[-] Gayhitler@lemmy.ml 13 points 3 weeks ago

I would recommend people not do that unless they know they need to and again, if you know you need to you’re not asking on lemmy.

Hosting your own secrets not only puts the burden of protecting, providing access to and preserving the secrets entirely on you, but puts a very unique set of hosting goals squarely on you as well.

Even a skilled administrator with significant resources at hand would often be better served by simply using bitwarden instead of hosting vaultwarden.

An example I used in another thread about password managers was a disaster. When your local server is inoperable or destroyed and general local network failure makes your cloud accessible backup unreachable, can you access your secrets safely from a public computer at the fire department, church or refugee center?

Bitwarden works well from public computers and there’s a whole guide for doing it as safely as possible on their website.

[-] Gayhitler@lemmy.ml 8 points 4 weeks ago

I don’t think the ends are those of the cia, and I didn’t say that the means were either, only that they were similar to those in a famous mid century guide for those trying to halt or hijack organizations.

I don’t think the rust devs are a cia opp, before you ask. I think some rust devs and even proponents of rust who only cheer from the sidelines are sometimes behaving in ways that raise red flags. I think it’s natural and laudable that the existing devs and maintainers are alarmed by that same behavior. It’s their job.

I also think Linus position on rust has been stretched to the point of breaking and I personally find it hard to take positions seriously that distill the complex process of integrating new languages into a very old very large codebase with many full time developers into “Linus said I could”.

[-] Gayhitler@lemmy.ml 8 points 4 weeks ago

https://lore.kernel.org/lkml/20250108122825.136021-1-abdiel.janulgue@gmail.com/

Here’s the whole thread if you wanna read for yourself.

My take away is that rust people are generally fine and try to abide by the norms of the kernel development process but Martin acts like a jerk and it would be okay if he didn’t come back.

See the comment far, far down in the thread implying that he’s somehow a more serious commenter or developer because he’s funded by donations as opposed to a company.

[-] Gayhitler@lemmy.ml 13 points 4 weeks ago

Anonymity and not being google or one of the other big mail providers.

Email is not an easily selfhostable service either. Modern spam filtering systems require the maintainer to jump through a bunch of hoops intended to defeat their anonymity and establish a recourse in case of problems.

[-] Gayhitler@lemmy.ml 10 points 1 month ago

Go get involved and you’ll see pretty quick how people generally handle organizing. They’ll be some kind of low stakes event like a reading or art gallery or concert or something and people will say “come out to this protest tomorrow”.

If there’s a signal or something it’s not usually a necessary link.

All that is to say: don’t use computers to organize. If you want to use social media to raise awareness of an event that’s a different thing altogether.

[-] Gayhitler@lemmy.ml 18 points 1 month ago

First things first: put real feet on your couch so you’re not doing more damage.

The broader the better.

Some people already talked about ironing and it can make a difference but you gotta get down to the wood surface with sandpaper, learn how to iron wood then successfully actually do it.

Dents as big as these would require multiple passes with the iron over time.

Your real best bet would be to call a handyman or more likely a flooring place and have them give you an estimate on repair. They’ll be able to tell you if you have some kind of tongue in groove, roll or actual hardwood floor and explain what your options are. You’ll also know how much you’re gonna be paying to get whatever the landlord is holding back from them.

If you do call someone out there, find out what they charge for an estimate and pay them more on top of it in cash. People hate giving estimates because it’s someone shopping around who’s gonna try to get them down to the lowest price and has no consideration for their expertise and experience. Being willing to pay in cash and then some cements you as a customer, not a looky-loo.

[-] Gayhitler@lemmy.ml 9 points 1 month ago

None.

Businesses don’t respond to “minor” shoplifting because of an impact to their bottom line. Retail has an idea called “float” that’s meant to account for all the losses not covered elsewhere by spoilage, damage, actual confirmed theft, etc and its always an order of magnitude larger than the volume of loss from shoplifting.

The response to shoplifting is primarily driven by insurance costs. It’s why the corner store down the street might hire some goon to stand around during peak hours and places that have to negotiate with insurance on millions of square footage spread over tens of thousands of locations tip the scales of local policy.

If they don’t do something about the “shoplifting problem”(not a problem, not a serious impact to their bottom line), their insurance plan that covers all the stores for hundreds of millions in damages and costs as much in premiums is null and void.

Okay but here’s why it won’t do what you’re asking about specifically: because not only does your shoplifting not impact the bottom line, the stores claiming there’s a shoplifting problem and then using their insurance premiums to justify draconian measures were already planning on implementing those draconian measures before they came up with the idea of shoplifting.

Pushing security system upgrades across the board outfits all stores with high definition cameras and rack mount processing equipment that can do object, facial and gait recognition. It creates a stream of data that the store has complete ownership of and can use for whatever it wants. It’s the first step to reversing one area that big box retail has lost ground to online retail in: custom pricing.

Custom pricing is arguably more powerful in the physical domain. Websites adopted it because getting people to buy shit they didn’t really want was already so hard that they said “shit, we got all this data, hey Jim, go infer what price this person will buy this stuff at!” And it worked.

Physical retailers don’t have the convenience of letting you shop from your couch, but they do have a much higher conversion rate (that’s how often a sale gets made to someone who doesn’t want to buy) when controlled for other factors. The conversion rate thing is under contention in some circles and sales and marketing people get all their news and job training from magazines so expect funny headlines if you look this up.

The point is that if you are online temporarily hovering over a marked down socket set you are only thinking about the price. If you’re stopped in target in front of a marked down socket set it’s cheap and immediate.

It’s the same logic behind the candy at the grocery checkout.

So if retailers can get the data that lets them fiddle with prices depending on who’s asking then they stand to make a tremendous amount of sales.

All that is to say that no one cares if you shoplift and so you won’t actually make any difference by doing so.

If you just wanna shoplift, do it. Your teenage girl ancestors are smiling down upon you as you palm that eye pencil.

[-] Gayhitler@lemmy.ml 18 points 1 month ago

None of them are grammatically correct because none of them are complete thoughts let alone sentences.

All three try to specify the particular monkey by enumerating that it can see your ears but do no more.

Take away the description of the monkeys ability to see your ears and what you’re left with is “the monkey”.

“The monkey” isn’t a sentence.

If you are the subject and what’s happening is that you’re wondering if the monkey can see your ears then the sentence you want is “I’m wondering if the monkey can see my ears.”

If, as I suspect, you’re using “the monkey whose ability to see my ears I’m wondering about” as the subject of some larger more complex and cool sentence then you gotta lay out that part before someone can give solid grammatical advice.

[-] Gayhitler@lemmy.ml 9 points 1 month ago

There’s a lot of answers itt but heres a simpler one:

If you want to prevent people in power from having access to communications there are two methods employed, broadly speaking:

The first is to make a very secure, zero knowledge, zero trust, zero log system so that when the authorities come calling you can show them your empty hands and smirk.

Signal doesn’t actually do this, but they’re closer to this model than the second one I’m about to describe. Bear in mind they’re a us company so when the us authorities come to their door or authorities from some nation the us has a treaty with come to their door signal is legally required to comply and provide all the information they have.

The second is to simply not talk to the authorities. Telegram was closer to this model than signal, using a bunch of different servers in nations with wildly different extradition and information sharing mechanisms in order to make forcing them to comply with some order Byzantine to the point of not being worth it.

Eventually the powers that be got their shit together and put hands on telegrams owner so now they’re complying with all lawful orders and a comparison of the tech is how you’d pick one.

The technology behind the two doesn’t matter really but default telegram is less “secure” than default imessage (I was talking with someone about it so it’s on the old noggin’).

[-] Gayhitler@lemmy.ml 9 points 1 month ago

As of the time I’m writing this comment literally none of the suggestions made actually matter for the ambiguous goal of “general security and privacy” more than building in a neighborhood or community that meets the occupants desires.

Pick a place with people you want to be around who you trust to look out for you.

[-] Gayhitler@lemmy.ml 8 points 1 month ago

Just a heads up for people reading this:

小红书 is a Chinese language app (it added translation just a week or so ago!). The founder claims to have chosen the color red and the 红 part of the name because of his Alma mater stanford [!]. The app is pretty much targeted at lifestyle influencers and women and features prominent shopping and payment integration.

English speakers nicknamed the book Quotations from Chairman Mao the “little red book”. The Chinese nickname is 红宝书 “treasured red book” or “cherished red book”, not “little red book”.

Many posts on 小红书 are making light of the fact that Americans flocked to the bored housewife shopping app.

[-] Gayhitler@lemmy.ml 12 points 1 month ago

No social media is decent on privacy.

They’re not private. They’re public. You don’t have the expectation of privacy in public. That’s why people might dress differently walking to the store than they do in their bedrooms.

Social media is an osint treasure trove. It’s lowkey why the idea of osint exists. Don’t expect to have privacy in public spaces like social media and you’ll never be surprised.

This may come as a surprise to you, but lemmy is social media.

小红书 is not private. It’s social media and if what another user said is true then the app version uses plaintext http to transfer data. It’s up to you to determine if that’s a problem for you.

Use a vpn in or around China and your performance might be better. I get a lot of hangs with mullvad us servers.

It’s a nice experience. Check it out if you like.

view more: ‹ prev next ›

Gayhitler

joined 1 month ago