[-] matcha_addict@lemy.lol 8 points 3 days ago

What does a programmer need?

  • a text editor or IDE
  • language specific tool chains for building, running and testing your code

This doesn't seem to be something a distro can solve beyond making it possible to install this stuff.

Maybe the closest is nixos, because it allows a lot of flexibility in setting up different development environments that are fully reproducible. Gentoo is also close, as it allows the same but in a different way (without the extent of reproducible guarantees).

[-] matcha_addict@lemy.lol 69 points 4 weeks ago

That is part of why you're not a tech CEO. You're not supposed to have compassion! No investor would want that.

P.S. This is an attack on CEOs and investors, not on you :)

70

I am sure it was discussed here before, but I can't find a good way to search this community.

Are there any arguments against having a user's identity federate, and be compatible across platforms?

For example, let us say I sign up with my instance, matcha_addict@lemy.lol

But what if I go on mastodon, and I want to have my own micro blog. Or maybe go to write freely and post some blog posts. I'd have to make a different account on each one.

What if mastodon or write freely could just let me log in with my lemmy account (or lets call it federated account). This has several benefits:

  • users don't have to scratch their head on if I am the same person or not across these platforms
  • theoretically, someone following my feed can get updates on what I do on multiple platforms

Now I understand this would be difficult to implement and iron out all the edge cases, but am I missing anything on why it wouldn't be a desirable feature, given it is implemented?

32

From a practical sense, ActivityPub may be the obvious choice as it gives easier interop with the largest federated platforms.

But what else? There are existing platforms built on these protocols, such as movim for xmpp, and another for matrix I forget.

From a technical standpoint, are there any major pros and cons?

65

I heard often about activityPub being challenging to implement.

Now I know part of this is because, if you are building on activityPub, you want interop with existing platforms such as mastodon, and they do their own thing.

But ignoring that aspect, what is so hard about activityPub? What could have been done better?

I am a software developer, so feel free to use software dev concepts and terms when explaining. Thanks!

91

Lemmy developers have said there are no near plans for allowing users to follow mastodon or other activityPub networks, so I'm considering another platform that can do this.

It looks like mbin, Piefed and FediLab have the ability to do this. Has anyone tried them and have a comparison?

I also heard it may be possible to do from just mastodon-like platforms. Anyone tried this?

68

I know they're quite different technically. But practically, what does ActivityPub unlock that was not previously possible with RSS and basic web tech stack?

I think I have an idea of the answer. RSS may provide a way for users to "subscribe" to content from a feed, equivalent of following and putting it in a unified feed.

But it does not have a way for users to interact with the poster, like comments or likes. This may be possible with a basic web stack though, but either users will have to make accounts on every person's site, or the site has to accept no user auth. (but this could be resolved with a identity provider standard, like disqus does)

I suppose another thing activityPub does is distribute content to multiple servers. Not sure if this is really desirable though?

Anyways, did I miss anything?

16
submitted 1 month ago by matcha_addict@lemy.lol to c/linux@lemmy.ml

I recently learned about nsjail, a utility to sandbox applications or provide workload isolation.

It seems to be lighter weight than firejail and possibly better suited for server applications.

Has anyone used this? What's your experience with it? I'm curious about using it for my web server applications as an additional layer of Dr hotty.

75

Is there any fediverse client out there (mobile or pc or web) that has support for multiple types of content, rather than just for one?

Most apps I find are only mastodon-like (including pleroma etc.), or only lemmy-like, or only peertube-like. One of the main benefits of the fediverse is that I could theoretically access all of those from one platform. But the clients I saw don't seem to support it too well.

14

Is there any fediverse client out there (mobile or pc or web) that has support for multiple types of content, rather than just for one?

Most apps I find are only mastodon-like (including pleroma etc.), or only lemmy-like, or only peertube-like. One of the main benefits of the fediverse is that I could theoretically access all of those from one platform. But the clients I saw don't seem to support it too well.

65

Hi all,

I found a hobby in trying to secure my Linux server, maybe even beyond reasonable means.

Currently, my system is heavily locked down with user permissions. Every file has a group owner, and every server application has its own user. Each user will only have access to files it is explicitly added to.

My server is only accessible from LAN or VPN (though I've been interested in hosting publicly accessible stuff). I have TLS certs for most everything they can use it (albeit they're self signed certs, which some people don't like), and ssh is only via ssh keys that are passphrase protected.

What are some suggestions for things I can do to further improve my security? It doesn't have to be super useful, as this is also fun for me.

Some things in mind:

  • 2 factor auth for SSH (and maybe all shell sessions if I can)
  • look into firejail, nsjail, etc.
  • look into access control lists
  • network namespace and vlan to prevent server applications from accessing the internal network when they don't need to
  • considering containerization, but so far, I find it not worth foregoing the benefits I get of a single package manager for the entire server

Other questions:

  • Is there a way for me to be "notified" if shell access of any form is gained by someone? Or somehow block all shell access that is not 2FA'd?
  • my system currently secures files on the device. But all applications can see all process PIDs. Do I need to protect against this?

threat model

  • attacker gains shell access
  • attacker influences server application to perform unauthorized actions
  • not in my threat model: physical access
27

The telegram app has a very nice interface, but I want to use a self hosted xmpp chat server.

Is there maybe a fork of telegram that makes it work with a self hosted xmpp server? I would imagine that this is possible.

If not, is there anything that at least gets close to how nice telegram UI is?

18

Sorry, the question in title sounds naive. I have no doubt that math is essential in programming, but I am thinking about philosophy of programming and want to summarize when they're needed in programming. My attempt is below:

Most applications of programming are making electronics do things through their interfaces. Whether that's telling a screen to display something, a network wire to transport data, a hard disk to persist data.

But we often need math because we often transform data, or we might make said electronics do things based on user input, or an event. Transforming an event to data is a mathematical construction.

Some applications are almost purely mathematical, like banking, crypto currency, or encryption.

In your opinion, does this fully explain why we need math in programming? Is there a better way to sum it up?

68
submitted 2 months ago* (last edited 2 months ago) by matcha_addict@lemy.lol to c/linux@lemmy.ml

Hi all,

I am looking for a local database that is easily accessible via the command line.

It can be SQL or non-SQL

Whats my use case? I want to use it kinda like a second brain. A place to save ~~my notes~~, my todo lists, my book reading lists, links / articles to read later, etc.

I want it to be a good CLI citizen so that I can script its commands to create simpler abstractions, rather than writing out the full queries every time.

Maybe sqlite is what I need, but is that ideal for my use case?

Edit: removed notes, as evidently they aren't suitable for this and aren't like the rest.

[-] matcha_addict@lemy.lol 49 points 3 months ago* (last edited 3 months ago)

Corbyn is yet another proof of the hopelessness of Western electoral politics. Just merely viewing Arabs as human gets you disqualified and destroys your political career, when he was a major reason for the party's success to begin with.

[-] matcha_addict@lemy.lol 50 points 5 months ago

If we keep going back, Israel has committed far too many hostilities that were never responded to. Hell, they bomb syria most weeks without any retaliation form Syria. They commit horrors against west bank citizens all the time.

[-] matcha_addict@lemy.lol 37 points 5 months ago

Painting Israel as a victim just for having a small population / geography... I don't know about that. They've committed far too many massscres since their inception to be portrayed like that.

[-] matcha_addict@lemy.lol 33 points 6 months ago* (last edited 6 months ago)

This blog post explains it well:

https://cosmicbyt.es/posts/demistifying-containers-part-1/

Essentially, containers are means of creating environments in which you can run software, and those environments are:

  • isolated, which makes it a very controlled environment. Much harder to run into errors
  • reproducible: we have tools that reproduce the same container from an image file
  • easy to distribute: just have the container image.
  • little to no compromises on performance (at least on Linux)

It is essentially a way for you to run a program without having to worry how to set up the environment, why it didn't work as expected, what dependencies you're missing, etc.

[-] matcha_addict@lemy.lol 44 points 7 months ago

Emulator devs should rly do their best to be anonymous

[-] matcha_addict@lemy.lol 32 points 7 months ago

Reminder that paying Nintendo money is morally wrong and should be avoided when possible. Buy the consoles, sure, but pirate if you have to play the games.

[-] matcha_addict@lemy.lol 111 points 7 months ago* (last edited 7 months ago)

Using the word "genocide" bans you in r/politics now

r/washingtondc locked the post

[-] matcha_addict@lemy.lol 32 points 7 months ago

I feel like this should be more about DE choice than distro.

[-] matcha_addict@lemy.lol 88 points 11 months ago* (last edited 11 months ago)

It's important to note that the real disparity may be even far worse.

OCHA-OPT (the committee gathering this data) is strict about verifying validity of Palestinian casualties, requiring two independent, verified and non-affiliated sources. Casualties in Israel, however, they trust the media at face value. They also exclude a lot of Palestinian casualties even when verified in certain situations. Example, and I quote them:

People who were killed or injured in conflict-related incidents that took place in Israel and did not involve residents of the oPt are also excluded.

oPt (occupied Palestinian territories) are the areas that Israel does not directly oversee. So most of Israel is not oPt by their criteria.

Israel is notorious for restricting journalists reporting on Israeli crimes, and has murdered journalists countless of times, like last year the Christian Palestinian Shireen Abu Akleh reporting on the forced expulsion of Palestinians from Sheikh Jarrah (so not even in a war zone area). This causes many casualties to go unverified and thus undocumented.

And Israel has been caught lying before about its own casualties, like the 40 beheaded babies.

Take that as you will.

[-] matcha_addict@lemy.lol 31 points 11 months ago

When Israeli soldiers are bragging about raping and torturing people, it's very clear what their intentions are

view more: next ›

matcha_addict

joined 1 year ago