mo_ztt

joined 1 year ago
[–] [email protected] 0 points 4 months ago

Pew pew pew

[–] [email protected] 4 points 6 months ago (2 children)

Everything Wordpress is heavily infested with that. However you don't have to let it impact you -- it kind of looks to me like they pressure commercial vendors to put their stuff under the GPL if they're wanting to offer a free version, so there's a robust ecosystem of actually-FOSS tooling for it. My experience has been that it's always worked pretty well in practice; you just have to keep your nope-I'm-not-paying-for-your-paid-version goggles firmly affixed. (Also, side note, GPT does an excellent job of writing little functions.php snippets for you to enable particular custom functionality for your Wordpress install when you need it.)

[–] [email protected] 10 points 6 months ago* (last edited 6 months ago) (6 children)

Wordpress 1,000% (probably coupled with WooCommerce but there are probably some other options)

I honestly don't even know off the top of my head why you would use anything else (aside from some vague elitism connected to the large ecosystem of commercial crap which has tainted by association the open source core of it) -- it combines FOSS + easy + powerful + popular. You will have to tiptoe around some amount of crapware in order to keep it pure OSS though.

[–] [email protected] 0 points 7 months ago (1 children)

What the HECK man?

There's an underlying problem IMO with all Fediverse software and instances, in that because it's made available for free, people get entitled, moderators and admins are obligated to sort of do volunteer work on behalf of people who haven't earned it in order for any of the thing to work, which naturally leads to a inexhaustible wellspring of negative energy because the whole thing isn't right.

I saw the posts of Ruud asking for people to basically interview for a part time admin position and do a job which for skills and time investment is worth from $50k/yr-$200k/yr (calibrating for the fact that it's "only" 5-10 hours per week), and all I could think was whoa no no no this isn't the way. Not saying there's anything wrong with people volunteering their time to make available this great thing, but I think undervaluing them when they decide to do that is almost inevitable, which has follow-on effects that manifest in all kinds of ways and lead to things not being the way they should be. With this comment as a prime example.

What on earth is hostile about this post in any way?

[–] [email protected] 5 points 7 months ago

Yep.

There are two big end-user security decisions that are totally mystifying to me about Lemmy. One is automatically embedding images in comments without rehosting the images, and the other is failing to warn people that their upvotes and downvotes are not actually private.

I'm not trying to sit in judgement of someone who's writing free software but to me those are both negligent software design from an end-user privacy perspective.

[–] [email protected] 10 points 7 months ago

If she disagrees with the plan, she better get the fuck off the Trump Train.

If you're on a boat where there's a mutiny, you can't really be halfway in the mutiny but also hedging your bets saying you don't agree with everything the mutineers are doing. The outcome is going to be one or the other.

[–] [email protected] 14 points 7 months ago (2 children)

Of note about this is that image links in comments aren't rehosted by Lemmy. That means it would be possible to flood a community with images hosted by a friendly or compromised server, and gather a lot of information about who was reading that community (how many people, and all their IP address and browser fingerprint information, to start with) by what image requests were coming in kicked off by people seeing your spam.

I didn't look at the image spam in detail, but if I'm remembering right the little bit of it I looked at, it had images hosted by lemmygrad.ml (which makes sense) and czchan.org (which makes less sense). It could be that after uploading the first two images to Lemmygrad they realized they could just type the Markdown for the original hosting source for the remaining three, of course.

It would also be possible to use this type of flood posting as a smokescreen for a more targeted plan of sending malware-infected images, or more specifically targeted let's-track-who-requests-this-image-file images, to a more limited set of recipients.

Just my paranoid thoughts on the situation.

[–] [email protected] 6 points 8 months ago

I have no real idea with Navalnvy, and only dim memories of news reports about Magnitsky which went into a little more detail, but I'll tell you how I assume it operates: It's basically mistreatment to the point that it'll kill you, just slowly. Your cell's cold all the time, in the arctic winter with no blankets. You get bad food and bad sleep and beatings and no medical care of any kind. Once your body starts to malfunction (Magnitsky started having kidney failure), they go on beating you severely enough to cause additional organ damage, but then just continue to put you in your cell day after day with no medicine. Basically, you're going to die, but they're drawing the process out enough that it's indirectly, because of "medical issues" related to what they're doing to you, instead of just from blunt force trauma or something. So it's incredibly painful and long and drawn-out, a slow death of constant suffering from which you can't escape or get any relief.

[–] [email protected] 7 points 9 months ago

Also he tried to kill his own vice president when he didn't do what Trump wanted, committed multiple rapes, and said he is above the law.

I feel like that kind of thing should get mentioned more often whenever someone starts comparing candidates. It's like that Batman comic where they elected The Joker mayor.

1
submitted 9 months ago* (last edited 9 months ago) by [email protected] to c/[email protected]
 

DT_TEXTREL, of course, has nothing to do with Excel. But something about the combination of hallucination, flawless confident execution of the article format, and slow-burn getting subtly more repetitive and unhinged towards the end of the article without ever really crossing the line into an overt malfunction, is just really fascinating to me. Make sure you read the author profile.

1
submitted 10 months ago* (last edited 10 months ago) by [email protected] to c/[email protected]
 

Hello! I'm setting up a kbin instance, and while it's a little hard to tell thanks to the 0.19 breakage, it seems to be interoperating to some degree with most of the fediverse. I can post messages back and forth, at least.

With lemmy.world, though, it's not working. I get messages like this in the log:

Get fail: https://lemmy.world/comment/6458819, https://lemmy.world/comment/6458819
Bots Temporarily Blocked

And, indeed, it seems like lemmy.world is configured to reject connections from user-agents containing the word "bot". This is what happens when I access the same URL while manually setting user-agent to what kbin uses for client HTTP requests:

$ wget -nv --user-agent="kbinBot/0.1 (+https://my.domain/bot)" https://lemmy.world/comment/6458819
https://lemmy.world/comment/6458819:
2024-01-07 05:25:43 ERROR 412: Precondition Failed.

And, verifying that the word "bot" is the issue:

$ wget -nv --user-agent="kbinAgent/0.1 (+https://my.domain/agent)" https://lemmy.world/comment/6458819
2024-01-07 05:25:56 URL:https://lemmy.world/comment/6458819 [264000] -> "6458819.2" [1]

$ wget -nv https://lemmy.world/comment/6458819
2024-01-07 05:26:06 URL:https://lemmy.world/comment/6458819 [264006] -> "6458819.3" [1]

While I can understand that many bots are harmful so this is probably a necessary measure, it seems to me like this will break federation with all kbin instances (unless they figure out to change their user agent). No? Would it maybe be a good idea to add an exception to this for kbinBot? I may have misunderstood something, as I'm new to all this, just saying how it looks to me poking at it briefly.

Also, is it okay if I change my user-agent so that it doesn't contain the forbidden word? Presumably there's no administrative reason kbin and lemmy.world shouldn't talk.

 

Out of curiosity I went to exploding-heads.com and it looks like it's not working anymore. Is there a new place they hang out now? Are they undercover on the regular servers or something? It'd be a little surprising to me if they all just gave up on being active on the Fediverse.

 
view more: next ›