Gentil

Their share button does shadow tracking. You think a login module doesn't?

About time Flarum is noticed! I have been using Flarum through unitedbsd.com. It's nice and snappy. Might be a lil too modern for some communities. Especially OSS ones. But is fine IMO.

My problem with discourse has been that Firefox shows FB tracker warning in irregular intervals on the top-left corner. It's says FB tracker. It makes me uneasy. But somehow it is the standard for all OSS communities.

OK you want motive. If you do accessibility with priority, you will get a whole new set of users who are always overlooked. A less competitive way to get easy money or user base depending on your product's model. ;)

I recently had a scare with my eyes. Freaked me out. I started looking at my developer tools completely differently. You are not out of the woods buddy. Anything can happen tomorrow. :)

This article bugs me. I would have liked them to be honest. Just say we prioritized VS Code or that handling two products of the same category is resource hungry and a waste. We all understand. But this article is making it look like it's Atom's fault. They just let it die slowly so people will be pissed but move on. It's a great tactic because "sunsetting" Atom after MS takeover would've pissed the community. This was great for PR for sure.

> Atom has not had significant feature development for the past several years, though we’ve conducted maintenance and security updates during this period to ensure we’re being good stewards of the project and product.

Because MS made sure it didn't get any?!

> As new cloud-based tools have emerged and evolved over the years,

Big player being VS Code and Codespaces?

> Atom community involvement has declined significantly.

Because MS made sure the community was NOT backed with actions?

> we are archiving Atom to prioritize technologies that enable the future of software development.

This should be the first sentence. Not last.

While I don't think this is comparable to the ordinary laptops, I am still glad this is present. Mainly because the tech is evolving and I can't wait for e-inks to have colorful displays with 1ms response time! This is one of the many pre-steps towards it.

In all seriousness. Social media is dominated by liberal/left groups. This makes it hard for centrists and conservatives to converse.

Just look at the Trump ban. Nobody did anything when he was doing harmful things. Once he lost power, the social media companies did a huge BS PR stunt and banned him. And everybody was like YAAY. That was useless IMO and that was political. It sets a dangerous precedence. It sets precedence for the right to do the same in a different scenario. And the left will be up in arms like right. A never ending cycle.

The problem is, nobody is interested in solving these problems. Everybody likes to divide people further and make the issues worse. That is not helping anyone other than our own ego. If the goal is peace that is.

> This strategy may fail insofar as you may acquire in the course of installing Okular some of the second third order deps which by default in most systems won't be removed even if you remove Okular itself. You would then conclude erroneously that you had to install fewer extra things because you already have it.

This makes sense. Completely forgot about this part. What an idiot I am.

> The situation remains that basically the first KDE app if you have nothing KDE/QT is 2GB the second and subsequent are 10MB. Honestly with storage costing almost nothing per GB and very limited developer resources this isn't a terrible design. Spending something you don't have in order to save people are resource none of them are going to care about doesn't seem like a great investment.

It does makes sense. In a way. But this isn't about space though. To me being in a rolling distro, it just adds weights for package breakage. Especially since GNOME and KDE changes a lot of stuff more often. Not to mention, with all the OSS activism going on and security issues, it is always better to have the least possible dependencies. Whatever is unnecessary for the default package could be optional dependencies always. Prevention is better than cure. Right? :)

I was coming here to rant about KDE's long list of unnecessary dependencies on their softwares. But looks like Okular have finally reduced their list of bizzillion unnecessary dependencies. Maybe I am wrong here since I have been away for a while. But I do try and install okular to see how many dependencies is needed from time to time. So it looks like they have. And if so, thanks and kudos!

Also, why do I still need kaccounts-integration dependency package if I am not using KDE? Is there a reason why it is needed? Anybody know?

I thought this is a brilliant output for a personal project.

https://lite-xl.com/ is another one which is written in Lua. Brilliant and super fast. It is much more polished than Lapce but still rough around the edges with features though.

Another one is Micro which is cool too.

Either way I am loving the fact that new OSS text editors coming out.

> I assume it would still go a bit wild, but have the least negative impact.

Which is why I added this. It will not be a smooth experience. But the OP will still be in a better position than the current one IMO.

You tell me who looks MORE suspicious.

- A guy who found a vulnerability and reported very soon and hence the effected bank know about it soon.

Or

- Or when the effected bank finds out after A COUPLE OF MONTHS (even a few weeks after) that their competitors employee found a vulnerability and they still haven't heard about it?

Keep in mind the added issue of the employee being from a competitor and that they might have already seen abuse of the vulnerability which might not be done by the OP. But since it is delayed, all of it is in the OP's shoulders.

Directly informing the effected bank and then informing your then employer would've been a better solution? I think it has the highest chance for least negative repercussions. I assume it would still go a bit wild, but have the least negative impact. Obviously I could be wrong.

You need to keep in mind that security disclosures and everything around (legal, why disclose? etc) it is a black box for most folks.

Also OP said after reporting it, "months later" OP was fired. This means anyone in those months anyone could've found what the OP found and abused it. And the effected bank might've not been involved until later? And all those crimes are now on your shoulders. Your then bank employee would get delayed through the politics in your company (even with good intentions). It will happen even for their own security disclosure handling. Let alone for competitors cos so much legal stuff are involved now.

From the effected bank's POV, you are just a bank employee who did some fraud. Mainly cos you didn't inform the effected bank and it's been months. Insider hacks from the same industry is not unheard of.

Like I said, this would've been a different scenario if you informed them ASAP. And I am sure when issues hit the roof your employer would wash their hands off. It is the easiest thing to do. Unless you are very well connected in the office. Otherwise even your employee are not sure about you. They will be asking questions like, why is this person doing this anyways? He is not in security so why was the OP poking around it? etc etc.

Hope this gets sorted out. Interesting case indeed.

I am very genuinely curious about whether we disagree on the "Facebook is a bad company" part or not.

And if you think FB is not a bad company. Can the below examples convince you?

If the below examples cannot convince you. Where do you disagree and where do you think I am wrong?

I know this could be way too real for some folks to answer. Especially for folks who use FB for a living (marketing etc) and for FB employees. So hopefully I can encourage some genuine conversations. :)

[1] - How toxic instagram is for teens - https://www.cnbc.com/2021/09/14/facebook-documents-show-how-...

[2] - I have blood on my hands - https://www.buzzfeednews.com/article/craigsilverman/facebook...

[3] - Facebook knew about Russian interference in 2016 US election - https://www.thesun.co.uk/news/7749740/facebook-knew-russian-...

[4] - Facebook Shadow tracking through FB SDK - https://www.privacyinternational.org/sites/default/files/201...

[5] - Cambridge analytica scandal - https://en.wikipedia.org/wiki/Facebook%E2%80%93Cambridge_Ana...

[6] - Facebook misled EU about Whatsapp acquisition - https://arstechnica.com/tech-policy/2017/05/facebook-fined-e...

[7] Mark lied to Congress (This is the only case I am not sure about AFAIK. So correct me if possible please) - https://thehill.com/policy/technology/390530-dem-lawmaker-sa...

Update: Just got my first down voter. It would be great if whoever down voted could say why. Thanks.

Every time I install a KDE app, it adds a bizillion little dependencies. That many dependencies on a rolling release enough for a stroke during a system update. Why do you need sooo many dependencies KDE?

This comment of years can be categorized under "Do things, tell people" rule. haha. You wrote and you're telling people about your life after it. It was a good read. Hope you get good leads from here!

Yes. I think the question always is where should I stop?. Cos it is a tool to get things done right?

While I think it is difficult to get Arcg going, the whole point of that effort is that I don't have to deal with it much after that. It is a rolling release and get the latest upstream releases which is not meddled with by distro much. Unless you are meddling with it too much, it is very stable IMO.

As far as I read about it, they don't! Dependency resolution is fully up to the user.

> The package management system does not track or manage dependencies; however, when performing the recommended full install, all dependencies of the stock packages are met. For custom installations or 3rd-party packages, Slackware relies on the user to ensure that the system has all the supporting system libraries and programs required by the program. Since no official lists of dependencies for stock packages are provided, if users decide to install a custom installation or install 3rd-party software, they will need to work through any possible missing dependencies themselves. Since the package manager doesn't manage dependencies, it will install any and all packages, whether or not dependencies are met. A user may find out that dependencies are missing only when attempting to use the software.

Source - https://en.wikipedia.org/wiki/Slackware#Dependency_resolutio...

> There is no formal issue tracking system and no official procedure to become a code contributor or developer. The project does not maintain a public code repository. Bug reports and contributions, while being essential to the project, are managed in an informal way. All the final decisions about what is going to be included in a Slackware release strictly remain with Slackware's benevolent dictator for life, Patrick Volkerding.

This is from Slackware wikipedia page. If this is true, this could be the next logical step to increase some development involvement and noise maybe? Patrick should be also thinking about the future of Slackware right?

Am just an outsider since I don't have skin in the game. But Slackware is not a distro that comes in your conversations more often and I am in a lot of Linux communities. And the comments reflect the same as well. Maybe this could improve the scenario. Again, this is with the best intentions. Please ignore if the comments doesn't sit right with you. :)

---

Also, I don't think Slackware should be like GNU/Linux distros or alter course radically. But I think a small modernization of the project could help everyone who wants to keep the Slackware way of doing it alive.

As someone who is from the era of Ubuntu as their first distro, my natural progression towards maintainable OS made me reach Arch. As an OS for your system, it seems like the perfect abstraction layer and does just enough. The next incremental update to my system could be NixOS, Nix package manager in Arch or Nix package manager in FreeBSD. But I am always happy to see old projects like this kicking.

I see many people mention the fact that they won't be coming back to Slackware. Could that be because they are not changing enough according to the times they are in? Is there something the project can do to attract new users? I definitely wouldn't want Slackware project to stall. It makes me really sad when OSS projects die.

While I see this is for their Workspace offering. If there is anyone who is discussing about Google search and DuckDuckGo, DDG has been competent enough (subjective) for a long time. And any incompetence of search can be worked around using DDG !bangs for those who are not aware of it - http://duckduckgo.com/bangs.

Bangs essentially lets you search directly on websites like Stack Overflow, Wikipedia, Amazon, Mozilla Developer Network, Arch Wiki and many many websites. Its a really great productivity hack.

>> Targeted ads are necessary

Another day another behavioural ad vs contextual ad discussion. Hello! I'm going to copy paste one of my old comment on the topic here.

TLDR; Contextual ads are proactive and more effective than behavioural ads which depend on lucrative data economy and data selling to make it profitable.

---

The problem is not the ads but the way it is produced (Behavioral ads). The issue is always behavioural ads and not contextual ads. Duckduckgo has been profitable for so long with contextual ads. And not to mention, contextual ads which doesn't depend on lucrative data practices and privacy invasive tech has been proven to be much more effective than behavioural ads. Good read on it - [1][2].

Also, how is reactive ads (behavioural ads) useful to a user? Just think for a sec. Unless they are listening to everything you say which is ludicrous levels of privacy violation practice followed Google, FB and Amazon RIGHT NOW... behavioural ads are useless to many many topics and use cases. By the time you get a behaviour based ad, you would have stopped looking for it, found the item. And even when they are fast enough, after many hurdles of being reactionary, THE AD NEEDS TO APPEAL to the person. This again ignores the fact that users don't buy stuff based on behaviours but based on ratings and reviews from Yelp, Amazon, youtube reviewers and other influencing factors like ME! I am the tech nerd who helps my entire family and friends with purchases on electronic items like smartphones, computers and other items. And I know how to teach people to buy things by going through reviews and what not. Nothing I do is in favour of Behavioural ads. Meanwhile just by being proactive, contextual ads are more likely to be more appealing to user cos it depends on NOT YOUR BEHAVIOUR but behaviour of everyone who have searched the term/item. This means the ads are tested to work on more people IMO.

Also, behavioural ads miss the point that humans have strong opinions on things. But also that humans change their opinions from time to time. I might move from iOS to Android or vice versa. Behavioural ads also miss that a lot of the purchases are rare purchases and once in a life time purchases. So reactive ads based on my behaviour could be useless. Sure, you might be able to sell something based on this particular rare purchase. But why risk the resources wastage, data privacy and data breaches? This is not in favour of the user at all. Contextual ads are more effective in all the above scenarios than behavioural ads. Contextual ads also have the least baggage, risk and complexity compared to behavioural ads.

Behaviour data is not that effective to SELL ADS. But you can offset all these risks and ineffectiveness by selling your data to thousands of third parties or governments even. THE DATA ECONOMY MAKES BEHAVIOURAL ADS SUSTAINABLE. The data economy needs to stop. That is it. NOT ads. Ads have been present in media and everywhere else long before Google was there, nobody was up and arms about them, were they? They were annoying, yes. But not threatening like it is now.

[1] - https://www.nytimes.com/2019/06/19/opinion/facebook-google-p...

[2] - https://techcrunch.com/2019/05/31/targeted-ads-offer-little-...

Thanks for clearing my doubt. I appreciate it. :)

> Clone this git, pip install . where the git has been cloned, and you will have access to communism.

This cracked me up. If only it was this easy, lol!

I agree with you here. I like that they are looking beyond left and right. But it should be clear where. It could be center, center-left or center-right.

But I do understand why though. The people weren't even ready for Bernie Sanders this election. I found him as the better candidate among the lot, with a better plan. So adding the "centre" or "centre-left" party maybe way too much.

But I think the file-sharing/pirate party movement is a lil way too late. At the peak of Pirate Bay, they really were revolutionaries giving chances to new artists and new ideas through their front page campaigns and what not. But we have bigger problems like climate-change right now. File sharing would be not in my priority list in the current political environment.

I would like to respectfully disagree. There are centre, centre-right and centre-left parties in Europe. If am not mistaken, Angela Merkel's party is centre-right. But even if it isn't, there are other types of parties than just Left and Right.

Right and Left which are just two sides is way too narrow view of the world.

When it comes to being minimalist, can you not make TailwindsCSS as minimal as necessary or go crazy with it as you see fit? I found it having the right balance. Especially since it is popular with better support and good documentation.

Just curious about the thoughts since I have never dived the classless CSS train. Also am new to front-end.

This should be the last thought. People should be taught tolerance and be patient about ideas and thoughts that are against yours. The world is not black and white and this left and right thought process which is extremely binary is hurting us all in the long run.

Just look at how politicians went about things in the olden times. Even when they disagreed on things, they were far far better than just raging against each other like they are doing now!

I said "IF" America as a country has to deny, it make sense. Looking at the reaction, I don't think everyone read my comment fully cos they got triggered? Cos this is bad. They deny access to American people whose tax money paid for this. That in itself makes this argument of the company moot. This is nothing but companies making profit out of tax payers money. The whole system is messed up.

Power move by the new CEO. Haha. I have read about this, but only recently have I started noticing this. Acquisitions are expected after a new CEO.

Yeah, probably to scratch an itch. The monitoring tool was first written in Bash, then rewritten in Python and now is getting rewritten in C++. I am sensing a pattern now. I really hope if he or somebody else maintain the Python version though.

Gentle reminder that these are studies funded by tax payers money. If America as a country has to deny non-americans access, it makes sense. Especially considering that China is abusing democratic institutions. But it is messed up that us Americans have to pay for it cos the middleman big corporates needs to make money out of it.