Jason2357
@Jason2357@lemmy.ca
- Comment on Anubis is awesome and I want to talk aout it 1 week ago:
Its always code forges and wikis that are effected by this because the scrapers spider down into every commit or edit in your entire history, then come back the next day and check every “page” again to see if any changed. Consider just blocking pages that are commit history at your reverse proxy.
- Comment on Scientific Exposure 1 week ago:
Uuhh, beyond the fucked up publishing system, your advisor was a self destructive dick. It was his job to pay that. His lab and career benefit and hes the one that gets funding for research operations.
- Comment on Scientific Exposure 1 week ago:
And a few years later rich folk start mass downloading the same databases to train LLM models using the exact same methods to sell access to those. No FBI.
- Comment on Screw it, I’m installing Linux 2 weeks ago:
If you are doing stuff in Linux that requires the terminal, you were probably making edits to the registry in Windows or pasting in wild powershell lines from online guides.
No need for 98% of the user base to ever touch the terminal. Open whatever software store comes with your distro, click install next to whatever you want.
The only exception to that is that sometimes, when a trusted person is supporting you through something, giving them a line to paste into a terminal might be quicker than walking them through all the clicks of a gui. Sometimes.
- Comment on Cloudfare outage post mortem 2 weeks ago:
Someone always chimes into these discussions with the experience of being DDOSed and Cloudflare being the only option to prevent it.
Sounds a lot like a protection racket to me.
- Comment on Cloudfare outage post mortem 2 weeks ago:
Except, if you chose the wrong 1 of that 10 and your company is the only one down for a day, you get fire-bombed. If “TEH INTERNETS ARE DOWN” and your website is down for a day, no one even calls you.
- Comment on Your old android phone is begging to be a cheap home server! 2 weeks ago:
Probably better to use them for their screen, firewalled off from everything except whatever is providing a dashboard or info display (e.g., homeassistant).
- Comment on Self hosting Sunday! What's up, selfhosters? 2 weeks ago:
Your perspective aligns with a lot of self-hoisters who run things on rpi’s and such, but not the “home labbers”. Also, see the pubnix, tildeverse, smol web, indie web, and to some extent the retro computing communities. You are definitely not alone!
- Comment on Create a retention period for online backup storage 3 weeks ago:
Restic is great, and the de-duplication between snapshots is amazingly good. Same content in different files (e.g. tar files of linux systems) take very little space like magic). Backrest is a nice web frontend for it.
Note that you should use some retention features of your provider to manage the risk of ransomware deleting your backups.
- Comment on CHAT CONTROL 2.0 THROUGH THE BACK DOOR – Breyer warns: "The EU is playing us for fools – now they’re scanning our texts and banning teens!" 3 weeks ago:
I think the strategy used the world-over, is to surveil everyone and build network graphs. You may work extremely hard to secure your device and communications, but the algorithms will build up a dossier on you based on all of the people you associate with who are less capable or motivated. Machine learning is insanely good at filling in missing data in an information rich dataset.
- Comment on CHAT CONTROL 2.0 THROUGH THE BACK DOOR – Breyer warns: "The EU is playing us for fools – now they’re scanning our texts and banning teens!" 3 weeks ago:
On the other hand, we live in a golden age of private, end-to-end encrypted communications tools. There are literally too many to list here. The problem is our end-points are extremely vulnerable to surveillance now.
Also, the PGP web of trust was a pretty terrible idea for anyone concerned about authoritarian governments. Especially “key parties” that network based on government IDs. They also barely worked in practice anyway. Web-key discovery actually has decent UX, despite being tied to a purchased domain rather than a drivers license. It works fine for people you don’t know, but know by their domain. For people you know, exchanging keys via QR code or verifying keys via some hash out of band has become standard.
- Comment on CHAT CONTROL 2.0 THROUGH THE BACK DOOR – Breyer warns: "The EU is playing us for fools – now they’re scanning our texts and banning teens!" 3 weeks ago:
I would be terrified of using a bluetooth mesh network in a situation where private, encrypted communications are illegal. That would be literally walking around transmitting your intent. It’s a great idea in a free country though.
In a dystopia, you want to blend in. Something like deltachat has the right idea there - you have to look like boring email on the network. Maybe even layer on stenography -sending boring emails with cat pictures, but your messages are hidden inside them.
Honestly, I would probably go with sneakernet. A microsd card can be hidden very easily, are difficult to detect electronically, transport virtually unlimited text, and be encrypted in-case the mule gets caught to prevent networks being exposed. The latency is just a necessary evil.
- Comment on The Economist on using phrenology for hiring and lending decisions: "Some might argue that face-based analysis is more meritocratic" […] "For people without access to credit, that could be a blessing" 3 weeks ago:
Usually these models are trained on past data, and then applied going forward. So whatever bias was in the past data will be used as a predictive variable. There are plenty of facial feature characteristics that correlate with race, and when the model picks those because the past data is racially biased (because of over-policing, lack of opportunity, poverty, etc), they will be in the model. Guaranteed. These models absolutely do not care that correlation != causation. They are correlation machines.
- Comment on The Economist on using phrenology for hiring and lending decisions: "Some might argue that face-based analysis is more meritocratic" […] "For people without access to credit, that could be a blessing" 3 weeks ago:
I cant imagine a model being trained like this /not/ end up encoding a bunch of features that correlate with race. It will find the white people, then reward its self as the group does statistically better.
- Comment on Passkeys Explained: The End of Passwords 3 weeks ago:
That’s not the biggest disadvantage “if used properly.” Any account you have should get a passkey on every device you own. Each device has it’s own passkey system. If you have an iPhone, yeah, you get an apple passkey, but then if you have a windows laptop, you have a microsoft passkey, a FLOSS system will have it’s own, and so on. You are already on whatever system would contain the passkey and can easily add different ones each time you get a new device.
The biggest issue is that most people use a small number of devices (including many who use 1). Passkeys work best if you have many devices, so if you lose one, you just use another to access your services. If you have 1, you need to use recovery codes (and people don’t save them).
- Comment on Passkeys Explained: The End of Passwords 3 weeks ago:
How many good passwords can you memorize? I can maintain 2-3 in my head long term, especially if only used rarely, and you can be phished if you are typing it in. Not tenable for online accounts. The only real comparison with security parity is a password manager + 2fa generated on-device, compared with passkeys. In both cases, you have “strong” password, no re-use, resiliency to fishing, and requires both “something you know and something you have.” I think a password manager is slightly more usable, but I’m not convinced either is a “good” experience yet.
- Comment on U.S. Tech Layoffs Hit Two-Decade High in October 3 weeks ago:
We have had more outages in our corporate tech services in the last month than the last year before that. Between AWS, Azure, and Teams issues, it’s been crazy.
- Comment on 4 weeks ago:
This comment prompted me to look for a picture of it. Nothing I can find, except in the background behind a baby picture of my now-in-university baby when I was apparently debugging the network connection:
- Comment on 4 weeks ago:
There was a time when I had an old desktop packed full of spinning hard drives in my living room under a CRT television! Yes that works, but a NAS in the furnace room that is accessible from “smart TVs” and everyone’s mobile devices is pretty nice. No more fan noise either.
- Comment on 4 weeks ago:
While true, neither backups nor checksums are exclusive to hosting anything.
- Comment on 4 weeks ago:
Mainly just multi-device access.
- Comment on 10 Richest Americans Have Gained $700 Billion in Wealth Since Trump Reelection 4 weeks ago:
They also never hear no. No struggle in life and people just become playthings. That breaks your brain - even if they weren’t already broken, which they would have had to be to become a billionaire in the first place guilt-free.
- Comment on The Future of Advertising Is AI Generated Ads That Are Directly Personalized to You 4 weeks ago:
Because you are not the customer of the ad betworks. They are marketing bs to ad buyers, where you actually viewing the ad is merely incedental.
- Comment on The Future of Advertising Is AI Generated Ads That Are Directly Personalized to You 4 weeks ago:
Yes. Because targeted advertising is just selling something in it’s self. It was always a scam, but the mark os businesses that buy into the idea.
- Comment on The Future of Advertising Is AI Generated Ads That Are Directly Personalized to You 4 weeks ago:
Also the eugenics stuff. Yeah, it was just a low-effort way to set up the premis, but eww (and also very incorrect). They had to make sleepwaling into that kind of thing seem plausible with some explanation. Instead, we didn’t actually need that.
- Comment on Yunohost, CasaOS, or Cosmos? 4 weeks ago:
I see that cosmos advertises running your apps on a vpn built-in. That might be worth looking into. When I switched to self-hosting everything on my “tailnet” and closed incoming ports, a lot of the nice features of Yunohost for maintaining DNS and certs for the various apps stopped being that useful. In this day and age, I think being able to self-host and experiment within a safe VPN environment instead of on the open internet is the way to go.
- Comment on Aldi just launched its own £16.99 rival to Ring's battery video doorbell – and it's completely subscription-free | TechRadar 4 weeks ago:
Thanks, I’ll take a look.
- Comment on Every single time I think of restructuring my homelab storage. What do you use for storage engines and how does it benefit you? 5 weeks ago:
Hot take: For personal use, I see no value at all in “availability,” only data preservation. If a drive fails catastrophically and I lose a day waiting for a restore from backups, no one is going to fire me. No one is going to be held up in their job. It’s not enterprise.
However, redundancy doesn’t save you when a file is deleted, corrupted, ransom-wared or whatever. Your raid mirror will just copy the problem instantly. Snapshots and 3,2,1 backups are what are important to me because when personal data is lost, it’s lost forever.
I really do think a lot of hobbyists need to focus less on highly available redundancy and more on real backups. Both time and money are better spent on that.
- Comment on Aldi just launched its own £16.99 rival to Ring's battery video doorbell – and it's completely subscription-free | TechRadar 5 weeks ago:
Do you have a recommendation for consumer-priced outdoor cameras/doorbells? Seems like a minefield.
- Comment on U.S. agencies back banning top-selling home routers on security grounds 5 weeks ago:
I agree, but for the reasons above, it’s a terrible outcome for everyone on the internet. The number of people who will keep their router up to date with security patches are abysmal. Fix the ISPs and it would work, but you can’t fix the situation where the majority of residential humans suck at managing routers.