I had the idea that moderation is instance based in Lemmy, mods only moderate people on their instance.

I must be missing something (I can see the community is not from lemmy.world but the guy is)

OK I got it, you are completely out of the loop here.

You do not grasp the idea of NoScript and other JS filtering extension. This is not about server code, your all arguments is baseless here.

By the way JS refered to Javascript and not NodeJS.

Anyway I got you whole company/business talk about "keeping the service available, secure, performant" and "GDPR [...] bankrupting fine"... yeah lemmy.world.

Thanks for your answer.

First I don't even grasp what a "service owner" is.

Second, for JS front-end openness there are already a bunch of app (web, android) that are open-source and secured. Everything has dependencies nowadays, this doesn't prevent good security. Think all the python app and their dependencies, rust, android... even c\c++ packages are built with dependencies and security updates are necessary (bash had security issues).

I think with JS scripts it's actually even easier to have good security because the app is ran in our web browser so the only possible attacker is the website we are visiting itself. If they are malicious then the close-sourced JS script is even worse. Unless you count 3rd party scripts embedded that bad dev uses in their website without even thinking about trusting them. That is also awful in both open or close source environment.

So even having imperfect security (which happens regardless to openness), who is the attacker here? I would rather run js script on my end if the code can be checked.

I believe you missed the point, I am not in defense of Security through obscurity (https://en.wikipedia.org/wiki/Security_through_obscurity), quiet the opposite.

The point: "[...] risk for the service owner as it gives an easily parsable way for an attacker to check [...]" is well known and not the discussion here. You can choose close source for 'security' this is opensource community so I am wondering about such a tool.

There's no "open source" centralized website. You can't know what the server is effectively running unless you have access to it. To me this makes no sense.

The irony

And C++, just checked the wiki and the 2 example of openssh's heartbleed and sudo, both in C. Not C++. As expected.

I'm not sure why people keep pushing that myth on C++. It's been a decade we have smart pointers. There's no memory management to be done ever.

Using the old 'new' is like typing 'unsafe' in rust. Even arrays/vectors have safe accessor.

Am I missing something?

Are we codeberg yet?

They won't go to jail, period. No company owners never go to jail, kinda ever. This phrase is out of proportion. At worse they would have a fine.

Also still in the blog everything is words and very opaque like " We do this not only through technology and advocacy (Proton has contributed over $500,000 toward defending these values around the world)" : like where, what, when?

"There was no legal possibility to resist or fight this particular request." : I doubt very much unless Switzerland is a dictatorship in disguise.

"Switzerland generally will not assist prosecutions from countries without fair justice systems." : clearly not.

You can search it online : I don't know any good media so here's the first result on DuckDuckGo https://www.theverge.com/2021/9/6/22659861/protonmail-swiss-court-order-french-climate-activist-arrest-identification

It is a nice PR but for me I am not impressed. Rolex is also a non profit organization in Switzerland and and mostly help hiding there finance.

Correct me if I am wrong but all I see is words and promises. I would trust them if they release the yearly finance transparently.

For now the only act I can judge them on is their collaboration with police to give ecologist activists IP.

Justin Pot is no expert but expert on writing.

NEDO is a big public institution for renewable energy research. The budget is ~500M$ a year and they bet a lot in hydrogen : https://www.nedo.go.jp/english/index.html (https://www.nedo.go.jp/english/activities/activities_ZZJP_100096.html)

Thank you for sharing this. I didn't know this FS yet. It seems new and have some nice goals. I always have a grudge against zfs/btrfs because of the resource usage/performance.

I'll keep an eye on this. I'd love to find some benchmarks.

I am so sorry, I am going to fix this. Also I am not one of the people who downvoted your comment. I like when people point at my mistakes. I am making a lot of those even in my native language.

I tried watching the video. I am genuinely interested but I couldn't. The video is uncuted (edit: uncut*, my English is so bad) and very slow paced. After 10 minutes I gave up (50 minutes remaining).

Maybe an other time or with an other video.

I thought this also would need the next Nvidia driver version 555. Am I missing something?

it's been at least 7 years now, I don't have any hope.

Wine is fine so I guess proton would be.

Damned, this is so frustrating when you cannot switch yet. Not like Wayland is perfect anyway but I felt the same with pipewire where the new system as some needed improvement but the switch is harsh.

He was subsequently found dead in his truck in the hotel car park.

-> https://www.bbc.com/news/business-68534703 . This is in the "business" category...

There is also photographic evidence of RRC staff in branded Red Cross vests at military training events for Russian youth, where children as young as eight are taught how to use guns.

(RRC = Russian Red Cross) Agree on medical aid but I am no sure this is about medical aid here.

They list gitea but not forgejo. That's not really advocating for FOSS. "all" (the ones I looked at) are startup products coined as open-source.

I really don't like this website and this list, to me this is replacing bad solutions by other bad solutions (I am sorry for the people that like firebase and co).

I am sorry for the negativity but I really don't enjoy this link and all it represents and all the people enjoying such content. I guess I/we should explicitly separate FOSS from open-source.

I may be out of touch and should be educated on why/how this is good.

I thought they would actually talk about real concerns. Instead it's a long PR about the camera

No audio jack no love for me. I got the last version that had that, next I'm going to look to other options.

You are right to share this, I was about to do so yesterday but I first wanted to watch it all. So far I have only watch the first half and it is very interesting.

It is rough to follow though, sometimes I am listening to stuff while working but for this video I will need to be in the right context and focus to correctly get it.

Interesting, it's sad that for me the search is quiet garbage and feed me with result based on my IP/location and I couldn't find a option to change that like DDG does.

Never heard of bonfire, I really need some kind of tech news to explain and review those kind of things. I spend few minutes reading some of this "micro-bloging" thing. I'd like to see/understand concrete application. Is this mastodon-like small messages use?

I don't like it being HTTP based and TLS (certificate?), nor I am a fan of flutter and the other 70-ish dependencies (https://github.com/localsend/localsend/blob/main/app/pubspec.yaml).

KDEConnect is great and does way more than file sharing, I'll stick with that.

On top of the fact that those previews are annoying as hell as other comments pointed out, I want to add that this kind of feature also uses a fair amount of processing + memory.

I think that is a nice opt-in feature for those who wants it but I like my default light and simple.

Thanks for the link, I knew hyperbola for many years from afar. Reading this gave me a lot more insight on the project. I find it very cool and pushing toward better software like GNU, openBSD and suckless.

Nothing is perfect but for server this distribution could be a nice option . I'd love to see an arm version of it. I guess RISC-V would also be a perfect match for them

It really has the vibe of an hbomberguy video. I also feel the background is a subtle tribute to his style.

They just don't want to watch it. Length is not really an argument.

That could be a nice way. Sadly it was in a C++ code base (using tensorflow). Therefore no such nice things (would be slow too). I skill-issued myself thinking a struct would be 0 -initialized but MyStruct input; would not while MyStruct input {}; will (that was the fix). Long story.

Took me 2 hours to find out why the final output of a neural network was a bunch of NaN. This is always very annoying but I can't really complain, it make sense. Just sucks.

Yes for the pointing to a wall.

You can go with your firewall I don't mind. I don't get why you think this had anything to do with security. This is just to get any software to go offline by default.

Yes indeed. For now you can just use wine registry option (from the up arrow next to the wine glass) to open the windows registry.

The you go in CURRENT_USER (don't remember the full name, on my phone right now) and something like software/windows/current_version/internet_settings . There you should have a "ProxyEnable" you can switch the value from 0 to 1 (just double click). Then right click to add a "string value" and name it "ProxyServer". Once created double click on it to change its value to something wrong like "http://bla.local:80".

You can check internet by running exe from the wine environment (up arrow next to play) and start internet explorer from c_drive/Program Data

I cannot believe France is not there. How did they get their data?