fl42v @ fl42v @lemmy.ml

Posts

20

Comments

834

Joined

2 yr. ago

You mean searching github with "lang:nix"?

I mean, VHEMT is a great ideology and ever, but the dude seems to have missed the "voluntary" part.

It's feRd

I remember some particular apps not liking that one. Basically it exposes the permission that's otherwise always granted, and if the developers didn't make a catch all for network errors, the app crashes. Mobile data usage → allow network access favors better in that regard.

As always, the answer is "depends". It shouldn't hurt unless you're dual-booting windows (they used it last year as a weapon in their "mess up grub" game), but, Imo, it's worth the trouble if:

• your data is also encrypted -- otherwise one just removes the HDD/SSD and reads what they need;
• you provision your own keys -- to not depend on Microsoft signing shims for you;
• you delete the already provisioned keys -- Microsoft signed a few vulnerable things, like one kaspersky's (iirc) live CD with grub not locked down, so one can boot up literally anything anyway;
• you lock down grub or whatever bootloader you're using -- otherwise you become that vulnerable live cd;
• you password lock the uefi -- otherwise one can simply disable the secureboot;
• your vendor's implementation isn't terribly buggy -- iirc, some MSI laptops would just ignore all the discrepancies.

So, a lot of ifs, and a necessity to store the uefi password somewhere safe, as those may be a pita to reset.

As for standalone stuff -- idk, it might protect you from malware injecting itself into the bootloader or something, but given there's likely no chain of trust (I.e. the bootloader doesn't check what it bootloads), it can move in on some later step.

Not a signal alternative, but an alternative signal client, tho

This, but backtrack 5 (the one just before kali). On a laptop that'd take several eternities to brutforce an md5 🤣

Reminded me one of the vids of f4mi, although that ladiy's approach is far more beautiful. Basically, she took advantage of ai scrapers relying on subtitles and YouTube allowing for pretty advanced styling of those very subtitles to insert garbage that only bots will see.

To those interested in the details, https://www.youtube.com/watch?v=NEDFUjqA1s8 (selecting a working invidious instance is left as an exercise for the reader)

Quite simple, actually. If you want to do a thing that violates a law, you modify the law to allow the thing.

Or start adding "-site:reddit.com". On the other hand, in some cases it kinda makes sense with SEO being basically "generate a wall of text on what should be one paragraph with 3.5 sentences".

More like his birth

Innovative as always, I see.

Codeberg is a forgejo instance, yes

You sure? To me some of the other options look more convenient, so to say, especially if you tend to watch stuff while away from home :)

I guess I misunderstood the meme, then: to me it looked like a jab at nerds that ignore "simpler" solutions when they themselves have a problem, rather than said nerds giving overcomplicated advice

GuixSD then /jk

Sometimes it's easier to assemble what you need from parts than go adding/removing stuff from somewhat monolithic solutions, tho.

A

Yap, not a demon, just a core. You'll also need an init and a set of coreutils to make one.

As in, symfonium.app? If so, seems questionable, given its proprietary nature and unavailability outside the play store. Although, the feature set is interesting.

Edit: yeeeah, no

From their FAQ:

licences checks requires a call to the verification server from time to time

The license is tied to your Google account