Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)C
Posts
29
Comments
152
Joined
3 yr. ago

  • 15.0 adds support for OIDC tokens being handed to Actions workflows compatible with GitHub Actions. I was excited to upgrade because I wanted to continue doing cosign Docker image signing, but then I found out that the Cosign transparency log doesn't support Forgejo. Looks like I need an alternative.

    My next biggest problem is the Actions workflow itself. I setup Docker in Docker, but turns out there's a bit of work in preparing the runners to be on par with what I used on GitHub.

    Otherwise, I've found Forgejo to be quite good and almost all my private repos are moved over.

  • Home Assistant and local, cloud-free protocols and devices are great

  • What about throughput, latency, schema modeling, query load balancing/routing, confidentiality, regulatory compliance, operational tooling? How easily can I write a CRUD or line of business service using it?

  • Are you trying to make an offline website? If so, you could look into using a Service Worker which would give you full control over when the content gets refreshed.

  • Windows has something called the ShutdownBlockReasonCreate API which enables apps with long running operations to prevent a shutdown to avoid corruption or losing work.

    Is there an equivalent for Linux? When used appropriately, it makes shut downs even more graceful.

  • I thought this was using SDKs embedded in apps and advertising platforms. This is a different threat model. You need to block ads and prefer using websites instead of apps which have more access to device info like the advertising ID.

    If you've got an Android, go to Settings, search for ads, and find the advertising ID and delete the ID. It's a stable identifier that can be used to identify your phone.

    Switch to more private browsers like Firefox for Mobile and install uBlock Origin.

    EDIT: I'm not saying this will protect you against IMSI catchers or tower based drag nets. In addition to not bringing your phone, when you do go home you need an entirely different set of tools to protect yourself.

  • Are those networks marked as hidden SSID networks? Hidden networks require the client STA to broadcast them to find them.

  • You're describing what agile should be, but Agile™ is the variant you get in toxic companies where they say they are agile, but it's just a mechanism to micromanage developers with bad managers asking why you're not burning down enough points or why you haven't met the estimated date you thought before you realized there was more technical debt than a bankrupt business.

    Maybe you've avoided it but I've seen it first hand.

  • Pretty cool. I played around with Dafny at work for some security-related software and I was pondering if Dafny could be effective for other problems like complex web-app state management or even more standard services.

  • Wealth in economics refers to the amount of assets (home, stocks, cash, bonds, art, etc.) That one owns. Wealth is a lot easier to grow than income is.

    Family wealth likely refers to a single family unit, ie parents and kids.

  • I use it to play music from Jellyfin to my Sonos speakers. It won't fix a Jellyfin library that has bad data, but it can pull in music from multiple different sources and push to different players.

    It works well enough. Some issues where songs get interrupted, but I think that's issue with the Music Assistant/Sonos integration.

  • I developed my own scraping system using browser automation frameworks. I also developed a secure storage mechanism to keep my data protected.

    Yeah there is some security, but ultimately if they expose it to me via a username and password, I can use that same information to scrape it. Its helpful that I know my own credentials and have access to all 2FA mechanisms and am not brute forcing lots of logins so it looks normal.

    Some providers protect it their websites with bot detection systems which are hard to bypass, but I've closed accounts with places that made it too difficult to do the analysis I need to do.

  • I scrape my own bank and financial aggregator to have a self hosted financial tool. I scrape my health insurance to pull in data to track for my HSA. I scrape Strava to build my own health reports.

  • Can't be a passive adapter or else that would mean DisplayPort and HDMI have to protocol compatible. If they were then we wouldn't have this issue. Apparently I was wrong.

  • Just an update. Firefox 146 just dropped with:

    • Firefox now natively supports fractional scaled displays on Linux (Wayland), making rendering more effective.

    After upgrading to 146 and natively using Wayland, it feels faster. Some fade animations are still choppier, but on average it's at least tolerable.

    Thanks for the suggestions everyone.

  • Interesting. I played around with X11 vs Wayland settings just to see what different configurations give me

    • MOZ_ENABLE_WAYLAND=1 /snap/bin/firefox - Exhibits low FPS issue
    • MOZ_ENABLE_WAYLAND=0 DISABLE_WAYLAND=1 /snap/bin/firefox - Actually feels fast like it should be. Most animations feel faster, some are still choppy though. It's hard to tell.

    It seems like running with X11 sort of the problem? Which seems unexpected and concerns me since I know distros are starting to default to Wayland.

  • Programming @programming.dev

    Popular GitHub Action tj-actions/changed-files is compromised with a payload that appears to attempt to dump secrets

    semgrep.dev /blog/2025/popular-github-action-tj-actionschanged-files-is-compromised/
  • Programming @programming.dev

    The power of interning: making a time series database 2000x smaller in Rust

    gendignoux.com /blog/2025/03/03/rust-interning-2000x.html
  • Programming @programming.dev

    Is abstraction killing civilization?

    datagubbe.se /endofciv/
  • Technology @lemmy.ml

    Losing a 5-year-long Illinois FOIA lawsuit for database schemas

    mchap.io /losing-a-5yr-long-illinois-foia-lawsuit-for-database-schemas.html
  • Programming @programming.dev

    How do modern compilers choose which variables to put in registers?

    langdev.stackexchange.com /questions/4325/how-do-modern-compilers-choose-which-variables-to-put-in-registers
  • Programming @programming.dev

    Falsehoods programmers believe about null pointers

    purplesyringa.moe /blog/falsehoods-programmers-believe-about-null-pointers/
  • Programming @programming.dev

    Burnout ≠ Working Too Much

    terriblesoftware.org /2024/12/20/burnout-%e2%89%a0-working-too-much/
  • Programming @programming.dev

    Dear OAuth Providers

    pilcrowonpaper.com /blog/dear-oauth-providers/
  • Selfhosted @lemmy.world

    Syncthing Android app discontinued

    forum.syncthing.net /t/discontinuing-syncthing-android/23002