[-] Kalcifer@lemm.ee 29 points 9 months ago* (last edited 9 months ago)

That's because, currently, the community stats that you see in the sidebar are only from your instance -- community stats are currently not federated. Afaik, federated community stats are going to be implemented in 0.19.

89
submitted 9 months ago by Kalcifer@lemm.ee to c/privacy@lemmy.ml

More often than not, the best way to hide is to simply blend in with the crowds -- this also encompasses one's choice for a username. It is relatively simple to make a single throwaway account -- just come up with a username, and off you go -- however, if one makes throwaway accounts often, the task of thinking of a unique, and non-identifiable username can become a challenge. I would argue that poeple would often resort to using a pattern employing small changes for all subsequent usernames. Such patterns can be identified to a specific user if all users have their own unique patterns.

How can one reliably generate many unique-but-normal, and non-pattern-identifiable usernames?

6
submitted 9 months ago* (last edited 9 months ago) by Kalcifer@lemm.ee to c/english@lemmy.ca

For example:

It is a thing that works producing stuff.

This feels wrong to me, but I can't quite put my finger on what exactly is wrong about it. It seems like it's trying to be a participle phrase, but it's not necessarily modifying the current state of "it", and is, instead, describing what "it" is.

If it is, indeed, a participle phrase, then it should be able to be written as

Producing stuff, it is a thing that works.

But, to me, this doesn't seem correct either, so it leads me to believe that the very structure of the sentence is incorrect.

31

Currently, only one company in the world -- ASML -- has the technological capability necessary for the creation of photolithography machines which are sufficient for the production of modern semiconductor devices. What I'm wondering is at what point does semiconductor manufacturing become practical, or even feesible for small organizations, or independents? One must be able to surpass the cost of the machines, and the resources necessary to manufacture them. I presume that a company like ASML is also extremely picky -- willfully, or by regulation, or otherwise -- about who they lend their technology to.


I'm not sure if this is the right community for this sort of post. Please let me know if not, and if there is a more suitable place to put it.

16
submitted 10 months ago by Kalcifer@lemm.ee to c/libre_hardware@lemmy.ml

I am referring to both the design, and the independent, and auditable manufacture of the CPU. It should be noted that such a CPU needn't fully compete with modern ARM, Intel, AMD, etc. CPUs, but it would be an incredible boon to have a fully trustworthy piece of hardware, even if it is considerably lower in it's strength. For specifics, let's say a CPU that could run a lightweight Linux distro at a "tolerable" speed.

Creating the designs for the CPU, of course while still difficult, is, most likely, the most feesbile aspect -- I presume it would "just" consist of writing the Verilog, or some other hardware description language to describe the CPU's function. The manufacture, however, is a substantial obstacle. Modern photolithography is, quite litterally, at the very forefront of human technological creation. I am just hoping that turning back the clock perhaps 20 years on the technological complexity might reduce the barrier to entry.

514
submitted 10 months ago by Kalcifer@lemm.ee to c/privacy@lemmy.ml

On the side bar it lists the following:

  • [Matrix/Element]Dead
  • Discord

"Discord" is an active link, but the Matrix link is completely inactive. Not only is it inactive (which could have be excused as a broken link), but it is also manually labeled as "Dead", as if there is no intention of making it work. How can a community that is focused on privacy willingly favor a service that is privacy non-respecting when a perfectly functional privacy-respecting alternative exists?

-1
submitted 10 months ago by Kalcifer@lemm.ee to c/lemmy_support@lemmy.ml

In the official browser app, and any of the mobile apps that I have examined so far, it seems that you are only ever able to see the total number of likes, or dislikes that a post has, and you are not able to see exactly who upvoted, or downvoted the post. Does ActivityPub, or Lemmy track this information at all, or does it just keep a tally?

23
submitted 10 months ago* (last edited 10 months ago) by Kalcifer@lemm.ee to c/cybersecurity@sh.itjust.works

I'm not sure if this is the right community for this sort of post. I couldn't think of any other community to post it in. If there does exist a more appropriate place to post it, then please let me know.

23
submitted 10 months ago by Kalcifer@lemm.ee to c/astronomy@mander.xyz
[-] Kalcifer@lemm.ee 13 points 10 months ago

I caution mentioning both Matrix, and Element as if they are synonymous -- they are not (I'm quite certain that that wasn't your intent, but the usage of the forward slash could be interpreted as such). It may lead to confusion for newcomers. It would essentially be the same as saying "I recommend ActivityPub/Thunder" to someone who you want to introduce to Lemmy. Matrix is the protocol, and Element is simply a client that interacts with the Matrix protocol.

I personally think that it's sufficient to recommend Matrix if one is mentioning chat-app alternatives. Of course, nothing is stopping one from also recommending a client, but I don't believe that it's entirely necessary.

-6
submitted 10 months ago* (last edited 10 months ago) by Kalcifer@lemm.ee to c/libertarianism@lemmy.world
[-] Kalcifer@lemm.ee 71 points 10 months ago* (last edited 10 months ago)

If nothing else, I would recommend Firefox over Brave for the sole reason of the latter being yet another Chromium browser. It would be nice if we could eat away some of the browser marketshare from Google.

54
submitted 10 months ago* (last edited 10 months ago) by Kalcifer@lemm.ee to c/lemmy@lemmy.ml

I believe that the addition of an edit history would be a massive boon to the usefulness of Lemmy on the whole. A common problem with forums is the relatively low level of trust that users can have in another's content. When one has the ability to edit their posts, and comments this invites the possibility of misleading the reader -- for example, one can create a comment, then, after gaining likes, and comments, reword the comment to either destroy the usefulness of the thread on the whole, or mislead a future reader. The addition of an edit history would solve this issue.

Lemmy already tracks that a post was edited (I point your attention to the little pencil icon that you see in a posts header in the browser version of the lemmy-ui). What I am describing is the expansion of this feature. The format that I have envisioned is something very similar to what Element does. For example:

What this image is depicting is a visual of what parts of the post were changed at the time that it was edited, and a complete history of every edit made to the post -- sort of like a "git diff".

I would love to hear the feedback of all Lemmings on this idea for a feature -- concerns, suggestions, praise, criticisms, or anything else!


This post is the result of the current (2023-10-03T07:37Z) status of this GitHub post. It was closed by a maintainer/dev of the Lemmy repo. I personally don't think that the issue got enough attention, or input, so I am posting it here in an attempt to open it up to a potentially wider audience.

40
submitted 10 months ago* (last edited 10 months ago) by Kalcifer@lemm.ee to c/privacy@lemmy.ml

As I noted within my post, #9955859@lemm.ee (alternate link), URL thumbnail generation in Element is an enormous privacy, and security vulnerability. Thumbnails are generated server-side, regardless of E2EE settings. What this means is that the URLs that one sends would be leaked out of your encrypted chats to the server. Here is a notable excerpt from the settings within Element:

In encrypted rooms, like this one, URL previews are disabled by default to ensure that your homeserver (where the previews are generated) cannot gather information about links you see in this room.


Post Edit History

2023-10-02T00:54Z
1c1,2
< As I noted within my post #9955859@lemm.ee ([alternate link](https://lemm.ee/post/9955859)), thumbnail generation in [Element](https://element.io/) is an enormous privacy, and security vulnerability. Thumbnails are generated server-side, regardless of E2EE settings. What this means is that the URLs that one sends would be leaked out of your encrypted chats to the server.
***
> As I noted within my post #9955859@lemm.ee ([alternate link](https://lemm.ee/post/9955859)), thumbnail generation in [Element](https://element.io/) is an enormous privacy, and security vulnerability. Thumbnails are generated server-side, regardless of E2EE settings. What this means is that the URLs that one sends would be leaked out of your encrypted chats to the server. Here is a notable excerpt from the settings within Element:
> > In encrypted rooms, like this one, URL previews are disabled by default to ensure that your homeserver (where the previews are generated) cannot gather information about links you see in this room.

2023-10-02T01:28Z
1,2c1,2
< As I noted within my post #9955859@lemm.ee ([alternate link](https://lemm.ee/post/9955859)), thumbnail generation in [Element](https://element.io/) is an enormous privacy, and security vulnerability. Thumbnails are generated server-side, regardless of E2EE settings. What this means is that the URLs that one sends would be leaked out of your encrypted chats to the server. Here is a notable excerpt from the settings within Element:
< > In encrypted rooms, like this one, URL previews are disabled by default to ensure that your homeserver (where the previews are generated) cannot gather information about links you see in this room. 
***
>  As I noted within my post, #9955859@lemm.ee ([alternate link](https://lemm.ee/post/9955859)), thumbnail generation in [Element](https://element.io/) is an enormous privacy, and security vulnerability. Thumbnails are generated server-side, regardless of E2EE settings. What this means is that the URLs that one sends would be leaked out of your encrypted chats to the server. Here is a notable excerpt from the settings within Element:
> > In encrypted rooms, like this one, URL previews are disabled by default to ensure that your homeserver (where the previews are generated) cannot gather information about links you see in this room.

2023-10-02T03:44Z
1c1
< As I noted within my post, #9955859@lemm.ee ([alternate link](https://lemm.ee/post/9955859)), thumbnail generation in [Element](https://element.io/) is an enormous privacy, and security vulnerability. Thumbnails are generated server-side, regardless of E2EE settings. What this means is that the URLs that one sends would be leaked out of your encrypted chats to the server. Here is a notable excerpt from the settings within Element:
***
> As I noted within my post, #9955859@lemm.ee ([alternate link](https://lemm.ee/post/9955859)), URL thumbnail generation in [Element](https://element.io/) is an enormous privacy, and security vulnerability. Thumbnails are generated server-side, regardless of E2EE settings. What this means is that the URLs that one sends would be leaked out of your encrypted chats to the server. Here is a notable excerpt from the settings within Element:

Post Signature

ul7mHTfs8xA/WWwNTVQ9HzKfj/b+xw+q9csWf60OJrT58jMJpmsX8/BicwFodR8W
Llo93EMtboSUEtYZ+wQhaL/HmrEr6arup7gJzZgslOBWPFj5azADHSpjX9RYuvpt
Fk2muTUgJP2e+SW3BGDPmlcluw6mQOYcap84Fdc1eU47LOZprBXob97qInMK5LrL
tzNqARRtXGdogZtQYlNCqCd9eQgqTwPfxKVadmM6G3xQMh6mWQxQz56sCXqj+mlG
OqJyZIgB1UXEuVZeAO3pl9wN+cSM4eqHLHQwEd+aVeSPf75r2d7mZs+VNwr1WfMu
0sWcPh3aZLXKqdls6UJMEA==
9
submitted 10 months ago* (last edited 10 months ago) by Kalcifer@lemm.ee to c/matrix@lemmy.ml

I recently found that there is a room setting to enable the generation of URL previews. This makes me wonder, though: Who is generating the thumbnails? Does the server generate them, and then send the images back (this is an obvious privacy, and security vulnerability)? Does a user generate them locally, and send them to the other recipient (this is what Signal does)? Does the receiver generate them on their end (this is also a potential security vulnerability)?

EDIT (2023-10-01T21:38Z): I found this documentation which outlines the possible methods, but, from what I can see, it doesn't specify what one is actually used in practice. I was also unable to find any information in the Matrix spec.

EDIT (2023-10-01T21:41Z): In this set of release notes for Synapse 1.45.1, I found the following:

Note that URL previews are generated server-side, and thus generally disabled in encrypted rooms to avoid leaking information about message content to your homeserver. You may need to adjust the room's settings to see the new oEmbed previews.

If this is true, and all thumbnails are generated serverside, this is an enourmous security, and privacy risk.

EDIT (2023-10-01T22:18Z): Further research has found the following two open issues:

This confirms my suspicion -- at the very least, for Element (I have still been unable to find any official standardized method within the Matrix protocol). My PSA that I would provide, then, to any who are reading this, is to not enable thumbnail generation, as it is a major privacy, and security vulnerability.

[-] Kalcifer@lemm.ee 41 points 10 months ago* (last edited 10 months ago)

[...] lowest viewership since 2015

Hasn't there only been one other debate since then...? That's rather misleading.

[-] Kalcifer@lemm.ee 12 points 10 months ago* (last edited 10 months ago)

No. Canada has a whole host of prohibitions, and restrictions. The sale and transfer of handguns was recently made illegal (source), in 2020, 1500 models of what the Canadian government deemed to be an "Assault Rifle" were banned (source), Canada has extreme restrictions on the transportation of "Restricted Firearms" (handguns are an example of this) in that, to be able to transport them, you must obtain an "Authorization to transport", to be able to carry a "Restricted", or "Prohibited" firearm, one must obtain an "Authorization to Carry" (unless, possibly, it is for wilderness protection (source)), and, as outlined in the Canadian Criminal Code, and the Firearms Act, there are also many restrictions on the general transport, handling, storage, display, and transfer of firearms. Not to mention that in addition to all of this, as outlined in the Firearms Act, every firearm owner must be licensed for the use of "non-restricted" firearms (Possession and Acquisition License, PAL), and "restricted" firearms (Restricted Possession and Acquisition License, RPAL), respectively. The acquisition of each of these licenses requires a 1 day course, the successful passing of both a practical, and written exam, and a background check performed by the RCMP. After filling out, and submitting one's application, the prospective firearm owner's application, as mandated by legislation, will sit idle with the RCMP for a 28-day cooldown period. Only after that cooldown period has completed will they begin to process one's application, which can then take much longer depending on the speed of the government at any given time.

I can provide no guarantee that this list is exhaustive.

[-] Kalcifer@lemm.ee 25 points 11 months ago

This is Techrights (But with Jews!) – a satire site based on Techrights (But with Jews!)

It looks like the site is satire. But, I'll be honest, it initially had me fooled. How have we gotten to the point in society where one could come to the conclusion that it is perfectly possible for such an article to be unironically written?

[-] Kalcifer@lemm.ee 49 points 11 months ago* (last edited 11 months ago)

The issue with enacting a mandatory age limit in a democratically elected government is essentially conceding to the idea that the voters are unable to determine for themselves whether an elected official is competent, or not. This has substantial, and serious implications.

[-] Kalcifer@lemm.ee 17 points 11 months ago* (last edited 11 months ago)

solution1... Qxg2 2. Kxg2 Nf4+ 3. Kg1 Nh3#? Nice queen sacrifice

[-] Kalcifer@lemm.ee 14 points 11 months ago

What bugs are you encountering with KDE Connect?

[-] Kalcifer@lemm.ee 16 points 11 months ago* (last edited 11 months ago)

I use Nextcloud's Calendar to sync to other calendar apps over CalDAV.

[-] Kalcifer@lemm.ee 16 points 1 year ago

How I've been looking at it lately is that the issue is in the fact that the hospitals profit when you are sick rather than profit when you are well, and not simply the fact that the hospitals can profit from your care. A possibility that I've heard thrown around is running a hospital on a subscription service. That way the hospital will profit when you are not in it. Unfortunately, this is not without it's issues.

view more: next ›

Kalcifer

joined 1 year ago
MODERATOR OF