Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)F
Posts
1
Comments
64
Joined
3 yr. ago

  • I think OP is asking "In the worst case scenario of a malicious instance owner that is able to fork the Lemmy codebase (so could disable hashing) and intercept and record all communications going to and from their instance, what risk do I have as a user of that instance?"

    The answer of course is yes, in theory a malicious instance owner could see the password you use and can see all your communications, votes, what you look at, etc. So use a unique password for that instance, and don't use the instance for private communucations whose interception could seriously harm you.

  • On the topic of indie films, can people in-the-known share some suggestions for what's worth watching?

  • Saskatchewan is effectively on year-round daylight savings time and has been for decades, and they love it. History is not as clear-cut that it will get reversed.

  • Which is precisely the problem; there's really no way to opt out of the UK's law. Your only options are to either comply or defy them. They leave no middle ground.

  • Blocking the UK isn't enough to get them off your back. They'll claim that if your website is still accessible via VPN to someone in the UK then you're still subject to their laws.

  • Unless it becomes cheaper than having a datacenter on earth per quanity of compute, it won't happen in any meaningful scale even if these issues are solved.

  • I've been using AntennaPod for years now to listen to podcasts. It works great and feels like a premium app.

  • I bet they would be (against Valve) if a competitor donated to Republicans. I mean, they're keeping a finished bridge they paid $0 for closed because the owner of a competing, tolled bridge donated to them. Of course they'll open an investigation into a smallish leftish leaning company if a large donor asked them to.

  • I don't think DDR4 is significantly cheaper. Plus, they would have had to go a CPU generation back too then and I think the AMD CPUs of that generation had way worse integrated graphics, so now you'd need a dedicated GPU as well.

  • What does it mean for a project to deserve the [AI] tag? This matters, because you may have a lot of projects where a developer may think "no" and someone else thinks "yes". Some examples from my day job:

    • Developer used AI to understand part of the codebase and suggest ways to accomplish goal. Developer incorporated that suggestion, though using their own knowledge deviated from AI's suggestion in parts. Developer wrote the code themselves. Is this project [AI] or [NOT AI]?
    • Developer used AI to review existing (human-written) code for quality and security purposes. AI noticed some issues and proposed fixes. Developer reviewed and accepted them. Is this project [AI]?
    • Developer knew they wanted to implement a feature, and while implementing it there was a boilerplate function. Developer asked AI to write this function, manually reviewed it, confirmed it worked, and added it to the codebase. Is this project [AI]?

    In these examples the developer carefully reviews the AI's output, which I think distinguishes it from vibe-coded slop, which at least is what I want to ignore.

    It's also worth noting that an open-source project may receive and incorporate a well-written contribution where the human developer used AI carefully like this. Unless they disclosed that they used AI, it may be unknowable to the project maintainers whether their project is [AI] or not, depending on how you define it. What tag should these projects use?

    1. "Corporations should contribute back to open source projects"
    2. Corporation donates to project>.
    3. "Fuck project>"

    It's not like Rust is using ChatGPT to rewrite the std crate. You'd prefer that they not compensate the humans actually improving the project?

  • I'm top-left (my job pays well, it's engaging, and it has a positive impact on the world).

    I have some friends in a 5th category that are hyper-busy with traveling, social engagements, etc. I feel like I have to book time with them weeks in advance.

  • I was looking to see if anyone would post this. This one made me seriously naseous when I watched it.

  • That's fair. I wouldn't reject money from Google but instead build up an endowment with it for when it eventually disappears. If you can recover your market share (maybe by investing in your browser - the peformance is lagging) then you can also demand more money from Google to set them as default. Finally, Mozilla is a non-profit and I wouldn't be opposed to them just asking for donations, like most non-profits.

  • I had an ad in my Firefox settings for "Solo AI Website Creator". It's a product from Mozilla for using AI to build your website. Note that it's not open source, and you must rely on them to host your website (no export functionality, and recurring fees outside a basic free tier).

    I agree with you, I wish Mozilla would focus solely on their mission instead of trying to build all these side projects people don't want.

  • Wasn't MS just saying that they were going to work to de-shittify Windows? Evidently the same decision makers for the previous shit are still in charge.

  • I'm annoyed because I only saw it on my feed today. Luckily I was about 2 sentences in before I checked the date.

  • Actually Polymarket never pays out. Every bet is matched with someone holding the opposite bet (and prices to make a bet shift accordingly to market demand for each side). Polymarket just rakes in fees, but they never lose money regardless of how a bet goes.

  • Selfhosted @lemmy.world

    700+ self-hosted Git instances battered in 0-day attacks with no fix imminent

    www.theregister.com /2025/12/10/gogs_0day_under_active_exploitation/