Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)K

ken

@ ken @discuss.tchncs.de

Posts
4
Comments
42
Joined
7 mo. ago

  • [META] Are paid for, closed source projects, being advertised on this community, appropriate?

    Jump

  • Sounds like a reasonable set of options!

  • Rule 2 Clarifications and New Rule proposal

    Jump

  • If you work for a company or own the company you are still making a self- promotional post for a company, and the rule applies.

    So if the exact same post is posted by a friend instead it's suddenly accepted? Why is self-promo meaningfully less desired than third-party-promo if they have similar results?

    You seem to be vastly in the minority.

    Might be! That one's framed as just personal preference and not policy suggestion because I don't think "allow all things I like and ban everything I don't" makes for good governance ;)

    So a more restrictive rule?

    More restrictive in one sense (what content and what's ok to "promote" for) but more allowing in another (you can talk about something even if you are involved or associated).

  • [META] Are paid for, closed source projects, being advertised on this community, appropriate?

    Jump

  • Thank your for replying, this is encouraging and sounds like moderation of this community is shaping up.

    Whichever side the ruling falls I think that feedback channel would be very good. Just having a way for a submitter to ask from mod(s) why the submission was targeted might be the difference between them turning into a great contributor vs either just leaving or starting to play circumvention games (in especially bad cases turning into antagonistic trolls). Speaking from how I've seen those dynamics play out in other communities.

  • Rule 2 Clarifications and New Rule proposal

    Jump

  • Rule 2 Clarifications and New Rule proposal

    Jump

  • Thank you for thoughtful engagement!

    I think that becomes even more problematic. Why is it better that I shill for a company I'm getting kickbacks from (some VPN providers excel at this game) rather than one I'm responsible for? Besides, this just lead to submarining ("viral marketing" is an entire industry!) and people pretending to "have just stumbled across this project, what do you guys think?" or being "just a happy customer".. And to some extent t becomes a game of social status, where well-connected people can just ask their friends to post on their behalf.

    Judge the message and topic, not the messenger (as long as they are human acting in good faith and not "written with help by AI", obv).

    Besides of those issues, my personal preference would be to keep the focus on self-hosting. So talk of hardware or shipped software might be on-topic but not service providers. There are plenty of places to discuss cloud-hosting, VPNs, which PaaS is best, or whatnot.

    And I would actually be much more interested in seeing a post from a founder talking about things their company is doing relevant to self-hosters, vs yet another post of "which provider is best right now and what do you use?" or "Company X currently has a sale/launched product Y".

    While it might filter out some good stuff, I would be all for a ban of any promotion of commercial or proprietary products and services alltogether but allow for self-hostable and in particular FLOSS stuff (where I guess some carve-out or clever formulation could be made to allow for commercial but self-hostable software - either stance on that one seems fine to me).

  • [META] Are paid for, closed source projects, being advertised on this community, appropriate?

    Jump

  • I would like some clarity on general apparent self-promotion of open source projects as well. As in, points 1-4 don't apply and 5 depends on your definition of "advertisement".

    I'm bringing this up because I (once) previously attempted to share a project1 I maintain on here. I did take some effort to include some context and discussion points for selfhosters in order to make it more tailored and stay safe on Rule 3. It was quickly removed by mod. I tried reaching out to one of the mods to try to understand what was wrong. They were friendly and said they weren't involved and would forward to the relevant people and since then I haven't heard back. It would be very helpful to be able to get some feedback on why submission was removed so we can learn how future submission attempt could be improved (or abandoned).

    1: FLOSS, no commercial or otherwise proprietary parts or relations, no slop or clank in the process

  • Konform Browser 140.12.0-100 - Security- and privacy-oriented open source web browser doesn't skip a beat

    Jump

  • Thanks! Would be great to hear your thoughts and experience after trying it out, if you do! BTW, I keep fishing for feedback not just because I like hearing user stories but also since with no telemetry (or a qa team; lol), user reports become that much more valuable in development, catching issues and better understanding the UX ^^

  • Konform Browser 140.12.0-100 - Security- and privacy-oriented open source web browser doesn't skip a beat

    Jump

  • But can it fool creepjs?

    What does that mean for you, exactly? I know that there is a lot of different ideas out there on how to interpret these results and what "good" means so would be helpful to know what your expectations are to give meaningful answer to such question.

    Anyway, I just tried running the test at creepjs.org and this is result: Test hangs at "57/58: Currently collecting: Private Click Measurement complete", with no errors in the js console.

    Having compared results with some other fingerprinting suites previously, default settings should give plausible fingerprint corresponding to user base of existing browser. Only Cloudflare seems to hate it: Turnstile on sites in strict mode currently often throw a redirect loop when their troubleshooting tool says all is fine. Is that because fingerprinting protection "works to good" or is broken? You tell me!

    I would appreciate an outside and less biased review, comparison or benchmark on stuff like this! Want to try and report back?

  • Linux @programming.dev
    ken @discuss.tchncs.de

    Konform Browser 140.12.0-100 - Security- and privacy-oriented open source web browser doesn't skip a beat

  • Deleted

    Permanently Deleted

    Jump

  • Let's not forget that Win7 was almost 25% as responsive as Win2k3, which could even hold a candle to GNOME.

  • MinIO Is Done With Open Source, What Are Your Options?

    Jump

  • Unnecessary hostility. They can not and are not retroactively changing license on past contributions. The only thing affected is upstream future contributions. If nothing was lost, how can it be "theft"?

    So can we take the code from up to about a mo the ago

    Yes. As long as you also comply with license.

  • How Do you keep your services updated?

    Jump

  • A dedicated Forgejo instance f.example.com.

    For a small set of trusted "base" images (e.g. docker.io/alpine and docker.io/debian): A Forgejo Action on separate small runner, scheduled on cron to sync images to f.example.com/dockerio/ using skopeo copy.

    Then all other runners have their docker/podman configuration changed to use that internal forgejo container registry instead of docker.io.

    Other images are built from source in the Forgejo Actions CI. Not everything needs to be (or even should) be fully automated right off. You can keep some workflows manual while starting out and then increase automation as you tighten up your setup and get more confident in it. Follow the usual best practices around security and keep permissions scoped, giving them out only as needed.

    Git repos are mirrored as Forgejo repo mirrors, forked if relevant, then built with Forgejo Actions and published to f.example.com/whatever/. Rarely but sometimes is it worth spending time on reusing existing Github Workflows from upstreams. More often I find it easier to just reuse my own workflows.

    This way, runners can be kept fully offline and built by only accessing internal resources:

    • apt/apk repo mirror or proxy
    • synced base container images
    • synced git sources

    Same idea for npm or pypi packages etc.

    Set up renovate1 and iterate on its configuration to reduce insanity. Look in forgejo and codeberg infra repos for examples of how to automate rebasing of forked repo onto mirrors.

    I would previously achieve the same thing by wiring together more targeted services and that's still viable but Forgejo makes it easy if you want it all in one box. Just add TLS.

    1: Or anyone have anything better that's straightforward to integrate? I'm not a huge fan of all the npm modules it pulls in or its github-centric perspective. Giving the same treatment to renovate itself here was a little bit more effort and digging than I think should really be necessary.

  • Waterfox to integrate Brave adblock engine, with search ads enabled by default

    Jump

  • I think uBO does have that.

    Open popup -> Ctrl-click ⏻

  • Birthdate field under discussion also in Arch Linux

    Jump

  • Spez (Reddit CEO) just put out an announcement talking about how they'll verify bots vs humans. Get ready for a wave of new users into the Fediverse pretty soon!

    Jump

  • Redditors have long been the best bullshit detectors, and increasingly great Turing testers.

    🦾

  • Mullvad Browser and Tor Browser have unique-per-computer persistent IDs on fingerprint.com

    Jump

  • @cm0002@literature.cafe you're going too far with the reposting IMO and I urge to revalidate your entire approach.

    This is a user question copy-pasted without their consent (and possibly even knowledge; they may not be getting notified of your reshare despite the @).

    Others may overlook that the OP has no involvement in the post here and post answers that the OP never becomes aware of (since you gracefully remove links to the source post).

    Besides, you're literally incentivizing people to prefer posting on .ml in order to then be reshared by your accounts elsewhere. By rebroadcasting .ml content (especially when at a higher rate than other content), you're introducing perverse incentives and cobra-effecting your whole anti-.ml-operation by driving posters to .ml. Even readers, when they end up browsing it from digging up the original sources for posts like this one.

    There are other (I assume unintended) negative side-effects of what you are doing and they way you are doing it. You are single-handedly reshaping threadiverse but maybe not the way you intended or for the better...

  • Opensource @programming.dev
    ken @discuss.tchncs.de

    Konform Browser 140.9.0-100 - Security-oriented Firefox fork

    codeberg.org /konform-browser/source/releases/tag/140.9.0.100

  • Systemd preparing to comply with age verification laws

    Jump

  • You go first.

  • Systemd preparing to comply with age verification laws

    Jump

  • You are correct. Similar to how /etc/passwd used in all Linux distros has had mostly neglected "GECOS" field for full name and phone number for decades. I am yet to hear of SMS validation done against such phone numbers.

    https://en.wikipedia.org/wiki/Gecos_field

    Why not extend the GECOS field? I haven't seen the conversation but assuming it has to do with access control. By putting it in passwd/shadow you're limited by filesystem permissions on the whole file, meaning it becomes impossible or annoying to do selective disclosure to certain user/process without bolting some service similar to what systemd is doing on top.

    Lots of references to discussion and alternative proposals are tracked by Kicksecure/Whonix: https://www.kicksecure.com/wiki/Age-api

  • CachyOS Is Now the Most Popular Desktop Distro on ProtonDB

    Jump

  • No. This is the first time in ~a decade1 I've felt anything resembling optimism about Manjaro. That maintainers are acknowledging the deep-rooted issues (resulting in the actual reasons people sneer at Manjaro) and forcing change is something that I think should be supported. Those conversations are necessary and have a higher chance of being healthy if the peanut gallery can hold off from turning spin on everything that smells like drama...

    1: About as long as it has been "imploding"

  • CachyOS Is Now the Most Popular Desktop Distro on ProtonDB

    Jump

  • No. It may be worth to try on the side for fun or science though.

  • Linux @programming.dev
    ken @discuss.tchncs.de

    Konform Browser 140.8.0-106 - Security- and privacy oriented open source web browser

    codeberg.org /konform-browser/source/releases/tag/140.8.0.106
  • Linux @programming.dev
    ken @discuss.tchncs.de

    Konform Browser v140.7.1-100 released

    codeberg.org /konform-browser/source/releases/tag/140.7.1.100