Skip Navigation
Thoughts on HumHub?
  • Thanks!

    Agreed: some items are basic functionality that should reliably and easily work. Image & video uploading are among them. I'll add some verbiage on the CryptoPad page about options which have been rejected simply because they don't support the most basic features.

    It's funny: I've been similarly searching for a good chat platform, and there are two things which I personally don't care much about, but which a couple of my family members are insistent about: typing notifications; and gifs - as in, a widget where you can search for short gifs from e.g. Gfycat and have them inserted. My wife absolutely requires the latter.

    That being said, my position on emoji responses are almost a core feature for a social media platform IMO. They're fast, easy, non-cluttering feedback, eliminating the need to type out some inane, two-word response. It's infuriating (to me) that Lemmy doesn't support them; it leads to such illuminating responses as "So much this!", "Yes!", but worst of all the lack subverts up/downvotes, which should be a tool for designating interest, not agreement. Not having emoji reactions muddies and dilutes any value voting has.

    Pixelfed is an interesting suggestion. It always feels like it's intended to be public. Were you thinking each user would have to configure default privacy settings?

    You may be right. I think I read that post visibility was configurable; if I can narrow the field sufficiently I'll start installing them and checking how they work. I do think federation would have to be disabled on any AP server.

    I can see how to restrict to followers but haven't yet found how to stop anyone being able to follow you.

    Yeah, that would be a blocker.

    I think for me, if a new user has to set up the privacy settings to stop them posting everything public, that's probably not the right platform.

    Agreed. The service must be at least configurable to be private-by-default.

    BTW there is PixelDroid as a dedicated Pixelfed app, but it's only on Fdroid.

    I think I found an iOS app, too... but I looked at so many servers last night I may be misremembering.

    The table isn't rendering on my mobility client, so I'm going to delete it from the post; I'll keep the CryptoPad document going as long as I can, but it's open edit, and I'm hoping others will contribute to it.

  • Kamala Harris signals she'll go further than Biden on marijuana legalization
  • We need a robust addiction support network to go along with that, but, yes: illegalizing drugs causes more problems than it solves. Legally regulated and sold drugs ensure quality and provide confidence that what the consumer is getting (and ingesting) is what they think it is.

  • stmps: a TUI client for your *sonic server

    stmps is a fork of stmp, under active development and with several additional features. (*) items are PRs which also been accepted by the stmp project.

    • mpris support (*)
    • improved help text
    • improved playlist handling, including concurrent loading in the background
    • improved browser behavior, e.g. add all songs by an artist
    • global, server-side search
    • artist search in the browser (*)
    • TUI-less server information query
    • queue reordering
    • queue shuffling
    • randomly add songs to the queue
    • randomly add similar songs to the queue, using the Subsonic "get similar songs" feature

    It's fast, keyboard driven, and a single executable; it is regularly tested against Navidrome and Gonic.

    stmps can be installed by a simple go install command, and it's also in AUR as stmps.

    I'm not the author, but am one of the active contributors.

    0
    I was visiting TeotihuacΓ‘n recently and all the kids were playing with animal toys like these. What are at the bottoms of its legs? I don't get it.
  • What are at the bottoms of its legs?

    A pox on our society! They're a crutch! Kids spend so much time on these things, and they never learn to walk or run properly! Why, back in my day, a man could run all day using only his feet, and travel all the way to the next village! Now with these "wheels," kids are lazy. Sure, they get there faster, but they're stuck on the roads and can't travel through the jungle.

    They're all going to grow up with atrophied legs and soft, squishy feet. It's a corruption of society, I tell you.

    They should be banned.

  • Thoughts on HumHub?
  • Argh! I've posted a similar question; basically, I want a private alternative to Facebook, with wall-like functionality. The second minimum requirement is that there be an iOS app that makes posting easy -- including initiating a picture or video capture. So:

    • #1: private, b/c it's family sharing toddler pictures
    • Also #1: super user friendly, because (100% - 1 person) involved are non-technical
    • Also #1: has to have a better user tool than an SPA. No web interface can ever be anywhere as good as a native app can be, and I will die on that hill.
    • #2: emoji reactions, and threaded comments

    I'm not interested in installing and evaluating a dozen different servers, so like you I've been hoping that people with similar goals would narrow down the field a bit. There's no way I'd convince enough of the family to go along with evaluating all of the options anyway, and IME what works fine for me can often fall apart when other people come onboard.

    I'd convinced myself that Friendica -- venerable, proven, reasonably popular -- would fit the bill, especially because the design doesn't assume public-by-default, like Mastodon or Lemmy, and the potential damage of exposed content, either through my misconfiguring the server, or some upgrade assuming users want everything public by default, is high. I'd prefer a project where the developers assume private-by-default, and invite-first. Lemmy isn't really right, because we're following people, not communities; Mastodon has a better model, following users, but then its conversation threading is kind of shit for this purpose, and its reaction feature set is anemic. Circles was perfect, and beloved by the key parent involved, until it first made half of her posts invisible to her (and only to her and her husband), and then locked her out. This doesn't surprise me much, as Circles is based on Matrix, which frankly has the worst cryptography management I've even encountered. But if you're saying Friendica is that painful to post media on, then it won't work.

    I'm leery of Humhub because of the quasi-commercial nature, and its youth. I've had too many experiences with initially semi-commercial platforms shifting, either suddenly or slowly, to increasingly commercial positions -- moving features from the "free" to the "paid" column. Vendor lock-in is a real issue with a dozen users.

    So if Friendica is out, maybe Pixelfed? It seemed to me to be mostly indistinguishable from Mastodon, but if they have better comment threading, reactions, and I need to re-evaluate the AP clients to see if any would be user-friendly enough for the parents. I've used mostly Fedilab, and I'm not sure it's ideal. For one thing, it doesn't have support more than basic reactions: you can boost or favorite, but I am -- and I think you are probably -- looking for something with more variety, like emoji responses, right?

    I'm watching the other reactions here, and my post on this topic is here. I may post a summary -- there are comparison charts, but they all tend to focus on feature set and fall short on the overall use case. On my thread,

    • Misskey was recommended as Facebook-like, and in particular, some of its forks have features the core project is missing. I always got the impression Misskey was a Mastodon-analog, which would make it not a good fit, so I've skipped over it. With Friendica out, I'm going to put Misskey back on the "possible" list.
    • Diaspora has also been recommended and is near the top of my list.
    • Smithereen was recommended, but the sparsity of the documentation -- not even a list of features -- put it down low on my list.
    • Hubzilla has a lot of documentation; it focuses a lot on content management -- assets, calendars, document sharing, etc. -- which will be fine if "easily post content to a feed" and "follow a user and view a stream of their posts" is a first-class interaction model.
    • Pixelfed is still an option. I just need to confirm/refute my "Mastodon, with pictures" perception. If my perception has been skewed by the fact that I'm interacting with Pixelfed through a (mainly) Mastodon app, then maybe it'll work. However, there isn't AFAICT a Pixelfed app, so if the only way to get to a more wall-like view is through a web interface, it's not going to work.

    @acockworkorange@mander.xyz is also looking for this feature set / use case. I kind of feel as if it's more useful to think about this as a use case, because almost all of these projects can claim some or all of the requested features, and yet not satisfy what we're looking for in terms of user experience. This would be a great opportunity for another tool: a wiki with a list of applications & features, but with a discussion section and focused on winnowing projects by consensus about suitability. Again, lots of software that have the necessary functionality and which could be wrangled to do this, but still fail to be a good tool for the objective.

    Edit

    Probably not the best place to do this, because I'm the only one who can edit this, but:

    I deleted the table, as it wasn't rendering on some mobile clients. The table was re-created in CryptoPad.

    I'll go find a collaborative, wiki-like document thing with discussions that isn't G**gle.

    Edit 2

    The table is now here, as a CryptPad document. In an exercise of trust, it's open to edits. If vandals wreak too much damage, I'll restrict access, but that'll require creating accounts and requesting access, and all that shiz.

  • Barcelona is turning subway trains into power stations
  • This is an excellent point. They probably minimize batteries on the train, because Why use energy accelerating all that extra mass? Same with flywheels; it makes no sense to put a lot of energy storage on the train when it's connected to the grid 100%.

    On the other hand, one way the title would make sense is if the trains weren't connected 100% to the grid, and do have batteries or flywheels charged by regenerative braking. And the places they're newly powering are places where the train grid doesn't reach. So, basically, they're getting charged with potential energy in one location with enough energy to get them to the next connected grid location, then moving to an in-between place that isn't connected to the grid and recharging with regenerative braking. Since they now have excess energy to get back to the grid, they release some of that energy to the local station, providing it power. They're cargo trains, transporting electricity to places that aren't on the train grid.

    That would make this article make sense.

  • I only engage with unproblematic media, always.
  • Yeah, I didn't, and don't, pay attention to celebrity gossip. In retrospect, when it was first news and it was being covered everywhere, yeah, it seems that it was pretty well known in industry.

    I just watch the movies; I don't care about the actor's personal lives.

  • China’s newest nuclear submarine sank in dock, US officials confirm
  • having a crew full of resentful balls of anxiety is not worth it to them.

    I completely believe you. Still, at the time I was making the choice, I didn't know this; I knew for sure that while I was in, my self-determination would be strictly limited, but I didn't know details, and there was no. fucking. way. that I was going to risk being stationed on a sub.

    a vague sense of exclusivity

    I have a recollection about this being a thing: that there's a certain cachΓ© among Navy folks about being sub crew. I once knew a retired nuclear sub captain, and while he was a day drinker, he was pretty proud of his service. He also fell asleep in meetings, but I guess he did his job well enough for this all to be overlooked. I visited his office once (in our office in another city), and one of his bottom desk drawers was full of just bottles of whiskey. I've never encountered anything like that, before or since. But I digress.

  • How happy are you with your current distro?
  • I've gone months between updates. On servers, that's a little more risky because it CVEs, which can also apply to the kernel, but LTS is probably safe enough there: if there's a kernel CVE, LTS will be updated.

    I've had trouble with pinning the kernel before, though. Last time I did it, I went several months and forgotten I'd done it, and my system got itself wedged because some package was expecting a newer kernel; it took me a while to figure out.

    LTS might be a better option, since that will be caught be dependency management. Pinning can cause version dependency mismatch issues.

  • It's not only dangerous to drive drunk, it's also dangerous to walk drunk outdoors because of cars.
  • I did say cycling/pedestrian accidents are less fatal. I just don't believe that justifies irresponsible cycling. You can still easily be put into the hospital by a cyclist, and (in America) you'll be paying your own bills. And bills or not, I don't need or any any pain, suffering, broken bones, bruises, concussions, or any damage that's caused by being hit by a cyclist.

    Pets can be fatally injured by cyclists, and they often share the same space as pedestrians.

    Just... don't navigate any vehicle in public while inebriated.

  • Total Denotational Semantics (blog)
  • Oh, I don't follow the math at all, and much of the terminology is gibberish to me. I just didn't want you thinking you couldn't understand something you probably could, if you spent some time in the field.

    I agree that understanding the math is always next level; you almost have to be working in the domain, or at least be a mathematician, to follow the maths in papers like this. I sort of gloss over it, now; despite being 4 credits short of a math minor, I've never use any of it outside of set theory and a little discrete math in my career and have forgotten nearly everything past algebra. It's frustrating, but although I enjoyed it, I didn't enjoy it enough to keep up in my free time and it's a perishable skill.

    Anyway, while coming up with and proving the research requires real skill, I hate the idea of someone assuming they're incapable of understanding something, when it's often not a lack of potential, only a lack of education.

    Lastly: I do think we have limits. I didn't take that last math course because I was already struggling with the number of levels of abstraction required to mentally retain the tools to do the work, and realized I'd never be a professional mathematician. There are levels of math I'm simply too stupid to understand, no matter how much time I spent studying. But the barrier in this paper IMHO seems to be that it's highly domain specific, and so demands a fair amount of understanding of domain terminology.

  • Why do I throw up after smoking weed?
  • That's a good idea. I can't say I've prayed much attention to the CBD content. Maybe I'll give that a try, although being nauseous for four hours is almost not worth experimenting with.

  • showerthoughts is a better unpopularopinion than unpopularopinion
  • I think it's more that people like to be contrarian, more so now that a lot of Reddit has moved to Lemmy. If someone says they have an unpopular opinion, crowds of people will jump to say it's not really unpopular; if someone posts a shower thought, it seems like you get a lot of responses contradicting the thought, or simply claiming it's not a shower thought. TBF, there do seem to be a significant number of posts in c/showerthoughts that aren't; like, long political posts, or whatnot.

    Still, contrarian responses are becoming the norm.

  • Attack Surface Diet
  • That's not an easy question to answer, since it depends on your use case. Of you're running a mail server, you need SMTP; if you aren't, you don't. There is no one-size-fits-all.

    However, I will suggest an approach that can guide you:

    • Use the firewall, whatever you have installed, and bock off everything except ssh.
    • One by one, expose the ports you need, conservatively.
    • If you run web services, reverse proxy everything through a single server, preferablys one that's only reverse proxying, is running as bare bones as possible, and is as simple as possible.
    • Once you get things working, go through and shut down and remove any services that you aren't exposing or using via 127.0.0.1.
    • Once this is done, if you are technically capable, set up a Wireguard VPN with your home computer / laptop (preferable two), make sure the connections survive reboots, and then close and lock the door: firewall-block SSH except from your private VPN connections.

    In the end, you may have only 3 ports open: https, SMTP, and IMAP. Assuming you've secured the web, smtp, and imap servers, this is about as secure as you're going to get with a single server.

    If you are able to, run each service on it's own VPS: web server on one, IMAP and SMTP on another, and any web applications on their own servers. Connect them only via your VPN, and only through necessary ports, and close everything else. Shut down ssh between the servers, only allowing ssh connections from your laptop. Personally, I think it's not too bad to run web apps in podman containers and expose those ports to the proxy server over there VPN, but ideally there'd be one VPS poet app, with servers not being able to talk to each other through the firewall.

    TL;DR: secure your network before focusing on shutting down and removing programs. Lock down your firewall. Set up a private VPN, and restrict as much internal traffic to it as possible.

  • I only engage with unproblematic media, always.
  • I think Kevin Spacey may be one of the best (most skilled) actors of his generation, and among the best across several generations. A true peer of Dustin Hoffman.

    I was shocked by the allegations, and crushed when it became evident (to me) that it wasn't a smear campaign.

    In a way it's crazy that I can be so emotionally engaged with someone I've never met, likely never will, and who has no idea I exist. OTOH, it's not surprising when people we respect, or even idolize, turn out to be not only merely human, but morally flawed in particularly inexcusable ways.

    I still feel sad and betrayed by Spacey, and it'll forever taint my ability to enjoy his incredible performances.

  • Modern wonders exist
  • More proof. It's called the "Bullring", but i always thought it looked like a sperm whale.

  • Court revives lawsuit of Black pastor who was arrested while watering his neighbor's flowers
  • This is exactly Why I'm conflicted about doxxing.

    Social pressure picks up where the legal system stops; it's the thing that encourages good manners and politeness, because those can't (and shouldn't be) be regulated. Shaming is a powerful force, and can be a force for good.

    Shaming can also be a force for ill, and the downsides of doxxing probably outweigh the upsides. But still... I think we're missing a mechanism that would normally moderate bad social and ethical behaviors like this.

  • Elon Musk’s X is now worth less than a quarter of its $44 billion purchase price
  • I wish, I wish... I wish I was a fish.

    I wish there was an instrument other than the stock market whereby private individuals could combine their funds to perform hostile take-overs, and then manage them by pre-agreed conditions.

    Like: we're going to buy Twitter, build an AP interface on it, federate it, and operate it like a non-profit. We're going to have a set of these S core values, with yearly votes on changes proportional to investment. No single investor can own more than T percent of shares Investors can sell their shares, or buy shares. Stock will never spilt. Management salaries, combined, can never exceed more than M% of non-management combined salaries, and run it as a Holocracy. Or, maybe, shares can only be sold to employees, who have to sell to other employees when they leave.

    You know; try to design a good operating model that avoids the pitfalls of other companies, and can adapt when the model demonstrates perverse incentives. Put more thought into it than my ramblings above.

    But ten billion dollars is a lot of money to put together, and the rules I'd like to see necessarily exclude the sort of profit-only driven capitalists who'd be able to contribute heavy loads, and would limit the amount that could contribute.

    I may as well wish I were a fish.

  • showerthoughts is a better unpopularopinion than unpopularopinion

    The reactions to most posts are overwhelmingly negative and critical. Ironically, posts to c/unpopularopinion tend to argue that they agree with the post, and are consequently more supportive.

    2
    QMK (and Kanata)

    I'm posting here because I have nowhere else to post. If you squint, this meets the community rules because my current keyboard is a Piantor/42, and my issue stems from a combination of 40% and QMK behavior. Although, to be honest, this is mostly about QMK, but using Discord is painful, and I'll go there only as a last resort.

    For a long while, I used Kanata on my laptop, and desktop an ErgoDox, having replaced kmonad because of one certain feature: tap-hold key sequence behavior. It's best described here, but the tl;dr is that (press lsft) (press a) (release lsft) (release a) where a is a tap-hold key should output "A" and not "a" -- kmonad outputs "a".

    A few months ago, when I got my Piantor, I discovered that this sequence outputs no character, and although there's an option that makes it output "a", I can't find a combination that makes it output "A". I'm asking whether, in the bewildering set of QMK variables, is there a way to configure QMK s.t. the sequence (press lsft) (press a) (release lsft) (release a) outputs "A"?

    That's the main thrust of my question. As a sort of addendum, I think this behavior is behind another of my QMK irritations: I'm a reasonably fast typer, and often will be typing the next key before I've completely released the previous key. This means I have to set a large-ish time-out before tap-hold engages, which introduces an annoying delay whenever I want to chord a layer and get at, e.g. numbers. I do understand that this is may be an unsolvable issue, that it's just an unavoidable limitation on small keyboards in having so many common keys (numbers, punctuation, and arrows are the worst -- coding, nearly half the text are characters from layers). Either I have a long timeout and and live with an annoying delay when I want to type (many) punctuation characters or numbers; or I have a short timeout and frequently accidentally shifting layers. However, I feel as if this might be mitigated somewhat with the Kanata-style key sequence handling, because even though my Kanata configuration is nearly an exact mirror of my QMK layer configuration, I never have this problem with Kanata.

    I suppose I could give up on using QMK for anything except the most fundamental mapping, and use Kanata instead. However, there's an appeal to the portability of having the programming in the keyboard itself; it makes me a little less dependent on the computer to which the keyboard is attached.

    5
    What's currently (2024) the best self-hosted alternative for a Facebook Wall type of user experence?

    Edit 2024-10-01

    Another person posted about a similar need, and I decided to create a matrix document to track it, in the hope that those of us looking for this specific use case could come up with the best solution. The idea here is that, while many OSS social media projects are capable of being used like a Fcbook wall, they don't all necessarily provide an ideal user experience. Feature set is not equivalent to being designed for a specific use case, and the desired workflow should be the primary means of interacting with the service. The (for now) open document tracking this is here.

    I'm a little surprised I can't find any posts asking this question, and that there doesn't seem to be a FAQ about it. Maybe "Facebook" covers too many use cases for one clean answer.

    Up front, I think the answer for my case is going to be "Friendica," but I'm interested in hearing if there are any other, better options. I'm sure Mastodon and Lemmy aren't it, but there's Pixelfed and a dozen other options with which I'm less familiar with.

    This mostly centers around my 3-y/o niece and a geographically distributed family, and the desire for Facebook-like image sharing with a timeline feed, comments, likes (positive feedback), that sort of thing. Critical, in our case, is a good iOS experience for capturing and sharing short videos and pictures; a process where the parents have to take pictures, log into a web site, create a post, attach an image from the gallery is simply too fussy, especially for the non-technical and mostly overwhelmed parents. Less important is the extended family experience, although alerts would be nice. Privacy is critical; the parents are very concerned about limiting access to the media of their daughter that is shared, so the ability to restrict viewing to logged-in members of the family is important.

    FUTO Circles was almost perfect. There was some initial confusion about the difference between circles and groups, but in the end the app experience was great and it accomplished all of the goals -- until it didn't. At some point, half of the already shared media disappeared from the feeds of all of the iOS family members (although the Android user could still see all of the posts). It was a thoroughly discouraging experience, and resulted in a complete lack of faith in the ecosystem. While I believe it might be possible to self-host, by the time we decided that everyone liked it and I was about to look into self-hosting our own family server (and remove the storage restrictions, which hadn't yet been reached when it all fell apart), the iOS app bugs had cropped up and we abandoned the platform.

    So there's the requirements we're looking for:

    • The ability to create private, invite-only groups/communities
    • A convenient mobile capture+share experience, which means an app
    • Reactions (emojis) & comment threads
    • Both iOS and Android support, in addition to whatever web interface is available for desktop use

    and, given this community, obviously self-hostable.

    I have never personally used Facebook, but my understanding is that it's a little different in that communities are really more like individual blogs with some post-level feedback mechanisms; in this way, it's more like Mastodon, where you follow individuals and can respond to their posts, albeit with a loosely-enforced character limit. And as opposed to Lemmy, which while moderated, doesn't really have a main "owner" model. I can imagine setting up a Lemmy instance and creating a community per person, but I feel as if that'd be trying to wedge a square peg into a round hole.

    Pixelfed might be the answer, but from my brief encounter with it, it feels more like a photo-oriented Mastodon, then a Facebook wall-style experience (it's Facebook that has "walls", right?).

    So back to where I started: in my personal experience, it seems like Friendica might be the best fit, except that I don't use an iPhone and don't know if there are any decent Friendica apps that would satisfy the user experience we're looking for; honestly, I haven't particularly liked any of the Android apps, so I don't hold out much hope for iOS.

    Most of the options speak ActivityPub, so maybe I should just focus on finding the right AP-based mobile client? Although, so far the best experience (until it broke) has been Circles, which is based on Matrix.

    It's challenging to install and evaluate all of the options, especially when -- in my case -- to properly evaluate the software requires getting several people on each platform to try and see how they like it. I value the community's experience and opinions.

    13
    Request for font identification

    Can anyone identify this font? The title page in the ebook is an image, and there's no credit listed, and my web searches have all been dead ends.

    I'm not certain there aren't three similar fonts; there are at least two distinct fonts here, and maybe three, although they could all be in the same family -- Bold, Normal, and Light. I'm most interested in the middle font, but all three are interesting.

    It's a striking title page, and I'd really like to ID these. My fall back will be to write the publisher and ask, but I'm hoping someone here will be able to toss the family off the top of their head.

    3
    United States | News & Politics @midwest.social π•½π–šπ–†π–Žπ–‰π–π–—π–Žπ–Œπ– @midwest.social
    What happens if Trump replaces Vance?

    I haven't seen this discussed since the debate, and I'm curious what people think would happen.

    (If you've seen this twice, I first posted it to a community that only allows links to news items, which rule I read only after creating the post. I removed that post)

    The idea came from a post-debate discussion on NPR (National Public Radio), where one of the (professional) political commentators was asked if this was possible and they replied, briefly, that it would have to be done soon.

    1. From the analyst's response, and what I can find online (e.g., here) it seems that it's not too late for Trump to make this change. Vance would have to voluntarily step down, but I can't imagine him defying Trump if he was told to beat it.
    2. It's clear Trump isn't as enamored of Vance as he initially was.
    3. I think even hard-core conservatives would agree that Vance hasn't helped Trump's campaign, and (as the commentator pointed out) he's gone off-piste from Trump's talking points at times.
    4. Trump's core is voting for Trump; the running mate is a side show, and it's questionable how much Vance appeals to Trump's base. I believe Trump knows all of this, or at least believes it himself.
    5. Trump prides himself on firing people when he doesn't like the way things are going, and it would be in keeping character for him to make Vance a scapegoat for the polling reversal and his losing the debate.

    Therefore, I think this is not just a purely hypothetical question, but a very real possibility. Trump is chaos at the best of times, and this would be an unsurprising action. Regardless of advice he gets from his handlers, he'll do what he feels like.

    So my questions are: first, who's the most likely choice for a swap; and second, how do you think it'd impact the election?

    10
    Live Facial Recognition at Bedford River Festival leads to two arrests

    cross-posted from: https://feddit.uk/post/15132091

    > Bedfordshire Police have said just ten arrests were made over the Bedford River Festival this weekend (20/21 July) with Live Facial Recognition (LFR) technology responsible...

    15
    Live Facial Recognition at Bedford River Festival leads to two arrests
    www.bedfordindependent.co.uk Live Facial Recognition at Bedford River Festival leads to two arrests - Bedford Independent

    Bedfordshire Police have said just ten arrests were made over the Bedford River Festival this weekend (20/21 July) with...

    cross-posted from: https://feddit.uk/post/15132091

    > Bedfordshire Police have said just ten arrests were made over the Bedford River Festival this weekend (20/21 July) with Live Facial Recognition (LFR) technology responsible...

    0
    Community Moopsie plushie?

    I vastly prefer to support community artisans over mass-produced material when I can. Is anyone in the community making Moopsies?

    7
    USpolitics @lemmy.world π•½π–šπ–†π–Žπ–‰π–π–—π–Žπ–Œπ– @midwest.social
    Anonymous op-ed posting?

    Cross-posting here, as the content under discussion is political in nature, and I feel as if the question might be of similar concern to other posters. Most probably don't care; data miners harvesting information to sell to HR departments and hiring managers are a real thing, though, so I think answers are relevant.

    cross-posted from: https://midwest.social/post/14464872

    > A friend of mine would like to post an op-ed style political essay about the current turmoil in the Democratic Party about Biden's fitness. They are concerned about it affecting their career, should it be linked back to them; the US is highly divided and they know some of their peers are Republicans, and they're not sure about the affiliations of people in their upward chain of command. My friend is concerned that posting an emotional opinion piece might -- if attributed to them and seen -- negatively affect their career. They want to stay anonynmous. > > I think getting something posted anonymously in Lemmy would be fairly easy; no-one is going to trying legally coercing an email out of a Lemmy instance over an op-ed. And getting a boost in Mastodon would be simple. I was hoping that there'd be something like WriteFreely where they could post, but anonymity appears to be not even a consideration by the main developers. > > And then there's the question of how to get links to the essay out of the Fediverse, where 90% of the people are. I don't have a Xitter account anymore, and have never had a Facebook account. > > What suggestions does Lemmy have? How, in today's world, does someone anonymously post content? > > Subscript: I do not mean political anonymity -- not in the way that protection from law enforcement is needed. My friend lives in the US where freedom of speech is still more-or-less ensured, and the content is not illegal, incidiary, inciting, or even unusual. However, they want anonymity sufficient to guard against data miners, correlators, and brokers. They need to get something off their chest, express an opinion, but not at a risk to their career.

    0
    Anonymous op-ed posting?

    A friend of mine would like to post an op-ed style political essay about the current turmoil in the Democratic Party about Biden's fitness. They are concerned about it affecting their career, should it be linked back to them; the US is highly divided and they know some of their peers are Republicans, and they're not sure about the affiliations of people in their upward chain of command. My friend is concerned that posting an emotional opinion piece might -- if attributed to them and seen -- negatively affect their career. They want to stay anonynmous.

    I think getting something posted anonymously in Lemmy would be fairly easy; no-one is going to trying legally coercing an email out of a Lemmy instance over an op-ed. And getting a boost in Mastodon would be simple. I was hoping that there'd be something like WriteFreely where they could post, but anonymity appears to be not even a consideration by the main developers.

    And then there's the question of how to get links to the essay out of the Fediverse, where 90% of the people are. I don't have a Xitter account anymore, and have never had a Facebook account.

    What suggestions does Lemmy have? How, in today's world, does someone anonymously post content?

    Subscript: I do not mean political anonymity -- not in the way that protection from law enforcement is needed. My friend lives in the US where freedom of speech is still more-or-less ensured, and the content is not illegal, incidiary, inciting, or even unusual. However, they want anonymity sufficient to guard against data miners, correlators, and brokers. They need to get something off their chest, express an opinion, but not at a risk to their career.

    13
    Lower Decks & the curse of ending too soon

    It is not my intention to ignite an EMACS/vim war; I will say that I find it baffling that Lower Decks is ending while Strange New Worlds is being continued. I like Strange New Worlds, despite disagreeing with some of the artistic licenses being taken. But if I had to choose between the two shows, it'd be no contest. Not only as a viewer do I prefer LD, but it has to be the cheaper show to produce. The fact that next season is the last (both by design, it only being contracted for 5 years; and announcement) is sad and incomprehensible in the same way the cancelation of Firefly was - except LD is popular and successful, whereas Firefly merely had a fanatical (πŸ–οΈ) fan base.

    I don't understand it. Yes, you want to end on a high note. Maybe the writers are running out of plot ideas. Perhaps, given an initial life span of 5 years, the actors have all made other arrangements and aren't available. But I just can't believe the One Big Plot Arc that's been building would necessitate ending the series by its resolution.

    LD is a strong show. It's lighthearted. It's a breath of fresh air after the more decidedly darker, ethically challenging, and emotionally straining runs of TNG, Voyager, DS9. And Strange New Worlds... the Gorn are basically Xenomorphs from the Alien franchise.Who, despite being the existential threat of the show, somehow get entirely forgotten about by the time in TOS.

    But I digress. I'm going to miss Lower Decks, badly. How can this happen? And why?

    53
    [Vent] Please avoid BusyBox

    This is kind of a rant, but mostly a plea.

    There are times when BusyBox is the only tool you can use. You've got some embedded device with 32k RAM or something; I get it. It's the right tool. But please, please, In begging you: don't use it just because you're lazy.

    I find BusyBox used in places where it's not necessary. There's enough RAM, there's more than enough storage, and yet, it's got BusyBox.

    BusyBox tooling is absolutely aenemic. Simple things, common things, like - oh, - capturing a regexp group from a simple match are practically impossible. But you can do this in bash; heck, it's built in! But BusyBox uses ash, which is barely a shell and certainly doesn't support regexp matching with group capture. Maybe awk? Well, gawk lets you, with -oP, but of course BusyBox doesn't use GNU awk, and so you can't get at the capture groups because it doesn't support perl REs. It'd be shocking if BusyBox provided any truly capable tools like ripgrep, in which this would be trivial. I haven't tried BB's sed yet, because sed's RE escaping is and has always been a bizarre nightmarish Frankenstein syntax, but I've got a dime riding on some restriction in BB's sed that prevents getting at capture groups there, too.

    BusyBox serves a purpose; it is intentionally barely functional; size constraining trumps all other considerations. It achieves this well. My issue isn't with BusyBox, it's with people using it everywhere when they don't need to, making life hell for anyone who's trying to actually get any work done in it.

    So please. For the sanity of your users: don't reach for BusyBox just because it's easy, or because you're tickled that you're going to save a megabyte or two; please spare a thought for your users on which you are inflicting these constraints. Use it when you have to, because otherwise it doesn't fit. Otherwise, chose a real shell, at least bash, and include some tools capable of more than less than the bare minimum.

    25
    Moar Borderlands

    I know it's tragically pedestrian; and I know there's supposed to be a 4 in 2025; and I also know there's many a slip twixt cup and lip, and the gaming industry is going through some pretty radical changes... but all I really want is another Borderlands.

    There's not much they can do with it, not many places to go, and I'm sure everyone who's worked on the series over the years is thoroughly sick of it. But, damn. Every one of the main games (at least; I haven't loved every in-between spin-off) has his a sweet spot of mindless fun, funniness, and replay-ability. I've played 3 so many times through, and spent so many hours just running around in every location, even I can't work up much enthusiasm to fire it up anymore.

    There's an occasional game that fills the same niche; Bullet Storm was pretty fun, but with low replay-ability. I just want a game where I can turn off the higher brain functions and run around killing stuff in interesting ways.

    Thanks for attending my Ted Talk.

    9
    [ANN] Rook v0.1.3, a secret service backed by a KeePass v2 DB

    Rook provides a secret service a-la secret-tool, keyring, or pass/gopass, except backed by a Keepass v2 kdbx file.

    The problem Rook solves is mainly in script automation, where you have aerc, offlineimap, isync, vdirsyncer, msmtp, restic, or any other cron jobs that need passwords and which are often configured to fetch these passwords from a secret service with a CLI tool. Unlike existing solutions, Rook is headless, and does not have a bespoke secrets database full of passwords that must be manually synchronized with Keepass; instead, it uses a Keepass db directly.

    Rook is in the AUR; binaries are available from the project page.

    From the changelog, since the last Lemmy release announcement (v0.0.9):

    [v0.1.3] Mon May 20 17:12:25 2024 -0500

    Added

    • status command, a more lightweight way of testing if a DB is open. Using this instead of info in e.g. statusbar scripts greatly reduces CPU load.
    • case-insensitive search.

    Changed

    • removing some nil panics that could occur when DB is closed while a client call is being processed.

    Fixed

    • a hidden bug in the OTP pin code.
    • some errors being ignored (and therefore not logged)
    • TOTP attributes getting missed by otp generator check

    [v0.1.2] Fri Apr 26 15:13:55 2024 -0500

    Added

    • one-time pin soft locking
    • installation instructions for distributions that have rook in a repository
    • more of the special autotype {} commands are supported (backspace, space, esc)

    Changed

    • getAttr adds a little delay before typing, allowing initiator tools (like rofi) to close windows before text is output
    • cleans up code per golint/gochk

    Fixed

    • an autotype bug in outputting literals

    [v0.1.1] Sun Mar 17 13:44:54 2024 -0500

    Added

    • the original source rook.svg
    • ability to start the rook server passing in the password via stdin pipe.

    Changed

    • assets moved to directory
    • documentation referenced Keepass v4; there's no such thing, it's v2.
    • license, was missing (c) from original
    • stop trying to remove the version number from build assets
    • documentation to clarify when the master password exists as plain text, in response to questions from @d3Xt3r@lemmy.nz

    [v0.1.0] Fri Mar 15 14:03:25 2024 -0500

    Added

    • nfpm file
    • logo

    Changed

    • clears out the password so it's not being held in plain text by the flags library.
    • some of the documentation, and fixes the duplicated v0.0.9 entry in the changelog.
    • CI build targets are more limited, but also include some distro packages
    • better README documentation

    Removed

    • the monitor attribute was taken out, as rook no longer busy-polls the DB
    0
    [Ann] v0.1.2 of rook, a keepass-backed secret service

    Rook is a lightweight, stand-alone, headless secret service tool backed by a Keepass v2 database. It provides client and server modes in a single executable, built from a reasonably small (auditable) code base with a small and shallow dependency tree - it should not be challenging to verify that it is not doing anything sketchy with your secrets.

    Reasonable auditability, the desire to use KeePass files, and to do so through a headless tool that doesn't spawn off the better part of a DE through otherwise unused services, were the main motivations for Rook.

    You might be interested in Rook if one or more of these are true:

    • you use KeePass v2-compatible tools to store secrets already
    • you are not running a DE like KDE or Gnome (although Rook may still be interesting because of secret consolidation)
    • you prefer to minimize background GUI applications (KeePassXC is excellent and provides a secret service, but doesn't run headless)
    • you run background applications such as vdirsyncer, mbsync (isync), offlineimap, or restic, or applications such as aerc that can be configured to fetch credentials from a secret service rather than hard-coded in a config file.

    Pre-built binaries for limited OS/archs are built by the CI, and Rook if available in AUR. There's an nfpm config in the repos that will build RPMs and Debs, among others. I consider Rook to be essentially free of any major bugs and fit-for-purpose, although I welcome hearing otherwise.

    Utility scripts in zsh and bash are available for providing autotyping and entry/attribute selection using xdotool, rofi, xprop, and so on; these are YMMV-quality.

    Changes from v0.1.1 are:

    Added

    • one-time pin soft locking
    • installation instructions for distributions that have rook in a repository
    • more of the special autotype {} commands are supported (backspace, space, esc)

    Changed

    • getAttr adds a little delay before typing, allowing initiator tools (like rofi) to close windows before text is output
    • cleans up code per golint/gochk

    Fixed

    • an autotype bug in outputting literals
    0
    [Solved] Elektra Micro Casa Leva portafilter(s)

    Update

    On a whim, I tried searching YouTube instead of search engines and found a short video which led me to this shop in Etsy. It looks quite promising, so I'm going to update the title as "solved."

    Original post

    I've had an Elektra Micro Casa Leva for a number of years, and a while ago I bought a naked portafilter for it. It was (and still is, on the product site) as "for the Micro Casa." It is, without a doubt, one of the poorest quality things I've ever bought. The wood appears painted, not stained; it's been resistant to oiling, and lately the paint has been flaking off leaving what I assume is cheap pine. The wood itself has been cracking and splitting. The portafilter itself is painted to look like brass; I can tell this because that paint has started chipping and peeling. It looks as if it's some type of steel underneath -- I'd suspect aluminum, except for the weight and I assume the maker would be concerned about having one literally melt on a user. In any case, it's horrible. The handle is not screwed in, or else it's screwed & glued; if the metal weren't so obviously crap, I'd consider routing out the handle and replacing it myself; as is, it's so poorly made it hardly seems worth the effort. Regardless, I've been using it for a few years and it hasn't outright broken yet, but with all the paint chipping and peeling, it's looking really rough, and you don't own a Micro Casa Leva for the convenience.

    The Elektra takes a non-standard 49mm portafilter, which can make finding parts challenging. Is there a company that makes decent portafilters that fit the Leva? It's possible I simply haven't delved the depths of the web deeply enough. Or, is there a craftsman in the community who does this sort of work -- making nice handles, sourcing appropriate baskets, etc? Failing all of that, is there a place I can buy a naked portafilter of good quality for the Leva, and is there anyone making good handles for portafilters? I'm no craftsman, but I can manage sanding wood to fit a hole, and I can mix epoxy.

    What I'd really like to end up with is a brass portafilter with a beautiful wood handle with a nice grain and stain. I'd settle for a naked portafilter for the Leva that isn't a cheap piece of garbage.

    0
    Rook, a secret service backed by Keepass 4.x kdbx

    cross-posted from: https://midwest.social/post/9890016

    > Rook, a secret service backed by Keepass 4.x kdbx > > Howdy Lemmy, > > I'm announcing Rook v0.0.9, software that provides a secret service a-la secret-tool, keyring, or pass/gopass, except backed by a Keepass 4.x kdbx file. > > The problem Rook solves is mainly in script automation, where you have aerc, offlineimap, isync, vdirsyncer, msmtp, restic, or any other cron jobs that need passwords and which are often configured to fetch these passwords from a secret service with a CLI tool. Unlike existing solutions, Rook is headless and does not have a bespoke secrets database, full of passwords that must be manually synchronized with Keepass; instead, it uses a Keepass db directly. > > While the readme goes into more detail, I will say the motivation for Rook evolved from a desire to use a Keepass db in a GUI-less environment and finding no existing solutions. KeepassXC provides a secret service, but is not headless; it also provides a CLI tool, but this requires the db credentials on every call. kpmenu exists, but is designed specifically to require human interaction and is unsuitable for cron environment scripting. Every other solution maintains its own DB back end, incompatible with Keepass. > > Rook also benefits from minimal external dependencies, and at 1kloc is auditable by developers - I believe even by ones who do not know Go (the language of implementation). Being able to verify for yourself that there's no malicious code is a critical trait for a tool with which you're trusting secrets. > > Rook is fit for purpose, and signed binaries are provided as well as build-from-source instructions (for auditors). > > The project contains work in progress: credentials are limited to simple password-locked kdbx, and so doesn't yet support key files. Bash scripts that provide autotyping and attribute/secret selection via rofi, fzf, and xdotool are provided, for GUI environments; these have known bugs. Rook has not been tested on BSD, Darwin, or any other system than Linux, but may well work; the main sticking point is the use of a local file socket for client/server communication, so POSIX systems should be fine, but still, YMMV. > > As a final caveat: up until v0.0.9 I've been compressing with brotli, which is very nice yet somewhat obscure. With the next release, everything will be gzipped. Also included in the next release will be packages for various distributions.

    0
    Rook, a secret service backed by Keepass 4.x kdbx

    Howdy Lemmy,

    I'm announcing Rook v0.0.9, software that provides a secret service a-la secret-tool, keyring, or pass/gopass, except backed by a Keepass 4.x kdbx file.

    The problem Rook solves is mainly in script automation, where you have aerc, offlineimap, isync, vdirsyncer, msmtp, restic, or any other cron jobs that need passwords and which are often configured to fetch these passwords from a secret service with a CLI tool. Unlike existing solutions, Rook is headless and does not have a bespoke secrets database, full of passwords that must be manually synchronized with Keepass; instead, it uses a Keepass db directly.

    While the readme goes into more detail, I will say the motivation for Rook evolved from a desire to use a Keepass db in a GUI-less environment and finding no existing solutions. KeepassXC provides a secret service, but is not headless; it also provides a CLI tool, but this requires the db credentials on every call. kpmenu exists, but is designed specifically to require human interaction and is unsuitable for cron environment scripting. Every other solution maintains its own DB back end, incompatible with Keepass.

    Rook also benefits from minimal external dependencies, and at 1kloc is auditable by developers - I believe even by ones who do not know Go (the language of implementation). Being able to verify for yourself that there's no malicious code is a critical trait for a tool with which you're trusting secrets.

    Rook is fit for purpose, and signed binaries are provided as well as build-from-source instructions (for auditors).

    The project contains work in progress: credentials are limited to simple password-locked kdbx, and so doesn't yet support key files. Bash scripts that provide autotyping and attribute/secret selection via rofi, fzf, and xdotool are provided, for GUI environments; these have known bugs. Rook has not been tested on BSD, Darwin, or any other system than Linux, but may well work; the main sticking point is the use of a local file socket for client/server communication, so POSIX systems should be fine, but still, YMMV.

    As a final caveat: up until v0.0.9 I've been compressing with brotli, which is very nice yet somewhat obscure. With the next release, everything will be gzipped. Also included in the next release will be packages for various distributions.

    6
    Help with QMK issue

    I assume this is QMK, because changing the settings clears or introduces the issue. I'm using Vial for the programming/configuration.

    I have a key configured tap-dance, like many others: - on tap, and ctrl on hold. The issue is that most of the time when I type something like -p, I get only the -. Then, the next time I type p, I get 2 of them. So something like this will happen:

    I type foo -p bar baz, but don't notice the p is missing until after baz, cursor left and type p again, and end up with -pp

    Most of my keys are tap-dance of some pattern: <char> on tap, layer shift in hold, <char> on tap-hold. I've noticed this buffered character after - on other characters; it isn't just p. Changing the timeout does affect the frequency, but doesn't entirely eliminate it. I haven't noticed it on any other combo, although they're all of the same pattern; it seems to be only happening with the -/ctrl tap-dance. Removing the multitap on - eliminates the issue.

    This is my first QMK. I'd been using an Ergodox for years, and kmonad on my laptop for a year or so, although I recently switched to kanata (fantastic piece of software, incidentally), so I'm more or less familiar with the world of layers, multi-tap/tap-dance, combos, and so on. This one has me stumped, though.

    I've checked and there's no combo defined that involves dash. I've never created a QMK macro, but it occurs to me that I didn't check if there are any defined.

    Does anyone have a suggestion of how I can debug this? Could there be some bug, some bit that I accidentally set, that's causing this? Is there some QMK feature that does exactly this thing, and I've somehow enabled it? I've power cycled the keyboard, although I haven't yet tried a hard or factory reset.

    Any ideas would be appreciated!

    Edit corrected "multi-tap" to "tap-dance", as QMK calls it the one thing and not t'other

    6
    sxan π•½π–šπ–†π–Žπ–‰π–π–—π–Žπ–Œπ– @midwest.social

    πŸ…Έ πŸ…°πŸ…Ό πŸ†ƒπŸ…·πŸ…΄ πŸ…»πŸ…°πŸ††. π•½π–šπ–†π–Žπ–‰π–π–—π–Žπ–Œπ– π–‹π–Šπ–†π–™π–π–Šπ–—π–˜π–™π–”π–“π–Šπ–π–†π–šπ–Œπ–

    Posts 33
    Comments 2.8K