[-] moonpiedumplings@programming.dev 4 points 1 week ago* (last edited 1 week ago)

Licenses like SSPLv1

The SSPL requires that all software used to deploy SSPL software is open sourced. If I deploy my software on Windows, do I have to provide the source code for Windows? What about the proprietary hardware drivers, or Intel Management Engine?

The SSPL is not the next generation of licenses, it is effectively unusable. And both Redis and Mongo, dual licensed their software as the SSPL, and a proprietary license — effectively making their entire software proprietary.

make money without risk of a cloud vendor snapping up their software (think Redis, MongoDB, etc) need a place at the table.

Except Redis, and Mongo were making money. They had well valued, well earning SAAS offerings — it's just that the offerings integrated into existing cloud vendors would be more popular (because vendor lock in). They just wanted more money, and were hoping that by going proprietary, they could force customers away from the cloud offers to themselves, and massively increase their revenue.. They did not get that.

Another thing is that it's not "stealing" Mongo/Redis' when cloud vendors offer SAAS's of Mongo/Redis. Mongo/Redis, and their SAAS offerings, are only possible because the same cloud vendors put more money than Mongo/Redis make yearly into Linux and other software that powers the SAAS offerings of Mongo/Redis, like Kubernetes. Without that software, Mongo/Redis wouldn't have a SAAS offering at all.

I definitely think that it's bad when a piece of software doesn't get any funding it needs to develop, especially when it powers much more modern software, like XZ. But Mongo/Redis weren't suffering from a lack of funding at all. They're just mad they had to share their toys, and tried to take them away. But it didn't even matter in the end.

It's not just protection against security, but also human error.

https://github.com/MrMEEE/bumblebee-Old-and-abbandoned/issues/123

https://hackaday.com/2024/01/20/how-a-steam-bug-once-deleted-all-of-someones-user-data/

Just because I trust someone to write a program in a modern language they are familier in, doesn't mean I trust them to write an install script in bash, especially given how many footguns bash has.

[-] moonpiedumplings@programming.dev 3 points 3 months ago* (last edited 2 months ago)

This is so horrifically wrong, I don't even know where to start.

The short version is that phone and computer makers aren't stupid and they will kill things or shutdown when overheating happens. If you were a phone maker, why tf would you allow someone to fry their own phone?

My laptop has shut itself off when I was trying to compile code while playing video games, while watching twitch. My android phone has killed apps when I try to do too much as well.

[-] moonpiedumplings@programming.dev 3 points 3 months ago

Firstly, you may also be interested in: https://containerssh.io/v0.5/

This is a similar software, but maintained. However, it doesn't look like you limit networking with the Docker backend, beyond a simple on/off.

An even simpler solution, is to have the the ssh entry command not be the usual shell command (/bin/bash), but rather a command that starts a shell within a container. So something like:

podman run -it --rm -v "-v /HOST-DIR:/CONTAINER-DIR" docker.io/library/debian:bookworm bash would create a shell inside a short lived debian container (that is deleted upon disconnect) where a host directory is mounted inside the container.

As for mysecureshell, I would assume that since it is in the Ubuntu repos, it is still being maintained. But it's possible, since it is unmaintained that there are unknown security vulnerabilities or other issues, but:

It’ll just be for half a dozen friends for when I want to give them larger files, or if I want them to send me full-resolution photos.

If it's just for your friends, it may be okay to use a less secure solution if you trust them.

As an alternate solution: since you are looking for some sort of file searching, perhaps you could host an app explicitly designed for that, like Seafile or Nextcloud.

[-] moonpiedumplings@programming.dev 4 points 6 months ago

Is it possible to allow DRM content for just 1 website ( Netflix ) , while other websites on the same browsers are not allowed to do it?

I would use multiple firefox profiles for this. If you go to about:profiles or use the command firefox -P to launch firefox, you can view and create other firefox profiles. Each firefox profile is essentially it's own instance of firefox, complete with different history, extensions, and setting. You could have a "Netflix" profile and a regular browsing profile.

[-] moonpiedumplings@programming.dev 3 points 7 months ago

Crowdstrike didn't target anyone either. Yet, a mistake in code that privileged, resulted in massive outages. Intel ME runs at even higher privileges, in even more devices.

I am opposed to stuff like kernel level code, exactly for that reason. Mistakes can be just as harmful as malice, but both are parts of human nature. The software we design should protect us from ourselves, not expose us to more risk.

There is no such thing as a back door that "good guys" can access, but the bad guys cannot. Intel ME is exactly that, a permanent back door into basically every system. A hack of ME would take down basically all cyber infrastructure.

[-] moonpiedumplings@programming.dev 3 points 1 year ago* (last edited 1 year ago)

Around 98-99 here (100 is max for non nitro users),and I'm noticing a significant delay when loading.

I use the browser version of discord in firefox.

Do you have any other book recommendations? Although I dislike the trope of the application of actual scientific knowledge, as characters get very OP very quickly, I love seeing characters using yhe scientific method to figure out what they can or can't do.

Quantum League

I looked up the book description, and a strong sense of deja vu hit me at the word "actuator"... I think I've read this book before.

Currently reading Industrial Strength magic by Macronomicon, and it scratches this itch for me, but waiting for chapter updates, even when daily, is so painful.

[-] moonpiedumplings@programming.dev 3 points 1 year ago* (last edited 1 year ago)

The tldr as I understand it is that Mac M1/M2 devices are unique in that the vram (gpu ram) is the same as the normal ram. This sharing allows LLM models to run on the gpu of those chips, and in their "vram" as well, allowing you to run bigger models on smaller devices.

Llama.cpp was the software that users did this with originalky. I can't find the original guide/article I looked at, but here is a github gist, where the commenters have done benchmarks:

https://gist.github.com/cedrickchee/e8d4cb0c4b1df6cc47ce8b18457ebde0

Somewhat related, there is a site I follow called royalroad. Royalroad is a site for web serials, which are basically books uploaded to the internet chapter by chapter.

Although royalroad used to be only google ads, at some point they started accepting user submitted ads. (Also, ads on that site have always been unobtrusive).

I like these ads much better because they are more privacy respecting (literally an a image and a link).

Also, they are really funny. User's with no art skills will make memes, or doodle stick figures, and I clicked on that one anyways, and the story was soooo good.

view more: ‹ prev next ›

moonpiedumplings

joined 2 years ago