0xtero

@0xtero@kbin.social
5 Post – 206 Comments
Joined 1 years ago

First I drink the coffee, then I do the things.

Cybersecurity specialist. Perpetual blue team botherer and a glorified network janitor. SecurityFest Crew (https://securityfest.com/)

Trying to leave things better than I found them.
Slow regard of silent things.

#infosec #security #cybersecurity #dfir #coffee #climate #sustainability #solarpunk

About Me: https://0xtero.hanninen.eu/
Mastodon: https://infosec.exchange/@0xtero

First - we're all using alpha/beta software (Lemmy is 0.17.4, Kbin is 0.10.). None of these services are "production quality" software yet, so let's keep that in our minds - we're all early adopters.

The points mentioned in the OP are a bad look. Naturally. User should have expectation of their data being deleted on request - especially since this request might be regulatory privacy request (GDPR related). It's a clear failure from the software and should be improved and iterated upon.

The expectation shouldn't be "oh well it's on the Internet, live with it". While Facebook might keep mining your data after deletion request, our software shouldn't behave like that, we should strive to be better with this stuff.

And finally, ensuring privacy in federated system is hard. Mastodon suffers from same problems. We shouldn't give up on the idea though.

10 more...

Turns out, pretending the entire Internet is equal to 5 apps from mega corps (largely fueled by pretend money) wasn't the best long term play.
Who would have thought?

15 more...

I guess the best analogy is a "virtual desktop" but for the terminal.
It's is a program which runs in a terminal and allows multiple other terminal programs to be run inside it.

Each program inside tmux gets its own "page" or "screen" and you can jump between them (next-screen, previous-screen etc).
So instead of having multiple terminal windows, you only have one and switch the screen/page inside it.

You can detech from the program and leave it running - so next time you log on to the server, you can re-attach to it and all your screens/sessions are still there.

Not super useful on your local machine - but when you have to connect to a remote server (or several) is really shines. Especially if you have to go through a jumphost. You can just connect to your jumphost, start tmux, then create a "screen" for each server you need to connect to - do your stuff and deattach. Next time, just re-attach and all your stuff is there.

Did that help?

11 more...

As long as kbin domain blocking tools work, I can choose to block their content - and I will, because 1) it's pretty fucking vile 2) it might be illegal. But I don't need it to be defederated, I'm happier if I have the tools to deal with this (and other similar stuff).

I wish we could remove the The "Random Post" / "Random Thread" boxes from the front page. Those seem to display NSFW material quite often - I don't really have any need for "random content" especially since I can't control the source.

20 more...

Get a physical copy that doesn’t require internet activation then, assholes.

I think the point was, it is increasingly hard to find such products.
And even once you think you've bought such product, DRM makes sure it's still not really yours.

4 more...

Not more than it is now. Everything is already public so if they need it, they've already been collecting it. This doesn't really change anything.

9 more...

I'm always annoyed how these types of news are categorized as "technology", when they're clearly just "business and finance".
Yeah Elon owns companies that do "tech". He has lot of money, because he's "business and finance" type.

I wish we'd talk more about actual tech than just the rich white dudes who sit on a pile of gold.

I normally design and create my own fonts before I start a new document or open console.
I use Arch Linux, btw.

2 more...

Meta should be considered "harmful to humankind" (the list of atrocities is long) and I personally really don't want anything to do with them.

It was only matter of time before one of the big players took interest. Too bad it had to be Meta, but I don't think the others would have been much better.

The protocol itself isn't secure, so if anyone is worried about data harvesting, better log off now and never return. Meta and anyone else can do that already (and is probably doing) without having to roll in with their own instances.

Federating with someone who might have 1.2 billion MAUs is kinda scary because most protocol implementations (like Mastodon) are huge mess of bloat and inefficiencies under the hood. Someone paying their hosting out of their own pocket or trusting on kindness of strangers should be wary of the amount of data that's going to hit them with federation.

It's probably silly to expect "unified blocklist". Some people are fixated with the idea of growth and equate mass popularity with success. Others would rather "wait and see". Let them. The fediverse used to be much more homogeneous place 3-4 years ago, but we're nearing 10M users. That's simply too many people and voices for there to be just one response.

Luckily there doesn't need to be. The protocol allows for creation of spaces that don't have to interact with Meta.

3 more...

I created an issue about this while back - https://codeberg.org/Kbin/kbin-core/issues/225
Feel free to give it a nudge

A lot of them go into business with venture capital, a great idea with future potential, but no idea how to monetize any of it.
Eventually the capital is starting to dry up and the owners will want return on their investments - so the company is forced to start turning profit. Enshittification of service at all costs follows. And then perhaps public IPO and the founders cashing out and buying yachts.

That's the lifecycle of a tech-startup

2 more...

Exactly, props to Ars and Sharon for giving mods a voice in this. Really wish more news sites would do this, all I see is articles where Spez gets to control the narrative and tell his view on things (mostly, how wrong mods and users are).

This is just it. Software is software. You can spin your own instance and moderate it as you wish. It's open source, so you can change and modify it.
But right now they're asking for donations to run their instance and help with their code.

So before you donate money and your time/expertise/code - it's probably a good idea to know who is asking for it. It's not entirely clear, to be honest.

There's also these:
https://raddle.me/f/lobby/96713/heads-up-the-tankie-behind-lemmy-ml-got-banned-from-r
https://raddle.me/f/TankiesGonnaTank/89852/the-lemmy-ml-admin-is-banning-anyone-that-mentions-stalin-or
(google cache since the site is down) https://webcache.googleusercontent.com/search?q=cache:KNky1TdNscwJ:https://lemmy.pineapplemachine.com/post/5781&cd=13&hl=en&ct=clnk&gl=se&client=firefox-b-d

And I believe there's some allegations of them hosting the lemmygrad.ml instance, which is basically full on tankie home.

Basically, they don't think Uyghur genocide happened, they don't think Stalin did anything wrong and they love Xi.

And now they're asking for your money

It's wild that a site with hundreds of millions of users, didn't invest into multiple-account deletion tools.
True start-up mentality, that one.

Just shows how our "critical" social media is really just some hasty tape and bubblegum behind the scenes to keep the front from falling apart.

Rich business dudes threatening other rich business dudes with... business.

There's not much "technology" in there.

1 more...

Yeah, that's pretty much my take as well.

All the "but muh datas" pearl clutching is just annoying and frankly, ridiculous. If they wanted to mine us, they already would have. They're probably doing it as we speak. They didn't have to create a multi-million social network for it. A raspberry pi on someones desk would have sufficed. Fedi doesn't have any (/very much) privacy.

They're doing this to escape the wrath of EU privacy watchdogs. They were already fined for $1.3bn and more is coming. Running their Twitter killer on interoperable protocol is nice, because it's free and they get to point at W3C and say they're LIKE TOTALLY supporting data portability. Why would they "extend and extinguish" that? It's their alibi.

I don't like Meta. It's a shit company ran by shit people. I hope they burn in hell.
But I can't really get my panties in a twist about threads.net existing.

I'll get angry if they somehow figure out to push ads to my face.

But for now. Maybe I'll block it. Maybe I won't. We'll see.

4 more...

the shitpost level in this is glorious, but... maybe someone should start linuxmemes community for these no-content posts?

2 more...

Yeah, and as the article links, this is just not about media, CDs, DVDs and games. It's also about very physical products that we immediately associate as "owned" - like printers, phones, cars, tractors or even, (lol) trains. They're all locked to manufacturers parts and repair services and increasingly difficult to circumvent.

Local mail client (Thunderbid) -> IMAP/POP -> sync.
Once done, move to a local folder and delete from Gmail.
You can just backup the Thunderbird profile, if you want to keep the mails safe

2 more...

This is huge! Just slightly less than "Unknown"!

1 more...

great that there's a Twitch rival trying to get serious

Kick is not it though.
Their mothership Stake is crypto gambling casino and it's shady as fuck

2 more...
  1. Don't expect privacy. Everything you post is public.
  2. Goto 1
7 more...

The question is, which controller he uses to drive it?

12 more...

The Gnome devs say you don't need a mascot.

He can touch deeznuts

1 more...

Bold to assume people can actually read!

I guess mainly:
Activity Pub is actually official W3C standard. There are yearly conferences, development and it's open.
That AT protocol is owned by Bluesky, they decide how it's developed, what gets in, what goes out and to my knowledge it's actually not implemented anywhere else (yet).

Antenna Pod is 10/10.

Chat Control is a huge privacy problem.
But a threat to free software? Nah.

But the coming Cyber Resilience Act might be
https://www.eff.org/deeplinks/2023/05/eus-proposed-cyber-resilience-act-raises-concerns-open-source-and-cybersecurity

Will be interesting to see how they deal with nazis and CSAM from all the Japanese servers.

3 more...

But at least MKBHD tried to say nice things about it in his video. He really tried.

In words of Dan Geer from his 2014 Black Hat keynote:

Today the relevant legal concept is "product liability" and the
fundamental formula is "If you make money selling something, then
you better do it well, or you will be held responsible for the
trouble it causes." For better or poorer, the only two products
not covered by product liability today are religion and software,
and software should not escape for much longer.

The EU legislation has good intentions. Software should not escape product liability. However, the current proposal is somewhat flawed (unless EU actually intends to finance security testing for FOSS projects!) and it needs some language to protect open-source innovation and distributed development models.

I'm hoping the EU will allow a model where FOSS developers can receive donations/charge for support without having to risk huge penalties.

It's currently very easy to get a negative rating, because people most use arrow buttons to "vote".

Downvote (arrow down) gives you -1 rep
Upvote (up arrow) doesn't affect your rep at all
Boost gives you +1 rep

This is a known issue and it will be corrected at some point when ernest has time to merge pull requests

1 more...

I guess that would be running sudo rm -rf /bin (yeah, it was supposed to be "~/bin" without the sudo.. idk, my fingers have a life of their own) on a machine that was in a datacenter on the other side of the globe.

It was a long and sweaty night.

1 more...

a lot more difficult in every aspect

Perfect summary of systemd

I wish international law regarding war crimes was actually enforceable. There's a long list of world leaders who've gotten away with mass murder with no consequences.

Yeah, not much you can do about it apart from the things outlined in the OP.

A nazi dickhed running pleroma on his rapsberry pie isn't going to respect federation moderation messages, DMCA or GDPR. You can try to complain to their ISP, but chances that someone is reading the abuse mailbox and acts on it is... slim.

So act like there's no privacy at all.

5 more...

You can blacklist sites you don't want to see.
Go to https://kbin.social/d/<the instance domain name you want to block>
For example: https://kbin.social/d/sh.itjust.works

On the right side-bar, in the Domain box, you'll see this you'll see this
Click on the block symbol and you will not see content from that domain again.

(hopefully)

1 more...