When will we get details about security vulnerability? Is there a formal method for instance owners to stay up to date on those kinds of notices?
Thanks for the work my friends.
this post was submitted on 17 Jun 2023
4 points (100.0% liked)
Lemmy
12514 readers
111 users here now
Everything about Lemmy; bugs, gripes, praises, and advocacy.
For discussion about the lemmy.ml instance, go to !meta@lemmy.ml.
founded 4 years ago
MODERATORS
It's xss, so users could include javascript code in posts which would be executed in other users browsers. We announce new releases in a couple of places, like the instance admin chat, !lemmy@lemmy.ml community and github releases.
God I appreciate these dudes. I don't envy them one bit right now...
Yeah, very difficult situation, I truly hope they'll find the help they need.
Well, I'm lending a hand. I have some patches in production already, and I've only been contributing for a week or so.
If you have the means, please help out. There are tons of bugs, important features, etc, and it's a pretty stable base, so it's a good time to jump in.
@sugar_in_your_tea About "good time to jump in": the small size of the lemmy dev community gives you a chance to shift off Microsoft to a community git forge e.g. #Codeberg [1] that aims at forge federation [2] *before* there's too much #TyrannyOfConvenience inertia. Mastodon devs are reluctant to even *discuss* giving up Microsoft [3].
@ulu_mulu @lemmy #GiveUpGitHub #forgefed #forgejo https://giveupgithub.org
[1] https://codeberg.org
[2] https://forgefed.org
[3] https://github.com/mastodon/mastodon/issues/22572
Well, I don't get to make that decision. If the maintainers choose to do that, I'll follow, but there's a good chance that a lot of the other contributors won't. For something in rapid development with a lot of community contributions, you want that barrier of entry to be as low as possible.
So if it was up to me (and it's not), I would say no. I would be open to an official mirror somewhere else, and perhaps moving to a separate feature/bug tracking system (esp. if it's easier for the community to report bugs), which imo is the biggest barrier to moving the repo.
I guess I'm not particularly worried about it since the project is FOSS and the difficulty in switching is pretty low.
Only a very small fraction of the 27000 new members are capable of developing the platform, and many (like me) don't donate directly. However, members might be more willing to donate AI or other IT resources in an 'indirect' way.
There are 27000 members with access to an AI, that can code (more or less). There are also developer agent architectures like 'smol-ai', and 'gpt engineer' etc, that works directly on a code base, that could assist with the development. (https://github.com/smol-ai/developer and https://github.com/AntonOsika/gpt-engineer)
An AI could run through the git requests and create a list of 'easy' non blocking features to develop/fix, and the members developer architecture could take on one of these issues and do a pull request. Another way is for Lemmy to host such an architecture, and let members donate 'AI prompts', or even API keys (when accounting is possible) for common development.
The tooling/workflow integration isn't quite there yet to be helpful now, and the chance of Lemmy devs getting time for this right now is null.
But how fast could Lemmy development get with 2-300 member AI's working 24/7 on bugs/features ? I'm not a developer, so I don't know how to set up such an AI assisted development workflow. But it could be done, and development speed of ALL open source projects in general would skyrocket with an open to join 'AI developer architecture'.
Hey, we could even have a global federated FOSS AI developer architecture, and people/smaller AI architectures with cool ideas for open projects could request global FOSS AI developer time for their idea/project. I'm sure someone is already working on something like this.
You're going to learn very quickly that the anti-corporate world of fediverse despises nfts, ai, crypto, and everything aligned with the silicon valley techbro-brained idiots that have taken over the existing mainstream internet. It's going to highlight to you what a bubble reddit is for one specific opinion on most topics.
post it to Mastodon with LemmyDev account
I hope this new influx of people will also bring in a nice influx of nerds who will make this platform better over time. :)
yeah, the 2014 exodus to voat was all pissed off nazis, but now the nerds are pissed off so I think you’re right
I was recently sharing Lemmy to some people and how the entire Reddit blackout is stupid considering everything the platform has done in the past and the mindset of the CEO.
Someone brought up Voat and they were lamenting how that failed, and I decided to check out the WayBack Machine captures for it, and Christ, nothing but antisemitism and racism.
OH BOY VOAT
Yeah. Free speech absolutism does not attract a good crowd, and once you attract that crowd you will not attract any other crowd because the content output they produce is repellant to any normal person.
Update: So I dug around a little deeper, and found that
- @dessalines@lemmy.ml is /u/parentis_shotgun on Reddit. Source: https://archive.is/Ky9vd
- /u/parentis_shotgun moderates some subreddits, including r/InformedTankie, r/asktankies, r/GunZedong. Source: https://www.reddit.com/user/parentis_shotgun
On another topic, there are rumors circulating that we are fascists or supported genocide. These claims are completely false, and like most viral twitter threads, are coming from a single Mastodon user on a personal vendetta who didn’t provide any sources. Such slander doesn’t deserve any response and is best left ignored.
- Previous discussion on the moderation policy on lemmy.ml including response from @dessalines@lemmy.ml : Expressing concerns about moderation policy on lemmy.ml
- Accusation of a Mastodon user (probably the one they are referring to): https://mstdn.social/@feditips/106835057054633379
- Essays from @dessalines@lemmy.ml: https://github.com/dessalines/essays/blob/master/socialism_faq.md
Update: More info about @dessalines@lemmy.ml
So um, no one on the face of this earth hates fascism more than a communist, the evidence you dug up only seems to reinforced the not a fascist and its utterly rediculous to call us that.
Nothing here says he's a fascist. His "genocide denial" stance stems mostly from the idea of being anti-capitalist and not trusting US-centric sources. Its not entirely without merit. Noam Chomsky for example is accused of the same thing for the Pol Pot genocide, though at the time he was right for the same reasons -- accusations started flying in the US based on completely banal sources.
I used to be like this, its not entirely harmful. And in any case, I don't give a shit about his politics. We should be thinking about how to separate peoples politics from the platform, and the work hes done on Lemmy does exactly that.
It is extremely harmful when people like them go around non-tankie left wing subs and eventually gain control through nefarious means and eventually transition it into yet another tankie propaganda sub. Or when they moderate a supposedly general left wing sub but any criticism of authoritarian communism gets you muted and called a liberal, eventually allowing their propaganda to seep through to regular socialists as any criticism is shot down. /r/GreenAndPleasant is guilty of the latter.
It's not really the politics but the way power hungry people get.
See, it's all this stuff that really makes the
Such slander doesn’t deserve any response
statement feel very Steve Huffman to me. It very clearly does deserve a response because the problem doesn't end with just saying "nope lol that's not us" and people like me have to go digging through all this bullshit just to figure out the facts: they believe anti-China news and similar is U.S./media propaganda and will moderate opposing viewpoints with "Orientalism" bans and similar. That's not a hard statement to type, and if this viewpoint is in good faith then I struggle to see why they refuse to just say that and consistently resort to "if you don't like our moderation policy feel free to join/start a different instance!" without ever actually clarifying the moderation policy. Even lemmygrad pretty much says outright "if you like capitalism, fuck off."
I mean, dude's not CEO, he doesn't control the instances. He does own a very large instance, but I don't think it's even the most dominant instance post-redditting.
I disagree with his views, though I will admit to some sympathy on some aspects (not the genocide stuff), but ultimately, he's just a dude who makes this software. He doesn't own it, he doesn't have a monopoly on its control, and really, the entirety of the Fediverse could, if he went full Huff, say "fuck you" and defederate his instance. That's the power of a distributed service. Heck, your own instance, kbin.social, could lemmy.ml at any time and it'd have little impact overall.
Even were I to concede to him being "Huffman-like" (which I do not agree with), I don't think he's actually relevant enough in the real-world usage of the software to care about as far as that goes.
Having gotten involved a bit over the last week, I think he's generally a good guy. I disagree with his politics, but none of that has anything to do with software development. He writes good code, and when he's not overwhelmed with nonsense, he's quite helpful.
There's another major dev, but I don't know anything about him. I think they just want to build a cool tool that they can use to provide a safe space for discussion, and they want to make that available to others as well. That's pretty cool, and that's something I can support.
Ya, I don't have any personal interactions with him and am withholding real judgement without. Even his politics, it's hard for me to really condemn him when I don't even know the lens he's viewing things through. End of the day, I'm taking a best guess based on a few (3?) instances where he's ever been recorded saying something that's shit.
But also, even the worst tankie's better than the best right winger, any day.
Eh, I consider myself to be the opposite of both politically, but I have no problem contributing to FOSS projects lead by either. But I agree in general, I've had better luck with socialists than fascists when it comes to FOSS.
Slightly contra- the other user that responded to you, I need to ask: You've spoken with rightwingers before, right? Most westerners have had the "privilege" at least a few times to allow such people to speak for themselves. Have you ever had an even slightly comparable interaction with a "tankie" where they also got to speak for themselves, rather than be told about what they believe third-hand?
I am a marxist Lenninist, and I can and do speak for myself.
though I will admit to some sympathy on some aspects (not the genocide stuff)
I mean, no one is supporting a genocide or speaking in favor of one, and the US has a documented history of using atrocity propaganda that is completely without basis. Probably the most powerful thing about that particular genre of slander is that it is taboo to denounce it for fear of looking like a "denialist" in the manner of a Holocaust denier, allowing the west to cynically exploit the generational trauma of a genocide it subsidized in order to degrade the reputations of its opponents on the imperial periphery.
makes the statement feel very Steve Huffman to me
Then you didn't read it, they link a page that clears up their position on it right below that sentence: https://join-lemmy.org/docs/en/users/07-history-of-lemmy.html
This is extremely well written. Anyone that supports and wants to see this platform thrive should share this in response to the people spreading nonsense with the goal of seeing it fail and upholding the corporate status quo.