Skip Navigation

Posts
53
Comments
879
Joined
2 yr. ago

New account since lemmyrs.org went down, other @Deebsters are available.

  • autoupdate is something I wouldn’t use

    Yup, I expect lots of people feel like that, maybe most (I'd be interested to see some stats). I value security over availability, but you can choose per-container, of course.

    network

    You can set Internal=true, which I use whenever possible, which means access is only to anything on same network (for me that's itself and Caddy) - no outgoing connections at all. Podman uses PASTA by default for rootless.

  • The docs say what they do and don't do - and they don't do that. Just actually read through them for yourself, you don't have to be a lawyer.

    This is just a bit of corporate box-ticking, but the pitchfork brigade has read 2 + 2 and is now screaming about 5s.

  • In the advertising bit they say what data they use and it's all broad stuff like device type and location, as well as aggregate data on how many people click on the ads. Of course, you can just disable this, which surely most people do - tbh I forgot there was even this "sponsored content" there at all (it was added a while ago I think).

    They don't say that your browsing habits, interactions or communications are used for anything besides doing what's required to actually do what you asked.

  • Yes, Mozilla does some AI, like the in-browser, privacy-respecting language translation. If you use the same feature in Chrome, the text is submitted to a Google server, but in Firefox it never leaves your browser. I don't see how this could be spun to count against Firefox/Mozilla.

  • The Privacy Notice doesn't say anything problematic at all, why is everyone acting like Mozilla is going to be feeding every keystroke into a database/AI? It's just saying that they're allowed use your inputs to browse to the sites you've asked for, and to give the form data/uploads/mic/whatever to the sites you're using.

    A few words cherry picked from the middle of a sentence isn't how legal stuff works.

  • I HATE those sites where popups come up when you are halfway reading something.

    Agreed, if I did want to sign up it would be when I've finished, not when I'm trying to read your own bloody content. I often sign up using their own domain with something like sales@ or something ruder. Petty, but it's a small vent. and if one person stops because of it I can die happy.

  • I love quadlets, here's an example:

     ini
        
    $ cat .config/containers/systemd/kavita.container
    [Unit]
    Description=Kavita manga server
    After=mnt-files.mount
    
    [Container]
    ContainerName=kavita
    Image=docker.io/jvmilazz0/kavita:latest
    AutoUpdate=registry
    Network=kavita.network
    PublishPort=5000:5000
    Environment=TZ=Etc/UTC
    Volume=/mnt/files/books/comics:/comics:ro
    Volume=/mnt/files/books/gnovels:/gnovels:ro
    Volume=/mnt/files/books/manga:/manga:ro
    Volume=${HOME}/kavita:/kavita/config:Z
    HealthCmd=curl -fsS http://localhost:5000/api/health || exit 1
    
    [Service]
    Restart=always
    
    [Install]
    WantedBy=default.target
    
    
      
     ini
        
    $ cat .config/containers/systemd/kavita.network
    [Network]
    NetworkName=kavita
    Options=isolate=true # library add uses Kavita site
    
      

    If you've dealt with systemd service files this will look familiar, with the addition of the container section.

    AutoUpdate=registry gives you automatic updates to 'latest' (or whatever tag you've set) and there's rollbacks too, so you just have to worry about the less-critical bugs in newer versions. Personally, I feel more secure with this setup, as this box is a VPS.

    Network=kavita.network - I put all my containers in different networks (with minimal privs, so many don't have outgoing internet access), and my reverse proxy is also in all of those networks so it can do its thing.

  • This is gloriously insane and I love it.

    And then to casually drop in that

    it uncovered a Pleroma bug by accidentally DOSing any instance that tried to generate a link preview... chef's kiss

  • It's how everyone who's anyone does code reviews!

  • I think it's probably a mix of criticising a joke for its accuracy, and the fact that it's in a single paragraph so it's a huge wall of text.

  • This seems quite serious, I'll definitely be reading the CVE once it's published. Luckily, I noticed the github notification of the release after only a couple of hours.

    edit: I read the advisory and it wasn't too bad in terms of attacker access:

    ImpactAn attacker can use any non-existent username to bypass the authentication system and gain access to various read-only data in Navidrome, such as user playlists. However, any attempt to modify data fails due to insufficient permissions, limiting the impact to unauthorized viewing of information.

  • Turbo Pascal was my first real programming language, and Delphi was pretty pleasant to use for GUI programs as I recall.

    I'd never even heard of Lazarus, I might have to try it for a nostalgia trip.

  • Lots of the industrial programming languages are very different to "normal"/"proper" programming languages, and I can see them being localised.

    For example, this is (PLC programming language) Ladder Logic code:

  • It works great and the config is simple. It doesn't handle triggering things from those keypresses, but you've probably already got something running that does that.

  • I happily use Helix for Rust, etc projects, and as a general editor. I switch back to VSCode for TypeScript/Svelte projects because the plugins make it more productive for me. I do miss the editing experience and need to check if there's a VSCode plugin that lets me not confuse my muscle memory.

    Helix was the thing that finally made me remap my caps lock key to esc.

  • I killed my MS Natural Ergonomic 4000 by fumbling half a cup of tea into it. I miss having the scroll/zoom in the centre, since I had to replace with the new Microsoft LXM-00004 model (with the stupid Office button) and that's just got dead space there. Some customisable buttons would be perfect.

    I've seen some ergonomic mechanical custom setups, but I've never been brave enough to start down that rabbit hole.

  • I just had mine arrive yesterday!

    I have one of these

    I'm using ch57x-keyboard-tool to configure it, because I don't fancy running some random closed-source Chinese code (the manual links to a file on Google Drive). It also means I can move over my config when I switch to Linux.

    I have two keys for switching between headphones and speakers, and some set up for shortcuts I forget (like ctrl-shift-e for the network monitor in Firefox). One key types "hello" just because I can.

    I've got the large knob controlling volume, and I can click it to toggle mute. The other two are currently set to scroll, but I don't need that as my mouse has better ergonomics for scrolling.

    I still have plenty of unused keys and it's got three layers so I won't be running out in the foreseeable future.

  • The Phoronix comments are notoriously toxic - I went to the article mostly to witness the incoherent rage in the comments and wasn't too disappointed.

  • I disagree, they have it working on the nRF52840 (which is new and supports new things like NFC and Thread/Zigbee). This means people can start developing features against that chipset.

    Hardware doesn't mean "production-ready model".