• 0 Posts
  • 10 Comments
Joined 3 years ago
cake
Cake day: July 16th, 2023

help-circle
  • The title also doesn’t state that VPNs need closing. They are talking about VPNs being a loophole to the “age” verification that needs closing. For anyone being even a little bit tech savvy, it was crystal clear from the beginning that forcing people to provide official identification documents or a picture/video of themselves will create a response of attempts to circumvent this. And VPNs being the easiest (as in affordable, ease of use, and various providers being available) way of doing that, are now obviously the next ones to take the hit. If, or rather when, the EU decides to crack down on VPN providers, they are effectively closed. Why would I use a service that forces me to ID myself to circumvent the ID requirement of other services? The only reason to use a VPN is anonymity.


  • Personal opinion: Came over when the API changes went live, simply because being forced to their official “app”, which was a pile of garbage in all aspects for me, was too much. And since that started the exodus, I couldn’t be arsed to mess around with 3rd party apps to make them work again, because I was too lazy and it simply didn’t feel like it’s worth it anymore. Made a lemmy account, lurked mostly as I did on reddit, content for doom scrolling was lacking quantity mostly. For me there’s now enough content for the daily scrolling session, where quality posts end about as I start to get bored or need to get my ass up, so it’s a win win here.

    It really just feels that more people are here. What I’m missing are a few more different users, because it kinda feels that most people here are very similar in their views, but that also would probably pave the way for more defederation drama.

    Since I’m mostly lurking and liberally use the block instance/community feature to simply hide the content I’m not interested in, for me personally it only got better, so I jump in, get my daily fix of memes, news and other random interesting things, comment occasionally and get back to whatever. I’m honestly lacking an alternative, so it’s as good as it gets for now, and I’m happy with that.


  • x1gma@lemmy.worldtoSelfhosted@lemmy.worldCertificates...ugh
    link
    fedilink
    English
    arrow-up
    5
    ·
    3 months ago

    The easiest way would be to set up caddy to use acme on the servers, and never care about certificates again. See https://caddyserver.com/docs/automatic-https.

    If you insist on your centralized solution, which is perfectly fine imo, just place the certificates to a directory properly accessible to caddy, and make sure to keep the permissions minimal, so that the keys are only accessible by authorized users.

    If the certificates are only for caddy, there’s no reason to mess around in system folders.


  • In all honesty, the constant rambling against any service provider when something goes wrong is tiring. as. fuck.

    “I’m not using anything, I’m self-hosting everything and no cloudflare can take ME down!” - hot stuff buddy, let’s talk again when at some point you’ll have something interesting and get hugged to death. Or when something of your diy self hosted stack breaks or gets taken down by an attack.

    “I’m not using (big company name) but (small startup name), and I’m not having any issues!” - wow, great, obviously the goal of the company is to stay as small as they are and supply your service. Let’s talk again too, when at some point your friendly startup gets sold, or grows more. Oh btw, smaller company usually also means less resources.

    “That’s all because they are using centralized services, we need to federate everything to not have a single point of failure” - federation alone won’t help if the centralized service has several magnitudes of resources more. Any single cloudflare exit node can probably handle several times the load of the fediverse. We’ve seen lemmy instances go down all the same, and this will happen with any infrastructure.

    I’m not supporting big companies having that much market share and the amount of control over the Internet as a whole that they have. But, have at least some respect from a technical standpoint for the things they’ve built. I’d say way over 80% here haven’t seen infrastructure, traffic and software on a scale that’s even remotely close to the big players, but are waffling about how this or that is better and how those problems should be solved and handled. Sit the fuck down.


  • In addition to all the suggestions - check out modding databases like nexusmods or whatever. Many older games that would not fit your definition have graphical mods that will make your GPU work.

    Personally I’ve played modded stalker, fallout, elder scrolls. Hell, you can make Minecraft look absolutely amazing, but it’s a pain to set up properly. You’ve mentioned you’re not into horror games, some games also have total conversions available that do a some genre bending too.

    Cyberpunk is not that old, but it’s one of the best looking games ever made IMHO.

    Witcher 3, also potentially with mods.


  • No matter how well reasoned, allegedly fit for purpose or how much something pretends to be it, we shouldn’t be trusting those promises, especially not from people we don’t know. That does not end well neither for the free candy van nor for cybersecurity. Trust like that has been responsible for a lot of attacks over varying vectors and for projects going wrong.


  • On the other hand, detrimental reliance is a tort and if someone is relying on an app for a specific safety function, the app could be civilly liable if it fails it’s function in some way.

    Yes, if the app would be any kind of official tool.

    Imagine if you had this attitude about an insulin use tracker/calculator, that sometimes gave wildly wrong insulin dose numbers.

    Yes, and that’s why regulations for those kinds of things exist, that prevent those things. There is no regulation for the ice tracker.

    Maybe down the road, it’s decided that aiding and abetting ICE is a crime, and providing misinformation intentionally or unintentionally is a criminal act. App developer dude could be criminally liable if he knew or ought to have known he had vulnerabilities. You know, in your New Nuremberg trials that you are going to get sometime in the next decade or so.

    If down the road a regulation would happen for, app developer dude would be forced to either comply or to stop operations.


  • x1gma@lemmy.worldtoTechnology@lemmy.world*Permanently Deleted*
    link
    fedilink
    English
    arrow-up
    16
    arrow-down
    3
    ·
    8 months ago

    So fucking what? He is not being paid in any kind, and anything he does on that project is volunteer work. If he was not able to do anything on that project due to regular work, vacation, personal issues, or the simple fact that he didn’t want to?

    If you don’t pay for a service, you don’t get to decide what people do, deal with it


  • x1gma@lemmy.worldtoTechnology@lemmy.world*Permanently Deleted*
    link
    fedilink
    English
    arrow-up
    52
    arrow-down
    1
    ·
    8 months ago

    Honestly, apart from the report being potentially wrong, the researcher seems pretty entitled as well. Like good intentions and all that, but he’s given him a week to fix the issue, usual practice in responsible disclosure are 90 days. We’re not talking about a company here, it’s some single random dude providing the app.

    This really sounds like some personal issue written down for public drama, while making himself ridiculous for not knowing his own shit properly.


  • Unless there are those who need certain words for their jobs, I can kinda understand why Microsoft wouldn’t want emails from work addresses to go out with political agendas… for either side.

    Sure. Then block both sides, and not only the one not bringing you money.

    Work emails should just be about work. Too many people use their work emails like a personal email… with their banking, shopping, etc. That’s what personal email addresses are for.

    No one uses their company email for their personal banking, simply for the reason because if you’d leave, you’d lose your access, and since most companies run behind firewalls, vpns, 2fa tokens and similar additional credentials, it’s simply harder to use.

    This policy should go for many non-work related topics too. IT can unblock the words for certain users who need to use them for their job.

    Of course, let’s waste resources to maintain idiotic blocklists that are out of date the moment they are rolled out, and additional resources to make the blocklist actually work. Palestine, p4lestine, pale s tine, p a l e s t i n e, paleztine. Need more?

    You’re not at work for someone with this kind of unhinged mentality watching you working for 8 hours a day straight with no breaks and no distractions. You’re there to get your work done. In my current team, we’ve had the best ideas talking about our problems at the coffee machine. I personally focus best when I have music on. We’re doing sports together once a week on a company fitness incentive, which boosted our team dynamic massively. None of this would be possible in such a controlled environment.