woahdude woahdude Complex (and trippy) patterns emerging from a simple chemical system simulation
Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPC
    pcouy
    8 hours ago 100%

    I'll make sure to look into it and tell you what the differences are. The patterns definetly look similar to the "wave" or "spirals" preset from my video

    3
  • woahdude
    woahdude pcouy 12 hours ago 100%
    Complex (and trippy) patterns emerging from a simple chemical system simulation https://www.youtube.com/watch?v=rFwKSS5C3e8

    This is a simulation of the Gray-Scott reaction-diffusion model running on the GPU. In such systems, an auto-catalytic reaction involving two chemical species is happenning concurrently with diffusion. Despite the apparent simplicity of the model, simulating it with cherry-picked sets of parameters produces a wide range of emerging behaviors. * Run it in your browser : https://www.shadertoy.com/view/lXXcz7 * Detailed article : https://pierre-couy.dev/simulations/2024/09/gray-scott-shader.html

    12
    2
    blogging
    Blogging pcouy 13 hours ago 100%
    Mitosis in the Gray-Scott model : an introduction to writing shader-based chemical simulations pierre-couy.dev

    cross-posted from: https://lemmy.pierre-couy.fr/post/678825 Hi ! I've been working on this article for the past few days. It would mean a lot to me if you could provide some feedback. It is about implementing a physico-chemical simulation as my first attempt to write a shader. The code is surprisingly simple and short (less than 100 lines). The "Prerequisite" and "Update rules" sections, however, may need some adjustments to make them clearer. Thanks for reading

    17
    0
    "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPR
    General Programming Discussion pcouy 13 hours ago 77%
    Mitosis in the Gray-Scott model : an introduction to writing shader-based chemical simulations pierre-couy.dev

    cross-posted from: https://lemmy.pierre-couy.fr/post/678825 Hi ! I've been working on this article for the past few days. It would mean a lot to me if you could provide some feedback. It is about implementing a physico-chemical simulation as my first attempt to write a shader. The code is surprisingly simple and short (less than 100 lines). The "Prerequisite" and "Update rules" sections, however, may need some adjustments to make them clearer. Thanks for reading

    5
    0
    programming Programming Mitosis in the Gray-Scott model : an introduction to writing shader-based chemical simulations
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPC
    pcouy
    14 hours ago 100%

    Thank you for the feedback. I had a lot of fun playing with the model (and still have some improvements on my mind that might require porting it outside of Shadertoy)

    Is there any part that was especially hard to understand ? I'm trying to make it as clear as possible for developers without a scientific background.

    3
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearCO
    For all your programming needs pcouy 14 hours ago 100%
    Mitosis in the Gray-Scott model : an introduction to writing shader-based chemical simulations pierre-couy.dev

    cross-posted from: https://lemmy.pierre-couy.fr/post/678825 Hi ! I've been working on this article for the past few days. It would mean a lot to me if you could provide some feedback. It is about implementing a physico-chemical simulation as my first attempt to write a shader. The code is surprisingly simple and short (less than 100 lines). The "Prerequisite" and "Update rules" sections, however, may need some adjustments to make them clearer. Thanks for reading

    5
    0
    programming
    Programming pcouy 15 hours ago 100%
    Mitosis in the Gray-Scott model : an introduction to writing shader-based chemical simulations pierre-couy.dev

    cross-posted from: https://lemmy.pierre-couy.fr/post/678825 Hi ! I've been working on this article for the past few days. It would mean a lot to me if you could provide some feedback. It is about implementing a physico-chemical simulation as my first attempt to write a shader. The code is surprisingly simple and short (less than 100 lines). The "Prerequisite" and "Update rules" sections, however, may need some adjustments to make them clearer. Thanks for reading

    10
    1
    programming
    Programming pcouy 15 hours ago 100%
    Mitosis in the Gray-Scott model : an introduction to writing shader-based chemical simulations pierre-couy.dev

    Hi ! I've been working on this article for the past few days. It would mean a lot to me if you could provide some feedback. It is about implementing a physico-chemical simulation as my first attempt to write a shader. The code is surprisingly simple and short (less than 100 lines). The "Prerequisite" and "Update rules" sections, however, may need some adjustments to make them clearer. Thanks for reading

    29
    4
    selfhosted Selfhosted Open-source and self-hosted enterprise?
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPC
    pcouy
    2 weeks ago 50%

    I can recommend some stuff I've been using myself :

    • Dolibarr as an ERP + CRM : requires some work to configure initially. As most (if not all) features are disabled by default, it requires enabling them based on what you need. It also has a marketplace with a bunch of modules you can buy
    • Gitea to manage codebases for customer projects. It can also do CI but I've not looked into it yet
    • Prometheus and its ecosystem (mostly promtail and grafana) for monitoring and alerting
    • docker mail server : makes it quite easy to self host a full mail server. The guides in their doc made it painless for me to configure dmarc/SPF/other stuff that make e-mail notoriously hard to host
    • Cal.com as a self hostable alternative to calendly
    • Authentik for single sign-on and centralized permission management
    • plausible for lightweight analytics
    • a mix of wireguard, iptables and nginx to basically achieve the same as cloudflare proxying and tunnels

    I design, deploy and maintain such infrastructures for my own customers, so feel free to DM me with more details about your business if you need help with this

    0
  • privacy Privacy [Guide] Increase privacy by using nginx as a caching proxy in front of a map tile server
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPC
    pcouy
    2 weeks ago 100%

    It's a server that hosts map data for the whole world, and sends map fragments (tiles)as pictures for the coordinates and zoom levels that clients request from them

    7
  • privacy Privacy [Guide] Increase privacy by using nginx as a caching proxy in front of a map tile server
    Jump
    privacy Privacy [Guide] Increase privacy by using nginx as a caching proxy in front of a map tile server
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPC
    pcouy
    2 weeks ago 100%

    According to the Wikipedia article, "Nginx is free and open-source software, released under the terms of the 2-clause BSD license"

    Do you have any source about it going proprietary ?

    5
  • privacy Privacy [Guide] Increase privacy by using nginx as a caching proxy in front of a map tile server
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPC
    pcouy
    2 weeks ago 100%

    It's still available in Debian's default repositories, so it must still be open source (at least the version that's packaged for Debian)

    5
  • privacy Privacy [Guide] Increase privacy by using nginx as a caching proxy in front of a map tile server
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPC
    pcouy
    2 weeks ago 100%

    There have been some changes in a few recent releases related to the concerns I raised :

    • the default tile provider is now hosted by the Immich's team using protomaps (still uses vloudflare though)
    • a new onboarding step providing the option to disable the map feature and clarifying the implications of leaving it enabled has been added
    • the documentation has been updated to clarify how to change the map provider, and includes this guide as a community guide
    4
  • privacyguides
    Privacy Guides pcouy 2 weeks ago 100%
    Increase privacy by using nginx as a caching proxy in front of a map tile server pierre-couy.dev

    publication croisée depuis : https://lemmy.pierre-couy.fr/post/653426 > This is a guide I wrote for Immich's documentation. It features some Immich specific parts, but should be quite easy to adapt to other use cases. > > It is also possible (and not technically hard) to self-host a protomaps release, but this would require 100GB+ of disk space (which I can't spare right now). The main advantages of this guide over hosting a full tile server are : > - it's a single nginx config file to deploy > - it saves you some storage space since you're only hosting tiles you've previously viewed. You can also tweak the maximum cache size to your needs > - it is easy to configure a trade-off between map freshness and privacy by tweaking the cache expiration delay > > If you try to follow it, please send me some feedback on the content and the wording, so I can improve it

    33
    0
    privacy
    Privacy pcouy 2 weeks ago 100%
    [Guide] Increase privacy by using nginx as a caching proxy in front of a map tile server pierre-couy.dev

    This is a guide I wrote for Immich's documentation. It features some Immich specific parts, but should be quite easy to adapt to other use cases. It is also possible (and not technically hard) to self-host a protomaps release, but this would require 100GB+ of disk space (which I can't spare right now). The main advantages of this guide over hosting a full tile server are : - it's a single nginx config file to deploy - it saves you some storage space since you're only hosting tiles you've previously viewed. You can also tweak the maximum cache size to your needs - it is easy to configure a trade-off between map freshness and privacy by tweaking the cache expiration delay If you try to follow it, please send me some feedback on the content and the wording, so I can improve it

    88
    13
    fedigrow Fedigrow [Feature tracking] Multicommunities / multimagazines
    Jump
    linux Linux Do any of you have M$ Word running in present form?
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPC
    pcouy
    3 weeks ago 100%

    In my experience, OnlyOffice has the best compatibility with M$ Office. You should try it if you haven't

    29
  • technology Technology Musk’s new Grok upgrade allows X users to create largely uncensored AI images
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPC
    pcouy
    1 month ago 50%

    It's not that I don't believe you, I was genuinely interested in knowing more. I don't understand what's so "precious" about a random stranger's thought on the internet if it's not backed up with any source.

    Moreover, I did try searching around for this and could not find any result that seemed to answer my question.

    0
  • privacy Privacy Google pulls the plug on uBlock Origin, leaving over 30 million Chrome users susceptible to intrusive ads
    Jump
    technology Technology Musk’s new Grok upgrade allows X users to create largely uncensored AI images
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPC
    pcouy
    1 month ago 87%

    Can you give examples of countries where mainstream media is not owned by billionaires ?

    6
  • linux Linux Soon to be 4 months exclusively on Linux
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPC
    pcouy
    1 month ago 100%

    2 years ago was already amazing for someone who tried to play CS 1.6 and trackmania using wine 18 years ago

    6
  • france France Les salaires progressent toujours plus vite que les prix, mais les augmentations ralentissent
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPC
    pcouy
    1 month ago 100%

    Sur mon instance (dans l'appli et version web) ça n'a pas l'air filtré. Tu es sur que ça ne vient pas de ton instance ?

    1
  • france France Les salaires progressent toujours plus vite que les prix, mais les augmentations ralentissent
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPC
    pcouy
    1 month ago 100%

    Ce n'est pas mon analyse, les blocs de citations que j'ai postés sont directement tirés de l'article (d'où mon autre commentaire qui dit que l'article est intéressant malgré le choix de son titre)

    2
  • france France Les salaires progressent toujours plus vite que les prix, mais les augmentations ralentissent
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPC
    pcouy
    1 month ago 100%

    Merci pour la précision. L'article est pas inintéressant non plus. Je trouve juste dingue cette manière de titrer presque a contre courant du fond de l'article

    2
  • france France Les salaires progressent toujours plus vite que les prix, mais les augmentations ralentissent
    Jump
    france France Les salaires progressent toujours plus vite que les prix, mais les augmentations ralentissent
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPC
    pcouy
    1 month ago 100%

    le SMB a progressé de 0,8 % et même de 1,4 % pour les ouvriers mieux lotis grâce à la revalorisation automatique du SMIC

    Mince alors. Si j'avais su j'aurais fait ouvrier pour être mieux loti que les autres avec mon smic ! C'est à la limite du supportable ce type de tournure...

    Les salaires progressent toujours plus vite que les prix, mais les augmentations ralentissent

    Je trouve ce titre au mieux imprécis, au pire trompeur... Dans tous les cas c'est tres peu clair sur la nature du phénomène qu'on décrit. Personellement, je comprend en lisant ce titre un truc du style "depuis toujours, les salaires augmentent plus vite que l'inflation", alors que d'après le contenu de l'article, ça fait seulement depuis 2 ou 3 trimestres :

    Graphique extrait de l'article

    « Les salaires ont réagi avec removed à l'inflation. En revanche, ils ralentissent presque en même temps que les hausses de prix, ce qui nous a beaucoup surpris », reconnaît Dorian Roucher, chef du département Conjoncture à l'Insee.

    Alors que les ménages n'ont guère pu compter sur leurs salaires pour limiter leurs pertes de pouvoir d'achat face au choc inflationniste de ces deux dernières années, les gains qui se profilent en 2024 risquent de décevoir. Dans ses prévisions, l'Institut de la statistique attend une hausse de 2,9 % du SMB pour l'année en cours après un bond de 4,3 % en 2023. Les salaires réels augmenteraient « modestement » en 2024, de 0,6 % selon l'Insee. « La dynamique des salaires cette année ne compenserait donc pas les pertes cumulées par les salariés en 2022 et 2023 qui ont atteint 2,5 % », souligne Dorian Roucher.

    On est quand même très loin de l'optimisme que suggère le titre de l'article !

    10
  • fediverse Fediverse Lots of dead Lemmy/Kbin domains have CNAME records pointing to the same domain parking company
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPC
    pcouy
    1 month ago 75%

    What I did is use a wildcard subdomain and certificate. This way, only pierre-couy.fr and *.pierre-couy.fr ever show up in the transparency logs. Since I'm using pi-hole with carefully chosen upstream DNS servers, passive DNS replication services do not seem to pick up my subdomains (but even subdomains I share with some relatives who probably use their ISP's default DNS do not show up)

    This obviously only works if all your subdomains go to the same IP. I've achieved something similar to cloudflare tunnels using a combination of nginx and wireguard on a cheap VPS (I want to write a tutorial about this when I find some time). One side benefit of this setup is that I usually don't need to fiddle with my DNS zone to set up a new subdomains : all I need to do is add a new nginx config file with a server section.

    Some scanners will still try to brute-force subdomains. I simply block any IP that hits my VPS with a Host header containing a subdomain I did not configure

    2
  • programming Programming The Destruction of Knights Capital: The most expensive software bug in human history: $49 million/sec, $8.6 billion in 28 minutes.
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPC
    pcouy
    1 month ago 97%

    On this day, exactly 12 years ago (9:30 EDT 1 Aug 2012), was the most expensive software bug ever, in both terms of dollars per second and total lost. The company managed to pare losses through the heroics of Goldman Sachs, and “only” lost $457 million (which led to its dissolution).

    Devs were tasked with porting their HFT bot to an upcoming NYSE API service that was announced to go live less than a 33 days in the future. So they started a death march sprint of 80 hour weeks. The HFT bot was written in C++. Because they didn't want to have to recompile once, the lead architect decided to keep the same exact class and method signature for their PowerPeg::trade() method, which was their automated testing bot that they had been using since 2003. This also meant that they did not have to update the WSDL for the clients that used the bot, either.

    They ripped out the old dead code and put in the new code. Code that actually called real logic, instead of the test code, which was designed, by default, to buy the highest offer given to it.

    They tested it, they wrote unit tests, everything looked good. So they decided to deploy it at 8 AM EST, 90 minutes before market open. QA testers tested it in prod, gave the all clear. Everyone was really happy. They'd done it. They'd made the tight deadline and deployed with just 90 minutes to spare...

    They immediately went to a sprint standup and then sprint retro meeting. Per their office policy, they left their phones (on mute) at their desks.

    During the retro, the markets opened at 9:30 EDT, and the new bot went WILD (!!) It just started buying the highest offer offered for all of the stocks in its buy list. The markets didn’t react very abnormally, becuase it just looked like they were bullish. But they were buying about $5 million shares per second… Within 2 minutes, the warning alarms were going on in their internal banking sector… a huge percentage of their $2.5 billion in operating cash was being depleted, and fast!

    So many people tried to contact the devs, but they were in a remote office in Hoboken due to the high price of realestate in Manhattan. And their phones were off and no one was at their computer.

    The CEO was seen getting people to run through the halls of the building, yelling, and finally the devs noticed. 11 minutes ahd gone by and the bots had bought over $3 billion of stock. The total cash reserves were depleted. The compnay was in SERIOUS trouble...

    None of the devs could find the source of the bug. The CEO, desperate, asked for solutions. "KILL THE SERVERS!!" one of the devs shouted!!

    They got techs @ the datacenter next to the NYSE building to find all 8 servers that ran the bots and DESTROYED them with fireaxes. Just ripping the wires out… And finally, after 37 minutes, the bots stopped trading. Total paper loss: $10.8 billion.

    The SEC + NYSE refused to rewind the trades for all but 6 stocks, the on paper losses were still at $8 billion. No way they coudl pay. Goldman Sachs stepped in and offered to buy all the stocks @ a for-profit price of $457 million, which they agreed to. All in all, the company lost close to $500 million and all of its corporate clients left, and it went out of business a few weeks later.

    Now what was the cause of the bug? Fat fingering human error during release.

    The sysop had declined to implement CI/CD, which was still in its infancy, probably because that was his full-time job and he was making like $300,000 in 2012 dollars ($500k today). There were 8 servers that housed the bot and a few clients on the same servers.

    The sysop had correctly typed out and pasted the correct rsync commands to get the new C++ binary onto the servers, except for server 5 of 8. In the 5th instance, he had an extra 5 in the server name. The rsync failed, but because he pasted all of the commands at once, he didn't notice...

    Because the code used the exact same method signature for the trade() method, server 5 was happy to buy up the most expensive offer it was given, because it was running the Sad Path test trading software. If they had changed the method signature, it wouldn't have run and the bug wouldn't have happened.

    At 9:43 EDT, the devs decided collectively to do a "rollback" to the previous release. This was the worst possible mistake, because they added in the Power Peg dead code to the other 7 servers, causing the problems to grow exponentially. Although, it took about 3 minutes for anyone in Finance to actually inform them. At that point, more than $50 million dollars per second was being lost due to the bug.

    It wasn't until 9:58 EDT that the servers had all been destroyed that the trading stopped.

    Here is a description of the aftermath:

    It was not until 9:58 a.m. that Knight engineers identified the root cause and shut down SMARS on all the servers; however, the damage had been done. Knight had executed over 4 million trades in 154 stocks totaling more than 397 million shares; it assumed a net long position in 80 stocks of approximately $3.5 billion as well as a net short position in 74 stocks of approximately $3.15 billion.

    28 minutes. $8.65 billion inappropriately purchased. ~1680 seconds. $5.18 million/second.

    But after the rollback at 9:43, about $4.4 billion was lost. ~900 seconds. ~$49 million/second.

    That was the story of how a bad software decision and fat-fingered manual production release destroyed the most profitable stock trading firm of the time, and was the most expensive software bug in human history.

    87
  • fediverse Fediverse Lots of dead Lemmy/Kbin domains have CNAME records pointing to the same domain parking company
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPC
    pcouy
    2 months ago 100%

    Thanks for the details ! Still curious to know how a new instance, with an old domain and fresh keys, would be handled by other instances.

    2
  • selfhosted Selfhosted Follow-up: Temporary fix for Immich's shady third-party API
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPC
    pcouy
    2 months ago 100%

    I'm pretty sure they are actually hosting it. The tech is quite different (cofractal uses urls ending with {z}/{x}/{y}, while their tile sever uses this stuff that works quite differently)

    2
  • fediverse Fediverse Lots of dead Lemmy/Kbin domains have CNAME records pointing to the same domain parking company
    Jump
    fediverse Fediverse Lots of dead Lemmy/Kbin domains have CNAME records pointing to the same domain parking company
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPC
    pcouy
    2 months ago 100%

    Yeah, this probably has to do with the cache. You can try opening dev tools (F12 in most browsers), go to the network tab, and browse to pathfinder.social. You should see all requests going out, including "fake requests" to content that you already have locally cached

    2
  • selfhosted Selfhosted Follow-up: Temporary fix for Immich's shady third-party API
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPC
    pcouy
    2 months ago 100%

    They told me about hosting their own tile server earlier today. I'm really impressed by how fast they moved !

    A pull request for a privacy page during the onboarding is in the works, and I've been working with them to update the settings page and documentation (with the goal of providing an easy way to switch map providers). They are also working on a privacy policy, and want to ship all of this in a few weeks as part of a single release.

    Once again, I'm really impressed with how well they're handling this

    6
  • fediverse Fediverse Lots of dead Lemmy/Kbin domains have CNAME records pointing to the same domain parking company
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPC
    pcouy
    2 months ago 100%

    That's really really weird, I cannot resolve the domain to an IP, even after trying a bunch of different DNS servers. If you're on linux, can you run nslookup pathfinder.social and paste the output here ?

    2
  • fediverse Fediverse Lots of dead Lemmy/Kbin domains have CNAME records pointing to the same domain parking company
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPC
    pcouy
    2 months ago 100%

    The fact that it has not been bought as soon as the domain expired makes me believe this instance went down before the trend started

    2
  • fediverse Fediverse Lots of dead Lemmy/Kbin domains have CNAME records pointing to the same domain parking company
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPC
    pcouy
    2 months ago 100%

    These services usually use either or both of passive DNS replication (running public recursive DNS resolvers and logging lookup that returns a record) and certificate transparency logs (where certificate authorities publish the domain names for which they issue certificates). A lot of my subdomains are missing from these services

    1
  • technology Technology Reddit blocking all major search engines, except Google
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPC
    pcouy
    2 months ago 100%

    With all the botting going on on Reddit, this whole Google AI deal makes me think of the recent paper that demonstrates that, as common sens would suggest, deep learning models collapse when successive generations are trained on the previous generations' output

    12
  • fediverse Fediverse Lots of dead Lemmy/Kbin domains have CNAME records pointing to the same domain parking company
    Jump
    fedigrow Fedigrow Has anyone else noticed Google has barely indexed Lemmy
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPC
    pcouy
    2 months ago 100%

    This is an old post, but I've only recently (I'd say a few months ago) started to see Google's indexing bots pop-up in my instance's server logs, so this may be about to change

    3
  • fediverse Fediverse Lots of dead Lemmy/Kbin domains have CNAME records pointing to the same domain parking company
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPC
    pcouy
    2 months ago 100%

    never stopped POSTing, even though I configured nginx to always respond 403 to anything from them for about a year now.

    Lol, there are definitely some stubborn user agents out there. I've been serving 418 to a bunch of SEO crawlers - with fail2ban configured to drop all packets from their IPs/CIDR ranges after some attemps - for a few months now. They keep coming at the same rate as soon as they get unbanned. I guess they keep sending requests into the void for the whole ban duration.

    Using 418 for undesirable requests instead of a more common status code (such as 403) lets me easily filter these blocks in fail2ban, which can help weed out a lot of noise in server logs.

    12
  • fediverse Fediverse Lots of dead Lemmy/Kbin domains have CNAME records pointing to the same domain parking company
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPC
    pcouy
    2 months ago 100%

    Your sensitive data and logins are tied to email addresses, which are tied to domains. Lose your domain, someone can access everything.

    I recently stumbled upon an article showing how bad this can be when the expired domains were used for important/serious stuff

    15
  • fediverse Fediverse Lots of dead Lemmy/Kbin domains have CNAME records pointing to the same domain parking company
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPC
    pcouy
    2 months ago 100%

    I think they do get marked as dead after the Bodis subdomain does not act as a Lemmy instance. But I was wondering if a large number of instances "waking up from the dead" and acting maliciously could cause some trouble. Or would such "undead" instances pose no more threat to the fediverse than the same number of newly created malicious instances ? I'm mainly thinking about stuff like being in a privileged position to DoS most instances at once, or impersonation of accounts that used to actually exist on these "undead" instances

    26
  • fediverse
    Fediverse pcouy 2 months ago 97%
    Lots of dead Lemmy/Kbin domains have CNAME records pointing to the same domain parking company

    publication croisée depuis : https://lemmy.pierre-couy.fr/post/584644 > While monitoring my Pi-Hole logs today, I noticed a bunch of queries for `XXXXXX.bodis.com`, where XXXXXX are numbers. I saw a few variations for the numbers, each one being queried several times. > > Digging further, I found out these queries were caused by CNAME records on domains that look like they used to point to Lemmy/Kbin instances. > > From what I understand, domain owners can register a CNAME record to `XXXXXX.bodis.com` and earn some money from the traffic it receives. I guess that each number variation is a domain owner ID in Bodis' database. I saw between 5 to 10 different number variations, each one being pointed to by a bunch of old Lemmy domains. > > This probably means that among actors who snatch expired domains, several of them have taken a specific interest with expired domains of old Lemmy instances. Another hypothesis is that there were a lot of domains registered for hosting Lemmy during the Reddit API debacle (about 1 year ago), which started expiring recently. > > Are there any other instance admins who noticed the same thing ? Is any of my two hypothesis more plausible than the other ? Should we worry about this trend ? > > Anyway, I hope this at least serves as a reminder to not let our domains expire ;)

    78
    25
    fediverse
    Fediverse pcouy 2 months ago 98%
    Lots of dead Lemmy/Kbin domains have CNAME records pointing to the same domain parking company

    While monitoring my Pi-Hole logs today, I noticed a bunch of queries for `XXXXXX.bodis.com`, where XXXXXX are numbers. I saw a few variations for the numbers, each one being queried several times. Digging further, I found out these queries were caused by CNAME records on domains that look like they used to point to Lemmy/Kbin instances. From what I understand, domain owners can register a CNAME record to `XXXXXX.bodis.com` and earn some money from the traffic it receives. I guess that each number variation is a domain owner ID in Bodis' database. I saw between 5 to 10 different number variations, each one being pointed to by a bunch of old Lemmy domains. This probably means that among actors who snatch expired domains, several of them have taken a specific interest with expired domains of old Lemmy instances. Another hypothesis is that there were a lot of domains registered for hosting Lemmy during the Reddit API debacle (about 1 year ago), which started expiring recently. Are there any other instance admins who noticed the same thing ? Is any of my two hypothesis more plausible than the other ? Should we worry about this trend ? Anyway, I hope this at least serves as a reminder to not let our domains expire ;)

    169
    7
    selfhosted Selfhosted [HELP NEEDED] Unable to figure out directory permissions
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPC
    pcouy
    2 months ago 100%

    Is named actually running as the bind user inside the container ? Maybe a USER bind line below the RUN lines will help.

    1
  • selfhosted Selfhosted Why do so many people use NGINX?
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPC
    pcouy
    2 months ago 100%

    I'll probably look into newer fancier options such as Caddy one day, but as far as I remember Nginx has never failed me : it's stable, battle tested, and extremely mature. I can't remember a single time when I've been affected by a breaking change (I could not even find one by searching changelogs) and the feature set makes it very versatile. Newer alternatives seem really interesting, but it seems to me they have quite frequent breaking changes and are not as feature rich.

    That being said, I'd love to see side-by-side comparison of Nginx and Caddy configs (if anyone wants to translate to Caddy the Nginx caching proxy for OSM I shared earlier this week, that would make a good and useful example), as well as examples of features missing from Nginx. This may give me enough motivation to actually try Caddy :)

    (edit : ad->and)

    4
  • degoogle DeGoogle Yourself Prevent the map in Immich from sending request to a somewhat shady third-party
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPC
    pcouy
    2 months ago 100%

    I started working on a PR right after cross posting this.

    Since I believe this is mainly a documentation issue, I'm trying to gather some feedback on this guide in parallel of submitting the pull request in order to have it merged into the official documentation

    3
  • selfhosted Selfhosted Follow-up: Temporary fix for Immich's shady third-party API
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPC
    pcouy
    2 months ago 100%

    I don't use nginx-proxy-manager, but if you want to share what you tried, I will try to help you figure what's not working

    2
  • degoogle
    DeGoogle Yourself pcouy 2 months ago 92%
    Prevent the map in Immich from sending request to a somewhat shady third-party

    Cross-posted from : https://lemmy.pierre-couy.fr/post/581642 **Context :** [Immich default map tile provider (which gets sent a bunch of PII every time you use the map feature) is a company that I see no reason to trust](https://lemmy.pierre-couy.fr/post/579857). This is a follow-up to this post, with the ~~permanent~~ temporary fix I came up with. I will also summarize the general opinion from the comments, as well as some interesting piece of knowledge that commenters shared. ## Hacky fix This will use [Nginx proxy module](https://nginx.org/en/docs/http/ngx_http_proxy_module.html) to build a caching proxy in front of Open Street Map's tileserver and to serve a custom `style.json` for the maps. This works well for me, since I already proxy all my services behind a single Nginx instance. It is probably possible to achieve similar results with other reverse proxies, but this would obviously need to be adapted. #### Caching proxy Inside Nginx's `http` config block (usually in `/etc/nginx/nginx.conf`), create a cache zone (a directory that will hold cached responses from OSM) : ```nginx http { # You should not need to edit existing lines in the http block, only add the line below proxy_cache_path /var/cache/nginx/osm levels=1:2 keys_zone=osm:100m max_size=5g inactive=180d; } ``` You may need to manually create the `/var/cache/nginx/osm` directory and set its owner to Nginx's user (typically `www-data` on Debian based distros). Customize the `max_size` parameter to change the maximum amount of cached data you want to store on your server. The `inactive` parameter will cause Nginx to discard cached data that's not been accessed in this duration (180d ~ 6months). Then, inside the `server` block that serves your Immich instance, create a new `location` block : ```nginx server { listen 443 ssl; server_name immich.your-domain.tld; # You should not need to change your existing config, only add the location block below location /map_proxy/ { proxy_pass https://tile.openstreetmap.org/; proxy_cache osm; proxy_cache_valid 180d; proxy_ignore_headers Cache-Control Expires; proxy_ssl_server_name on; proxy_ssl_name tile.openstreetmap.org; proxy_set_header Host tile.openstreetmap.org; proxy_set_header User-Agent "Nginx Caching Tile Proxy for self-hosters"; proxy_set_header Cookie ""; proxy_set_header Referer ""; } } ``` Reload Nginx (`sudo systemctl reload nginx`). Confirm this works by visiting `https://immich.your-domain.tld/map_proxy/0/0/0.png`, which should now return a world map PNG (the one from https://tile.openstreetmap.org/0/0/0.png ) This config ignores cache control headers from OSM and sets its own cache validity duration (`proxy_cache_valid` parameter). After the specified duration, the proxy will re-fetch the tiles. 6 months seem reasonable to me for the use case, and it can probably be set to a few years without it causing issues. Besides being lighter on OSM's servers, the caching proxy will improve privacy by only requesting tiles from upstream when loaded for the first time. This config also strips cookies and referrer before forwarding the queries to OSM, as well as set a user agent for the proxy following [OSM foundation's guidelines](https://operations.osmfoundation.org/policies/tiles/) (according to these guidelines, you should add a contact information to this user agent) This can probably be made to work on a different domain than the one serving your Immich instance, but this probably requires to add the appropriate headers for CORS. #### Custom `style.json` I came up with the following mapstyle : ```json { "version": 8, "name": "Immich Map", "sources": { "immich-map": { "type": "raster", "tileSize": 256, "tiles": [ "https://immich.your-domain.tld/map_proxy/{z}/{x}/{y}.png" ] } }, "sprite": "https://maputnik.github.io/osm-liberty/sprites/osm-liberty", "glyphs": "https://fonts.openmaptiles.org/{fontstack}/{range}.pbf", "layers": [ { "id": "raster-tiles", "type": "raster", "source": "immich-map", "minzoom": 0, "maxzoom": 22 } ], "id": "immich-map-dark" } ``` Replace `immich.your-domain.tld` with your actual Immich domain, and remember the absolute path you save this at. #### One last update to nginx's config Since Immich currently does not provide a way to manually edit `style.json`, we need to serve it from http(s). Add one more `location` block below the previous one : ```nginx location /map_style.json { alias /srv/immich/mapstyle.json; } ``` Replace the `alias` parameter with the location where you saved the json mapstyle. After reloading nginx, your json style will be available at `https://immich.your-domain.tld/map_style.json` #### Configure Immich to use this For this last part, follow [steps 8, 9, 10 from this guide](https://immich.app/docs/guides/custom-map-styles) (use the link to `map_style.json` for both light and dark themes). After clearing the browser or app's cache, the map should now be loaded from your caching proxy. You can confirm this by tailing Nginx's logs while you zoom and move around the map in Immich ## Summary of comments from previous post #### Self-hosting a tile server is not realistic in most cases People who have previously worked with maps seem to confirm that there are no tile server solution lightweight enough to be self hosted by hobbyists. There is maybe some hope with generating tiles on demand, but someone with deep knowledge of the file formats involved in the process should confirm this. Some interesting links were shared, which seem to confirm this is not realistically self-hostable with the available software : - [OSM Foundation's policy on using their tile server](https://operations.osmfoundation.org/policies/tiles/) - [Switch2OSM](https://switch2osm.org/serving-tiles/) - https://wiki.openstreetmap.org/wiki/Sequentially-generate-planet-mbtiles #### General sentiment about this issue In all this part, I want to emphasize that while there seems to be a consensus, this is only based on the few comments from the previous post and may be biased by the fact that we're discussing it on a non-mainstream platform. **If you disagree with anything below, please comment this post and explain your point of view.** - Nobody declared that they had noticed the requests to a third-party server before - A non-negligible fraction of Immich users are interested in the privacy benefits over other solutions such as Google photos. These users do not like their self-hosted services to send requests to third-party servers without warning them first - The fix should consist of the following : - Clearly document the implications of enabling the map, and any feature that sends requests to third parties - Disable by default features that send requests to third parties (especially if it contains any form of geolocated data) - Provide a way to easily change the tile provider. A `select` menu with a few pre-configured `style.json` would be nice, along with a way to manually edit `style.json` (or at least some of its fields) directly from the Immich config page

    24
    2
    selfhosted Selfhosted Immich relies on a third-party service that seems shady to me
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearPC
    pcouy
    2 months ago 100%

    It's the clients (web/android app, probably iOS too) that are making these requests.

    To the best of my knowledge, the Immich server inside the container is not making requests to the outside. It is merely sending a style.json to the client displaying a map, which then fetches tiles from the Cofractal URL inside this JSON.

    1
  • selfhosted
    Selfhosted pcouy 2 months ago 94%
    Follow-up: Temporary fix for Immich's shady third-party API

    **Context :** [Immich default map tile provider (which gets sent a bunch of PII every time you use the map feature) is a company that I see no reason to trust](https://lemmy.pierre-couy.fr/post/579857). This is a follow-up to this post, with the ~~permanent~~ temporary fix I came up with. I will also summarize the general opinion from the comments, as well as some interesting piece of knowledge that commenters shared. ## Hacky fix This will use [Nginx proxy module](https://nginx.org/en/docs/http/ngx_http_proxy_module.html) to build a caching proxy in front of Open Street Map's tileserver and to serve a custom `style.json` for the maps. This works well for me, since I already proxy all my services behind a single Nginx instance. It is probably possible to achieve similar results with other reverse proxies, but this would obviously need to be adapted. #### Caching proxy Inside Nginx's `http` config block (usually in `/etc/nginx/nginx.conf`), create a cache zone (a directory that will hold cached responses from OSM) : ```nginx http { # You should not need to edit existing lines in the http block, only add the line below proxy_cache_path /var/cache/nginx/osm levels=1:2 keys_zone=osm:100m max_size=5g inactive=180d; } ``` You may need to manually create the `/var/cache/nginx/osm` directory and set its owner to Nginx's user (typically `www-data` on Debian based distros). Customize the `max_size` parameter to change the maximum amount of cached data you want to store on your server. The `inactive` parameter will cause Nginx to discard cached data that's not been accessed in this duration (180d ~ 6months). Then, inside the `server` block that serves your Immich instance, create a new `location` block : ```nginx server { listen 443 ssl; server_name immich.your-domain.tld; # You should not need to change your existing config, only add the location block below location /map_proxy/ { proxy_pass https://tile.openstreetmap.org/; proxy_cache osm; proxy_cache_valid 180d; proxy_ignore_headers Cache-Control Expires; proxy_ssl_server_name on; proxy_ssl_name tile.openstreetmap.org; proxy_set_header Host tile.openstreetmap.org; proxy_set_header User-Agent "Nginx Caching Tile Proxy for self-hosters"; proxy_set_header Cookie ""; proxy_set_header Referer ""; } } ``` Reload Nginx (`sudo systemctl reload nginx`). Confirm this works by visiting `https://immich.your-domain.tld/map_proxy/0/0/0.png`, which should now return a world map PNG (the one from https://tile.openstreetmap.org/0/0/0.png ) This config ignores cache control headers from OSM and sets its own cache validity duration (`proxy_cache_valid` parameter). After the specified duration, the proxy will re-fetch the tiles. 6 months seem reasonable to me for the use case, and it can probably be set to a few years without it causing issues. Besides being lighter on OSM's servers, the caching proxy will improve privacy by only requesting tiles from upstream when loaded for the first time. This config also strips cookies and referrer before forwarding the queries to OSM, as well as set a user agent for the proxy following [OSM foundation's guidelines](https://operations.osmfoundation.org/policies/tiles/) (according to these guidelines, you should add a contact information to this user agent) This can probably be made to work on a different domain than the one serving your Immich instance, but this probably requires to add the appropriate headers for CORS. #### Custom `style.json` I came up with the following mapstyle : ```json { "version": 8, "name": "Immich Map", "sources": { "immich-map": { "type": "raster", "tileSize": 256, "tiles": [ "https://immich.your-domain.tld/map_proxy/{z}/{x}/{y}.png" ] } }, "sprite": "https://maputnik.github.io/osm-liberty/sprites/osm-liberty", "glyphs": "https://fonts.openmaptiles.org/{fontstack}/{range}.pbf", "layers": [ { "id": "raster-tiles", "type": "raster", "source": "immich-map", "minzoom": 0, "maxzoom": 22 } ], "id": "immich-map-dark" } ``` Replace `immich.your-domain.tld` with your actual Immich domain, and remember the absolute path you save this at. #### One last update to nginx's config Since Immich currently does not provide a way to manually edit `style.json`, we need to serve it from http(s). Add one more `location` block below the previous one : ```nginx location /map_style.json { alias /srv/immich/mapstyle.json; } ``` Replace the `alias` parameter with the location where you saved the json mapstyle. After reloading nginx, your json style will be available at `https://immich.your-domain.tld/map_style.json` #### Configure Immich to use this For this last part, follow [steps 8, 9, 10 from this guide](https://immich.app/docs/guides/custom-map-styles) (use the link to `map_style.json` for both light and dark themes). After clearing the browser or app's cache, the map should now be loaded from your caching proxy. You can confirm this by tailing Nginx's logs while you zoom and move around the map in Immich ## Summary of comments from previous post #### Self-hosting a tile server is not realistic in most cases People who have previously worked with maps seem to confirm that there are no tile server solution lightweight enough to be self hosted by hobbyists. There is maybe some hope with generating tiles on demand, but someone with deep knowledge of the file formats involved in the process should confirm this. Some interesting links were shared, which seem to confirm this is not realistically self-hostable with the available software : - [OSM Foundation's policy on using their tile server](https://operations.osmfoundation.org/policies/tiles/) - [Switch2OSM](https://switch2osm.org/serving-tiles/) - https://wiki.openstreetmap.org/wiki/Sequentially-generate-planet-mbtiles #### General sentiment about this issue In all this part, I want to emphasize that while there seems to be a consensus, this is only based on the few comments from the previous post and may be biased by the fact that we're discussing it on a non-mainstream platform. **If you disagree with anything below, please comment this post and explain your point of view.** - Nobody declared that they had noticed the requests to a third-party server before - A non-negligible fraction of Immich users are interested in the privacy benefits over other solutions such as Google photos. These users do not like their self-hosted services to send requests to third-party servers without warning them first - The fix should consist of the following : - Clearly document the implications of enabling the map, and any feature that sends requests to third parties - Disable by default features that send requests to third parties (especially if it contains any form of geolocated data) - Provide a way to easily change the tile provider. A `select` menu with a few pre-configured `style.json` would be nice, along with a way to manually edit `style.json` (or at least some of its fields) directly from the Immich config page

    125
    26
    selfhosted
    Selfhosted pcouy 2 months ago 98%
    Immich relies on a third-party service that seems shady to me

    **Update :** I made [a follow-up post](https://lemmy.pierre-couy.fr/post/581642) containing a Nginx-based solution to cache map tiles from OSM and limit the amount of PII you send While monitoring the logs in [Rethink DNS](https://rethinkdns.com/) (awesome app BTW) today, I noticed the Immich app making requests to `api-l.cofractal.com`. After reaching out on Immich's discord, the devs explained to me that it is used as a tile provider for the map feature. I can confirm it is not realistic to self-host a tile provider without heavily tuning down the level of details on the map (which would still require a lot of disk space and CPU time). I understand the need for a third-party service to provide the map tiles, but I'm concerned by this one. Visiting cofractal.com only tells us that they're selling APIs. I did not find any details about the company, not even the country they're registered in. The website is also missing informations about what they are logging or not. Everything else seems gated behind a login page, but they "are not currently accepting new customers". The whois for the domain says they're in California. Digging a bit more, I find [AS26073](https://ipinfo.io/AS26073#block-whois) which apparently is the same company. This bothers me, because Cofractal gets sent every location you viewed (and the zoom level) on Immich's map, along with your client's IP address and a "Referrer" header pointing to your Immich instance. This sounds like a lot of PII to me. It's also behind cloudflare which gets to see the same stuff. When asked about it, one dev (thanks to them for almost instantly replying to every concern/question I threw at them) explained that they personally know the people behind Cofractal. According to this Immich dev, Cofractal provides free access to its paid service to Immich's user base as a way to support the project, with the side benefit of load testing their platform. This explanations seems plausible and reasonable to me. However, I do not personally know the people behind Cofractal, and by default, I do not trust for-profit companies to act in an altruistic way. Here's a summary of everything that makes me uneasy about this company : - it does not say anything about the kind of data they are logging or not - it requires digging through whois records to find the most basic info about the company - it freely provides access to its normally paid service (for the whole Immich user base), but it does not communicate about it (or it is really hard to find) - it does not communicate about anything : searching for its name only returns its home page and websites with informations on Autonomous Systems - it is "not currently accepting new [paying] customers" while providing the service for free to a quite large user base ([Immich v1.109.2 got 170k downloads in 5 days, v1.108.0 got 438k downloads in 13 days](https://github.com/immich-app/immich/pkgs/container/immich-server/versions?filters%5Bversion_type%5D=tagged) ) - It is not mentioned anywhere in the whole immich.app website (searching for `site:immich.app "cofractal"` gave me no result). Not even a "Thank You" or "Sponsor" note on the homepage for the free API - (it is behind cloudflare) The dev I talked to encouraged me to create a feature request, and seemed favorable to adding a switch for disabling maps client side. It is already possible to disable it server-wide, and the "URL to a style.json map theme" option seems to provide a way to customize the tile provider. Which leads to this post : I'm trying to collect feedback on this before creating the feature request. - It should be made prominently clear to server admins that leaving maps enabled causes clients to send requests to a third party-server and give details about what is sent (viewed locations, zoom level, IP address, Immich instance URL). The [Post Install Steps in the docs](https://immich.app/docs/install/post-install) and a paragraph above the switch on the config page seem like good places to me. Are there other/more appropriate place for such a warning ? - The "URL to a style.json map theme" option should probably be renamed to make it clearer that it allows changing tile providers. Or better yet, it could be reworked to make it easier to choose which third-party you decide to trust - What do you think about the idea of providing instance admins with a list of choices for tile providers ? Maybe with a short pros/cons list in the docs for each provider. I'd be fine with using a more reputable provider with the extra step of configuring my own API key (which would probably require proxying requests to the tile provider to not share the API key with all clients) - Should the Immich server proxy requests to the tile provider in any case ? Since the tile provider has access to the Referrer and Origin headers (which is probably required for CORS), they are currently able to link user IP addresses with Immich instances. Proxying requests with the Immich server should prevent that. - I would go as far as making maps disabled by default for new installs. I understand that "disabling by default would be a significant downgrade for a majority of users", but I feel like there's a strong overlap between the self-hosting and privacy communities. So we should at least have some debate about it I've also been told that I'm the first one to raise concerns about this, which leads to one more question : Did nobody complain because nobody noticed ? Or are my concerns unjustified ?

    269
    47
    france
    France pcouy 3 months ago 95%
    Enthoven vs. ChatGPT : QUI EST L'IMPOSTEUR ? youtube.com

    Pour référence : https://etudiant.lefigaro.fr/article/bac-philo-2023-qui-de-raphael-enthoven-ou-chatgpt-redige-la-meilleure-copie_a694c010-0a09-11ee-bd34-f2c2eadd1748/ (désolé pour le sponsor de la vidéo qui apparaît dans l'aperçu généré par lemmy)

    22
    12
    docker
    Docker pcouy 7 months ago 100%
    Looking for feedback/review on my project starter template (DRF + Nuxt + Docker compose) github.com

    cross-posted from : https://lemmy.pierre-couy.fr/post/350920 > I am trying to come-up with a reusable template to quickly start new projects using my prefered tools and frameworks, and I'm happy with what I got. However, using Docker is quite new for me and I've probably done some weird or unconventional stuff in my `docker-compose.yml` or my `Dockerfile`s. I'd love to learn from people with more experience with Docker, so feel free to tell me everything that is wrong with my setup. > > I'm more confident about the stuff I did with Python/Django and Nuxt, but all criticism is welcome. This also applies to the readme : I'd like to provide detailed instructions about working with this project template, so please report anything that is unclear or missing. > > Thank you to anyone who takes the time to check it out and help me make this useful to as many people as possible.

    5
    0
    django
    Django pcouy 7 months ago 100%
    Looking for feedback/review on my project starter template (DRF + Nuxt + Docker compose) github.com

    publication croisée depuis : https://lemmy.pierre-couy.fr/post/350920 > I am trying to come-up with a reusable template to quickly start new projects using my prefered tools and frameworks, and I'm happy with what I got. However, using Docker is quite new for me and I've probably done some weird or unconventional stuff in my `docker-compose.yml` or my `Dockerfile`s. I'd love to learn from people with more experience with Docker, so feel free to tell me everything that is wrong with my setup. > > I'm more confident about the stuff I did with Python/Django and Nuxt, but all criticism is welcome. This also applies to the readme : I'd like to provide detailed instructions about working with this project template, so please report anything that is unclear or missing. > > Thank you to anyone who takes the time to check it out and help me make this useful to as many people as possible.

    4
    0
    programming
    Programming pcouy 7 months ago 92%
    Looking for feedback/review on my project starter template (DRF + Nuxt + Docker compose) github.com

    I am trying to come-up with a reusable template to quickly start new projects using my prefered tools and frameworks, and I'm happy with what I got. However, using Docker is quite new for me and I've probably done some weird or unconventional stuff in my `docker-compose.yml` or my `Dockerfile`s. I'd love to learn from people with more experience with Docker, so feel free to tell me everything that is wrong with my setup. I'm more confident about the stuff I did with Python/Django and Nuxt, but all criticism is welcome. This also applies to the readme : I'd like to provide detailed instructions about working with this project template, so please report anything that is unclear or missing. Thank you to anyone who takes the time to check it out and help me make this useful to as many people as possible.

    12
    4
    france
    France pcouy 1 year ago 97%
    France’s browser-based website blocking proposal will set a disastrous precedent for the open internet – Mozilla https://blog.mozilla.org/netpolicy/2023/06/26/france-browser-website-blocking/

    In a well-intentioned yet dangerous move to fight online fraud, France is on the verge of forcing browsers to create a dystopian technical capability. Article 6 (para II and III) of the SREN Bill would force browser providers to create the means to mandatorily block websites present on a government provided list. Such a move will overturn decades of established content moderation norms and provide a playbook for authoritarian governments that will easily negate the existence of censorship circumvention tools.

    33
    2
    cybersecurity
    Cybersecurity pcouy 1 year ago 100%
    Stealing passwords from infosec Mastodon - without bypassing CSP portswigger.net

    Write-up from Nov. 2022, but I figured this would be interesting to people on the fediverse

    26
    1
    programming
    Programming pcouy 1 year ago 94%
    Horrible edge cases to consider when dealing with music https://dustri.org/b/horrible-edge-cases-to-consider-when-dealing-with-music.html

    List of artist/album/song names that make dealing with music metadata harder than it should be

    15
    3