Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)F

fmstrat

@ fmstrat @lemmy.nowsci.com

Posts
22
Comments
868
Joined
3 yr. ago

  • Why is open source software assumed to be secure?

    Jump

  • Others have mentioned this, but to make sure all context is clear:

    • FOSS software is not inherently more secure.
    • New FOSS software is probably as secure as any closed source software, because it likely doesn't have many eyes on it and hasn't been audited.
    • Mature FOSS software will likely have more CVEs reported against it than a closed source alternative, because there are more eyes on it.
    • Because of bullet 3, mature FOSS software is typically more secure than closed source, as security holes are found and patched publicly.
    • This does not mean a particular closed source tool is insecure, it means the community can't prove it is secure.
    • I like proof, so I choose FOSS.
    • Most people agree, which is why most major server software is FOSS (or source available)
    • However that's also because of the permissive licensing.

  • "You're absolutely right!"

    Jump

  • "I support it only if it's open source" should be a more common viewpoint

    Jump

  • It"s a difficult viewpoint given where money flows. A better method shoupd be more government funded software, with a FOSS requirement since it's tax dollars.

    That being said, I'm very fortunate to be working for a company that releases software under MIT and/or SSPLv1, and we use almost exclusively Open Source for our infrastructure and back office (decisions I made, but had the strong, proactive backing of our CEO/Founders).

  • You typical Node project

    Jump

  • The problem is "I need function, library with 1000 functions has function, include." Library's 823rd function turns out to have a vulnerability.

  • Does anyone remember Third Voice? You could graffiti any website and only people who had plugin installed could see it. Why isn't there a modern alternative?

    Jump

  • I could probably make this as a firefox/chromium extension pretty easily. Simple UI similar to ad-blockers, but instead of the number of ads blocked, the number of annotations, and click it to show them (to avoid the giant drawings you don't want popping up by default).

    The problem in today's world isn't building it, it's moderating it.

  • Homelessness minister threw out her tenants - then increased rent by £700 a month

    Jump

  • This is a tough one. First, I don't think MPs shoupd be landlords, but:

    • She wanted to sell the house
    • She waited until the renters contract expired
    • She did offer a rolling contract to the current renters at their existing rent until the house sold
    • They declined
    • She put the house on the market and opened it up to any short-term renters who wanted to stay there while it was on the market
    • She listed it for current going rate
    • Someone took it
    • The house is still for sale.

    To me, there isn't much wrong with that, what is wrong is:

    • She didn't wait 6 months. Not only is this terrible, but the optics are horrible and she should know that
    • She is using a tenant agency that tried to charge them a ton of move-out fees (She did have them canceled)

    And..

    She's the HOMELESSNESS MINISTER?!?! Sheash.

    Edit: Some additional context from UK peoples - some letting agencies will relist your home without telling you. Fun stuff.

  • Why don't smart watches use USB-C to recharge?

    Jump

  • That kind of waterproofing wears over time (years). It keeps it's resistance, but not a submersible seal. Watches have longer use years than phones on average.

  • Self-hosted blog - do I need a static IP address?

    Jump

  • Cloudflare is a good choice. I used DNSExit for a while, and also NS1, but settled on Cloudflare. You don't have to use their proxying, just DNS.

    Here's a Docker Compose for you that will set myhost.mydomain.com to point to your public IP of wherever it is run:

     
        
dyndns-cloudflare:
    image: oznu/cloudflare-ddns
    container_name: dyndns-cloudflare
    environment:
      - API_KEY=<key>
      - ZONE=mydomain.com
      - SUBDOMAIN=myhost
      - PROXIED=false
    restart: unless-stopped

  • Everything Is Real

    Jump

  • That first more link is horrible. The "joint" repeatedly, and UCIS instead of USCIS. Credibility is low on that one.

  • Could global warming make Antarctica habitable?

    Jump

  • Reference: Once upon a time I built the equipment & housing reservation and booking system for the Barrow Arctic Science Consortium (BASC), who at the time managed all US and Russian research in the north (so other side, but some similar challenges).

    You'd be surprised by some of the unique issues for modern life. Food is of course the obvious one, but there are super crazy ones. For instance, we could only issue Apple laptops, because they were the only ones who's screens wouldnt have pixel freeze in the field.

    In any event, unlikely to be permanent inhabitants there unless the planet already wiped us out, in my uneducated opinion.

  • Self-hosted blog - do I need a static IP address?

    Jump

  • How are you hosting? And do you have a domain? Lot's of good advice here, but knowing if you're running on a Pi, in Docker, etc, would help others give you the easiest/best method.

    In short, you do not need a static IP.

  • Removed

    How would you feel about cranks (to power a machine) making a comeback?

    Jump

  • This is called a bycicle. I use one often.

  • UK cyber vigilantes generating mock IDs of local MPs to protest Online Safety Act

    Jump

  • They're using ChatGPT for fake address generation if it even needs a cache for that part. There are plenty of libraries to do that locally. They should only need to cache generated images, which is the only thing a model would be useful for here.

  • UK cyber vigilantes generating mock IDs of local MPs to protest Online Safety Act

    Jump

  • “My OpenAI credits got hugged to death, please use a known postcode (like one from Keir Starmer's constituency, WC2B6NH) in the meantime,” the author asks.

    While the OSA is dumb, this is also bad design, and why applications are going to use so much power.

    Cache the image creation results. Use a random address generator. This would drop the LLM use to the bare minimum.

  • Proton releases a new app for two-factor authentication

    Jump

  • Maybe a bit. They say "advanced" and specify 2FA via hardware keys.

  • Proton releases a new app for two-factor authentication

    Jump

  • 2fa is free

  • Proton releases a new app for two-factor authentication

    Jump

  • How? BitWarden has great 2FA, but is also a password manager with good integrations, group sharing, etc. Plus when you log in with it, it auto-copies the 2fa to clipboard.

    Assuming you've used both, so what does Aegis bring to the table? Wondering if I should try it.

  • Proton releases a new app for two-factor authentication

    Jump

  • BitWarden is F(antastic)OSS.

  • CEO Brags That He Gets "Extremely Excited" Firing People and Replacing Them With AI

    Jump

  • Says CEO of company providing other companies with AI services to replace staff. So, no surprises?