SpaceCadet

joined 2 years ago
[–] SpaceCadet@feddit.nl 3 points 1 week ago* (last edited 1 week ago) (1 children)

Those “personal pet projects” are why Google and FireFox exist as many pieces of their projects often rely on open source components often maintained by a single person.

Those are a different kind of pet projects, like some small random math library developed by a guy in Nebraska that a big software stack depends on (there's a relevant xkcd about it somewhere). The thing is, if support for such a project stops, the Microsofts, Googles and Firefoxes of the world are able to take over support, pay for it to be supported, or work around it in another way. Plus they are usually careful about which dependency they introduce, if something isn't governed properly or does not have wide community support... it's unlikely to be included.

Taking on a whole browser as a pet project is something entirely different. Browsers are huge and complex. You're basically betting that mr-cheffy will be able to keep up with all the changes, like security updates, feature updates and bugfixes, that upstream Firefox produces, and that he will be able to keep his own part of the codebase secure, and that he won't get burned out or bored with the project in one or two years.

For these reasons, I will never put all my eggs into the basket of some 1-man browser project, sorry.

These pet projects also strip telemetry and respect your privacy.

Turning off telemetry is just a few clicks, or about:config flags in Firefox anyway. And "respect your privacy" is just meaningless buzzword bingo. If you go to facebook or google in zenbrowser, your data is harvested just like everyone else's. Privacy is a process not a product (browser).

[–] SpaceCadet@feddit.nl 1 points 1 week ago (1 children)

Dude, Chrome has 73% of market share worldwide

Internet Explorer had that too at one time.

[–] SpaceCadet@feddit.nl 2 points 1 week ago

Excellent point. The way a project is governed should always be a consideration when evaluating software, especially for large and complex projects like a web browser that can't easily be forked.

In the case of chromium, basically all the main developers are Google employees ... so it's no surprise there hasn't been a viable fork.

I really wish we had something like the "linux kernel" of web browsers...

[–] SpaceCadet@feddit.nl 3 points 1 week ago (3 children)

I'd recommend you just switch to Firefox instead, and make that work for you.

Zen browser (like many of those custom browser forks) is just someone's pet project, and is highly dependent on what Firefox is doing anyway. It's cool to use sometimes, but I wouldn't want to depend on it to stick around or be properly maintained in the long term.

[–] SpaceCadet@feddit.nl 3 points 1 week ago

next (and there will be a ‘next’) will be killing ad or content blockers and manipulators completely

They already tried that!

https://en.wikipedia.org/wiki/Web_Environment_Integrity

Fortunately, they jumped the gun on it, and it was shut down ... for now anyway, but yeah they've clearly shown their intentions.

[–] SpaceCadet@feddit.nl 26 points 2 weeks ago* (last edited 2 weeks ago)

Everybody gangsta until "A stop job is running for ..."

[–] SpaceCadet@feddit.nl 7 points 3 weeks ago (1 children)

yes tyre shops are often extremely busy with very long lines

You can't get appointments at your tyre shops? I just book a slot in their agenda a few weeks before. Show up, put the car on the bridge, wait 15-20 minutes and I'm off.

[–] SpaceCadet@feddit.nl 9 points 3 weeks ago (2 children)

with literally no other input needed

Wait, you just let them put on whatever they can get the highest margin on?!

There's a vast difference between different tire types in terms of stopping distance, wet handling, wear, road noise, comfort, ... When I walk into a tire place, you can bet I come prepared with a short list of tires that I'm willing to consider, and a pre-estimation of the price of those tires in my tire size.

Also, the tire size is literally just 3 numbers, and it's literally there on the tire. Why wouldn't you know that about your car?

[–] SpaceCadet@feddit.nl 1 points 3 weeks ago

Was thinking more paid remote services are almost always something that’d be better done locally.

But offsite storage is something that per definition can't be done locally ...

[–] SpaceCadet@feddit.nl 1 points 3 weeks ago* (last edited 3 weeks ago) (2 children)

I’m not really interested in remote services out side of that - they kinda sounds like a scam

I don't think they're a scam. They're just more honest: you use x amount of storage, you pay for x amount of storage and you can do with it as you like.

It's not presented as "free" where you actually pay with your data, a dependency on the service and hidden content restrictions.

[–] SpaceCadet@feddit.nl 4 points 3 weeks ago* (last edited 3 weeks ago) (1 children)

That clarification of yours is massively important

I think my mistake was assuming I was on a security related community, where this would be understood, instead of PC masterrace.

Your initial comment sounds as if there is a PoC from Canada on how to circumvent the PIN for the Bitlocker keys.

It's a meme joke, referencing this: https://knowyourmeme.com/memes/she-goes-to-another-school

the only way they could put microSLOP at fault for that would be if they could find that microSLOP was backing up encryption keys in the recovery environment / boot files somewhere

Seems unlikely. The WRE is like 32MiB in size, and most of that consists of static binaries. Not much info is saved there, except for some log files. If the bitlocker keys were there, they would have already been found by someone else.

[–] SpaceCadet@feddit.nl 4 points 4 weeks ago

I mean, you're not wrong but the problem is that the online storage that you (and most people) think of as "your storage", is not "your storage" in the same sense as those cabinets and shelves are yours. You're really just borrowing the storage, and have given the actual owner the right to freely snoop through it and kick you out for anything they find they don't like.

The only storage that's actually yours is the one on your computer. That you own. In your house.

1145
submitted 2 years ago* (last edited 2 years ago) by SpaceCadet@feddit.nl to c/fediverse@lemmy.world
 

I feel like we need to talk about Lemmy's massive tankie censorship problem. A lot of popular lemmy communities are hosted on lemmy.ml. It's been well known for a while that the admins/mods of that instance have, let's say, rather extremist and onesided political views. In short, they're what's colloquially referred to as tankies. This wouldn't be much of an issue if they didn't regularly abuse their admin/mod status to censor and silence people who dissent with their political beliefs and for example, post things critical of China, Russia, the USSR, socialism, ...

As an example, there was a thread today about the anniversary of the Tiananmen Massacre. When I was reading it, there were mostly posts critical of China in the thread and some whataboutist/denialist replies critical of the USA and the west. In terms of votes, the posts critical of China were definitely getting the most support.

I posted a comment in this thread linking to "https://archive.ph/2020.07.12-074312/https://imgur.com/a/AIIbbPs" (WARNING: graphical content), which describes aspects of the atrocities that aren't widely known even in the West, and supporting evidence. My comment was promptly removed for violating the "Be nice and civil" rule. When I looked back at the thread, I noticed that all posts critical of China had been removed while the whataboutist and denialist comments were left in place.

This is what the modlog of the instance looks like:

Definitely a trend there wouldn't you say?

When I called them out on their one sided censorship, with a screenshot of the modlog above, I promptly received a community ban on all communities on lemmy.ml that I had ever participated in.

Proof:

So many of you will now probably think something like: "So what, it's the fediverse, you can use another instance."

The problem with this reasoning is that many of the popular communities are actually on lemmy.ml, and they're not so easy to replace. I mean, in terms of content and engagement lemmy is already a pretty small place as it is. So it's rather pointless sitting for example in /c/linux@some.random.other.instance.world where there's nobody to discuss anything with.

I'm not sure if there's a solution here, but I'd like to urge people to avoid lemmy.ml hosted communities in favor of communities on more reasonable instances.

6
submitted 2 years ago* (last edited 2 years ago) by SpaceCadet@feddit.nl to c/debian@lemmy.ml
 

I have a small server in my closet which is running 4 Debian 12 virtual machines under kvm/libvirt. The virtual machines have been running fine for months. They have unattended-upgrades enabled, and I generally leave them alone. I only reboot them periodically, so that the latest kernel upgrades get applied.

All the machines have an LVM configuration. Generally it's a debian-vg volume group on /dev/vda for the operating system, which has been configured automatically by the installer, and a vgdata volume group on /dev/vdb for everything else. All file systems are simple ext4, so nothing fancy. (*)

A couple of days ago, one of the virtual machines didn't come up after a routine reboot and dumped me into a maintenance shell. It complained that it couldn't mount filesystems that were on vgdata. First I tried simply rebooting the machine, but it kept dumping me into maintenance. Investigating a bit deeper, I noticed that vgdata and the block device /dev/vdb were detected but the volume group was inactive, and none of the logical volumes were found. I ran vgchange -a y vgdata and that brought it back online. After several test reboots, the problem didn't reoccur, so it seemed to be fixed permanently.

I was willing to write it off as a glitch, but then a day later I rebooted one of the other virtual machines, and it also dumped me into maintenance with the same error on its vgdata. Again, running vgchange -y vgdata fixed the problem. I think two times in two days the same error with different virtual machines is not a coincidence, so something is going on here, but I can't figure out what.

I looked at the host logs, but I didn't find anything suspicious that could indicate a hardware error for example. I should also mention that the virtual disks of both machines live on entirely different physical disks: VM1 is on an HDD and VM2 on an SSD.

I also checked if these VMs had been running kernel 6.1.64-1 with the recent ext4 corruption bug at any point, but this does not appear to be the case.

Below is an excerpt of the systemd journal on the failed boot of the second VM, with what I think are the relevant parts. Full pastebin of the log can be found here.

Dec 16 14:40:35 omega lvm[307]: PV /dev/vdb online, VG vgdata is complete.
Dec 16 14:40:35 omega lvm[307]: VG vgdata finished
...
Dec 16 14:42:05 omega systemd[1]: dev-vgdata-lvbinaries.device: Job dev-vgdata-lvbinaries.device/start timed out.
Dec 16 14:42:05 omega systemd[1]: Timed out waiting for device dev-vgdata-lvbinaries.device - /dev/vgdata/lvbinaries.
Dec 16 14:42:05 omega systemd[1]: Dependency failed for binaries.mount - /binaries.
Dec 16 14:42:05 omega systemd[1]: Dependency failed for local-fs.target - Local File Systems.
Dec 16 14:42:05 omega systemd[1]: local-fs.target: Job local-fs.target/start failed with result 'dependency'.
Dec 16 14:42:05 omega systemd[1]: local-fs.target: Triggering OnFailure= dependencies.
Dec 16 14:42:05 omega systemd[1]: binaries.mount: Job binaries.mount/start failed with result 'dependency'.
Dec 16 14:42:05 omega systemd[1]: dev-vgdata-lvbinaries.device: Job dev-vgdata-lvbinaries.device/start failed with result 'timeout'.
Dec 16 14:42:05 omega systemd[1]: dev-vgdata-lvdata.device: Job dev-vgdata-lvdata.device/start timed out.
Dec 16 14:42:05 omega systemd[1]: Timed out waiting for device dev-vgdata-lvdata.device - /dev/vgdata/lvdata.
Dec 16 14:42:05 omega systemd[1]: Dependency failed for data.mount - /data.
Dec 16 14:42:05 omega systemd[1]: data.mount: Job data.mount/start failed with result 'dependency'.
Dec 16 14:42:05 omega systemd[1]: dev-vgdata-lvdata.device: Job dev-vgdata-lvdata.device/start failed with result 'timeout'.

(*) For reference, the disk layout on the affected machine is as follows:

# lsblk 
NAME                  MAJ:MIN RM  SIZE RO TYPE MOUNTPOINTS
vda                   254:0    0   20G  0 disk 
├─vda1                254:1    0  487M  0 part /boot
├─vda2                254:2    0    1K  0 part 
└─vda5                254:5    0 19.5G  0 part 
  ├─debian--vg-root   253:2    0 18.6G  0 lvm  /
  └─debian--vg-swap_1 253:3    0  980M  0 lvm  [SWAP]
vdb                   254:16   0   50G  0 disk 
├─vgdata-lvbinaries   253:0    0   20G  0 lvm  /binaries
└─vgdata-lvdata       253:1    0   30G  0 lvm  /data

# vgs
  VG        #PV #LV #SN Attr   VSize   VFree
  debian-vg   1   2   0 wz--n- <19.52g    0 
  vgdata      1   2   0 wz--n- <50.00g    0 

# pvs
  PV         VG        Fmt  Attr PSize   PFree
  /dev/vda5  debian-vg lvm2 a--  <19.52g    0 
  /dev/vdb   vgdata    lvm2 a--  <50.00g    0 

# lvs
  LV         VG        Attr       LSize   Pool Origin Data%  Meta%  Move Log Cpy%Sync Convert
  root       debian-vg -wi-ao----  18.56g                                                    
  swap_1     debian-vg -wi-ao---- 980.00m                                                    
  lvbinaries vgdata    -wi-ao----  20.00g                                                    
  lvdata     vgdata    -wi-ao---- <30.00g 
view more: next ›