Salta al contenuto principale


in reply to silence7

Supreme Shitlib Hochul being all bluster to make herself look good and then not following through when it actually matters??

This is a politician so transparent that 70% of the contributions to her last year was dark money/"Organization unavailable for these records" as per OpenSecrets, Almost 75% in 2023, and 72% in 2022

So trustworthy! Much accountability!

Questa voce è stata modificata (2 giorni fa)


Ecuador’s President Considering Locations for Foreign Military Bases





NYC Mayoral Debate Full Stream









AWS outage reminds us why $2,449 Internet-dependent beds are a bad idea


My god, this is just hilarious. Remember, kids: If a piece of furniture that has been basically agreed upon for thousands of years (with some changes) needs a cloud connection:

  • You're paying too much.
  • You'll continue paying too much.
  • You might wake up sweating in an uncomfortable position.


This week’s Amazon Web Services outage had some people waking up on the wrong side of the bed.

A Domain Name System (DNS) resolution problem affected AWS cloud hosting, resulting in an outage that impacted more than 1,000 web-based products and services and millions of people.

Perhaps one of the most avoidable breakdowns came via people’s beds. The reliance on the Internet for smart bed products from Eight Sleep resulted in people being awoken by beds locked into inclined positions and sweltering temperatures.

As spotted by Dexerto, the AWS outage caused smart mattress covers from Eight Sleep to malfunction. These “Pod” mattress covers connect to a physical hub, and users can set the covers to temperatures between 55° and 110° Fahrenheit via a companion app. Eight Sleep also sells smart mattress bases that let people control their bed’s elevation with the app. As of this writing, the Pods’ MSRPs range from $2,449 to $3,249, and the base has a $1,950 MSRP. Eight Sleep also sells its Autopilot feature through an annual subscription that starts at $199. Autopilot is supposed to help automatically set Eight Sleep devices to users’ optimal sleeping conditions. Pod purchases require a one-year subscription to Autopilot.


There's admittedly a bit of Schadenfreude here. You seriously subscribed to a fucking bed?



Reagan called shutdowns a failure. Today they’re called leverage. When did that flip?


Ronald Reagan faced eight partial government shutdowns between 1981 and 1989. He said a shutdown “is never the right way to resolve differences” because it “undermines confidence in government.”
Back then they were seen as breakdowns in negotiation, not bargaining tools.

Today some politicians use them as leverage.
When did that change and who made it normal? Was Reagan wrong?



Real-Life Indiana Jones Torches Trump’s White House Teardown With Scathing ISIS Comparison


An archaeologist who spent years documenting the recovery of ancient artifacts looted by ISIS in Syria and Iraq is shocked by Trump’s wanton destruction.
An archaeologist who spent years documenting the recovery of ancient artifacts looted by ISIS in Syria and Iraq is shocked by Trump’s wanton destruction.


This may be the most bonkers tech job listing I’ve ever seen


That's an interesting divergence between the hed and URL, but that's really the least of the issues.

Here’s a job pitch you don’t see often.

What if, instead of “work-life balance,” you had no balance at all—your life was your work… and work happened seven days a week?

Did I say days? I actually meant days and nights, because the job I’m talking about wants you to know that you will also work weekends and evenings, and that “it’s ok to send messages at 3am.”

Also, I hope you aren’t some kind of pajama-wearing wuss who wants to work remotely; your butt had better be in a chair in a New York City office on Madison Avenue, where you need enough energy to “run through walls to get things done” and respond to requests “in minutes (or seconds) instead of hours.”


I mean, I've had such a job.

And if I needed to talk to my boss at 3 a.m., we were either still awake or I rolled over and poked her shoulder.

That environment is fine when it happens organically. This is just absurd.





TOP 10 best electric aircraft today - AERONAUT.media


Electric aircraft are quickly becoming a reality, it is bewildering to keep track of all the innovation, this article does a good job!



Futo updates their website, removing logos, clarifying micro grants


Apparently in the past day, they’ve removed all the logos from the Microgrants projects and clarified that the grants are unsolicited
in reply to linkinkampf19 🖤🩶🤍💜🇺🇦

The voice recognition is honestly the best I've ever used. It'll be a shame to give it up.

If I decide to switch keyboards, I'm certain I would go back to HeliBoard.

There's been a real explosion of open source voice recognition over the past few months, and I haven't tested a lot. Whisper+ looks like a promising one. Before using Futo, I used Sayboard, which I was pretty happy with.





Pretty Guardian Sailor Moon - Atto 3, la ragazza Marziana


Dopo i pesanti fallimenti di Jadeite, dal Dark Kingdom spunta fuori un altro tizio, ossia Nepherite, che senza troppi rimorsi cambia già abbastanza...

stuff.octt.eu.org/2025/10/pret…




As an Bisexual, I feel too scared to date as I feel like people would still default me as 'Gay'.


Sensitive content

in reply to SuperDuperKitten

Don’t worry too much about it. People who will judge you for looking or acting gay aren’t worth your time anyway. I can say from experience that there are plenty of great women who actually want a partner who looks gay.


Does it get windy in New York City?


The question applies to any city with lots of really tall, big buildings, really. I figure that all those tall buildings would get in the way of the wind, like they make some kind of artificial lee. I've never been in a big city like that.
in reply to ssillyssadass

It depends on where you are, but the huge grids of Manhattan can definitely be windy. They’re essentially big straight channels with nothing to block an air current.


Sora users trick platform into creating racist celeb videos


Because of course it does.

Guardrails? What guardrails? Naughty netizens found a way to trick the Sora 2 video generator into producing deepfakes of public figures, including OpenAI CEO Sam Altman and billionaire Mark Cuban, that make it sound as though they're spewing racial slurs. The trick works despite Sora's built-in filters meant to block hateful language.

AI detection platform Copyleaks reported Wednesday that its review of the recently released Sora 2 app, with its improved video generation model, uncovered several videos using celebrity likenesses to recreate a 2020 incident in which a man wearing a Burger King crown was kicked off a JetBlue flight for a racist tirade. In place of the James May lookalike from the original incident, Sora users recreated the scene using Altman and Cuban, as well as popular streamers xQc, Amouranth, IDKSterling, and YouTuber Jake Paul.

Sora 2 users weren't able to perfectly recreate the incident, mind you, as OpenAI's software does include guardrails to prevent the creation of content with epithets used in the original (i.e., the n-word). However, a simple homophone can be enough to sidestep those restrictions and make it sound as though public figures, including some who've opted into Sora's Cameo feature, were uttering racist slurs, according to Copyleaks.




America’s biggest offshore wind farm will be online in 6 months


"The project is crucial for helping the state meet a deluge of new electricity demand, as Virginia is at the center of the nationwide boom in data-center construction."
in reply to kalkulat

The nice thing is this will crush fossil energy out of the market when or if the ai bubble pops. Because the marginal cost of solar is near zero, and this will be the price of electricity if oversupply happens.


Is AI’s Circular Financing Inflating a Bubble? [YT | 25'13"]


Gotta love the snark.







Reddit’s ‘AI Scraping’ Lawsuit Is An Attack On The Open Internet


I hate this timeline.

Let’s break this down, because we have to look at how crazy this is.
  • They’re saying that these companies are “avoiding or bypassing” Reddit’s TCMs. But, the way they’re doing that is by not scraping Reddit. You cannot claim that it is “circumventing a TCM” to get the same content… from Google. That’s crazy.
  • Even crazier is that they’re arguing that the defendants are circumventing Google’s TCM, even though Google isn’t even a party.
  • They’re making this claim over content that Reddit holds no copyright over. The copyright remains with the original creator. Reddit holds a license, but a license does not grant Reddit the right to sue over that copyright.

Each one of these ideas is crazy. All three of them together is ludicrous. Reddit is claiming that these companies violated copyright law by (1) avoiding Reddit and (2) getting the content from publicly available Google searches over (3) content that Reddit has no copyright over.

And somehow that’s supposed to be copyright infringement.




Letting Silicon Valley Geoengineer the Atmosphere Will End Badly


in reply to silence7

The unknown unknowns are real but the way that the article focuses on the part where this approach is bad because it gives people that the author doesn't like power and prestige is pretty funny. The author would rather watch things keep getting worse while waiting for a perfect solution that he knows will never come than he is to let billionaires do something that might make people think they're the good guys.

IMO we should raise sulfur dioxide levels back to where they were before the counterproductive regulations on ship emissions reduced them. We already know that that helped mitigate warming without causing catastrophe.

Questa voce è stata modificata (3 giorni fa)
in reply to ArbitraryValue

There aren't a ton of things I can say I'm an expert on, but SAI is. I've done a whole research project on it (can't get into specifics). This is absolutely a bad idea, I don't care who is doing it.

Also I can see you have no idea what you're talking about, because SOx and NOx are pollutants that cause acid rain among other things and damage entire ecosystems. Ya know, the thing that all of life lives in.

in reply to zd9

That's why we need to make sure it's outside the environment. Beyond the environment. With the crude oil and fire.
(thanks for your input, I'll have to check out that book you suggested, Terminal Shock.)
Questa voce è stata modificata (2 giorni fa)
in reply to IncogCyberSpaceUser

What do you mean outside the environment? In space? I don't know what you're trying to say
in reply to zd9

I was referencing this clip:
in reply to silence7

NO. I've personally investigated this for one of my projects, and it's a terrible idea. Things like MCB would be better, but SAI is absolutely going to wreak havoc on the entire world, and is only a cover-up for fossil fuel companies to continue to use coal and oil. We need to attack the root of the problem, not just put some duct tape over top, which will end up suffocating the whole world.

Anyone reading, look up Termination Shock (it's a cool book too).



in reply to Khalid K-1000 🤖

Hello Khalid. The post you're replying to was actually me posting someone else's blog on Lemmy, which comes through to Mastodon with relevant hashtags automatically added, and then gets boosted out appropriately... which is how you see it. 🙂 It's better to go to the Lemmy post to have a discussion, but yeah, not my blog, so I don't know, I'm just posting stuff there (and it comes through here as well thanks to federation, which is pretty cool, but sources aren't so obvious)



"Israeli" drones over Beirut as US pushes for Hezbollah disarmament


in reply to Ayache Benbraham ☭🪬

I found a YouTube link in your post. Here are links to the same video on alternative frontends that protect your privacy:



Fotovoltaico, contributi a fondo perduto.


"Contributi fotovoltaico 40%. Incentivo a fondo perduto e bonus GSE per 20 anni. Nessuna spesa iniziale.
Attivo nei comuni sotto i 50.000 abitanti".

Così si legge nel sito sottoriportato.

fotovoltaicopiccolicomuni.it/



La città francese di Échirolles abbraccia Linux sostituendo Windows 10


Il Comune di Échirolles dice addio a Windows 10 e abbraccia Zorin OS! Più risparmio, più sostenibilità, più libertà. Ecco come Linux sta cambiando la pubblica amministrazione #Linux #ZorinOS #Windows10



The Zionist entity postpones West Bank annexation bill under international pressure


Israeli Prime Minister Benjamin Netanyahu postponed the West Bank annexation bill on Thursday following international pressure and U.S. President Donald Trump's statements against approving the bill.

The postponement comes one day after the Knesset (the legislative body) approved the bill to apply Israeli law and sovereignty to settlements in the occupied West Bank , a controversial decision that was immediately criticized by Palestine and the international community. According to Israeli coalition leader Ofir Katz, the process was halted on Netanyahu's direct orders, and party discipline was imposed on those who voted in favor.

President Donald Trump made statements on the matter, affirming that the West Bank would not be annexed by Israel and that he would withdraw all support if it were to happen. Despite being classified by these mediators as a threat to the peace proposal developed by the United States, the ceasefire has not been fulfilled and Israel has continued attacks on occupied territory and blocked the passage of humanitarian aid to Gaza , so there has not yet been true peace for the Palestinian people.

The measure, however, is seen as a precautionary measure by the prime minister to lessen pressure from his main international ally and from Arab countries that value the nation's regional impact . Several countries had issued statements hours earlier condemning the law as a violation of international law and calling on the international community to take action against these Israeli attacks.

The bill was approved last Wednesday as a proposal by legislator Avi Maoz of the far-right Noam party, and was approved with 25 votes in favor and 24 against. The annexation idea does not represent a majority in the Israeli parliament, with the prime minister's party being one of those that did not vote in favor of the law.

Palestine made its discontent known through a statement issued by the Ministry of Foreign Affairs, where it reaffirmed that the occupied territories in the West Bank belong to Palestine and that their sovereignty is the responsibility of the Palestinian people and their leaders . The Palestinian territory continues to be attacked by Israel despite the ceasefire, and hunger has remained a weapon of war , despite statements by Pope Leo XIV during the ceremony for the 80th anniversary of the Food and Agriculture Organization of the United Nations (FAO).




US expands facial recognition at borders to track non-citizens


A new regulation will allow U.S. border authorities to require non-citizens to be photographed at airports, seaports, land crossings and any other point of departure, expanding on an earlier pilot program.

Under the regulation, set to take effect on December 26, U.S. authorities could require the submission of other biometrics, such as fingerprints or DNA, it said.
It also allows border authorities to use facial recognition for children under age 14 and elderly people over age 79, groups that are currently exempted.

The tighter border rules reflect a broader effort by U.S. President Donald Trump to crack down on illegal immigration. While the Republican president has surged resources to secure the U.S.-Mexico border, he has also taken steps to reduce the number of people overstaying their visas.

https://www.reuters.com/world/us/us-expands-facial-recognition-borders-track-non-citizens-2025-10-24/



Pentagon orders major naval deployment to Caribbean and South American waters


Defense Secretary Pete Hegseth ordered the USS Gerald R. Ford and its strike group to deploy to U.S. Southern Command to “bolster U.S. capacity to detect, monitor, and disrupt illicit actors and activities that compromise the safety and prosperity of the United States," Pentagon spokesman Sean Parnell said in a social media post.

The USS Ford is currently deployed to the Mediterranean Sea along with three destroyers. It would likely take several days for the ships to make the journey to South America.

Deploying an aircraft carrier is a major escalation of military power in a region that has already seen an unusually large U.S. military buildup in the Caribbean Sea and the waters off Venezuela.



New federal loan limits threaten graduate school access for millions of students


Millions of college students could face significant new obstacles paying for graduate school after federal loan limits were signed into law this summer as part of the One Big Beautiful Bill Act.

Starting July 1, 2026, Grad PLUS loans will be eliminated. Those loans previously allowed graduate students to borrow up to the full cost of attendance.

New borrowers will be limited to $200,000 for professional degrees like law and medicine. Students in other graduate programs can borrow up to $100,000.



How a young tech startup was chosen to manage Texas' $1B school voucher program


When Texas chose a company to roll out the state’s $1 billion private school voucher program, it passed over more established vendors in favor of a four-year-old tech startup that said it could do it for almost half the cost.

Now, Odyssey must execute on its promises to meet an aggressive timeline while avoiding missteps that have dogged other program launches.

The New York-based company has rapidly expanded in recent years, launching programs in eight states that subsidize students’ private education costs with taxpayer dollars.

In Texas, the startup is tasked with advertising the program, running the lottery to choose the students who participate and setting up the online marketplace where families can spend their state funds on private school tuition, tutors, computers and other approved items.

https://www.houstonchronicle.com/politics/article/odyssey-texas-private-school-voucher-contract-21106303.php



Fear, Greed, Civic Virtue and the Fall of the Elites




Big Tech helped bankroll the East Wing destruction


Donald Trump is finishing what the British started. Despite promises that the White House would be unaffected by the addition of a $230 million ballroom, the historic East Wing has in fact been demolished. The images of the site are so jarring that the Treasury Department has reportedly ordered its employees to stop taking photos of it.

If the destruction of the East Wing is a shock, the money that’s paying for it might be even more of a scandal. The White House, eager to assure Americans that their tax dollars have not been diverted for a vanity project, has emphasized that the ballroom is being financed by individuals and major corporations. Instead of going through a process to obtain and disburse federal funds, Trump simply asked the companies his administration is supposed to be regulating to write checks.

The list of donors released by the White House includes the usual deep-pocketed Republicans, such as casino magnate Miriam Adelson and private-equity mogul Stephen Schwarzman, but also a host of companies whose leaders have huge incentives to maintain good relations with an often vindictive head of state. They include telecom giants and the railroad giant Union-Pacific—which needs the Trump administration’s sign-off on a proposed $85 billion merger with Norfolk Southern. (Union-Pacific did not respond to a request for comment.) And then there’s the tech companies—Google, Apple, Microsoft, Amazon, and Meta.

The Hill lists them: thehill.com/homenews/administr…




President Reagan's Radio Address on Free and Fair Trade on April 25, 1987


Trump called the Reagan video/speech fake. Here is the entire thing posted 8 years ago to youtube.

It is transcribed here: reaganlibrary.gov/archives/spe…



Global cooling startup raises $60M to test sun-reflecting technology


Heatmap has better coverage, but a hard paywall
in reply to silence7

I have an idea for co2 capture. Can i get 100M€? (Its trees, but don't tell that to the money launderers)



Amici 25, anticipazioni quinta puntata del 26 ottobre 2025: primi eliminati, tornano Emma e TrigNO


La quinta puntata di Amici 25 è stata registrata oggi e andrà in onda domenica 26 ottobre 2025, alle 14:00 su Canale 5. Episodio cruciale: arrivano i primi eliminati della stagione, rientrano in studio Emma e TrigNO, e si definiscono i nuovi allievi a rischio in vista della prossima settimana.

LE ANTICIPAZIONI: Amici 25, anticipazioni quinta puntata del 26 ottobre 2025: primi eliminati, tornano Emma e TrigNO




“Exploring SFW Content On The Hub” — “Esplorando Contenuti SFW Sull’Hub”


Conosco da tempo immemore il famoso meme per cui qualcuno va su PornHub e assolutamente non per guardare contenuti disgustosi, signora mia, ci mancherebbe, ovviamente guardo solo roba per bene lì sopra, che però su altri siti per qualche motivo non è stata caricata, e quindi mannaggia… Eppure, io pensavo fosse appunto un meme; sapevo […]

octospacc.altervista.org/2025/…


“Exploring SFW Content On The Hub” — “Esplorando Contenuti SFW Sull’Hub”


Conosco da tempo immemore il famoso meme per cui qualcuno va su PornHub e assolutamente non per guardare contenuti disgustosi, signora mia, ci mancherebbe, ovviamente guardo solo roba per bene lì sopra, che però su altri siti per qualche motivo non è stata caricata, e quindi mannaggia… Eppure, io pensavo fosse appunto un meme; sapevo che stranamente lì sopra si trovano anche video non pornografici, ed esattamente da ciò sarebbe nato il ridere, ma credevo fossero comunque delle rarità… e, invece, sotto sotto, l’ipotetica scusa di cui sopra potrebbe per qualcuno non essere una scusa, ma la verità. (No, dai, non prendiamoci in giro.) 😳

youtube.com/watch?v=ZsxgSk09eD…

PornHub non lo uso (anche perché mi fa paura che, come Facebook, sia fatto in PHP… e intendo PHP vecchio, col routing di merda che negli URL include .php)… ma, di contro, su YouTube ho infatti trovato questo bel video pazzo, dove questo qui spiega le varie cose safe-for-work (cioè, video che potrebbero stare ovunque) che ha trovato proprio lì sopra, e non a caso: A quanto pare, il sito ha proprio una categoria chiamata SFW, dove vengono inserite le cose che porni non sono… e, tutto sommato, non sono affatto poche. 🤯

La cosa che meno mi stupisce è che ci siano video di gaming, perché, come lui stesso dice nel video, i gamer sono praticamente scarafaggi che senza fatica infestano l’intero Internet dall’alba dei tempi — e, aggiungerei io, proprio come scarafaggi temo che riuscirebbero a resistere anche se una bomba atomica virtuale si abbattesse sull’intera rete togliendo di mezzo tutti gli altri — però fa comunque impressione… Soprattutto se il motivo è che su PornHub, contemporaneamente, da un lato si ottengono più visualizzazioni per gli standard di canali medio-piccoli rispetto a YouTube (!), e dall’altro si guadagnano più soldi da queste (e beh, da quel che so PornHub è anche peggio di YouTube senza ad-block, con pubblicità di provenienza più che dubbia, quindi ha senso; i gooner mi correggano se sbaglio). 🥴

Poi, ok, il resto è roba un po’ mista… musica, e anche questo forse non stupisce troppo conoscendo le menti degli artisti, video a caso che ricordano un po’ le istanze PeerTube sfigate, ma direi che se voglio vedere quelli me ne vado appunto su PeerTube, propaganda religiosa, ma anche quella si trova praticamente su qualsiasi sito di condivisione di video, e i commenti dicono che si trovano anche lezioni di matematica, di cui il tizio nel video non ha parlato… e a questo punto io davvero non so più in che linea temporale sto vivendo. Ah e, infine, c’è una specie di meta secondario all’interno di tutto questo, per cui alcuni utenti che caricano video SFW li titolano come se fossero roba NSFW… e un pochino ridere in effetti fa. 💃

La cosa per me relativamente stupefacente, però, è che questa parte del sito non è roba nuova… eppure ha senso, altrimenti non credo che il meme sarebbe mai nato già tanto tempo fa, non essendoci altrimenti stati video SFW caricati in generale, penso. Cercando "pornhub sfw" sul web (virgolette incluse, altrimenti escono solo risultati del sito di PornHub… ‘stammerda sarebbe da chiudere anche solo per la quantità di SEO spam che fa secondo me), infatti, ci sono vari articoli di testate risalenti addirittura al decennio scorso che parlano di questa cosa… e ho trovato un comunicato della piattaforma di fine 2018 dove annunciano la nuova categoria praticamente come una presa per il culo a Starbucks, che ha voluto vietare ai clienti di guardare porno nei loro negozi: pornhub.com/press/show?id=1741. (…Ma chi cazzo è che guarda i porno mentre prende il caffé al gusto di diabete??? Non penso ci sia nessuno che si impegna così nel rovinare contemporaneamente il corpo e la mente!) 🧸


Octt è un’entità completamente safe-for-work, ma forse il suo corpo è comunque interessante. Ora puoi scoprire le conseguenze che ha subito a causa della medicina moderna, su stuffoctt: Intervista alla ragazza magica dopo 50 giorni di terapia riparatoria della discrepanza corporea. (Messaggio promocttionale, ormai ci sto prendendo gusto a fare spam contestualizzato così.)

#pornhub #SFW #video




Passaword scadute, OTP che non arrivano, login dimenticati, ecco il manicomio della nostra quotidianità!


Pensa al mattino quando ti alzi cosa hai in mano prima di tutto... gli occhiali? Sbagliato, il rosario? Sbagliato, la prima colazione? Errato. In mano hai il tuo smartphone che ti fa luce con la sua schermata a ricordarti cosa è successo mentre tu dormivi. Bene, anzi male, ma il problema è un altro: hai mai pensato cosa significa perdere la memoria per mezza giornata e non ricordarsi più tutte le password e tutte le incombenze che dobbiamo ricordarci? Pensaci, perchè le porte del manicomio sono aperte per tutti noi!


How a Private Company Won the War Waged on It by the Mightiest State: Huawei’s Secret Comeback Revealed


cross-posted from: news.abolish.capital/post/3872

[Source: forumgeopolitica.com]

From Toshiba to Huawei: America’s Long War on Superior Competitors.

For decades, the United States championed free markets and fair competition—until it no longer had the upper hand.

Today, oligarchs like Peter Thiel—a key player in the U.S. security apparatus and founder of Palantir, the taxpayer-funded surveillance and profiling giant built with CIA backing—say competition is “bad for business.”

In Thiel’s world, monopoly is not just acceptable; it is the true engine of innovation and profit, turning the American ideal of open markets on its head.

In reality, Washington’s “commitment” to free markets was always lip service. The U.S. has consistently tried to crush superior competitors of its major corporations. Economic warfare is nothing new.

Take Toshiba: According to an August 1992 Los Angeles Times article, it was Japan’s leading chipmaker in the 1980s, commanding about 80% of the global market for dynamic random access memory (DRAM) in 1987.

Like Huawei today, Toshiba became a U.S. target under the banner of “national security.”

After Toshiba and a Norwegian firm sold advanced milling machines to the Soviet Union in 1986—just as other European companies had done—Washington pounced.

It imposed a sweeping two- to five-year ban on all Toshiba products, claiming a threat to U.S. security. This blow cleared the way for American chipmakers, while other foreign companies that sold similar equipment to the USSR escaped unscathed.

Whether Toshiba, Alstom or Swiss banking, the story is the same: Washington weaponizes “law,” “security” and “ethics” to eliminate rivals, then adopts the very practices it condemns abroad.

But Huawei—and by extension, China—is a different kind of target. Unlike Japan, France or Switzerland, China cannot be easily coerced into submission. On the contrary, the U.S. campaign against Huawei is far more likely to backfire, turning into a decisive defeat for the Western aggressors—as the rest of this article will show.

From MR Online via This RSS Feed.



Displaying Images From View Community


Sorry, new guy here.

So about images, on my desktop browser, when I click just on the thumbnail to the side, I'm expecting the image to display. But the image loading graphics just keep looping without any image.

If I click the post, the image typically displays as expected.

On Voyager, tapping the thumbnail loads the image to the screen as expected.

Questa voce è stata modificata (2 giorni fa)
in reply to pathwonder

So, I just visited your instance and there is definitely an issue...but I am not sure I will really be of much help. When I click an image, it looks like the lightbox javascript is being blocked by the CSP. Here is what I see in the browser console:

CSP error

The CSP that ships with piefed should allow the lightbox to run without issue. Perhaps there is a reverse proxy or CDN applying a stricter CSP? Maybe a browser plugin of some kind?

This kind of web admin stuff isn't really my area of expertise though.

in reply to wjs018

That's it, yes.

If we use the browser dev tools to look at the CSP header that the HTML page returns, we can see that piefed.social has a different one than kopitalk.net. Below is piefed.social's one:

image

It's probably cloudflare or nginx causing that.

in reply to Rimu

#solved

EDIT: 2025-10-25 at 11h29 - I deleted the Content-Security-Policy and PieFed displays images as expected.

Reasoning

So after crawling through some very old Reddit posts, I came across other self-hosters discussing their new found interest in Security Headers from 5 years ago (dated, yes). Among the comments was a post by pentesticals (glorious):

::: spoiler quote

Don't stress about security headers and CSP. These are there to help provide additional protection against client-side issues which may or may not be present.

These will not have any direct impact on your services you expose, rather they aim to be a last resort to protect your browser in case an attacker tries to exploit existing vulnerabilities such as a Cross Site Scripting - but not having these does not increase the risk of your server being compromised.

Use Nessus Essentials for scanning your services and have fun.

:::

reddit.com/r/selfhosted/commen…


I use Caddy and I can indeed see the security headers that involve CSP. How should this setting be amended?

For what it's worth I looked over the "Using Caddy as reverse proxy" for Lemmy, and I notice that they just don't use the Content-Security-Policy option at all. I'm wondering if I should simply delete this Header for PieFed.

join-lemmy.org/docs/administra…

::: spoiler Security Headers

(security_headers) {  
  header {  
    Strict-Transport-Security "max-age=31536000; includeSubDomains"  
    X-Content-Type-Options "nosniff"  
    X-Frame-Options "SAMEORIGIN"  
    Referrer-Policy "no-referrer"  
    X-XSS-Protection "1; mode=block"  
    Permissions-Policy "camera=(), microphone=(), geolocation=(), accelerometer=(), autoplay=(), fullscreen=(), gyroscope=(), interest-cohort=(), magnetometer=(), payment=()"  
    -Server  
    -x-powered-by  
  }  
}  

:::
Questa voce è stata modificata (2 giorni fa)
in reply to pathwonder

Yes when CSP was new it may sometimes have been beneficial to add them (although most of the time it would cause breakage) but these days most web apps will be setting that header themselves in a way that is appropriate for the app.
in reply to pathwonder

Interesting, the image loads correctly via this piefed.world account.