to prove you wrong, but after looking it up across multiple sources, it seems that you're right and I'm wrong.....mostly.

How-To Geek, Proton, and CloudFlare all mirror what you say.

However, the Wikipedia page section "Definitions" does back me up somewhat. It says:

The term "end-to-end encryption" originally only meant that the communication is never decrypted during its transport from the sender to the receiver.[23] For example, around 2003, E2EE was proposed as an additional layer of encryption for GSM[24] or TETRA,[25] ... This has been standardized by SFPG for TETRA.[26] Note that in TETRA, the keys are generated by a Key Management Centre (KMC) or a Key Management Facility (KMF), not by the communicating users.[27]
Later, around 2014, the meaning of "end-to-end encryption" started to evolve when WhatsApp encrypted a portion of its network,[28] requiring that not only the communication stays encrypted during transport,[29] but also that the provider of the communication service is not able to decrypt the communications ... This new meaning is now the widely accepted one.[30]

(Relevent text is embolded.)

So, I'm not misunderstanding, just misinformed that the definition changed.

Make no mistake, of course: I do appreciate you correcting me as I hadn't realized the definition had changed. Lol.

cryptographic paradigm involving uninterrupted protection of data traveling between two communicating parties

^{Contributors to Wikimedia projects (Wikimedia Foundation, Inc.)}

Questa voce è stata modificata (2 settimane fa)

Pudutr0n via Linux

2 settimane fa (Ricevuto 1 settimana fa) • •

Pudutr0n
2 settimane fa (Ricevuto 1 settimana fa) • •

Is there any animal you wish Ubuntu used for its naming convention?

If they ever use pudus my life will be complete.

#linux

in reply to Pudutr0n

wieson

in reply to Pudutr0n • 2 settimane fa (Ricevuto 1 settimana fa) • •

Bülbül

in reply to Pudutr0n

notthebees

in reply to Pudutr0n • 2 settimane fa (Ricevuto 1 settimana fa) • •

Pigeon and specifically an Indian green pigeon

Leaflet via Linux

2 settimane fa (Ricevuto 1 settimana fa) • •

Leaflet
2 settimane fa (Ricevuto 1 settimana fa) • •

Are there any Linux distros that handle updates similarly to FreeBSD and OpenBSD?

Lately I've been exploring FreeBSD and OpenBSD. One of the more interesting things about them is how they handle OS and package upgrades.

On FreeBSD, the freebsd-update command is used for upgrading the OS and the pkg command is used for managing user packages. On OpenBSD, the syspatch command is used for upgrading the OS and the pkg_* commands are used for managing user packages.

Unlike Linux, these BSDs have a clear separation of OS from these packages. OS files and data are stored in places like /bin and /etc, while user installed packages get installed to /usr/local/bin and /usr/local/etc.

On the Linux side, the closest thing I can think of is using an atomic distro and flatpak, homebrew, containers, and/or snap for user package management. However, it's not always viable to use these formats. Flatpak, snap, and containers have sandbox issues that prevent certain functionality; homebrew is not sandboxed but on Linux its limited to CLI programs.

There's work being done to work around such issues, such as systemd sysext. But I'm starting to feel that this is just increasing complexity rather than addressing root problems. I feel like taking inspiration from the BSDs could be beneficial.

#linux

like this

in reply to Leaflet

deadcade

in reply to Leaflet • 2 settimane fa (Ricevuto 1 settimana fa) • •

To answer the question in the title: No, because these systems inherently have different architecture. Something like OpenBSD (the OS) is relatively self-contained. Linux distributions have system components that are externally developed, but a user might rely upon.

What exactly is the "problem" you have with Linux package managers? It's specifically extra complexity to separate "system" and "packages". This works well for *BSDs that often develop the entire OS themselves, but would pose extra challenges for Linux distributions, where the line between "OS" and "user installed package" is much more blurred.

like this

in reply to Leaflet

jollyrogue

in reply to Leaflet • 2 settimane fa (Ricevuto 1 settimana fa) • •

There are none. Linux is a baseless system, which is its power and frustration.

You could install Debian or Alma Linux and run pkgsrc on it to approximate a base and extra packages setup like the BSDs.

There are parts of a tightly coupled userland forming, like iptools and systemd, but there are many things missing at the moment.

like this

in reply to Leaflet

black_flag

in reply to Leaflet • 2 settimane fa (Ricevuto 1 settimana fa) • •

I feel like in Linux any distinction between "OS" and "something else" would be arbitrary, except, perhaps the example of the AUR vs regular packages in arch, or maybe the universe repo in Ubuntu. Why would you want a whole different system for managing those packages?

in reply to black_flag

jollyrogue

in reply to black_flag • 2 settimane fa (Ricevuto 1 settimana fa) • •

It’s not so much about a second package manager as it is about having a base system and separating extra software from the base system.

Moving extra packages out of the base system allows the extra packages to be updated quicker. Fewer things get frozen when the stable point in time distro release is tagged. This also helps the base as it can move without having to worry about every piece of software in the repos being compatible with the changes.

The concept exists as 3rd party repos. However, most aren’t setup to be as cleanly separated as ports are.

in reply to Leaflet

Voytrekk

in reply to Leaflet • 2 settimane fa (Ricevuto 1 settimana fa) • •

You could use something like homebrew for your packages while keeping just system packages to the default package manager. It has the upside of being separated and more recent, but it can mean duplicate packages are on the system.

in reply to Voytrekk

Leaflet

in reply to Voytrekk • 2 settimane fa (Ricevuto 1 settimana fa) • •

Homebrew is good for unsandboxed CLI programs, but unfortunately not GUI apps.

An issue I ran in the past when using a custom OS on my phone was that flatpak, containers, or snap were able to talk to my phone properly to flash the OS. So on an atomic distro, I would either have to install Chromium using something like rpm-ostree, systemd systext, or boot into a traditional distro like Debian.

in reply to Leaflet

just_another_person

in reply to Leaflet • 2 settimane fa (Ricevuto 1 settimana fa) • •

You are fundamentally misunderstanding how these work though. "Sandbox" is good when any userspace executed binary may comprise a system. How does that refer to a GUi, as you are using it? The actual executable code has nothing to do with it having a graphical interface.

in reply to just_another_person

Leaflet

in reply to just_another_person • 2 settimane fa (Ricevuto 1 settimana fa) • •

Thats not what I’m saying.

My first point is that homebrew is only good for CLI applications. Almost no GUI apps are available, the only one I know of is xeyes.

My second point is that homebrew is unsanboxed. That’s good for programs that don’t work well sandboxed, such as fetch tools like fastfetch.

This leaves a gap of a good supported way to install GUI apps that are unsandboxed. I used to need this when I used an Android phone with a custom OS. I needed to have unsandboxed Chromium with adb tools to flash and update the OS. However, when sandboxed, Chromium doesn’t have access to adb tools.

in reply to Leaflet

just_another_person

in reply to Leaflet • 2 settimane fa (Ricevuto 1 settimana fa) • •

Again, no. There are a myriad of ways to do this if you just want a plainly, locally installed and running program:

1) Both RPM and dpkg support being able to unpackaged or install packages into your local home directory.
2) Download source, build and install yourself

You're just adding arguments on arguments that aren't making any sense now. You're original comment and understanding has been addressed.

in reply to just_another_person

Leaflet

in reply to just_another_person • 2 settimane fa (Ricevuto 1 settimana fa) • •

You’re just adding arguments on arguments that aren’t making any sense now. You’re original comment and understanding has been addressed.

My main point is that I'm worried about additional complexity. On most atomic distros, you're not supposed to touch the base system, so various tools are preinstalled or available: flatpak, podman, homebrew, snap, appimages, systemd sysext.

The BSDs seem to enjoy a separation of OS and user packages with reduced complexity. Though their task is easier since they are complete operating systems, whereas linux is just a kernel and many different projects put together, and many different groups putting out their own distros with varying packages and compatibility.

Both RPM and dpkg support being able to unpackaged or install packages into your local home directory

These don't seem to be advertised features. More like hacky workarounds.
Complex rpm commands. Ubuntu thread with various proposed solutions.

It would be really cool if dnf and apt got good, easy, simple support for installing packages into the home folder. But that's not what's happening. The proposed solution seems to be systemd sysext, which again, prompted me to have worries about complexities about how software is being managed on more "modern" distributions.

You’re just adding arguments on arguments that aren’t making any sense now. You’re original comment and understanding has been addressed

And I keep discussing it because I enjoy doing so.

How to install RPM package without root permission ? - Red Hat Customer Portal

How to install rpm package without root permission ? Is it possible to install RPM packages without root permission? Is it possible to set a different folder and RPM database for rpm installation ,without root permission ? can we adopt the below meth…

^{Red Hat Customer Portal}

in reply to Leaflet

Eugenia

in reply to Leaflet • 2 settimane fa (Ricevuto 1 settimana fa) • •

No, there isn't, however, NixOS is made by ex-freebsd people, and some of the philosophy has bled through there. Have a look at it.

in reply to Eugenia

bobo

in reply to Eugenia • 2 settimane fa (Ricevuto 1 settimana fa) • •

My NixOS config works this way

nixos-rebuild switch --upgrade for system package upgrades and config changes

home-manager switch for user package updates and config changes

in reply to Leaflet

INeedMana

in reply to Leaflet • 2 settimane fa (Ricevuto 1 settimana fa) • •

Unlike Linux, these BSDs have a clear separation of OS from these packages. OS files and data are stored in places like /bin and /etc, while user installed packages get installed to /usr/local/bin and /usr/local/etc.

What do you consider the OS? Is firefox a part of OS? Is office part of OS?

On FreeBSD, the freebsd-update command is used for upgrading the OS and the pkg command is used for managing user packages. On OpenBSD, the syspatch command is used for upgrading the OS and the pkg_* commands are used for managing user packages.

Personally, the ditching of /usr/local mess was one of the selling points of Arch for me, but in a way you could achieve this in Arch. Create a secondary pacman config with RootDir set to /usr/local and alias pacman --config /etc/pacman_local.conf as pkg_pacman

pacman.conf(5) — Arch manual pages

^{man.archlinux.org}

in reply to INeedMana

Ŝan

in reply to INeedMana • 2 settimane fa (Ricevuto 1 settimana fa) • •

Points for þe how-to. In not sure I agree about losing /usr/local being a good þing. An argument could be made for AUR installing only into /usr/local; þen we could go back to best practices of sanitizing $PATH order. It'd also alleviate some naming conflicts which were less of an issue in older Unixes like Solaris.

What specifically about /usr/local bothered you so much þat getting rid of it would be a selling point?

in reply to Ŝan

INeedMana

in reply to Ŝan • 2 settimane fa (Ricevuto 1 settimana fa) • •

it partitions same things into separate locations
One library is here, another one is here, some older version there, which one should this binary load? Where should I point the -L to? Of course, compiling things completely from scratch is unmaintainable anyway (that's why PKGBUILD was another big point - it's easy to create your own AUR packages that will get pacman-level maintainability), but sometimes you want to check if that new patch solves your issue
if distro does not care, the packages will have different prefixes
I can see some use of /opt. But it should be my decision if I want something installed in /opt/bin or /usr/local/bin. In distros that did not enforce where things are put in, it was all over the place. But to be fair, to me, even bin/sbin separation is bs

in reply to Leaflet

nyan

in reply to Leaflet • 2 settimane fa (Ricevuto 1 settimana fa) • •

Gentoo will allow you to update the small set of required system packages and their dependencies separately from everything else (emerge --update system), but doing the reverse would require some pretty heavy micro-management.

in reply to Leaflet

AnUnusualRelic

in reply to Leaflet • 2 settimane fa (Ricevuto 1 settimana fa) • •

I think of those as BSD thoughtful and pondered, and Linux as fairly fast and maybe thoughtless (in the jouyful sense that things have to go forward). In the end BSD is definitely cleaner, but behind, and Linux is much messier but is at the front of what's going on.

And I'm sayin this as someone who's worked with both systems for decades and even though I prefer Linux on the desktop or on servers, on embedded systems, where you'd need some really clean code to poke at, BSD really shines.

Of course BSD works fine (mostly) everywhere. It's almost as good today as it was in 2000.

in reply to Leaflet

steeznson

in reply to Leaflet • 2 settimane fa (Ricevuto 1 settimana fa) • •

Alpine package manager and use of MUSL over glibc are pretty similar to a BSD. Like others have pointed out there are limits to how closely a Linux distro can match the deliberate structure of those distros given the different design philosophy

SUPER SAIYAN via Memes

2 settimane fa (Ricevuto 1 settimana fa) • •

SUPER SAIYAN
2 settimane fa (Ricevuto 1 settimana fa) • •

That’s what friends are for

#memes

like this

fort_burp via Technology

2 settimane fa (Ricevuto 1 settimana fa) • •

fort_burp
2 settimane fa (Ricevuto 1 settimana fa) • •

How can one consume media these days with any sort of privacy?

With a privacy protecting setup, the mainstream internet is almost unusable. To sign up for social media or even a gmail account, one has to provide a phone number for verification. Youtube doesn't work when not signed into a Google account, or if one is connected to a VPN. Even downloader programs like yt-dlp and freyr have been rendered useless by the strict access controls of the major platforms. There is a vast amount of community, DIY, and educational material of all sorts behind these platform walls, so how can someone who doesn't want to be tracked access any of it these days?

There are alternatives like archive.org and peertube which are wonderful but have nowhere near the amount of content that people have been uploading to YouTube over the years. For example, if I need to fix a washing machine and there is a tutorial on YouTube, how can I see it while still preserving a modicum of privacy online?

#technology

in reply to fort_burp

hansolo

in reply to fort_burp • 2 settimane fa (Ricevuto 1 settimana fa) • •

Some sites also use canvas blocking as a metric to determine if you're a bot or not. Bit that wouldn't affect Freetube. Freetube is its own app, so I would check to see what it has under the API settings. It should fall back to the "local API" which is just your internet connection. The Invidious APIs rarely work for me anymore.

in reply to hansolo

fort_burp

in reply to hansolo • 1 settimana fa • •

Ok thanks, I'll check it out.

Mas via Privacy

2 settimane fa (Ricevuto 1 settimana fa) • •

Mas
2 settimane fa (Ricevuto 1 settimana fa) • •

Google will require developer verification for Android apps outside the Play Store

cross-posted from: jlai.lu/post/24787719

Starting next year, Google will begin to verify the identities of developers distributing their apps on Android devices, not just those who distribute via the Play Store.

Mas

2025-08-25 21:57:54

Google will require developer verification for Android apps outside the Play Store

Starting next year, Google will begin to verify the identities of developers distributing their apps on Android devices, not just those who distribute via the Play Store.

Google will require developer verification for Android apps outside the Play Store | TechCrunch
Google will ask all Android developers to verify their identity starting next year.
^{Sarah Perez (TechCrunch)}

#privacy

like this

in reply to Mas

Wrrzag

in reply to Mas • 1 settimana fa • •

Is this just a signature check when installing? Could it be bypassed by getting your dev cert and just signing everything you want to install? Things like obtainium and fdroid could even have a "load your own cert" option and automate this.

in reply to Mas

eelectricshock

in reply to Mas • 1 settimana fa • •

Does this even effect GrapheneOS? Could they not use their own package installer by getting rid of the installer code?

silence7 via Climate - truthful information about climate, related activism and politics.

1 settimana fa • •

silence7
1 settimana fa • •

France wants more time to clinch new EU climate target, diplomats say

Archived copy of the article

https://www.reuters.com/sustainability/cop/france-wants-more-time-clinch-new-eu-climate-target-diplomats-say-2025-09-02/

#climate

technocrit via politics

1 settimana fa • •

technocrit
1 settimana fa • •

The Fed Has Never Been Independent

While Donald Trump’s attacks on the Fed are deeply authoritarian, the institution itself is far from blameless. From the 2008 crash to the pandemic, its primary aim has been to protect the interests of the wealthy.

The Fed Has Never Been Independent

^jacobin.com

#politics

silence7 via politics

1 settimana fa • •

silence7
1 settimana fa • •

Judge Says Trump’s Use of Troops in L.A. Is Illegal

The federal judge found that the deployment exceeded legal limits that generally prohibit the use of the military for domestic law enforcement.

https://www.nytimes.com/2025/09/02/us/judge-ruling-trump-national-guard-los-angeles.html?unlocked_article_code=1.i08.vaJC.yz-xyHS0yrka

#politics

adhocfungus likes this.

silence7 via Climate - truthful information about climate, related activism and politics.

1 settimana fa • •

silence7
1 settimana fa • •

This campaign will help Americans go electric before federal tax credits end

This campaign will help you go electric before federal tax credits end

As the GOP kills incentives, Rewiring America is offering free online tools and weekly calls to get more clean energy and efficient appliances into homes.

^{Canary Media}

#climate

like this

Auster via Photography

1 settimana fa • •

Auster
1 settimana fa • •

Open DVD player

Open DVD player #photography

Found this player in a closet and decided to test it.
As some buttons weren't working, tried opening it, and then taking a photo of the model to ask a technician.
It came out surprisingly aesthetic, me thinks.

#photography

Nemeski via Technology

1 settimana fa • •

Nemeski
1 settimana fa • •

Therapists are secretly using ChatGPT. Clients are triggered.

Some therapists are using AI during therapy sessions. They’re risking their clients’ trust and privacy in the process.

^{Laurie Clarke (MIT Technology Review)}

#technology

like this

Xiko do Couto via Política

1 settimana fa • •

Xiko do Couto
1 settimana fa • •

Basta de perseguição aos profissionais da Educação do Estado do Rio de Janeiro - Assine a petição!

cross-posted from: lemmy.eco.br/post/16214333

Basta de perseguição aos profissionais da Educação do Estado do Rio de Janeiro

^{Sepe RJ (Change.org)}

#Politica

Pro via Climate - truthful information about climate, related activism and politics.

1 settimana fa • •

Pro
1 settimana fa • •

A group of more than 85 scientists find errors in a new Energy Department climate report

DOEresponseSite

On July 29, 2025, the Department of Energy (DOE) published a report from its Climate Working Group (CWG). This report features prominently in the EPA's reconsideration of its 2009 Endangerment Finding.

^{sites.google.com}

#climate

like this

lgsp@feddit.it via OpenStreetMap Italia Community

1 settimana fa • •

lgsp@feddit.it
1 settimana fa • •

mensileOSM 4 (agosto 2024)

mensileOSM 4 (Agosto 2025)

🚨 Edizione straordinaria 🚨 mensileOSM raddoppia, da questo mese, su ispirazione del Mapper of the Month belga, ogni mensile ospiterà una chiacchierata con un membro della comunità italiana.

^{OpenStreetMap Community Forum}

#openstreetmap_it

spicy pancake via Technology

1 settimana fa • •

spicy pancake
1 settimana fa • •

AOL announces September shutdown for dial-up Internet access

After decades of connecting Americans to its online service and the Internet through telephone lines, AOL recently announced it is finally shutting down its dial-up modem service on September 30, 2025. The announcement marks the end of a technology that served as the primary gateway to the World Wide Web for millions of users throughout the 1990s and early 2000s.

AOL announces September shutdown for dial-up Internet after 34 years

Around 175,000 households still use dial-up Internet in the US.

^{Benj Edwards (Ars Technica)}

#technology

like this

reshared this

in reply to spicy pancake

LordCrom

in reply to spicy pancake • 6 giorni fa (Ricevuto 3 giorni fa) • •

TIL that AOL is still a thing.

in reply to LordCrom

TankovayaDiviziya

in reply to LordCrom • 6 giorni fa (Ricevuto 3 giorni fa) • •

Lol beat me to it!

in reply to spicy pancake

FrogmanL

in reply to spicy pancake • 6 giorni fa (Ricevuto 3 giorni fa) • •

Goodbye

Kyiv Independent Daily Headlines via Writeworks.UK

1 settimana fa • •

Kyiv Independent Daily Headlines
1 settimana fa • •

Tuesday, September 2, 2025

Zelensky announces faster air defense deliveries after deadly Russian strikes -- Ukraine liberates village of Novoekonomichne in Donetsk Oblast -- Russian map behind top general hints at ambitions to seize Ukraine's Odesa, Kharkiv -- Russia-Ukraine naval

The Kyiv Independent [unofficial]

This newsletter is brought to you by Medical Bridges.

Medical Supplies for Ukraine’s Hospitals. Partnering for global health equity.

Russia’s war against Ukraine

Infantrymen of the operational battalion of the 13th Brigade of the National Guard of Ukraine, “Khartiia,” practice airborne skills using an American M113 tracked armored personnel carrier in Kharkiv Oblast on Aug. 29, 2025. (Viacheslav Madiievskyi / Ukrinform / NurPhoto via Getty Images)

Ukraine liberates village of Novoekonomichne in Donetsk Oblast, General Staff says. Ukrainian assault groups spent two weeks fighting to liberate the settlement, raising the national flag in the village center on Aug. 31, according to the General Staff.

Russian front-line advances have slowed down in August, monitoring group says. The pace of Russia’s advance in Ukraine dropped by 18% in August, with Russian forces occupying 464 square kilometers of territory.

Russian strikes hit Kyiv, Sumy, Odesa oblasts, causing fires and casualties. In Kyiv Oblast, a Russian drone strike hit the Bila Tserkva community, killing one person and wounding others, Secretary of the Bila Tserkva City Council Volodymyr Vovkotrub said.

Russian forces allegedly preparing major assault toward Siversk in Donetsk Oblast, Ukraine’s military says. Siversk, Russia’s new potential target, lies about 10 kilometers (6 miles) west of Russian-occupied territory and just south of the contested Serebrianskyi Forest.

Your contribution helps keep the Kyiv Independent going. Become a member today.

Zelensky to reportedly meet European leaders in Paris on Sept. 4. U.S. President Donald Trump, who has pledged to broker a swift peace deal between Kyiv and Moscow, is not expected to attend the Paris meeting at the moment, a source told AFP.

Ukraine’s SBU files in absentia notice of suspicion against Kadyrov for war crimes. The Security Service of Ukraine (SBU) announced on Sept. 1 that it had charged Chechen leader Ramzan Kadyrov in absentia with war crimes against Ukrainian soldiers.

Russian map behind top general hints at ambitions to seize Ukraine’s Odesa, Kharkiv. While Moscow has publicly insisted on full control of Donetsk, Luhansk, Kherson, and Zaporizhzhia oblasts, the map indicated possible plans extending to Odesa and Kharkiv, neither of which had been included in earlier demands.

Zelensky announces faster air defense deliveries after deadly Russian strikes. “We are accelerating the supply of additional air defense systems to enhance protection against missiles,” President Volodymyr Zelensky said.

Read our exclusives

Ukraine war latest: Ukraine liberates another village in Donetsk Oblast amid ongoing Russian offensive

Ukraine’s 425th Regiment has liberated the village of Novoekonomichne in Donetsk Oblast and raised the national flag, the General Staff announced on Sept. 1.

Photo: Anadolu via Getty Images

Learn more

Russia-Ukraine naval drone arms race could ‘usher in a new era of warfare’

After a string of devastating Ukrainian strikes that crippled much of its Black Sea Fleet, Russia is now turning to naval drones in a bid to rebuild its presence and adapt to a new phase of maritime warfare.

Photo: Stringer / AFP via Getty Images

Learn more

As Putin shakes hands with Modi, Xi, here’s the state of Russia’s allies

After three years of international isolation, Russian President Vladimir Putin is back at the forefront of the global stage.

Photo: Gavriil Grigorov / Pool / AFP via Getty Images

Learn more

From Crimea to Donbas, Russia’s “peace” has always meant more war. We’re here in Ukraine to give the world a reality check. Support independent journalism in this critical moment.

BECOME A MEMBER

MAKE A DONATION

Human cost of Russia’s war

General Staff: Russia has lost 1,083,790 troops in Ukraine since Feb. 24, 2022.

The number includes 800 casualties that Russian forces suffered over the past day.

International response

US Treasury’s Bessent says ‘despicable‘ Russian bombing campaign against Ukraine puts all sanctions options on the table. Treasury Secretary Scott Bessent told Fox News on Sept. 1 that the Trump administration is considering new sanctions on Russia after Moscow intensified strikes on Ukraine despite recent peace talks.

Slovak PM Fico plans meetings with Putin, Zelensky this week. Slovak Prime Minister Robert Fico announced on Sept. 1 that he will visit China to meet with Russian President Vladimir Putin, followed by a meeting with President Volodymyr Zelensky in Slovakia.

Key Chinese bank reportedly halts Russia payments after EU sanctions.

Heihe, a small rural lender, was one of the last Chinese banks willing to process transactions for Russian non-sanctioned credit organizations after larger Chinese banks cut off such services.

EU considers tighter rules to block Russian gas after 2027 ban, Bloomberg reports. The plan specifically raises concerns over gas shipped through TurkStream, the pipeline linking Russia with Southeast Europe.

Russia’s oil infrastructure under fire | Ukraine This Week

In other news

Kyiv names managers for US-Ukraine investment fund ahead of first meeting. The announcement sets the stage for the fund to become functional after four months of preparation by America’s International Development Finance Corporation (DFC) and Ukraine’s Support Public-Private Partnership Agency (PPP Agency).

Suspected Russian jamming hits von der Leyen’s plane during Bulgaria visit. “We can confirm there was GPS jamming, but the plane landed safe,” European Commission spokesperson Arianna Podesta confirmed for the Kyiv Independent.

Kim Jong Un travels to China to join Xi, Putin at WWII anniversary events. Photographs published by North Korean media showed Kim with senior officials, including Foreign Minister Choe Son Hui, inside his dark green armored train.

This newsletter is open for sponsorship. Boost your brand’s visibility by reaching thousands of engaged subscribers. Click here for more details.

Today’s Ukraine Daily was brought to you by Martin Fornusek, Tymur Zadorozhnyy, Oleksiy Sorokin, Kateryna Hodunova, Olena Goncharova, and Sonya Bandouil.

If you’re enjoying this newsletter, consider joining our membership program. Start supporting independent journalism today.

Kim Jong Un travels to China to join Xi, Putin at WWII anniversary events

^{Olena Goncharova (The Kyiv Independent)}

#russia #video #bulgaria #china #blog #community #eu #Trump #chinese #kimjongun #europe #aviation #vlog #genocide #GPS #ukrainian #Ukraine #drones #homes #Putin #bombing #warcrimes #moscow #Apartments #украина #fico #Kyiv #путин #zelensky #Sanctions #Kadyrov #PeaceTalks #Sumy #navigation #odesa #русский #RussianGas #PutinWarCrimes #CrimesAgainstHumanity #casualties #RussianWarCrimes #missiles #terrorists #houses #Slovakia #sbu #BlackSea #Siversk #BlackSeafleet #KharkivOblast #fires #frontline #Киев #геноцид #russianterrorists #Slovak #advances #russianterrorism #liberate #nationalguard #RussianAggression #TurkStream #armsrace #KyivIndependent #Europeanleaders #gpsjamming #internationallawviolations #SeaDrones #ukrainiansoldiers #killingcivilians #residentialbuildings #russianstrikes #Russianforces #CiviliansTargeted #ComradeKrasnov #airdefenses #russianambitions #m113 #civiliansAttacked #civiliansTortured #DonetskOblast #Военныепреступления #RussianCausalities #residentialAreas #RussianOccupied #Гражданские #нападавшиенапытку #Преступленияпротивчеловечности #Русскиесмерти #убитые #цивилийцы #airborneSkills #armoredPersonnelCarrier #assaultGroups #BilaTserkva #ChineseBanks #infantrymen #Khartiia #liberatesVillages #majorAssaults #maritimeWarfare #navalDrones #Novoekonomichne #oblasts #oilInfrastructure #RussianJamming #RussianMap #SerebrianskyiForest

schizoidman via Technology

1 settimana fa • •

schizoidman
1 settimana fa • •

Chinese social media platforms roll out labels for AI-generated material

Major social media platforms in China have started rolling out labels for AI-generated content to comply with a law that took effect on Monday

Chinese social media platforms roll out labels for AI-generated material

WeChat, Douyin and Weibo are among those deploying label requirements to comply with a new law.

^{Kris Holt (Engadget)}

#technology

like this

reshared this

in reply to schizoidman

BETYU

in reply to schizoidman • 1 settimana fa (Ricevuto 3 giorni fa) • •

so one of the most censord and biggest social media sites in the world will label ai generated contend while Chinese ambassadors post ai generated propaganda on x. that's just funny.

in reply to schizoidman

limerod

in reply to schizoidman • 6 giorni fa (Ricevuto 3 giorni fa) • •

There are very few things the chinese government does right. This may be one of them.

Fitik via Free Open-Source Artificial Intelligence

1 settimana fa • •

Fitik
1 settimana fa • •

Apertus (Switzerland’s first large-scale, open, multilingual language model)

Apertus (Switzerland’s first large-scale, open,... #ai #tech #switzerland

ethz.ch/en/news-and-events/eth…

Apertus: a fully open, transparent, multilingual language model

EPFL, ETH Zurich and the Swiss National Supercomputing Centre (CSCS) released Apertus today, Switzerland’s first large-scale, open, multilingual language model — a milestone in generative AI for transparency and diversity.

^{ETH Zurich}

#ai #tech #switzerland

Fitik likes this.

Technology Channel reshared this.

in reply to Fitik

hendrik

in reply to Fitik • 1 settimana fa • •

Nice. This is the one that supposedly comes with open data sets, training data and everything, and it's a true "open-source" model. Seems it's avalable in 7B and 70B.

Questa voce è stata modificata (1 settimana fa)