Skip Navigation

User banner
Oliver Lowe
Posts
11
Comments
238
Joined
2 yr. ago

  • Cool insight - thanks! All points even more to bad planning by the Instagram team as you said originally.

    I guess I wouldn't be particularly surprised. Apple put shitloads of R&D into power-efficiency. Can't imagine the culture at Instagram/Meta is like that.

  • Slightly off-topic: I'm not too familiar with FreeBSD (I use OpenBSD), but others may be interested to know you may be able to configure wireguard interfaces without installing any packages. It probably just involves running some ifconfig commands at boot via some entries in /etc/rc.conf. See https://docs.freebsd.org/en/books/handbook/network/

  • Yeah I've always found that AllowedIPs name a little bit misleading. It is mentioned in the manpage:

    A comma-separated list of IP (v4 or v6) addresses with CIDR masks from which incoming traffic for this peer is allowed and to which outgoing traffic for this peer is directed.

    But I think it's a little funny how setting AllowedIPs also configures how packets are routed. I dunno.

  • You could start troubleshooting by manually executing DNS queries from mainDesktop.lan, and watching the DNS server logs. Not sure what OS the desktop is running, but assuming Windows you could run:

     
            nslookup -type=A pihole.example.duckdns.org.
    
    
      

    On macOS/Linux/etc.:

     
            dig -t A pihole.example.duckdns.org.
    
    
      

    This could rule out behaviour from the proxy or applications.

  • I can imagine it's a collection of bugs where it's sorta the OS' problem but sorta the application's problem. It probably reached a stalemate. Nobody really wanted to spend the extra engineering effort; maybe it would all have to be undone then rewritten again to get something out in time.

  • You can be polite about it and not confrontational.

    Really important. Coming from a place of mutual respect is a really nice - even underrated - way to make progress in the privacy space!

  • My understanding is that the anonymous profile thing won't really work. That's as far as ActivityPub is concerned - one of the protocols behind Lemmy, Mastodon et al.

    Every person/bot/whatever which comments, posts, upvotes; any social "activity" must have an independently verifiable public identity (via WebFinger). Here are some example identities:

    When some "activity" is performed by that identity, a message is delivered to many (many!) servers. They could be running anything but we commonly see Mastodon, Lemmy, Meta's Threads (soon?).

    Each server can really do whatever it wants with that message. For example:

    1. I posted this photo from a Mastodon instance (via @otl@hachyderm.io)
    2. The Mastodon server also delivered a message to !motorcycles@lemmy.world.
    3. The Lemmy server at lemmy.world stored it in a big database so subscribers can read it.
    4. @ganksy@lemmy.world replied "Wild and chilling landscape".
    5. Lemmy stored the reply and also delivered the reply to @otl@hachyderm.io.
    6. Mastodon stored the reply in its own big database so I can read it.

    Coming back to the OP:

    That was a long winded way of saying we should have (optionally) private profiles in lemmy.

    Here is some service's idea of what @otl@hachyderm.io is:

    There's no way to make a profile private because there isn't really a profile to begin with. What we really have is just the activity received from @otl@hachyderm.io. The whole thing feels a lot more like email than popular social networking sites when you get down to the nuts and bolts.

    Old-school mailing lists archives also offer a way to search for posts by author. e.g. Richard Miller

  • I never expected that they'd put generative AI in WhatsApp, like, why???

    it doesn't really add anything substantial to what the chat app is already good for: chatting with our fellow humans.

    A lot of this is for WhatsApp Business. Meta are monetising WhatsApp. The idea is that businesses will use WhatsApp Business and the shitty AI features to (direct from their website): "Engage audiences, accelerate sales and drive better customer support outcomes on the platform with more than 2 billion users around the world."

    What a cringe :(

  • Not that simple, unfortunately :( The problem is that one particular vendor (Meta) controls the client - the app - to the service (Whatsapp). Right now we can only hope that Signal doesn't add this kind of feature. There are already cryptocurrency features in the Signal app of dubious utility.

  • Maybe a silly question: how did you find it on GitHub? Did the project appear as some kind of “recommended” thing?

  • Cut from 6(!) years to 2 years. I had no idea the support stretched as far back as 6 years. 2 still seems totally reasonable, especially given all the work put into backwards compatibility in the kernel already.

  • In a word: convenience.

    It was in the right place at the right time with easy UX. A big audience were developers not so familiar with sysadmin in the commercial software world. It provided an easy way to get a kind of executable package. Devs could throw in all their Python/Ruby/JS dependencies and not worry about it. "works on my machine" was basically good enough because you just ship the whole damn thing over.

    Docker then supervised the process for you, too. The whole Docker package took care of a lot of things

    PS: for those really interested in containers, I always recommend looking into Plan 9: the OS from the original UNIX team intended as a successor to UNIX. Every process has its own namespace and the whole OS is built around that concept (plus a few other core things.. too much to go into here). see also https://pdos.csail.mit.edu/~rsc/plan9.html

  • That’s a good question. The hope is that the VPS provider is not reading the disk or sniffing the network traffic and using that information for commercial gains. For example, I could try to find a trustworthy VPS provider with a clear privacy policy for my music streaming server. To the provider, all they ideally see are encrypted bytes over the wire (probably using Wireguard or HTTPS for example).

    Spotify, on the other hand, rely on customer usage data for their business. They sell advertising and do things like suggestions based on listening history across many users.

    There is no guarantee that using someone else’s computer is 100% private. But it is probably more private than Spotify in this music streaming example.

  • Something that people do is self-host software that respects its user’s privacy more than services some company provides to you for a monthly subscription. For example, you could host your own music streaming software on a server that you rent instead of using Spotify.

  • the more degenerate they become over time.

    To clarify, by "they" do you mean the language models?

  • Yes agree it's much better to discuss first! I just wanted to send in a couple of patches for typos initially :)

  • Are you open to contributing without needing to open a Codeberg account (or sign in with Github/lab)?

  • If you're up for a bit of a learning/DIY project, you could get some small form-factor PC with some ethernet and WiFi interfaces and run OpenBSD with hostapd. You can be almost certain that it's not leaking usage info to 3rd parties.

  • Totally agreed the project's actions against the community are shit. From a LibreSignal issue:

    I understand that federation and defined protocols that third parties can develop clients for are great and important ideas, but unfortunately they no longer have a place in the modern world.

    This sounds like a jaded, cynical individual. It's hilarious, sad, probably even delusional. How do they think the Internet and their operating systems work in this "modern world"? Magic fairy dust? It's difficult, thankless work put in by loads of people around the world despite enormous commercial pressure to do otherwise. Over decades. I respect Signal's work, but it's boneheaded attitudes like moxie's which impede progress, especially for the younger generations.