mo_ztt

joined 1 year ago
MODERATOR OF
[–] mo_ztt@lemmy.world 4 points 6 months ago (2 children)

Everything Wordpress is heavily infested with that. However you don't have to let it impact you -- it kind of looks to me like they pressure commercial vendors to put their stuff under the GPL if they're wanting to offer a free version, so there's a robust ecosystem of actually-FOSS tooling for it. My experience has been that it's always worked pretty well in practice; you just have to keep your nope-I'm-not-paying-for-your-paid-version goggles firmly affixed. (Also, side note, GPT does an excellent job of writing little functions.php snippets for you to enable particular custom functionality for your Wordpress install when you need it.)

[–] mo_ztt@lemmy.world 10 points 6 months ago* (last edited 6 months ago) (6 children)

Wordpress 1,000% (probably coupled with WooCommerce but there are probably some other options)

I honestly don't even know off the top of my head why you would use anything else (aside from some vague elitism connected to the large ecosystem of commercial crap which has tainted by association the open source core of it) -- it combines FOSS + easy + powerful + popular. You will have to tiptoe around some amount of crapware in order to keep it pure OSS though.

[–] mo_ztt@lemmy.world 5 points 7 months ago

Yep.

There are two big end-user security decisions that are totally mystifying to me about Lemmy. One is automatically embedding images in comments without rehosting the images, and the other is failing to warn people that their upvotes and downvotes are not actually private.

I'm not trying to sit in judgement of someone who's writing free software but to me those are both negligent software design from an end-user privacy perspective.

[–] mo_ztt@lemmy.world 14 points 7 months ago (2 children)

Of note about this is that image links in comments aren't rehosted by Lemmy. That means it would be possible to flood a community with images hosted by a friendly or compromised server, and gather a lot of information about who was reading that community (how many people, and all their IP address and browser fingerprint information, to start with) by what image requests were coming in kicked off by people seeing your spam.

I didn't look at the image spam in detail, but if I'm remembering right the little bit of it I looked at, it had images hosted by lemmygrad.ml (which makes sense) and czchan.org (which makes less sense). It could be that after uploading the first two images to Lemmygrad they realized they could just type the Markdown for the original hosting source for the remaining three, of course.

It would also be possible to use this type of flood posting as a smokescreen for a more targeted plan of sending malware-infected images, or more specifically targeted let's-track-who-requests-this-image-file images, to a more limited set of recipients.

Just my paranoid thoughts on the situation.

 

Me

Sounds good. Can you make a function to clone an existing FileNode, initializing Addr to nil and Children to be a clone of the Children of the source node?

// FileNode represents a node in the file system structure, which can be a file or a directory.
type FileNode struct {
	Type     NodeType
	Addr     *grits.FileAddr // Address of the CachedFile in BlobStore
	Children map[string]*FileNode
}

GPT

In DigitalOcean and similar cloud service providers, resources like droplets (virtual machines) continue to incur charges even when they are powered off because the underlying physical resources (CPU, RAM, disk space) allocated to the droplet are reserved and cannot be allocated to another customer. This policy ensures that you can quickly power on the droplet again without data loss or having to go through the setup process again. However, to avoid charges for resources you're not actively using, it's recommended to delete any droplets or resources that are no longer needed. Remember, data backups and snapshots should be kept if you need to preserve data from the droplet before deletion.

Edit: It's still going. I assumed it was just a one-off, and asked about JSON serialization in Go, and it showed me this:

Then it tried to run some python code, then admitted that the python code hadn't worked, and then it answered my Go question.

[–] mo_ztt@lemmy.world 1 points 9 months ago

He's just trying to help you, dude. lemmy.world is by far the biggest instance; 3x the users of the next biggest instance and much more than most. But, lemmy.world is also defederated from some notable instances like beehaw and hexbear. Another instance which also has in the tens of thousands of users (enough to be subscribed to "most stuff") might well give you better search results.

You may decide that the defederated-from-here instances aren't worth bothering with, with some justification, but you came in asking for help, he's trying to help you, and you're lecturing him about what's what. 🙄

[–] mo_ztt@lemmy.world 5 points 9 months ago

Lemmy.world has by far the most number of users. OTOH, it's defederated from some notable instances, so you might be better off using one of the dedicated search sites if you want to cast the widest net.

[–] mo_ztt@lemmy.world 2 points 9 months ago

No kidding. I'm genuinely surprised that not one of the people who had family die in there has done it.

[–] mo_ztt@lemmy.world 32 points 9 months ago (2 children)

What THE FUCK. I knew this stuff but for some reason reading it again made me all furious again.

Eva Mireles, from inside the adjoining classrooms where the shooter was, called her husband, Ruben Ruiz, a Uvalde Consolidated Independent School District officer, who was outside the school. According to DPS Director Steven McCraw, during the call Mireles told Ruiz that she had been shot and was dying; when Ruiz "tried to move forward into the hallway, he was detained [by law enforcement] and they took his gun away from him and escorted him off the scene." Mireles eventually died from her gunshot wounds.[82][83]

After the police cordoned off the outside of the school, parents pleaded with officers to enter the building. When they did not, parents offered to enter the building themselves.[84][85] Officers held back and tackled parents who tried to enter the school, further warning that they would use tasers if the parents did not comply with directions. Video clips of these interactions were uploaded to social media, including one that depicted a parent being pinned to the ground.[86] Police pepper-sprayed a parent trying to get to their child, and an officer tackled the father of another student. Police reportedly used a taser on a parent who approached a bus to get their child.[13] A mother of two students at the school was placed in handcuffs by officers for attempting to enter the school.[13][87] When released from the handcuffs, she jumped the fence and retrieved her children, exiting before police entered.[88] A video clip showed parents questioning why police were not trying to save their children, to which an officer replies: "Because I'm having to deal with you!"[89]

And, they harassed her afterwards because she was giving interviews that made them look bad.

Pedro "Pete" Arredondo, said he arrived at the school thinking he was the first law enforcement officer on the scene. He claimed he abandoned his police and campus radios because he wanted his hands free to shoot the gunman, and stated he also thought the radios would slow him down. He said one radio's antenna would hit him when he ran, while the other radio was prone to falling off his belt when he ran, and that he knew from experience that the radios did not work in some school buildings. Arredondo said he was unaware of 9-1-1 calls being made from the classrooms the gunman was in because he did not have a radio and no one told him; the other officers in the school hallway were not in radio communication either.[97]

[–] mo_ztt@lemmy.world 30 points 9 months ago* (last edited 9 months ago)

"I think it's a step in the right direction," said Kim Rubio, whose daughter, Lexi Rubio, was killed in the shooting. "I think for the first time we felt respected – we felt treated with respect, and I believe we're going to get the answers we're looking for."

I can’t even come up with any kind of sarcastic commentary. 😢

[–] mo_ztt@lemmy.world 6 points 9 months ago

He already checked, and the guy said nyet, not yet, need more tiym still.

 

It seems like just recently, everything broke. Posts from some other instances (Lemmy 0.19 or kbin) aren't showing up here reliably anymore, and then sometimes posts from a few days ago will suddenly show up. kbin.social has a banner talking about unusual "problems" without going into detail.

Does anyone know what's going on or why? I've heard that Lemmy 0.19 has a problem where its outbound federation queue will sometimes die until it's restarted manually, but that doesn't seem like it should affect a lemmy.world <-> kbin interaction. Is it just Lemmy 0.19, or just lemmy.world, or are there multiple issues, or what gives?

 

Out of curiosity I went to exploding-heads.com and it looks like it's not working anymore. Is there a new place they hang out now? Are they undercover on the regular servers or something? It'd be a little surprising to me if they all just gave up on being active on the Fediverse.

view more: next ›