piaste

This is a truly bizarre critique, because it seems completely backwards in every respect.

The ability to not be beholden to the preferences of whoever runs a fedi server is, in fact, the #1 selling point of federated network in the first place.

And all other alternatives are far worse in that specific aspect you bring. There is a very mild barrier to running your own Mastodon/PeerTube/etc. instance (you don't even have to self-host, you can get one on Masto.host or similar services). But it is flat-out impossible to run your own Twitter or Youtube or Discord.

And most cloud services adhere strictly not just to Western cultural norms, but specifically to Bay Area cultural norms, which are even more narrow.

Avalonia + FuncUI (for a MVU design) seems to have a lot of fans.

One reason is that Mono supports a bunch of minor platforms [0] that .NET doesn't - yet (for example, FreeBSD support has an active Github issue [1]... although it's been active for _eight years_).

If you're running Windows, Mac, or Linux I'm not aware of major reasons to use Mono.

[0] https://www.mono-project.com/docs/about-mono/supported-platf...

[1] https://github.com/dotnet/runtime/issues/14537

You might like to know that RCX has a new, maintained fork in RoundSync [0].

If you're just running it as a local webdav server, you can just stick with the current version. But if you also use it for the more typical rclone tasks (keeping cloud storage synchronised), RoundSync is updated and fixes some things that were missing in RCX, like cronjobs.

[0] https://github.com/newhinton/Round-Sync

F-Droid is what you're looking for. Both as a developer and as a user.

Intuitively, "fixing life-or-death disasterss is more visible and gets better rewards than preventing them" doesn't seem like it should be a unique problem of software engineering. Any engineering or technical discipline, executed as part of a large company, ought to have the potential for this particular dysfunction.

So I wonder: do the same dynamics appear in any non-software companies? If not, why not? If yes, have they already found a way to solve them?

There is also a helpful compiler command to generate updated signature files for you. Then you just glance at the git changes and see if you accidentally broke an API or not.

Nonsense. Blocking internet ads is simply the 21st century version of changing channels during commercial breaks.

One of GrapheneOS's absolute best features is the sandboxed Google Play Services.

Basically, where other privacy AOSP forks typically offer up to three choices...

- no Google at all

- root and install an extremely fragile FOSS alternative GPS implementation (MicroG)

- root and install the full Google Play Services binary blobs

... GrapheneOS offers option #4: you can install Google Play Services in a sandbox so that they still run, but they don't get root-level access to your system, instead they are treated the same as any other app (so e.g. you get to manage their access to location/storage/contacts etc.).

Note that you don't have to, it's just an option in the built-in Apps menu. I personally run GrapheneOS with no GPS at all in my main profile, and occasionally access my old Gmail/Gdrive accounts via web browser.

> What I'd hope to hear is that Daniel Micay is in better mental health, but they made the almost-certainly wise choice to stop engaging with social media, and I can't find much information about what actually went down, so I guess it's a question mark.

I mean, it sounds like you have pretty much all the relevant information already?

strcat's technical chops were AFAIK never in question, but he had a tendency to pick up loud internet fights - to be fair, sometimes the other party were also being hostile jerks, but sometimes they weren't and he'd just swing at shadows.

After he pissed off Rossmann, he either realized or someone close to him made him realize (doesn't really matter which) that he should step away from the public square, and he did. Now he's just an ordinary, and I presume highly valued, contributor to GrapheneOS and to upstream AOSP.

Whether he still lurks the GrapheneOS discussion threads or not, or whether he is currently undergoing therapy or just chilling with a good book isn't really anyone else's business.

What else do you need to know?

For the consumer it's a simple switch(arch) statement to download the right binary.

But for the developer, it means setting up 9 different build pipelines and artifacts (and realistically, most won't bother with BSD builds and a lot still don't bother with arm64 builds).

It's not necessarily a huge hurdle or an unbearable expense with modern CI services, but it's still a massive deal that this project can make it all unnecessary for every single C/C++ developer out there. If this were a paid product, literally millions of companies would be happy to pay a small fee to save on CI costs, time and maintenance.

> Hashes should be salted. If you salt, you are fine, if you don't you aren't.

> Whether the salt can be kept indefinitely, or is rotated regularly etc is just an implementation detail, but the key with salting hashes for analytics is that the salt never leaves the client.

I think I'm missing something.

If the salt is known to the server, then it's useless for this scenario. Because given a known salt, you can generate the hashes for every IP address + that salt very quickly. (Salting passwords works because the space for passwords is big, so rainbow tables are expensive to generate.)

If the salt is unknown to the server, i.e. generated by the client and 'never leaves the client'... then why bother with hashes? Just have the client generate a UUID directly instead of a salt.

The "or you can give up your rights in exchange for a discount" part is the problem. You can't buy a car by agreeing to be a slave for 90 days either.

Commercial subscription services that don't violate your privacy are 100% fine, and incidentally, as xp84 noted, are way healthier because the user is at least a customer. (I dream of a day where companies spend $0 on advertising and instead all commercial websites and social media are run on small subscriptions or frictionless micropayments and the only person they need to keep happy is the customer.)

Of course "free" services have a massive advantage over paid ones. If Meta can profitably run Facebook just on generic ads without tracking, like a newspaper, that's allowed too. But if they can't, well, tough shit.

Leave that up to the game devs. Expose a platform API call with all relevant information about the accessories currently plugged into the console.

That way a game can check that API whenever cheating matters for that particular game - which may mean different things: playing with strangers, playing certain 'competitive' modes, getting achievements or high scores, etc.

What do you do when a pig is stuck? Do you have to stop the flow and open the pipe, or are there special pig-kicking pigs to try and get it unstuck?

While it's not trivial, assessing un-improved land value does not seem too different from other complicated accounting tasks that both governments and private organisations have been performing for a long time. Cost segregation studies are already a thing.

A good starting point can be the relevant part of the Georgist primer published on ACX:

https://www.astralcodexten.com/p/does-georgism-work-part-3-c...

So, if I create art and sell it online directly to customer, I get the longer protection, but once I register as a one-person LLC, my copyright becomes shorter? Or am I still the originator, and it only shortens once I hire another person? Or do I keep the longer protection as long as the company is 100% originator-owned, and only lose it after someone else buys a share?

It's even worse. People are exceptionally good at rationalising whatever it is they want to do and turn them into convenient rules that sound noble and high-minded.

It would be a much less frustrating world if the robber who takes your money would just tell you "hi, I'm taking your money because I can and because I like it" instead of earnestly believing that he deserves it for some complicated reason (pick your example).

There are many more billion-dollar companies that rely on the Linux kernel than there are that rely on Postgres.

I'm sure there are game devs that try to install rootkits for no good reason, but preventing cheating in multiplayer competitions can unfortunately be a legitimate reason to ask "Hey $customer, I need to take full control of your machine, and it can't be a VM".

You basically have three options:

- Cross your fingers and pray that the game company isn't going to do anything malicious to your machine

- Keep your gaming PC completely isolated from your private data

- Accept that you won't be able to play some competitive games, or the competitive modes of some games (eg. the default CounterStrike multiplayer runs with usermode anticheat, but competitive matchmakers like FaceIt require you to install a kernel-level anticheat)

Should be noted that in most of the EU cashback programmes are also not as big as in the US. Never heard of anyone getting "2% back from everything".

That said, a middleman that takes a smaller fee is still much better for the economy than a middleman that takes in an oversized fee and then magnanimously hands back a chunk of it.

Especially when that middleman is a worldwide oligopoly with far too much power. I try to use local e-payment systems whenever possible.

Perhaps the free government accounts could be exempted from that red tape, and be capped to a maximum turnover amount such that it isn't attractive to money launderers. Once your turnover exceeds that cap, you have to "upgrade" to a regular account with all the KYC stuff.

> I have used rclone with crypt in the past, and it works well, but doesn't easily lend itself to being used from mobile devices, which is what led me to Cryptomator in the first place.

Round-Sync for Android [0] is an app wrapper for rclone. I use that to upload my photos via plain SSH.

[0] https://github.com/newhinton/Round-Sync

I'm currently running Fedora IoT on a pi4B, it works very well for its purpose (running containerized services on Podman+Nomad). What does CoreOS offer over IoT?

Depends on what kind of machine you're running.

I purchased a 7900XTX on release day, with the Linux drivers being in a fairly rough state and new fixes being added daily. So, for the next 3-4 months, I was running Fedora Rawhide with the Koji repo added - about as bleeding edge as it gets, short of building locally from source. Rolling back definely came in handy once or twice.

Once things stabilized, I rebased back to non-Rawhide Fedora 37 and stayed there. Then, a few weeks ago, I found out that AMD had been working on ROCM for the 7xxx series, so I've rebased to Rawhide again to play around with AI tools on the 6.6 kernel.

I've also occasionally encountered non-critical bugs, suspected it might have been fixed upstream, and temporarily rebased to Rawhide just to check out if that was the case before reporting it. Pretty nice.

Discord has the most infuriating search I've ever seen. It's fuzzy by default and you can't turn the fuzziness off - there's no way to search for a literal phrase, or even a literal word.

It's historical data. There is zero reason to request it more than once a day, and the users of such data will be interested in wildly different filters or aggregates over that data.

If this were being used to get the current rates, then yes, it would be a terrible design choice. But there are other services for that. This one fits its typical use case.

Counter-counter point: for years Reddit has been pushing for fewer article links and more locally hosted content.

They started hosting their own images, then their own videos. This is expensive to do, but perhaps they felt that it was worth it to keep users on their site instead of risking them wandering off to Imgur.

And the new design discourages actually reading the article. When you click on a "link", it sends you to the comment page which has a small embedded thumbnail and blurb. (The old design took you to the article directly).

Inbox restrictions: because otherwise every single service ever will start accepting only official government emails to sign up, killing anonymity on the internet (and clogging your official mailbox with not-quite-spam).

Outbox restrictions: because otherwise every citizen who gets a bit of malware on one of their devices will start sending spam and get (temporarily) restricted, and the whole point is to have a reliable address that you know the citizen cannot lose access to. Also because it would be real weird if you could send messages to addresses that cannot reply to you because of the inbox whitelist.

A government that would punish dissidents by locking them out of bank accounts etc. can already do so by extrajudicially freezing their bank accounts in the first place (looking at you, Canada).

In my view those email address should be strictly national and reserved for national-level services, so whenever you move to another country you should get a new email address at the same time as you get a tax ID number.