Reposting, or rather, cross-posting, is fine and it’s the correct way to do things in the Fediverse. A post can be relevant to different communities because each one has their own cultural take on a given subject.

What we need is clients that present a better interface to view (and resume) that relationship, but that’s not on you, let alone on the people who create content for the Fediverse. We want there to be more of it (and more varied), not less.

Shame it’s handled by yet another tiny dicktator.

Decentralization works perfectly for forums. That’s literally how the forums of the '90s worked: “Tom’s Hardware” was never the only forum for Windows issues, “Codeguru” was never the only stop fo weird Visual Basic 5 error messages, etc.

Federation is orthogonal, and can cover a number of subjects - it’s less about “what’s out there” and more about “how do we get in touch”. We have for example a sorta federated sign-in with things like OpenID. Lemmy, Mbin etc…, are built on the idea of federating the content. CDNs are literally federated caches.

At least where I live, I have government guaranteed rights regarding switching registrars and keeping my domain, and a court is needed (or lack of payment) to force me to abandon my domains.

What do you want to bet that Trump’s frown (or Putin’s, or Nazinyahu’s) is not sufficient to pull the domain from under you, your country’s regulations be damned?

Start with buying your own domain.

As we have seen with eg.: Austistici, buying renting a domain gets you nothing. It can be pulled right from under you with no recourse. If you have to pay someone else to “host” your identity, then it’s not actually your identity.

Not to mention, your own domain makes you trivially identifiable and filterable.

Should be easily solvable with something like a co-op owned SMTP relay. That way, every member has a patent investment in the reputation of the relay.

He did praise Trump directly on the admin pick.

The fewer packages you have installed, the easier it is to upgrade. So if your stuff is containerized, upgrade should be mostly painless.

In my history at least, dist-upgrades have never themselves been a problem, not even when doing such things as a x86-to-x64 crossgrade upgrade (from Stretch to Buster, back in the time). The problem usually comes right after, with the first reboot, when something does not generate correctly in Grub or the new kernel’s initramfs is lacking a specific module, or a given mariadb flag you were counting on is no longer added by default, or somesuch. So always have a rescue boot ready.

It’s a student project. Quick & dirty so they can get a grade. They probably just link to libpdf.so and call it a day?

The point was on the complaining about AI because of trends in how humans write (which is where AI got it from in the first place) when quite visibly using those same trends, but sure, why not.

PHP does have a number of official ones, yes, but the way they are designed still makes it often more efficient to just download their Dockerfiles and use as a guide to make your own (I’ve had to do that in particular because of how difficult it is to install some specific PHP extensions on their Alpine image sets).

—

pot, kettle.

Incredible how the things they complain are much of the reasons why I use lemmy instead of reddit where I can. I can visit the site again 3 or 5 or even 7 days later without FOMO. The interface is much more agreeable (agree that some of the contrasts could use help, but the UI element themselves are fine), and you can choose between different themes. Here it’s left-wing, instead of transparent MAGAts.

My threat model is not changed: I want to serve something and I want to not be busy with "oh suddenly there’s a two PHP vulnerabilityies. My enemy is the world, but that is not really unchanged from before in a world where there exists capitalism and rent seekers want to collect from us even for breathing. I’m not intended to be unpaid tech support. So I just serve the things with reasonable scopes (under wireguard, or in a borrowed VPS, etc) and let it go. If an automated system manages to find a hole, computers are so fast that it’s not going to make a difference if I’m sitting in front of the chair vs enjoying some modicum of social life visiting a friend three cities away.

…flohmarket?

Before LLMs, the prospect of an undiscovered vulnerability was non-zero probability then, so what exactly has changed now?

The problem is not the prospect of an undiscovered vulnerability (there is always a vulnerability somewhere) but rather the prospect of a reduced response window.

There’s a wide gap of difference between “non-zero probability” (0.0076%) and “non-zero probability” (82.01734%).

So a multipart form “zip bomb”? Sounds like the kind of thing that would do… well, that. But also, by that point you don’t even need a WAF to block it, IIRC multipart forms can be disabled or their memory limit clamped on php.ini.

(Not that I’d rely on that; not everyone has access to php.ini. But then again, we are talking about a world where there are more than one (1) ways of dealing with problems)

Yes the vulns are real. No that does not mean a system with the vuln is automatically and noticeably exploitable: that assumes there are no other defense systems or simply other happenstance logical walls around (firewalls, datacenter range blocks, seven proxies, 28 NATs, Anubis, whathaveyou).

My understanding is that CVEs are ranked not by Real World conditions but rather under an “idealized threat condition” that imagines your machine is essentially connected with a straight wire to the root DNS serves of the internet, given a public IPv4 address, and the off switch is dislodged or somehow made unavailable.

Hey, never said I was laughing out of happiness… 😭

laughs in keeping an old archive site still in PHP5