[-] [email protected] 24 points 1 month ago

Wait, is he serious? I thought for sure this sign was satire...

[-] [email protected] 5 points 5 months ago

Good for you, you have a short list of requirements out of a chat service and discord perfectly fills your niche. But different people have different requirements for chat, and they don't align. And network effects force people who have differing requirements to use the service with the most users which sucks.

For instance here are things that I require from any chat service that I use that discord completely falls flat at:

  • Ability to run it on my linux machine without using an electron client (npm is a huge mess of supply chain attacks and I refuse to run any software that is likely to contain dependencies from it)
  • Ability to run it on my AOSP phone which does not have any google play services installed
  • Ability to write software to back up messages without fear of a company changing their API and breaking my backup system
[-] [email protected] 6 points 5 months ago* (last edited 5 months ago)

I hate that Google is exerting even more control on the internet with their TLD, but I don't really think this attack is made all that much worse with .zip TLD. I can already bury a .com in a long URL and end it in .zip just fine like so:

https://github.com∕foo∕bar∕[email protected]/foo/bar/baz.zip

Or even use a subdomain to remove the @:

https://github.com∕foo∕bar∕baz.example.com/foo/bar/baz.zip

The truth is most people don't look much at URLs outside of a domain to verify its authenticity, at which point the .zip TLD does not do much more harm than existing domains do.

For mitigation, Firefox already doesn't display the username portion of the URL on hover of a link and URL-encodes it if copy-pasted into the url bar. It also displays the punycode representation when hovering or navigating to the second example.

[-] [email protected] 5 points 8 months ago

While I agree that first party systems suck, as someone with neither an iOS or Android device I personally prefer something work rather than a screen that says "connect iOS/Android".

[-] [email protected] 53 points 9 months ago* (last edited 9 months ago)

I would have more sympathy for Youtube if 1. it wasn't the de-facto standard where essentially all video media gets uploaded to (which Youtube itself has done everything in its power to make happen) and 2. the company that owned it didn't also own the most popular phone OS, most popular search engine, most popular email provider, most popular ad network, most popular maps, most popular online office suite, most popular airline booking, 2nd most popular cloud hosting... The list goes on

Until a federated solution like peertube gains more traction I have no problem paying content creators directly via patreon, and do everything in my power to not pay Google a dime. Trust me, they can afford it just fine.

[-] [email protected] 3 points 1 year ago

I just tried subscribing to [email protected], but it's empty despite the peer tube channel having many videos. Any idea what's going on?

[-] [email protected] 8 points 1 year ago

The problem isn't the version control itself. Obviously git continues to function and I can commit things offline in a plane. What I can't do is create/review PRs or read/open issues. That's easy to brush off, but the most egregious thing is the fact that this used to be federated over email!

All we needed was more user-friendly tooling to make it easier for new college grads to start contributing to FLOSS, but instead of better email based tooling we got the centralized trash that github is today.

[-] [email protected] 6 points 1 year ago* (last edited 1 year ago)

There's no way of knowing, which is the whole problem with their model and why a lot of us self host things in the first place. Even if they super duper promise not to use the data, they could be lying. And if they are actually true to their word today, that could change tomorrow.

[-] [email protected] 4 points 1 year ago

I seem to be in the minority here but I personally prefer using $ and # to denote root. I like this because not everyone uses sudo and might not even have it installed.

That being said, if you already have other commands that are using sudo -u ... to run commands as a different user then it might be best to just be consistent and prefix everything with it, but if there is only a few of those maybe a # cp foo bar && chown www-data bar is an alternative.

[-] [email protected] 7 points 1 year ago* (last edited 1 year ago)

Hah, too late. You're already being linguistically fingerprinted by your grammar and word choice. Only option now is to not comment on public forums anymore I guess. 😩

4
submitted 1 year ago by [email protected] to c/[email protected]
[-] [email protected] 4 points 1 year ago

I've felt gross for years, ever since they switched from old reddit to the new trash design. I used old.reddit.com for a bit, but stopped once I saw how much tracking garbage ublock was blocking, even on old reddit.

Before lemmy I was using teddit as a privacy focused frontend for reddit which worked great. But now the API changes will kill teddit so no more reddit for me!

[-] [email protected] 4 points 1 year ago

Personally I think Spotify is worth $10 a month.

While I agree that there aren't any great self-hosted solutions, more diversity in the music space is important. I refuse to use Spotify, and for me it's not about price. In fact, if they charged more and actually paid their artists more I would probably hate it less. But overall I mostly refuse to use it for other reasons:

It couples the company that delivers your music with the app you must use to stream your music. In my opinion these should be separate - perhaps an open protocol that streaming companies can all use and open source clients that can connect to one or many of them?

Spotify made it clear that they don't care about Linux users when they killed their Linux client. Yes I know about librespot, it's only a trivial decision away from Spotify killing it. And unlike Reddit's API changes, the backlash would be minimal since most people use the official one.

It strongly relies on network effects to get everyone on the platform and keep them there. As mentioned above, this hurts independent artists because they are forced to publish their music on a platform that doesn't pay well just because everyone is on that platform. But there are more than just network effects between artists and consumers: Spotify relies on social-network style antipatterns to keep users in their ecosystem. I've been told by my friends that I am "difficult" because I don't use Spotify and they want to share something with me. That is Spotify's manipulation

Their official client is electron, I don't want to have to run a whole browser stack to listen to music. Not to mention the fact that npm is plagued with supply chain problems and unless the Spotify devs manually audit every dependency of every dependency of every dependency any time they add or update one (doubt it), users are one attack away from being compromised.

When I did briefly use Spotify many years ago I took the time to build up some playlists of music and randomly songs would disappear from the playlists when Spotify lost rights to stream it.


I personally use Bandcamp for recommendations/discovery, and then purchase music I like to listen to and self-host it with MPD. It works great.

I'm not saying this is for everyone, obviously streaming has its merits. But in my experience most people self host not because something costs money, but because they have zero control of the actual experience, and they want to avoid the vendor lock-in issue.

view more: next ›

418teapot

joined 1 year ago