I can understand why all the other things would be listed here, and I would understand if sexuality in general was considered inappropriate for children, but why homosexuality in particular? This is strange to me....
I also had a bad experience where I had a test website under a megabyte in a storage bucket. It was under the free tier and sat there for a few years. Then one month they sent me a bill (it was small, a handful of cents). Contact support saying that this use is under the free tier. They said that data was added then removed from the bucket. I hadn't logged into the account, no living API keys. They wouldn't forgive the charge.
Luckily my credit card had expired so they just locked my account.
Two regions of one provider isn't really a reliable backup. What if the provider goes out of business, hacked, closes your account or has a software bug that affects all of their storage.
There are other less abstract concerns. Such as performance (are you always loading the list of skills, what if it is long) or correctness (if you delete a Person do you want to delete these relationships, it comes "for free" if they are stored on the Person) But which is better will depend on your use case.
Welp I guess this is the perfect example of companies not deleting your credentials and account info when asking for it... I deleted my Notion account several years ago. And completely randomly today got an email from them about data retention, assuming this is one of those "important" emails they have to send out. Sadly, years...
Often what happens is that when you sign up they also make an API call to their email list service. Then when you delete your account they remove you from their DB but often forget to remove you from the other services. This obviously isn't acceptable but often not intentional.
This is also true in lots of places like Canada and (IIUC) California. But very frequently it doesn't happen. In Canada you can report it but then nothing happens.
h264 is the best option for compatibility. There have been free software encoders and decoders forever and IIRC all patents have expired. Basically every device you will encounter and every software system can play h264 videos and the encoders are fairly good.
AV1 is the best option for quality. It is completely free and is becoming widely supported. It will likely be supported for a long time as it is the first widely available high quality free codec. It is significantly better quality than h264 so will result in smaller files for the same quality or better quality for the same file size. Hardware decoding support has only really become common in devices that hit the market in the last few years. But most new devices will have hardware decoding.
Both of these are web-compatible as well which is nice.
Audio
Opus for lossy and FLAC for lossless are both some of the best codecs in their class, completely free and widely available. There are also both web-compatible.
I would avoid h265 if you prefer free (libre). The only real advantage it has over AV1 is that devices started shipping hardware decoding support a few years earlier. If you need that and care about file size/quality then yes, you may need to go h265. But otherwise I would lean towards AV1 (better quality) or h264 (basically 100% compatibility).
I would try to avoid VP9. Hardware support is spotty and I suspect that new hardware is going to relatively quickly phase it out. AV1 is better in most circumstances except for a few devices that have hardware VP9 support but not AV1 (a few years of Android phones mostly). So unless you need a specific device you currently own to have hardware decoding support (only really matters if you are on battery for <=1080p content) just skip VP8.
We’re no longer using our old ftp, rsync, and git links for distributing OpenSSL. These were great in their day, but it’s time to move on to something better and safer. ftp://ftp.openssl.org and rsync://rsync.openssl.org are not available anymore. As of June 1, 2024, we’re also going to shut down https://ftp.openssl.org...
Although getting something that supports AV1 hardware decoding could be forward thinking. For now you are probably fine without it and if you are ripping DVDs you may consider just keeping the original encoding. But most likely you will start to see more AV1 files coming in the future, and having a server that can transcode AV1 to older formats easily will keep everything on your network working properly.
If you want to serve multiple resolutions and bitrates you will probably want hardware that can do transcoding. However basically any graphics card (even integrated) will be able to transcode a video stream in real-time at a decent quality.
(If you wanted you can try to pre-transcode offline, but Jellyfin doesn't support this well)
I think that is a bit strong. Sure, you aren't gaining much protection if you just allow sudo -su root but there are a lot of valid use cases.
Logging.
A bit of an "explicit" check to keep you from doing something stupid without thinking.
You can configure sudo to only allow specific commands from different users. (Maybe a trusted friend should have permission to reboot your Minecraft server but nothing else)
If you haven't used any configuration management before it would definitely be valuable to learn.
However I would also recommend trying Nix and NixOS. The provide much better reproducibility. For example using Ansible-like tools I would always have issues where I create a file, then remove the code to create the file but the file still exists or the server is still running. I wrote a post going into more detail about the difference a while ago https://kevincox.ca/2015/12/13/nixos-managed-system/. However this is more involved. If you already have a running server it will be a big shift, instead of just slowly starting to manage things via Ansible.
But I would definitely consider using something. Having configuration managed and versioned with history is super valuable.
I just got a Lenovo Yoga 9i and am pretty happy with it. It has a really nice display and wanted to experiment with a convertible as I occasionally wished I had a tablet but wouldn't use it enough to justify it. Having a laptop that can double as a tablet was attractive.
Random notes:
Fingerprint reader doesn't work.
There is a sysfs file to set an 80% charging limit which is nice.
WiFi often seems slow and the signal strength is reported as low. I suspect this is poor AP selection as it seems to connect to a further AP in my house rather than the closer one.
Or use a browser extension to implement your preferences rather than push them onto others in a way that makes it harder for them to implement theirs.
If an article links to medium.com my redirects kick in, my link flagging kicks in and everything else. If everyone uses some different service to "fix" medium I am stuck with what they like. There is valuable to keeping the canonical URL.
I would also love to see domain blocks as a user preference in Lemmy. Just hide these sites that I don't like.
Can you configure KWallet with no password? Often you can do something like set an empty password and it will auto-decrypt with no prompt.
This may be undesirable as apps running in your user can access what is in KWallet but honestly this is probably the case anyways. If you are running unsandboxed untrusted applications you have already lost.
services.displayManager.autoLogin = {
enable = true;
user = "kevincox";
};
# Avoid setting up a keyring every time I do a non-auto login.
# https://gitlab.gnome.org/GNOME/seahorse/-/issues/159
security.pam.services.login.enableGnomeKeyring = lib.mkForce false;
Short but honestly good advise to rather pull boolean checks apart and re-group them as they make sense in the context of the given situation you're checking for....
This is "Testing on the Toilet" which are short flyers that are posted in bathrooms at Google. They aren't typically meant to be particularly profound, just to remind people of common code patterns that can be written more clearly or other reminders that are good to keep in mind.
There’s a server, a client, and a hacker in a network. For encryption, the client and the server need to share their private keys. Wouldn’t the hacker be able to grab those during their transmission and decrypt further messages as they please?
It depends on the cryptosystem. The private and public halves of the pair are often not symmetrical and often have overlap.
The parent is likely confused because in most situations the "private key file" will also contain all of the public key. Whether by necessity or for convenience.
Great question. Modern encryption schemes are usually composed of a handful of primitives. If we consider something like HTTPS it uses both asymmetric and symmetric parts.
Asymmetric encryption is the "magic" that you are missing. Asymmetric encryption algorithms create a keypair, one half of this is the "public key" which can be used to encrypt messages that can only be decrypted by the "private key". This means that even if the public key is public (as the name suggests) the messages can't be decrypted without the private key.
You can think of this as giving someone an open padlock. They can put something inside a box and lock it using the padlock, but they can't open it without your key.
Using this you could come up with a very simple protocol for establishing a secure channel:
The server sends you their public key, along with a certificate that proves that it belongs to them.
The client then uses this public key to encrypt a key for symmetric encryption.
The client sends this encrypted key to the server.
The server decrypts the key.
Now the client and server can both use the shared key to communicate.
(Note: There are many missing features from this system, but I think it illustrates the point. Don't design your own crypto.)
There is a very annoying problem with archive extraction on Linux. I always sort my files by "last modified" and want my latest files and folders on top in any file manager....
Most archiver programs will set the modified time of a file to the modified time recorded in the archive (if present). Many archive formats support recording modification times because they were intended for backups and aim to perfectly record the original files including all data and metadata.
I also agree that this is not what I want when using GUI modification programs (in my case file-roller) but the exact options available will depend on which program you use.
I also find passkeys to be underwhelming and hope they don't catch on. It seems like a huge mire of complexity for very little gain. It seems like there are two main goals here:
Don't sent secrets to the sever.
Stop phishing.
Both great goals. However I wonder if we threw out the baby with the bathwater with passkeys.
A password manager is already a huge step to blocking phishing, because if the password doesn't auto-fill you get super suspicious. If you push your user to randomly generate their passwords then they also don't remember them so would have to look them up, then copy them over. If you are worried about users who are a risk to themselves you can make the route to extract a password from the password manager as complicated as you like.
As for not sending secrets to the server I think using a PAKE would have been a great option. If this was paired in a browser-integrated password manager it could be very secure. Think about some type of form field that can be filled with a password that isn't accessible to the page itself. The browser would then tag the password as PAKE and never expose it to the page again.
Another cool think able PAKE is that they can also authenticate the server. TLS-integrated SRP was very cool like this as you could have a self-signed certificate but verify it by entering your username and password. The UX may not have been good enough for public sites but it was an amazingly easy and secure option for private sites. This would actually be more secure than a PKI signed certificate as you aren't risking CA compromise. That being said integrating this with browsers with good UX may be quite difficult. I would love to see it.
But the biggest thing we lost was understandability. Even my grandmother understood what a password is. She knew how to back it up, how to transfer it to a new device. She could use it in two different browsers without setting up some multi-browser sync tool. She could write it in a notebook and log in at the library computer.
I really think that we should have just iterated on passwords. Switch to a PAKE and keep improving password-manager UX and pushing most users to auto-generated passwords. So much was lost by switching to a system that most users don't understand.
a scary amount of users are using the same rather weak password for lots of different accounts
This is true, but you can force them to use a random password just as easily as you can force them to use a randomly generated key. The end UX can look basically identical if you want it to. My point is that this is basically a UX problem. Instead of just making the change we are inventing this new protocol to shuffle along a UX change at the same time. Maybe part of this is because the change has major unaddressed downsides that would be too obvious to slip by if made as an incremental upgrade to passwords.
One team person does the login, adds a key, then let’s the second team member put in their key and so on.
There is no reason you can't have multiple passwords associated with an account.
My biggest problem with hardware keys are replacement. If I lost one of my keys and get a replacement I would now need to go to a hundred sites and enroll the new key (and remove the old one). Until this workflow is automated I can only reasonably use hardware keys with a small number of "critical" accounts.
So for 99% of sites I'm going to use a synced software key.
What do you think you're doing by putting that link in every comment? Lemmy doesn't have a terms of service that assigns a license to your text anyways. So if you just say nothing you own your comment and they can't use it. If they cared about the licence they would already not be able to use it.
I don't think OpenTofu is accusing them of taking any code from an incompatible license. Just saying that both parties did the same thing.
IIUC all past Terraform code was copyright assigned via a CLA. This is what allowed them to re-license in the first place. So even if the previous code was offered under an incompatible license they own the copyright so it doesn't matter.
Lots of projects will have a CLA that basically says "You assign copyright of your work to us" or some sort of unlimited rights grant to the project. So depending on the exact CLA the author may completely transfer ownership of the patch to the project, maintain ownership but grant the project a licence to do basically anything with it (including re-licencing) or for less strong CLAs just confirm that you license the code under the project license.
They are a powerful tool. They are controversial because they can be used for good and evil. For example even some FSF projects require copyright requirement: https://www.gnu.org/licenses/why-assign.en.html. (It used to be all projects, but many have them have switched to DCO, example glibc)
But of course it also means that an organization can take code in a GPL project and start disturbing closed-source versions.
I use nextcloud cookbook but I would really love another or a federated alternative. It does its job but I don't think other people I know would use it.
I ended up creating my own because I couldn't find something that did what I want a few years ago when I started looking. My main requirement was easy scaling of ingredients. It has a handful of features around that such as scaling by specifying servings, scaling by setting the amount of a particular ingredient (example making pancakes with leftover buttermilk, pour the buttermilk into the bowl then scale the recipe based on how much was left) and ingredient conversion. In most other ways it is pretty basic and free-form but it does the job. It stores data in a user-provided provider so other people never send me their recipes.
It depends on how much you trust nginx. A HTTP server is probably a bit more complex that your average VPN solution so probably more likely to have vulnerabilities, but it is also the most popular web server on the planet, so if there is a zero day I'm probably not the first target. If you stay up to date you are probably fine.
Honestly my biggest complaint is header wrapping. Technically you need to wrap lines at 998 bytes (not that any reasonable server actually cares). But in order to wrap a header you need to add spaces (because you can only break a line after whitespace). But where spaces are unimportant depends on each specific header. So you need to have custom wrapping rules for each header.
In practice no one does this. They just hope that headers naturally have spaces or break them in random locations (corrupting them) because the protocol was too stupid.
Binary protocols are just so much simpler. Give the length, then the data. Problem solved. Maybe we could even use a standard format for structured headers. But that would be harder to do while maintaining backwards compatibility.
I tried Waydroid on Arch and its amazing. It runs Android apps flawlessly. And with a touchscreen device, I feel like I have an Android tablet running inside my Linux machine....
oars (OpenAgeRatingsService) in appdata.xml files: why "sex-homosexuality"?
I can understand why all the other things would be listed here, and I would understand if sexuality in general was considered inappropriate for children, but why homosexuality in particular? This is strange to me....
JK Rowling slammed for asking if she can be Black if she likes “Motown & fancy myself in cornrows” ( www.lgbtqnation.com )
[Repost] Reliable alternatives to AWS Deep Glacier for ~5TB?
Hi everyone,...
What open-source software would you like more people to know about?
Jellyfin | "We are pleased to announce the latest stable release of Jellyfin, version 10.9.0!" ( jellyfin.org )
Take a skim through the link for full details (especially the breaking changes), but I have included some parts that I thought were important:...
Benefits of a join table vs. array to express relations? (outside of SQL)
I am building an application that is using JSON / XML files to persist data. This is why I indicated "outside of SQL" in the title....
Extremely positive experience with Waydroid
I used to hate android emulators, since the ones I'd tested on Windows were ad-ridden, slow bloatware....
Randomly getting Notion email, after having deleted my account years ago... ( slrpnk.net )
Welp I guess this is the perfect example of companies not deleting your credentials and account info when asking for it... I deleted my Notion account several years ago. And completely randomly today got an email from them about data retention, assuming this is one of those "important" emails they have to send out. Sadly, years...
Handbrake/ffmpeg: What free video codec to use for 720p videos?
I have a lot of old movies, most will barely be 720p....
OpenSSL goes GitHub only ( openssl.org )
We’re no longer using our old ftp, rsync, and git links for distributing OpenSSL. These were great in their day, but it’s time to move on to something better and safer. ftp://ftp.openssl.org and rsync://rsync.openssl.org are not available anymore. As of June 1, 2024, we’re also going to shut down https://ftp.openssl.org...
Recommendations for Hardware for Physical Media/Jellyfin Server
Initial Thoughts...
systemd Rolling Out "run0" As sudo Alternative ( www.phoronix.com )
Google is building a fart button into Android ( www.theverge.com )
Google Feed alternative
I like how GF shows me articles (with images) of different websites and topics....
Read You, A modern rss reader for Android. ( www.f-droid.org )
Systemd wants to expand to include a sudo replacement ( outpost.fosspost.org )
Is ansible worth learning to automate setting up servers?
Hello, I have recently been seeing a boom in people using ansible for automating setting up vps's, services, ......
What laptop do you use/recommend?
Looking to upgrade from an old Latitude, curious as to what mobile hardware you folks use for writing your open source projects?
How an empty S3 bucket can make your AWS bill explode ( medium.com )
Any way to autologin with LUKS encrypted boot drive?
Hello everyone!...
Post your Servernames!
Mimicing a thread I saw elsewhere....
isBooleanTooLongAndComplex ( testing.googleblog.com )
Short but honestly good advise to rather pull boolean checks apart and re-group them as they make sense in the context of the given situation you're checking for....
A doubt in encryption ( lemmy.ml )
There’s a server, a client, and a hacker in a network. For encryption, the client and the server need to share their private keys. Wouldn’t the hacker be able to grab those during their transmission and decrypt further messages as they please?
Extracted archive timestamp
There is a very annoying problem with archive extraction on Linux. I always sort my files by "last modified" and want my latest files and folders on top in any file manager....
Passkeys: A Shattered Dream ( fy.blackhats.net.au )
Are we Wayland yet or Whats missing? ( lemmy.ml )
Curious from people who follow its development closely....
Our Response to Hashicorp's Cease and Desist Letter | OpenTofu ( opentofu.org )
https://feddit.nu/pictrs/image/c2330506-c03b-4012-bed5-873302f291a4.png...
what's your fav recipe manager?
I use nextcloud cookbook but I would really love another or a federated alternative. It does its job but I don't think other people I know would use it.
Selfhosted messenger/community software like discord
Hello, I would like to hear your opinions about a good selfhosted messenger like discord....
How are you making services remotely accessible? ( kbin.run )
I need help figuring out where I am going wrong or being an idiot, if people could point out where......
Which communication protocol or open standard in software do you wish was more common or used more?
Whether you're really passionate about RPC, MQTT, Matrix or wayland, tell us more about the protocols or open standards you have strong opinions on!
What do you use Waydroid for?
I tried Waydroid on Arch and its amazing. It runs Android apps flawlessly. And with a touchscreen device, I feel like I have an Android tablet running inside my Linux machine....