Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)ER
Posts
0
Comments
31
Joined
2 yr. ago

  • It's hard to give tips without knowing your situation better, but here are a few general ones that probably already set you apart from the vast majority of other small companies:

    • Keep your stuff updated, especially when there are security fixes available
    • don't take convenience shortcuts that compromise on security (e.g. relying on "security through obscurity")
    • block incoming traffic by default (you only need some people from your country to access the network? Maybe even block ip ranges from the other side of the world)
    • log access to your network and also analyse the logs often (probably with the help of some software)

    I'm just some Software Engineer with a few years of experience, not some security expert though😅

  • Mostly the same. I tried ChatGPT a few times to get it to generate some code, but mostly it produced code that didn't even compile and when I asked it to fix it, it created code that didn't compile in a different way. I enjoy writing code on my own a lot more than having to review some pre-generated code.

    Though I use it as a glorified Google sometimes and that is not even so bad.

  • And last time I checked they wanted to change the law so the overachievement over other sectors can excuse the failure in others. So no need to do something in the traffic sector, if other areas performed better. Not sure what the current state of this plan is, but I would assume they didn't take it back, which would seem the only reasonable thing to do🤷‍♂️

  • I guess it is impossible to say what would have happened if Google never used XMPP. To me it mostly looks like google joined XMPP and made it way bigger than it was before and eventually left it again, making it small again. But is it worse than before Google even joined?

    Maybe, but can we say for sure?

    Maybe the lesson is not "don't let the big corporate players in", but rather "make sure the development of the underlying protocol itself is done in an open way". If Google/Meta adds proprietary extensions, just don't add them to the main protocol. If they leave the protocol again or changed their implementation in a way that is largely incompatible with the open version, nothing is lost than what they brought in initially. Doesn't that make sense?

  • I'm actually curious about "Embrace Extend Extinguish": What can they do? They "extend" the ActivityPub protocol in a proprietary way, ok. Doesn't mean any other instance has to use that, no? Ok, that would mean if an instance doesn't follow that extension, it can't interact optimally with Threads, but how does it matter? To me it seems all that can be lost by that is the content/user base that Threads brings into the Fediverse and then we are at the same point as we would be if we defederated immediately. Maybe I'm missing something here?