Nothing4You
@Nothing4You@programming.dev
- Comment on Comments not showing? 3 weeks ago:
is that sync? sync has some issues with local communities. I think it might get better if you subscribe to the community.
compare with the web version to rule out account related issues.
- Comment on Is there a server that doesn't require allowing javascript of a million other servers? 4 weeks ago:
honestly at this point I don’t consider it worth continuing the discussion here, as it doesn’t seem that you understand enough of what you’re talking about, despite your claims of dealing with it for “years”, yet you keep implying that i’m likely the one being wrong or even lying/misrepresenting things.
the second screenshot is from the same browser as the first, both are in firefox, using the tor browser variant in safest mode, which blocks even more than the average noscript installation in firefox. tor browser is a hardened variant of firefox esr. if it works in tor browser without loading js from third parties it’ll very much do so in any other browser. the screenshot is from macos, which is probably why you’re not used to it, but that’s just what firefox on macos looks like. this is my standard firefox install: Image
besides, if lemmy was loading and executing javascript from other instances, this would be a massive security issue, which is yet another reason why your claim of loading js from other instances is ludicrous for someone who knows how these things work, at least when you keep insisting on it.
as i mentioned before, noscript is not an extension that is easy to use without some basic understanding of how websites work. if you’ve been having issues for years due to not understanding these things and how to deal with them properly that suggests that it’d probably be better for you to just switch to something like ublock origin with anti-tracking filter lists if you’re not planning to spend some time learning how websites work and what the different types of blocked resources do.
i don’t even see how you would be blocking images with noscript, as there doesn’t even seem to be an option for it. unless of course you’re confusing noscript with something like umatrix, which does allow blocking images by default as well, but it would also clearly show that there is media blocked and not scripts: Image
anyway, if you’re truly interested in understanding these things and not just rant about them please do some research on the technology being used.
- Comment on Is there a server that doesn't require allowing javascript of a million other servers? 4 weeks ago:
nothing about this is cherry-picking. it’s simply how lemmy works. there are no remote js sources. lemmy-ui even sets security headers that prevent loading js from third party domains.
- Comment on Is there a server that doesn't require allowing javascript of a million other servers? 5 weeks ago:
doesn’t require allowing javascript of a million other servers?
half the images are broken because I’m expected to allow scripts on like 30+ sites to see most of the posts
software like noscript is not exactly beginner friendly. you’re expected to understand the impact of your blocking and what you are blocking. the only domain you need to allow JS from on lemmy.world is lemmy.world. standard lemmy-ui does not load any js or css from third party sources, only the domain where lemmy-ui is served. your noscript configuration is blocking the actual images, not javascript that would be required to load images.
- Comment on [deleted] 2 months ago:
they won’t be sent by infosec.pub directly, but other instances may send activities referencing content from infosec.pub, which will lead lemmy.ml to pull it from the source as well.
this includes for example posts and comments in lemmy.world communities, because lemmy.world will announce those to lemmy.ml.
- Comment on I can't see images from lemmy.world instance because my country has banned lemmy.world, is there any effort going on to solve this issue? 2 months ago:
lemmy has an image proxy feature, but it doesn’t seem to be enabled on lemm.ee currently. it also still has various issues where media may break, it should get better in future lemmy versions (probably only in 1.0, not in 0.19 versions).
some alt uis also have the option to proxy images if enabled by the person hosting it, e.g. tesseract.
there is an open instance available at tesseract.dubvee.org, you can enable media proxying in the settings on the left.
as always with uis hosted by third parties, keep in mind that you need to trust the operator, as they could deliver code that steals your credentials. when possible, use uis hosted by your own instance operator, as they would have access to them anyway if they wanted. - Comment on fediverse modlog question 2 months ago:
bans currently don’t create explicit records for all content that was removed with them.
when a user gets banned from an instance or a community, there is an option to remove content along with the ban. in those cases, all content within the scope of the ban gets removed as well, but no individual modlog entries for the content are created.
modlog entries also disappear when the associated object gets purged, which results in a deletion from the database, but that will result in a purge modlog entry.
- Comment on [deleted] 2 months ago:
I made two accounts on sh.it instance using the same email.
this isn’t possible, you can’t reuse the same email for multiple accounts.
if you reset another account’s password with that it just means that you the user @emberinmoss@sh.itjust.works uses a different email address.
- Comment on Are fake-bans on Lemmy a thing? My friend was supposedly instance banned from Lemmy.world, lemmy.blahaj.zone, dbzer0, sh.itjust.works and lemmy.ml but she can still post in some communities 2 months ago:
to add to that, Lemmy currently does not handle site bans well if it’s not a home instance ban, as instances don’t keep track of which other instances have banned which users. this should get better with 1.0 though, as a PR to improve that was recently merged.
for now, there is a band-aid solution that federates community bans for all communities local to the instance the user got banned from, but that only includes communities that the user previously participated in, so they’ll still be able to participate in the local copies of other communities from the instance they’re banned from, it just won’t fully federate out.
- Comment on How to make my community hidden? 2 months ago:
only admins can set communities to hidden currently. this is also not exposed via lemmy-ui, it has to be done via API.
- Comment on [sh.it.post] We're #5! We're #5! 5 months ago:
based on the creation date advertised by the instance, lemmy.ml exists since 2019-04-20. lemmy.world exists since 2023-06-01.
- Comment on are we federating with dot world? how to check federation status? 6 months ago:
fwiw, the estimate number only states the max amount of activities behind. the real number can be lower, but not higher (unless sending is entirely broken on the instance being checked).
each activity being sent has a numeric id in the database. lemmy has an api that returns the id of the last activity that was either successfully sent to an instance or skipped when it didn’t need to get sent (e.g. pm to a user on a different instance). there may also be holes in activity ids due to postgres implementation details for auto-incrementing sequence ids.
for determining the highest known activity id to compare it with the last activity id sent to a specific instance, you can just go through the successfully sent ids for all instances in the response and find the highest number across them all. then you can calculate the difference between the highest number and the number for the specific instance.
depending on the lemmy version and timing of the action, it can take up to 30 seconds for the activity queue to deal with new activities, so on a somewhat busy instance the delta is likely rarely going to be zero.
- Comment on Seems .world and .ee federation are broken 6 months ago:
it’s not just lemmy.world.
of the larger instances, the following have trouble sending activities to lemm.ee currently:
- lemmynsfw.com -> lemm.ee: 2.81d behind
- sh.itjust.works -> lemm.ee: 1.04d behind
- lemmy.world -> lemm.ee: 22.5h behind
i pinged @sunaurus@lemm.ee on matrix about 30h ago already about the issues with federation from lemmynsfw.com, as it was the first one i noticed, but I haven’t heard back yet.
- Comment on Defederation issues between Lemm.ee and Lemmy.ml 7 months ago:
this doesn’t just affect lemmy.ml.
it seems that lemmy.ml -> lemm.ee was somehow fixed yesterday, but there are several other instances that also have issues sending to lemm.ee:
- hexbear.net: was broken since 2024-10-23, fixed since 2024-10-25
- lemmy.blahaj.zone: broken since 2024-10-24
- lemmy.ml: was broken since 2024-11-01, seems fixed since 2024-11-16
- startrek.website: broken since 2024-11-15
- Comment on Is it possible to get back a username of the account I deleted? 7 months ago:
this is the important part.
when an account is deleted the associated private key used for signing activities is deleted as well. the activitypub protocol does not really define how software is supposed to deal with deleted and recreated actors (which includes users), so some software has been built with the assumption that any change of encryption keys for a user means it’s an invalid signature and will prevent activities involving that user to federate to that software.
- Comment on Defederation issues between Lemm.ee and Lemmy.ml 7 months ago:
this seems more of a federation issue than a defederation issue ;)
- Comment on Feedback about our name: someone's concerns on sharing 7 months ago:
I think most (especially mobile) clients simply don’t have this option and will always copy/share the “fedi link” - the url where the content is canonically hosted. all other URLs are simply cached representations of the original content.
