Technological platforms are not neutral. If we truly want to resist the digital coup that is currently under way, we need to normalize the use of free, open source solutions.Elena Rossini
like this
don't like this
I'm going back to Linux after ~8 years of maining Windows. I was a Linux desktop and server user back in college and did all my dev on there. When I got my first job, I bought a better laptop and started maining Windows.
I am going back to Linux for three main reasons: I hate the Windows 11 UI, I'm increasingly paranoid about privacy/security, and the development experience for native software has sucked for a long time.
Besides the obvious downward spiral in UI since Windows 7, it's also become unreliable and slow. Some days, File explorer just won't open. Others, it takes a full minute to load my "home" view, and some others I get weird bugs where the color settings are broken or I can't actually click on folders anymore. The start menu is slow to open when pressing the Windows key, windows search is slow to index and sometimes looks stuff up on Bing instead of opening a file. The default apps (calculator, image viewer, media player) have been getting replaced with slower UWP versions with flatter and flatter UI. Finally, Windows is increasingly pushing AI stuff onto the platform, which leads me to privacy/security
I am increasingly paranoid these days about privacy and security. While I don't have any outstanding issues with security at large, I don't trust Microsoft's telemetry collection and I especially don't trust anything that gets sucked up into Windows Recall's AI Black hole. This hasn't been an issue, but I've always wondered why Microsoft hasn't made it simpler to create containerized applications with AppX/Windows SDK. It seems like it should be way easier to create a flatpak-like sandboxed application with any API (Win32, WinForms, WPF, or any language really).
Believe it or not, Windows is a good development platform, these days, unless you're trying to write Windows software. Microsoft, under Satya Nadella, has been taking care of its developer community and making a lot of tools free and some open source. vcpkg has revolutionized my C++ development and I've always been fond of many MSVC extensions such as SAL. There's a lot of pros and cons, but I generally prefer NT API calls over POSIX API calls (which are far more long in the tooth than NT at this point). That said, I tend to just write cross-platform "modern" C++ and don't make too many system calls anymore. I will miss Visual Studio (and the ease of SLN/Vcxproj files), and it seems like the only comparable C++ IDE available for Linux is CLion. I'm actually a fan of DirectX and HLSL over OpenGL and Vulkan: Microsoft has made a lot of really great first party libraries/tools available for DirectX that make it a really fun API to work with when you include DirectXTK. I am one of the rare few users who actually enjoys PowerShell; I prefer piping typed, structured data over piping streams of bytes. I also really hate sh/zsh/bash syntax.
That said: Microsoft has utterly lost the plot on native windows application development. They release a new UI Framework for C# and Whatever the latest managed C++ framework is every 3 or so years, and then immediately fail to support it, subtly changing XAML syntax or .Net namespaces so that your old UWP or WPF code is strangely not compatible anymore. To me, what is most telling about Microsoft's level of commitment to its newest frameworks is the fact that they are still supporting WinForms with modern, cross platform .Net builds, meaning that you can use modern C# and .Net features in a runtime that is supposed to have been replaced by their XAML products a long time ago. The only really viable way to write a DirectX application, and the only way that has any official documentation on it, is STILL to use the original Win32 APIs to create a window and manage IO.
So anyways, I'm not as zealous about Linux as most people on the internet are; I still think Windows is a good software development platform and maybe Microsoft can turn the ship around some day, but I doubt it.
the development experience for native software has sucked for a long time.
For as long as Windows has existed, I have found its APIs to be noisy, awkward, and generally unpleasant to use. It was a major part of why I switched my development focus to Unix a long time ago. I guess this is a matter of personal taste; I wonder how you'll feel about the APIs more commonly used on Linux after five or ten years of using them full-time.
Despite a few niggles (I don't care for Bourne-style shell syntax or Windows shell syntax) I have found my productivity to be better and more enjoyable since the switch. Nowadays, benefits include everything that comes with an open-source ecosystem, like the software install/update model of Linux distros, and the ability to solve or work around library/OS problems myself if I can't wait for someone else to fix something.
And, of course, having a privacy-respecting platform for myself and my users is important to me.
In short, I'm happier here. Welcome.
By the way, if you do cross-platform desktop app development in native code, give Qt a try. It does an excellent job overall.
they are still supporting WinForms with modern, cross platform .Net builds, meaning that you can use modern C# and .Net features in a runtime that is supposed to have been replaced by their XAML products a long time ago.
Microsoft is all about corporate clients, that's why their Windows is backwards compatible down to Windows 95, because there is some big corporation that buys the corporate license in bulk and runs some corporate Windows 95 accounting application on it.
Basically the title.
I have seen the EU-OS/Suse discussions for some months now. However, Ubuntu/Arch/Fedora are extremely mature projects. So competing against them will be hard.
I want to know how realistic the scenario (described by the question) is.
but as soon as the inevitable body bags come crashing back into the country, it would kill this administration
No they won't. I've heard all kinds of stories like this for Putin and he's still alive and happy.
He's losing men over 50 years old that are left out and are garbage of society. They wouldn't be participating in any demographic activities anyway.
I bet there are millions of Americans like this too. Coal miners who lost the job, casino players, heavy drinkers. For a hefty sum of money and a chance to be important again they'd do anything. You really underestimate how quick they can be turned into a cannon fodder and how little the society will miss them.
Source: I lived in Russia.
This post is long and kind of a rant. I don't expect many to read the whole thing, but there's a conclusion at the bottom.
On the surface, recommended security practices are simple:
- Store all your credentials in a password manager
- Use two factor authentication on all accounts
However, it raises a few questions.
- Should you access your 2FA codes on the same device as the password manager?
- Should you store them in the password manager itself?
This is the beginning of where a threat model is needed. If your threat model does not include protections against unwanted access to your device, it is safe for you to store access your 2FA codes on the same device as your password manager, or even in the password manager itself.
So, to keep it simple, say you store your 2FA in your password manager. There's a few more questions:
- Where do you store the master password for the password manager?
- Where do you store 2FA recovery codes?
The master password for the password manager could be written down on a piece of paper and stored in a safe, but that would be inconvenient when you want to access your passwords. So, a better solution is to just remember your password. Passphrases are easier to remember than passwords, so we'll use one of those.
Your 2FA recovery codes are something that are needed if you lose access to your real 2FA codes. Most websites just say "Store this in a secure place". This isn't something you want to store in the same place as those (in this case our password manager), and it's not something you will access often, so it's safe to write it down on a piece of paper and lock it in a safe.
Good so far, you have a fairly simple system to keep your accounts safe from some threats. But, new problems arise:
- What happens if you forget your master passphrase?
- What happens if others need access to your password manager?
The problem with remembering your passphrase is that it's possible to forget it, no matter how many times you repeat it to yourself. Besides naturally forgetting it, things like injuries can arise which can cause you to forget the passphrase. Easy enough to fix, though. We can just keep a copy of the passphrase in the safe, just in case we forget it.
If someone else needs to access certain credentials in your password manager, for example a wife that needs to verify bank information using your account, storing a copy of the password is a good idea here too. Since she is a trusted party, you can give her access to the safe in case of emergencies.
The system we have is good. If the safe is stolen or destroyed, you still have the master passphrase memorized to change the master passphrase and regenerate the 2FA security codes. The thief who stole the safe doesn't have your password manager's data, so the master passphrase is useless. However, our troubles aren't over yet:
- How do you store device credentials?
- How do you keep the password manager backed up?
Your password manager has to have some device in order to access it. Whether it's a phone, computer, tablet, laptop, or website, there needs to be some device used to access it. That device needs to be as secure as your password manager, otherwise accessing the password manager becomes a risk. This means using full disk encryption for the device, and a strong login passphrase. However, that means we have 2 more passwords to take care of that can't be stored in the password manager. We access those often, so we can't write them down and store them in the safe, Remembering two more passphrases complicates things and makes forgetting much more likely. Where do we store those passphrases?
One solution is removing the passwords altogether. Using a hardware security key, you can authenticate your disk encryption and user login using it. If you keep a spare copy of the security key stored in the safe, you make sure you aren't locked out if you lose access to your main security key.
Now to keep the password manager backed up. Using the 3-2-1 Backup Strategy. It states that there should be at least 3 copies of the data, stored on 2 different types of storage media, and one copy should be kept offsite, in a remote location (this can include cloud storage). 2 or more different media should be used to eliminate data loss due to similar reasons (for example, optical discs may tolerate being underwater while LTO tapes may not, and SSDs cannot fail due to head crashes or damaged spindle motors since they do not have any moving parts, unlike hard drives). An offsite copy protects against fire, theft of physical media (such as tapes or discs) and natural disasters like floods and earthquakes. Physically protected hard drives are an alternative to an offsite copy, but they have limitations like only being able to resist fire for a limited period of time, so an offsite copy still remains as the ideal choice.
So, our first copy will be on our secure device. It's the copy we access the most. The next copy could be an encrypted hard drive. The encryption passphrase could be stored in our safe. The last copy could be a cloud storage service. Easy, right? Well, more problems arise:
- Where do you store the credentials for the cloud storage service?
- Where do you store the LUKS backup file and password?
Storing the credentials for the cloud storage service isn't as simple as putting it in the safe. If we did that, then anyone with the safe could login to the cloud storage service and decrypt the password manager backup using the passphrase also stored in the safe. If we protected the cloud storage service with our security key, a copy of that is still in the safe. Maybe we protect it with a 2FA code, and instead of storing the 2FA codes in the password manager, we store it on another device. That solves the problem for now, but there are still problems, such as storing the credentials for that new device.
When using a security key to unlock a LUKS partition, you are given a backup file to store as a backup for emergencies. Plus, LUKS encrypted partitions still require you to setup a passphrase, so storing that still becomes an issue.
I'm going to stop here, because this post is getting long. I could keep going fixing problems and causing new ones, but the point is this: Security is a mess! I didn't even cover alternative ways to authenticate the password manager such as a key file, biometrics, etc. Trying to find "perfect" security is almost impossible, and that's why a threat model is important. If you set hard limits such as "No storing passwords digitally" or "No remembering any passwords" then you can build a security system that fits that threat model, but there's currently no security system that fits all threat model.
However, that doesn't let companies that just say "Store this in a secure place" off the hook either. It's a hand wavy response to security that just says "We don't know how to secure this part of our system, so it's your problem now". We need to have comprehensive security practices that aren't just "Use a password manager and 2FA", because that causes people to just store their master passphrase on a sticky note or a text file on the desktop.
The state of security is an absolute mess, and I'm sick of it. It seems that, right now, security, privacy, convenience, and safety (e.g. backups, other things that remove single points of failure) are all at odds with each other. This post mainly focused on how security, convenience, and safety are at odds, but I could write a whole post about how security and privacy are at odds.
Anyways, I've just outlined one possible security system you can have. If you have one that you think works well, I'd like to hear about it. I use a different security system than what I outline here, and I see problems with it.
Thanks for reading!
Hey everyone,
as a longtime-Mac user who got used to the typical Mac-keyboard layout and using a Logitech MX Keys (Mac only) I was wondering if there is any chance of adopting the Mac-layout 1:1 on one of my favourite Linux-distros using KDE (desktop PC) without mapping each single key to match the Mac-key?
Is there any base tool I can use for this or any tool I can download to accomplish this?
Thanks in advance!
I use vim; hence the difficulty w remapping the keys and the Mac's belong to my employers.
I would never buy a Mac and I only use Linux so it doesn't make sense to grow accustomed to Mac's quirks; especially so since only every other employer provides Mac's.
Not many people have heard about secureblue, and I want to spread the word about it. secureblue provides hardened images for Fedora Atomic and CoreOS. It's an operating system "for those whose first priority is using linux, and second priority is security."
secureblue provides exploit mitigations and fixes for multiple security holes. This includes the addition of GrapheneOS's hardened_malloc, their own hardened Chromium-based browser called Trivalent, USBGuard to protect against USB peripheral attacks, and plenty more.
secureblue has definitely matured a lot since I first started using it. Since then, it has become something that could reasonably be used as a daily driver. secureblue recognizes the need for usability alongside security.
If you already have Fedora Atomic (e.g. Secureblue, Kinoite, Sericea, etc.) or CoreOS installed on your system, you can easily rebase to secureblue. The install instructions are really easy to follow, and I had no issues installing it on any of my devices.
I'd love more people to know about secureblue, because it is fantastic if you want a secure desktop OS!
(In honor of Holiday. You know who you are.)
A minimal OS with automatic updates. Scalable and secure.fedoraproject.org
cross-posted from: lemmy.ml/post/26453685
Not many people have heard about secureblue, and I want to spread the word about it. secureblue provides hardened images for Fedora Atomic and CoreOS. It's an operating system "for those whose first priority is using linux, and second priority is security."secureblue provides exploit mitigations and fixes for multiple security holes. This includes the addition of GrapheneOS's hardened_malloc, their own hardened Chromium-based browser called Trivalent, USBGuard to protect against USB peripheral attacks, and plenty more.
secureblue has definitely matured a lot since I first started using it. Since then, it has become something that could reasonably be used as a daily driver. secureblue recognizes the need for usability alongside security.
If you already have Fedora Atomic (e.g. Secureblue, Kinoite, Sericea, etc.) or CoreOS installed on your system, you can easily rebase to secureblue. The install instructions are really easy to follow, and I had no issues installing it on any of my devices.
I'd love more people to know about secureblue, because it is fantastic if you want a secure desktop OS!
A minimal OS with automatic updates. Scalable and secure.fedoraproject.org
I'm making this post to share some interesting less talked about things about privacy, security, and other related topics. This post has no direct goal, it's just an interesting thing to read. Anyways, here we go:
I made a post about secureblue, which is a Linux distro* (I'll talk about the technicality later) designed to be as secure as possible without compromising too much usability. I really like the developers, they're one of the nicest, most responsible developers I've seen. I make a lot of bug reports on a wide variety of projects, so they deserve the recognition.
Anyways, secureblue is a lesser known distro* with a growing community. It's a good contrast to the more well known alternative** Qubes OS, which is not very user friendly at all.
* Neither secureblue, nor Qubes OS are "distros" in the classical sense. secureblue modifies and hardens various Fedora Atomic images. Qubes OS is not a distro either, as they state themselves. It's based on the Xen Hypervisor, and virtualizes different Linux distros on their own.
** Qubes OS and secureblue aren't exactly comparable. They have different goals and deal with security in different ways, just as no threat model can be compared as "better" than any other one. This all is without mentioning secureblue can be run inside of Qubes OS, which is a whole other ballpark.
secureblue has the goal of being the most secure option "for those whose first priority is using Linux, and second priority is security." secureblue "does not claim to be the most secure option available on the desktop." (See here) Many people in my post were confused about that sentence and wondered what the most secure option for desktop is. Qubes OS is one option, however the secureblue team likely had a different option in mind when they wrote that sentence: Android.
secureblue quotes Madaiden's Insecurities on some places of their website. Madaiden's Insecurities holds the view that Linux is fundamentally insecure and praises Android as a much better option. It's a hard pill to swallow, but Madaiden's Insecurities does make valid criticisms about Linux.
However, Madaiden's Insecurities makes no mention of secureblue. Why is that? As it turns out, Madaiden's Insecurities has not been updated in over 3 years. It is still a credible source for some occasions, but some recommendations are outdated.
Many people are strictly anti-Google because of Google's extreme history of privacy violations, however those people end up harming a lot of places of security in the process. The reality is, while Google is terrible with privacy, Google is fantastic with security. As such, many projects such as GrapheneOS use Google-made devices for the operating system. GrapheneOS explains their choice, and makes an important note that it would be willing to support other devices as long as it met their security standards. Currently only Google Pixels do.
For those unfamiliar, GrapheneOS is an open source privacy and security focused custom Android distribution. The Android Open Source Project (AOSP) is an open source project developed by Google. Like the Linux kernel, it provides an open source base for Android, which allows developers to make their own custom distributions of it. GrapheneOS is one such distribution, which "DeGoogles" the device, removing the invasive Google elements of the operating system.
Some Google elements, such as Google Play Services can be optionally installed onto the device in a non-privileged way (see here and here). People may be concerned that Google Pixels can still spy on them at a hardware level even with GrapheneOS installed, but that isn't the case.
With that introduction of secure Android out of the way, let's talk about desktop Android. Android has had a hidden option for Desktop Mode for years now. It's gotten much better since it was first introduced, and with the recent release of Android 15 QPR2, Android has been given a native terminal application that virtualizes Linux distros on the device. GrapheneOS is making vast improvements to the terminal app, and there are many improvements to come.
GrapheneOS will also try to support an upcoming Pixel Laptop from Google, which will run full Android on the desktop. All of these combined means that Android is one of, if not the, most secure option for desktop. Although less usable than some more matured desktop operating systems, it is becoming more and more integrated.
By the way, if you didn't know, Android is based on Linux. It uses the Linux kernel as a base, and builds on top of it. Calling Qubes OS a distro would be like calling Android and Chrome OS distros as well. Just an interesting fact.
So, if Android (or more specifically GrapheneOS) is the most secure option for desktop, what does that mean in the future? If the terminal app is able to virtualize Linux distros, secureblue could be run inside of GrapheneOS. GrapheneOS may start to become a better version of Qubes OS, in some respects, especially with the upcoming App Communication Scopes feature, which further sandboxes apps.
However, there is one bump in the road, which is the potential for Google to be broken up. If that happens, it might put GrapheneOS and a lot of security into a weird place. There might be consequences such as Pixels not being as secure or not supporting alternative Android distributions. Android may suffer some slowdowns or halts in development, possibly putting more work on custom Android distribution maintainers. However, some good may come from it as well. Android may become more open source and less Google invasive. It's going to be interesting to see what happens.
Speaking of Google being broken up, what will happen to Chrome? I largely don't care about what happens to Chrome, but instead what happens to Chromium. Like AOSP, Chromium is an open source browser base developed by Google. Many browsers are based on Chromium, including Brave Browser and Vanadium.
Vanadium is a hardened version of Chromium developed by GrapheneOS. Like what GrapheneOS does to Android, Vanadium removes invasive Google elements from the browser and adds some privacy and security fixes. Many users who run browser fingerprinting tests on Vanadium report it having a nearly unique fingerprint. Vanadium does actually include fingerprint protections (see here and here), but not enough users use it for it to be as noticeable as the Tor Browser. "Vanadium will appear the same as any other Vanadium on the same device model, and we don't support a lot of device models." (see here)
There's currently a battle in the browser space between a few different groups, so mentioning any browser is sure to get you involved in a slap fight. The fights usually arise between these groups:
For that last one, I would like to mention that Firefox rewrote the terms after backlash, and users have the ability to disable bloatware in Brave. Since Brave is open source, it is entirely possible for someone to make a fork of it that removes unwanted elements by default, since Brave is another recommended browser by the GrapheneOS team for security reasons.
Another interesting Chromium-based browser to look at is secureblue's Trivalent, which was inspired by Vanadium. It's a good option for users that use Linux instead of Android as a desktop.
Also, about crypto, why is there a negativity around it? The reason is largely due to its use in crime, use in scams, and use in investing. However, not all cryptocurrencies are automatically bad. The original purpose behind cryptocurrency was to solve a very interesting problem.
There are some cryptocurrencies with legitimate uses, such as Monero, which is a cryptocurrency designed to be completely anonymous. Whether or not you invest in it is your own business, and unrelated to the topics of this post. Bitcoin themselves even admit that Bitcoin is not anonymous, so there is a need for Monero if you want fully decentralized, anonymous digital transactions.
On the topic of fully decentralized and anonymous things, what about secure messaging apps? Most people, even GrapheneOS and CISA, are quick to recommend Signal as the gold standard. However, another messenger comes up in discussion (and my personal favorite), which is SimpleX Chat.
SimpleX Chat is recommended by GrapheneOS occasionally, as well as other credible places. This spreadsheet is my all time favorite one comparing different messengers, and SimpleX Chat is the only one that gets full marks. Signal is a close second, but it isn't decentralized and it requires a phone number.
Anyways, if you do use Signal on Android, be sure to check out Molly, which is a client (fork) of Signal for Android with lots of hardening and improvements. It is also available to install from Accrescent.
Accrescent is an open source app store for Android focused on privacy and security. It is one of the default app stores available to install directly on GrapheneOS. It plans to be an alternative to the Google Play Store, which means it will support installing proprietary apps. Accrescent is currently in early stages of development, so there are only a handful of apps on there, but once a few issues are fixed you will find that a lot of familiar apps will support it quickly.
Many people have high hopes for Accrescent, and for good reason. Other app stores like F-Droid are insecure, which pose risks such as supply chain attacks. Accrescent is hoped to be (and currently is) one of the most secure app stores for Android.
The only other secure app store recommended by GrapheneOS is the Google Play Store. However, using it can harm user privacy, as it is a Google service like any other. You also need an account to use it.
Users of GrapheneOS recommend making an anonymous Google account by creating it using fake information from a non-suspicious (i.e. not a VPN or Tor) IP address such as a coffee shop, and always use a VPN afterwards. A lot of people aren't satisfied with that response, since the account is still a unique identifier for your device. This leads to another slap fight about Aurora Store, which allows you to (less securely) install Play Store apps using a randomly given Google account.
The difference between the Play Store approach and the Aurora Store approach is that Aurora Store's approach is k-anonymous, rather than... "normal" anonymity. The preference largely comes down to threat models, but if you value security then Aurora Store is not a good option.
Another criticism of the Play Store is that it is proprietary. The view of security between open source software and proprietary software has shifted significantly. It used to be that people viewed open source software as less secure because the source code is openly available. While technically it's easier to craft an attack for a known exploit if the source code is available, that doesn't make the software itself any less secure.
The view was then shifted to open source software being more secure, because anyone can audit the code and spot vulnerabilities. Sometimes this can help, and many vulnerabilities have been spotted and fixed faster due to the software being open source, but it isn't always the case. Rarely do you see general people looking over every line of code for vulnerabilities.
The reality is that, just because something is open source, doesn't mean it is automatically more or less secure than if it were proprietary. Being open source simply provides integrity in the project (since the developers make it as easy as possible to spot misconduct), and full accountability towards the developers when something goes wrong. Being open source is obviously better than being proprietary, that's why many projects choose to be open source, but it doesn't have to be that way for it to still be secure.
Plus, the workings of proprietary code can technically be viewed, since some code can be decompiled, reverse engineered, or simply read as assembly instructions, but all of those are difficult, time consuming, and might get you sued, so it's rare to see it happen.
I'm not advocating for the use of proprietary software, but I am advocating for less hate regarding proprietary software. Among other things, proprietary software has some security benefits in things like drivers, which is why projects like linux-libre and Libreboot are worse for security than their counterparts (see coreboot).
Those projects still have uses, especially if you value software freedom over security, but for security alone they aren't as recommended.
Disclaimer before this next section: I don't know the difference in terminology between "Atomic", "Immutable", and "Rolling Release", so forgive me for that.
Also, on the topic of software freedom, stop using Debian. Debian is outdated and insecure, and I would argue less stable too. Having used a distro with an Atomic release cycle, I have experienced far less issues than when I used Debian. Not to mention, if you mess anything up on an Atomic distro, you can just rollback to the previous boot like nothing happened, and still keep all your data. That saved me when I almost bricked my computer motifying /etc/fstab/ by hand.
Since fixes are pushed out every day, and all software is kept as up to date as possible, Atomic distros I argue give more stability than having an outdated "tried and tested" system. This is more an opinion rather than factually measured.
Once I realized the stable version of Debian uses Linux kernel 6.1, (which is 3 years old and has had actively exploited vulnerabilities), and the latest stable version of the kernel is 6.13, I switched pretty quick for that reason among others.
Now, many old kernel versions are still maintained, and the latest stable version of Android uses kernels 6.1 and 6.6 (which are still maintained), but it's still not great to use older kernel versions regardless. It isn't the only insecurity about Debian.
I really have nothing more to say. I know I touched on a lot of extremely controversial topics, but I'm sick of privacy being at odds with security, as well as other groups being at odds with each other. This post is sort of a collection of a lot of interesting privacy and security knowledge I've accrued throughout my life, and I wanted to share my perspective. I don't expect everybody to agree with me, but I'm sharing this in case it ever becomes useful to someone else.
Thanks for taking the time to read this whole thing, if you did. I spent hours writing it, so I'm sure it's gotten very long by now.
Happy Pi Day everyone!
Is there some sort of comprehensive guide on hardening RHEL clones like Alma and Rocky?
I have read Madaidan's blog, and I plan to go through CIS policies, Alma and Rocky documentation and other general stuff like KSPP, musl, LibreSSL, hardened_malloc etc.
But I feel like this is not enough and I will likely face problems that I cannot solve. Instead of trying to reinvent the wheel by myself, I thought I'd ask if anyone has done this before so I can use their guide as a baseline. Maybe there's a community guide on hardening either of these two? I'd contribute to its maintenance if there is one.
Thanks.
You raise a valid point. In which case, I want to try and prevent malicious privilege escalation by a process on this system. I know that's a broad topic and depends on the application being run, but most of the tweaks I've listed work towards that to an extent.
To be precise, I'm asking how to harden the upcoming AlmaLinux based Dom0 by the XCP-NG project. I want my system to be difficult to work with even if someone breaks into it (unlikely because I trust Xen as a hypervisor platform but still).
I admit I was a bit surprised by the question since I've never consciously thought about a reason to harden my OS. I always just want to do it and wonder why OSes aren't hardened more by default.
Privilege escalations always have to be granted by an upper-privilege process to a lower-privilege process.
There is one general way this happens.
Ex: root opens up a line of communication between it and a user, the user sends input to root, root mishandles it, it causes undesired behavior within the root process and can lead to bad things happening.
All privilege escalation is two different privilege levels having some form of interaction. Crossing the security boundary. If you wish to limit this, you need to find the parts of the system that cross that boundary, like sudo[1], and remove those from your system.
[1]: sudo is an SUID binary. That means, when you run it, it runs as root. This is a problem, because you as a process have some influence on code that executes within the program (code running as root).
Hi,
I'm having a problem with Cider (app for Apple Music). It won't start anymore. The Cider logo appears, but then I get an error "cider is not responding, reload the app?". Obviously I've tried to start it again but it still isn't working.
Can anybody help me? Thanks!
Has anybody been able to build a statically linked binary that shows a Vulkan surface? I've put some context around this problem in the video. I understand that the vulkan driver has to be loaded dynamically - so it's more of a question whether a statically built app can reliably load and talk with it. I think it should be possible but haven't actually seen anyone make it work. I'm aware of "static-window9" by Andrew Kelley but sadly it doesn't work any more (at least on my Gentoo machine T_T).
(I'm also aware of AppImages but I don't think they're the "proper" solution to this problem - more like a temporary bandaid - better than Docker but still far from perfect)
A battle wast lost but the fight for a better gaming UX will keep on going as long as we keep the hope.We're writing AUTOMAT - a game that plays other games ...YouTube
Sounds like flatpaks/appimages with extra steps.
I'm fairly sure the complexity of flatpak/appimage solutions are far more than the static linking of a binary (at least on non-glibc systems). Its often a single flag (Ex: -static) that builds the DLLs into the binary, not a whole container and namespace.
Sounds like flatpaks/appimages with extra steps
Includes all dependencies? ✔️
A single file? ✔️
Independent of host libraries? ✔️
Limited learning curve? ✔️
Not sure how appimages handle it internally, but with flatpaks you can even be storage efficient with layers, whereas 100s of static binaries could contain an awful lot of duplicates.
Hello guys and gals, it's me Mutahar again! I made a bit of an error when updating my system and came across a total break. I spent the last month playing ar...YouTube
Hi all! I have always only used sed with s///, becouse I've never been able to figure out how to properly make use of its full capabilities. Right now, I'm trying to filter the output of df -h --output=avail,source to only get the available space from /dev/dm-2 (let's ignore that I just realized df accepts a device as parameter, which clearly solves my problem).
This is the command I'm using, which works:
df -h --output=avail,source \
| grep /dev/dm-2 \
| sed -E 's/^[[:blank:]]*([0-9]+(G|M|K)).*$/\1/t, T, //d and some other stuff, but onestly the output I get makes no sense to me, and I can't figure out what I should do instead.In short, my question is: given the following output
$ df -h --output=avail,source
Avail Filesystem
87G /dev/dm-2
1.6G tmpfs
61K efivarfs
10M dev
...87G using only sed as a filter?EDIT:
Nevermind, I've figured it out...
$ df -h --output=avail,source \
| sed -E 's/^[[:blank:]]*([0-9]+(G|M|K))[[:blank:]]+(\/dev\/dm-2).*$/\1/; t; /.*/d'
85G
awk? Printing out a specific column is basically the only thing I actually know how to do with it: df -h --output=avail,source | awk '/dm-2/ {print $1}'
Are you opposed to using awk?
Not at all, I'm just not familiar with it so I find it confusing.
Although, looking at your command, i think I understand what it means
-n option and add the p modifier to the s/// command to print out lines where substitution has occured. sed -n 's/your-regexp/replacement/p
Can this Linux-powered operating system disrupt Windows' hold in the European Union?Community (It's FOSS News)
cross-posted from: lemmy.zip/post/36434036
A new community-led initiative called “EU OS” to develop a Linux distribution initiative looks like a positive development. It is specifically created to address the unique requirements of the European Union's (EU) public sector organizations. For me, this initiative stands out for its commitment to the EU's digital sovereignty, reducing reliance on external vendors, and creating a secure, independent digital ecosystem.
Can this Linux-powered operating system disrupt Windows' hold in the European Union?Community (It's FOSS News)
Just in case nobody reads the article:
EU OS is not an entirely new operating system and uses a Linux foundation based on Fedora and KDE Plasma as the desktop environment.The main advantage of EU OS lies in its focus on standardization rather than creating something entirely new. It offers a shared Linux foundation that can be fine-tuned with additional bits, regardless of whether it be for national, regional, sector-specific, or organizational use.
cross-posted from: lemmy.world/post/28252147
Fedicast / Podcast: audio.firesidefedi.live/@fires…
Welcome Fedi Friends to the episode 10 of Fireside Fedi! I'm your host ozoned. Fireside Fedi is a show about folks within the Fediverse. If you're seeing this, you are a part of the Fediverse. I'...Fireside Fedi
like this
Hi all. I am facing problems with fonts rendering on my 2 different laptops. The only difference is in the OS: one runs Arch and the other runs Fedora. Both run latest i3wm and i3status and use the same config files.
On Fedora, the fonts are rendered beautifully with colors. On Arch, it is just black and white line. You can see them clearly here: imgur.com/a/QtJyRiJ. Top image is Arch and the bottom one is Fedora's.
How do I get Arch to render just like the polybar on Fedora? For the font, on Arch , I installed ttf-font-awesome.
In LX Appearance, I would then have: Font Awesome 6, Font Awesome 6 Brands and Font Awesome 4 Compatibility.
On Fedora, I installed a bunch of stuff like fontawesome-6-free-fonts, fontawesome-6-brand-fonts and fontawesome-fonts-all.
Here, LX Appearance shows Font Awesome 6 and Font Awesome 4
In i3 config, I just have:
font pango:Font Awesome 12
to set the fonts. But the results are so much difference as you can see from the link.
What’s new?
We’ve promoted our KDE Plasma Desktop offering to “Edition” status. The Fedora KDE team has been hard at work making sure bugs get fixed and everything is polished just so. We’re confident that this can stand along our other amazing flagship offerings.
I know the naming is a bit confusing, with GNOME-powered “Workstation” using a generic label while KDE Plasma Desktop has the tech right in the name. We’ll get that figured out eventually. If you don’t know where to start, don’t panic. Pick one and see how it goes. They’re both excellent desktop environments with great upstream communities, and the same Fedora system underneath it all.
We also have a new alternative desktop choice: COSMIC. This is a modern, written-all-in-Rust desktop environment from our friends over at System 76.
Perhaps most excitingly, we have a new installation interface! The previous UI was designed to manage a lot of before-you-even-start configuration choices. Over the past decade, though, we’ve gone to “get the full system installed with no fuss, then set up what you need from a complete environment”. That made the “hub and spoke” model more confusing than helpful. The new UI is streamlined and sleek, just like the Heart of Gold.
Of course, there are other big changes, as well as the usual updates to thousands of packages. See the Fedora Linux 42 Release Notes for all of the details, and don’t miss the “What’s New?” posts here on Fedora Magazine.
Fedora Linux 42 is officially released. Thank you so much to everyone who works so hard on Fedora and in all of our upstream projects.Matthew Miller (Fedora Project)
Touch some grass dude. This is not a low prio bug at worst. Anyone "tinkering" will have ended up doing worse, and have had to clean or modify boot records before.
Anyone not tinkering will have carried out with the install, instead of merely live booting Fedora.
One of the coolest things about GoToSocial is support for the Mastodon move command. Allowing you to migrate a Mastodon account to and from GoToSocial. We're going to go through how to do a migrati...AbnormalBeingsTube
like this
don't like this
like this
Points for something I've never tried.
Edit: Think I'll just blast Bazzite on it. The recent Gnome scales well and it has nice performance tweaks.
Cheers
Linux pretty much just doesn't work on TV. No streaming platforms have Linux support, unfortunately.
Bazzite, Chimera, Nobara all have a pretty sweet SteamOS-like distro, if you're after gaming and have AMD GPU.
Linux doesn't work on TV
proceeds to name 3 distros that not only work but do gaming
My brother in Christ…
It was the next sentence after the list of distros referenced in the response to you, and it is still very misleading at best.
But, yeah, the second sentence. There's a huge difference between an HTPC and an Amazon stick, Roku, or "smart" TV.
Those have apps and must be supported by "platforms" because they are limited hardware with a limited OS.
YouTube and Netflix don't need to "support" Linux any more than they need to support Windows for an HTPC.
If that's not what you're saying, you'll probably want to elaborate because I expect there are plenty of readers giving your comment a "wha...?"
"E" - since Buddy is trying to imply I changed my comment after he responded, no. I added clarity within a couple minutes, changing no ideas. Talk about gaslighting with this guy.
It was the next sentence
You're just lying. And I don't know why because everyone can see it. You're not fooling anyone and you're not accomplishing anything.
There's a huge difference between an HTPC and an Amazon stick, Roku, or "smart" TV.
Yes there is, in that a PC is much more versatile. But streaming services are a basic function of HTPC.
YouTube and Netflix don't need to "support" Linux any more than they need to support Windows for an HTPC.
Yes...they do? And they do support Windows.
E: the comment above was edited and they continued to double down and argue instead of just admitting that they made a mistake.
I'm... lying?
No, it's pretty clear now that you're quite confused about the difference between apps and services.
And they do support Windows.
Oh god, tell me you're not using the windows store apps for these services on a PC. Even my Alpha kids know better than that.
Seriously, how can someone be even a little familiar with Linux and be so wrong about internet services working on Linux?
And your attitude is just... something else.
I'm... lying? No, it's pretty clear now that you're quite confused about the difference between apps and services.
Your lying has nothing to do with apps and services and everything to do with gaslighting people in this thread into believing you weren't wrong instead of just admitting you made a dumb mistake.
Seriously, how can someone be even a little familiar with Linux and be so wrong about internet services working on Linux?
That's a great question, how can you?
And your attitude is just... something else.
Sorry I don't take being gaslit very well.
Jesus, Buddy. It's not gaslighting to explain how I interpreted your comment, and it's starting to sound like your angry responses are to avoid explaining your position.
Please explain to the class exactly what you mean by services not supporting Linux. No "obviously you know and are just pretending to make me look bad" stuff.
Explain like we're 5.
It's not gaslighting to explain how I interpreted your comment
Oh good now you're gaslighting me about gaslighting.
and it's starting to sound like your angry responses are to avoid explaining your position.
I'm not angry, and I've already explained my position.
Please explain
In the extremely unlikely case that you're legitimately just bad at counting, I advise you to scroll up and try again. If you cannot do that then I literally cannot help you. Restating my explanation will not help you.
We're done here.
Ok, not angry. Tossing constant accusations of lying and gaslighting rather than answering.
Your position was "Linux not supported by platforms". You never explained what that means and no one understood you, clearly.
Almost like... gaslighting to say that you explained your position already.
Thank you for the note. I'm been cursing myself for not being able to provide my devs with something similar (they don't complain but I know it will make their lives easier). I will start nix from scratch if I learn it but nixops definitely seems like it can help because terraform isn't that great at the example you provided. Thanks.
focused on security hardening
Could you elaborate?
Background:
I'm using Bazzite Linux, Gnome, Wayland. As the title states, I'm trying to list my existing custom keyboard shortcuts. I know I can go to Settings > Keyboard > Keyboard Shortcuts > View and Customize Shortcuts > Custom Shortcuts. I want to list my custom shortcuts in Terminal using gsettings.
I've gotten as far as listing the names of the custom shortcuts:
me@fedora:~$ gsettings get org.gnome.settings-daemon.plugins.media-keys custom-keybindings
['/org/gnome/settings-daemon/plugins/media-keys/custom-keybindings/custom0/', '/org/gnome/settings-daemon/plugins/media-keys/custom-keybindings/custom1/', '/org/gnome/settings-daemon/plugins/media-keys/custom-keybindings/custom2/', '/org/gnome/settings-daemon/plugins/media-keys/custom-keybindings/custom3/', '/org/gnome/settings-daemon/plugins/media-keys/custom-keybindings/custom4/']What I've tried so far:
I've tried following examples from the answers in this Ask Ubuntu post from March 2015, and I've tried turning to Duck.ai for help. I'm just not connecting the dots between the documentation I've read and what I'm trying to do.
me@fedora:~$ gsettings get org.gnome.settings-daemon.plugins.media-keys custom-keybindings/custom0
No such key “custom-keybindings/custom0”me@fedora:~$ gsettings get org.gnome.settings-daemon.plugins.media-keys.custom-keybindings:/org/gnome/settings-daemon/plugins/media-keys/custom-keybindings/custom0 name
No such schema “org.gnome.settings-daemon.plugins.media-keys.custom-keybindings”me@fedora:~$ gsettings get org.gnome.settings-daemon.plugins.media-keys custom-keybinding:/org/gnome/settings-daemon/plugins/media-keys/custom-keybindings/custom0/ name
Usage:
gsettings [--schemadir SCHEMADIR] get SCHEMA[:PATH] KEY
Get the value of KEY
Arguments:
SCHEMADIR A directory to search for additional schemas
SCHEMA The name of the schema
PATH The path, for relocatable schemas
KEY The key within the schemaEDIT: Thank you, @nmtake@lemm.ee, for your help!
How to set custom keyboard shortcuts from terminal for different Linux versions? Basically I want to know where Linux stores the keyboard shortcut files and how it can be edited. On my research I...Ask Ubuntu
Hi, I have never build a PC before, that is why I am asking you for your help and suggestions.
I have informed (or misinformed) myself about a few aspects of building a PC.
I will give my reasoning why I chose each part, and let you decide why I am wrong.
The goal of this build is to create a Gaming PC which can play most games at least at lower resolutions and at sufficient frame rate.
I plan to build this PC with future software requirements in mind, to reduce e-waste and to leave room for possible upgrades.
This PC should support Coreboot to allow for firmware updates, even after the official firmware support has stopped.
This machine will run Linux as the main OS and probably Dasharo as the Coreboot-distribution.
The main use is playing games and emulation, but I also intend to use it for virtualisation.
Since I plan something special for the PC-case, it will not be part of this post.
I hope this post can be used by others in the future, as a reference for building a Linux PC.
PS: This is my first post on lemmy. I am sorry for any formatting errors. I hope the post is legible.
Edit:
- added links for explanation
- fixed some grammatical errors
- added suggestions from the comments
It is getting late here. I will look into a substitute for intel tomorrow (8 hours from the latest edit) and add this here.
Hello,
it's me again.
Some of you might remember me from this post,
in which I was asking for feedback to build a Linux PC in 2025.
Stuff happened and I didn't went through with it.
So this still my first attempt at a build.
Well now I've got time and want to try it again.
As you may notice,
I've ditched the Z790-9 mother board in favor of a MSI PRO B650M-P.
My dream of building a coreboot-system is officially dead,
thus I decided to build an AMD-System.
If you notice anything wrong
or have suggestions/improvements don't hesitate to point them out.
Thanks in advance!!!
Patriot Viper Venom 32 GB (2 x 16 GB) DDR5-6000 CL30 Memory (PVV532G600C30K)pcpartpicker.com
How quantized? I don't think 16GB of RAM is enough to run a full fat 12B model at FP16 but maybe I'm wrong.
Nvidia cards are just too expensive
My personal order:
Repositories > AUR > Making an own AUR package > Making an own package not in AUR > Flatpak > Using an alternative to that application > consider if I really need it > AppImage
Why do you consider AppImages as last resort?
I can understand that in a distro the main repo need to be prioritized to avoid bloat of repetitive dependencies that could happen with a lot of AppImages.
I can't understand why so many people are opposed to it as an supportive role from a practical and complementary perspective.
I was playing around with Lemmy statistics the other day, and I decided to take the number of comments per post. Essentially a measure of engagement – the higher the number the more engaging the post is. Or in other words how many people were pissed off enough to comment, or had something they felt like sharing. The average for every single Lemmy instance was 8.208262964 comments per post.
So I modeled that with a Poisson distribution, in stats terms X~Po(8.20826), then found the critical regions assuming that anything that had a less than 5% chance of happening, is important. In other words 5% is the significance level. The critical regions are the region either side of the distribution where the probability of ending up in those regions is less than 5%. These critical regions on the lower tail are, 4 comments and on the upper tail is 13 comments, what this means is that if you get less than 4 comments or more than 13 comments, that's a meaningful value. So I chose to interpret those results as meaning that if you get 5 or less comments than your post is "a bad post", or if you get 13 or more than your post is "a good post". A good post here is litterally just "got a lot of comments than expected of a typical post", vice versa for "a bad post".
You will notice that this is quite rudimentary, like what about when the Americans are asleep, most posts do worse then. That's not accounted for here, because it increases the complexity beyond what I can really handle in a post.
To give you an idea of a more sweeping internet trend, the adage 1% 9% 90%, where 1% do the posting, 9% do the commenting, and 90% are lurkers – assuming each person does an average of 1 thing a day, suggests that c/p should be about 9 for all sites regardless of size.
Now what is more interesting is that comments per post varies by instance, lemmy.world for example has an engagement of 9.5 c/p and lemmy.ml has 4.8 c/p, this means that a “good post” on .ml is a post that gets 9 comments, whilst a “good post” on .world has to get 15 comments. On hexbear.net, you need 20 comments, to be a “good post”. I got the numbers for instance level comments and posts from here
This is a little bit silly, since a “good post”, by this metric, is really just a post that baits lots and lots of engagement, specifically in the form of comments – so if you are reading this you should comment, otherwise you are an awful person. No matter how meaningless the comment.
Anyway I thought that was cool.
like this
don't like this
I comment very seldom and only if i think that I can contribute. I see no need to write anything if I got nothing of significance to add.
Maybe I should. Add comments that is uplifting and kind more often.
like this
I comment a shit ton and often with absolute banalities. Especially on posts with 0 comments.
My reasoning is twofold: first of all I want to encourage posters by engaging with their content so they don't stop posting. Second I want to invite others to comment and it's much more inviting to do so if a post has at least one comment. People tend to think it's dead otherwise and not bother.
I think at the current level of MAUs there is no comment too small, and every little bit helps just by virtue of breaking the silence.
like this
I've been thinking. Android implements app permissions on top of Linux, Flatpak does it too. But why is it it's not part of the kernel?
Like all executable files would be sandboxed and would only be able to access syscalls and parts of the file system if they were allowed to. Making sandboxing the default instead of having to restrict programs.
I'm not a kernel developper so this question may be naive, but it bothers my mind. I guess part of it is because of historical reasons but are there any practical ones that make it not feasable?
EDIT : Thank you all for your answers, almost all of you were very nice and explained things clearly
The Linux kernel already has the infrastructure required for that. Heck, Android itself, including its permission system, is built atop the Linux kernel.
Making sandboxing the default instead of having to restrict programs.
What's missing for that is work on userspace software and app packaging. The kernel can't automatically know what a program should and shouldn't be allowed to do.
Some of that work has happened, like moving from X11, which really wasn't designed around sandboxing, to Wayland.
But a lot of it requires making a permission system the norm and creating a system such that software is normally distributed with restricted permissions and developers develop around that. Like, I can use firejail and disallow write access to parts of the filesystem or network access to a program, but there isn't a broad system of appropriate pre-created profiles that applications are distributed with and way to view this. We don't have a convention for an application-private space on disk and lack of access to most of the filesystem, which Android does and apps need to be written around.
IMHO, one of the largest jumps would be Valve doing this for Steam games --- a lot of games are going to be amenable to being sandboxed, don't need broad access to the system, and are closed source. There are some issues there; for Windows binaries run under Proton, WINE wasn't originally written around being isolated, and the game developers writing the software are writing to a Windows API that aren't under the control of people on the Linux side of things.
I haven't poked at snaps much or their technical underpinnings, but my understanding is that they distribute apps in a sandboxed form, so that might be the closest Linux-native approach.
It's sad to see such a great project come to a close. I've been using ArcoLinux for years and have come to love it.
I wish the ArcoLinux Team and the Beta testers all the best.
like this
Hi! This is just a friendly reminder letting you know that you should type the shrug emote with two backslashes to format it correctly:
Enter this - ¯\\_(ツ)_/¯
And it appears like this - ¯\_(ツ)_/¯
don't like this
like this
I have a lowend netbook with debian-type linux only (no dualboot). Power management should be via XFCE4's xfce4-power-manager-settings.
I'm having weird behavior with suspend and trying to identify/troubleshoot it. It seems to be usually draining power and never charging when the lid is closed for many hours.
I tried explicitly entering power off, hibernate and suspend followed by unplugging then leaving it a few hours but couldn't replicate. It seems to be doing something on its own after being unplugged a long time.
What logs can I look at to see when my device changes its power modes, what were the triggers, what settings are governing it etc?
I can't tell if it's a software issue or there is some sort of power saving thing going on in the hardware or what.
Just hoping for some investigation tips here, I know its not enough info to solve.
Edit to clarify no dual boot.
I'm not a master pro Linux user. I've dabbled over the years several times. It's been about 6-8 years since I've last used it. I am having the absolute worst experience I have ever had with any OS so far, I have to be doing something wrong.
First. R7 5800x3d. 32gb ram. Rtx 3060. Nvme dual boot.
Problems so far, this is my first day. One, changing my monitors orientation and position cause my mouse to be on one screen and actively click on a different screen.
Whenever I open settings to change date and time the program crashes.
My mouse movement is that of a spastic child and is not smooth and I can't install ghub on Linux, so I'm forced to use the OS adjustments, which in turn crash the settings application.
The OS is SLOW! like insanely slow. I open discord and literally 3-4 minutes goes by before the loading pop up appears.
If I click in an icon, there is no indication that I clicked it until 1-2 minutes later, this even happens with like Firefox or chrome, file browser. Any app.
I have to have a password to do anything. Why? No one is going to steal my PC, boot it up and smash f11 to get into my Linux box where I'm just messing around.
I don't understand.. I have used Ubuntu before, fedora, mint and a few others. But it just seems like it's absolutely garbage right now.
Do I have to install certain things? Do I have to install Nvidia drivers? Doni have to install chipset drivers?
And honestly question, why do simple takes require you to "run a script"? Like why?
Stats from here: lemmy.fediverse.observer/daily…
Like, has an instance gone down and if so, why hasn't there been a comparable drop in users and comments?
Edit: Thanks to @example@reddthat.com here for pointing to zerobytes.monster becoming more aggressive against bots as the likely culprit.
Lemmy Sites Status. Find a Lemmy server to sign up for, find one close to you!lemmy.fediverse.observer
like this
don't like this
It may have been lemmy.zip
It did in fact go down for about 48 hours... prompting me to make this new account on dbzer0.
Basically, the admin attempted to update to a newer lemmy version... and it failed, multiple times, and they just rolled back, restored the old version, posted an explanation and apology, and they'll be further looking into ... exactly what went wrong.
like this
Here's the post.
Evidently, Demigodrick has since fixed the problems and successfully upgraded to 0.19.11
like this
¯_(😀_/¯
I don't know exactly how that post counter ... actually, technically counts posts, but:
1:
Zip going down could have uncounted all posts anywhere made by zip accounts.
2:
There could have been some kind of... propogating post count negation effect, as various other instances reacted differently to zip users posts on their instances could not pull them anymore, on different time scales.
3: If a zip user had a ... top level comment, on another instance, its possible all lower level comments responding to that comment may also have poofed out of existence, in some respect.
I may be using some terminology here, and this is just spitballing, but yeah.
Almost all of my .zip account's posts... are not on zip itself, and its possible that that is fairly common amongst .zip users.
like this
I think this is zerobytes.monster, one of the reddit mirror instances.
the post count fits and it also matches with the user count not significantly dropping.
that instance has been using rather strict waf blocking rules from time to time that likely also affect the crawler for fediverse.observer.
like this
Welcome to a new issue of "This Week in Plasma"! Every week we cover the highlights of what's happening in the world of KDE Plasma and its associated apps like Discover, System Monitor, and more.This Week in Plasma: The beginnings of Wayland session restore
KWin has gained support for the initial version of the Wayland session restore protocol
I found it interesting that they were merging support for a not-yet-merged protocol so I looked it up.
It seems the plan is to use the new experimental protocol thing that was introduced a while back:
gitlab.freedesktop.org/wayland…
This is identical to the experimental version implemented by kwin and mutter. Signed-off-by: Jonas Ådahl jadahl@gmail.com Some notes:GitLab
NEW (nobody) in Firefox - Session Restore. Last updated 2025-04-12.bugzilla.mozilla.org
Combining vibe coding, attempto controlled english (ace) and the social web - form space on the social web through words, secured by attempto controlled english.
You are only able to run code based on attempto controlled english (ace), which is a formally defined subset of the english language.
In the future, admins could through this restrict certain kinds of code from executing for security purposes.
Additionally, it lessens the ambiguity of natural language and you can be sure that the resulting code will do what it should.
Here are a few example commands in ACE that could be run on AceCoding.social in the future:
Repo: github.com/bluebbberry/AceCodi…
(Image from Veronica Casson, freethink.com/wp-content/uploa…)
Combining vibe coding, attempto controlled english (ace) and the social web - form space on the social web through words, secured by attempto controlled english. - bluebbberry/AceCoding.socialGitHub
like this
don't like this
New to Linux, I am on Ubuntu 24.04.
I am trying to have my phone calls go from my phone to my laptop. I did some online searching and found KDE connect. I can recieve and send texts on KDE connect but can't call
Am I doing something wrong or should I use something else?
Thanks for reading
This is an XY solution but...
Telegram and similar services offer both calling and texting and can be carried across devices. It's linked to the same phone number, all folks would have to know is "between these hours call telegram"
Not by default, but yea it is encrypted, I use almost exclusively encrypted chats through TG, even my voice and video calls are encrypted through TG.
E2e encryption is security theater though, a chance for companies to tell states "We'D lOvE tO hAnD oVeR tHaT dAtA bUt ItS eNcYpTeD".
In reality, it doesn't matter, if someone wants to snoop on your convos you can't stop them.
Crypto works. Nobody can break good encryption.
You can make an argument for store now, break after quantum leap or whatever. But, no, if the US wants to spy on the communications of their enemies, they can't do it by breaking encryption.
Since you seem to understand it then:
How do two clients communicsting over a proprietary network negotiate an end to end encrypted chat channel without sharing keys in an easily decrypted manner?
It seems to me that some kind of handshake needs to occur where the clients need to agree on a cypher, so how does this happen securely?
I'm not worried about encryption being broken, it just seems like if you're handing the keys over the mail, it's pretty easy to xray the package and copy the key, is the same not true over digital communication?
This was a problem solved by Diffie and Hellman in the 1970s
EDIT: See edit in my previous comment on how Bluetooth can do it.
I suppose along an iPhone? I mean Apple does the whole ecosystem. And this isn't really a technical limitation. Most phones have the audio stream connected to the processor. Theoretically they could forward it, or record it. But on Android, the often don't seem to allow any of that, and Apple doesn't allow third parties (like a Linux computer) to access "their" interfaces, so I don't know if you can forward it to arbitrary computers either.
I mean there are solutions. Other people here outlined that. For example mimicking a bluetooth handset. You could solder a cable to attach to a computer's AUX input. Or use a landline or different service to manage the calls whithin a PBX. But none of that is very easy to set up or proper forwarding. Maybe the best bet would be bluetooth.
Combining vibe coding, attempto controlled english (ace) and the social web - form space on the social web through words, secured by attempto controlled english.
You are only able to run code based on attempto controlled english (ace), which is a formally defined subset of the english language.
In the future, admins could through this restrict certain kinds of code from executing for security purposes.
Additionally, it lessens the ambiguity of natural language and you can be sure that the resulting code will do what it should.
Here are a few example commands in ACE that could be run on AceCoding.social in the future:
Repo: github.com/bluebbberry/AceCodi…
(Image from Veronica Casson, freethink.com/wp-content/uploa…)
Combining vibe coding, attempto controlled english (ace) and the social web - form space on the social web through words, secured by attempto controlled english. - bluebbberry/AceCoding.socialGitHub
like this
don't like this
The amount of domain knowledge to even begin to parse what the fuck you're talking about is absurd.
Secondly, why would anyone want this?
I'm glad you've found yet another project to look nice for your github portfolio, but maybe be up front about that instead of drowning everyone in near gibberish and what seems like poorly written advertisement.
"Hey, I've made another quasi-social media network leveraging the fediverse, AI, and a programming language made to resemble normal english. Check it out!"
Otherwise this is just blatant buzzword salad. I'm going to guess you're also using AI to get project idea involving the latest buzzwords? Maybe even using AI to write this psuedo ad-copy?
Again, more power to you if you're trying to build a portfolio/github/resume where you can say that you've "created numerous projects leveraging federated social media and AI", but just be up front about what you're doing when you post about it here please.
No one needs more shit pretending to be something it isn't. It's okay for your little portfolio project to be just that.
like this
What are the very VPS cheap options for like <10$/year or maybe even less?
I want to host a large number of censorship-resistant proxy servers (XTLS) around the world.
The location does not matter (except it must not be in some shithole like China or Russia). Perfomance and reliability are not a priority either.
Being able to pay with crypto would be great.
(Not sure if a post about commercial services like this is allowed, if not, I will delete it)
Of course. It's not resistant to blocking.
There are reasons why Chinese people needed to invent ShadowSocks, VLESS, uTLS, VMESS, Trojan, Reality, Vision, XHTTP, etc.
cross-posted from: lemmy.world/post/28052415
The final ISOs are here: dl.fedoraproject.org/pub/alt/s…
Dilemma: Fedora has introduced and worked on a lot of things that make "Year of Linux on the Desktop" more likely. Even if UNIX purists disagree with the direction, Fedora is what Ubuntu used to be back in the day. Linux for humans.
At the same time, it's possible due to corporate backing. American corporate backing even. A part of me thinks that if we can't get there as a community without corporate influence, then it's all for nothing. I want the community model to not just be an ethical alternative, but that this model of cooperation also produces the best results.
(PS. I'm open for having my view changed, maybe I'm thinking about this the wrong way.)
Currently most cooperate linux companies are not in the business of selling linux desktop itself. Rather its linux for servers, administration, embedded things (like cars), and other enterprisey stuff. So at least at the moment they are not looking to profit of linux desktop users directly which has saved us from enshittiffication attempts.
But even if they in the future attempt to do something fishy, that most users dont agree with, I think by the virtue of how stuff works on linux it will be very easy for people to move to something else or a fork, and still get 95-99% of the same experience. This in turn will force companies to think twice before doing something like this.
A good example here is canonical/Ubuntu who has made questionable decisions in the past and each time they had to take it back. Even now, Snap due to its use of a centralized store is almost universally shunned by the linux community and is only supported maintained by canonical. While Flatpak is supported by the wider linux community with people from different projects contributing to it (though I sometimes worry about everyone centralizing on Flathub to the point where they are actively discourage other projects from launching/maintaining their own stores/repos).
This is why we need to build and champion tech that is resistant to control and enshittiffication. Then we dont have to worry too much about who is developing it.
:smirk_cat: A snarky 1kb Markdown parser written in JavaScript - developit/snarkdownGitHub
like this
like this
Exactly, in this case the actual post is this one and posted it here as a x-post.
Edit: I own my instance, but you don't have to own one in order to deploy this blog frontend.
like this
Usually I only post these announcements on !bmoviebonanza@lemmy.world, but Krull... well it's not a GREAT movie, but it's not quite a B movie either. It had a video game tie-in, a respectable budget, and it was aimed at being a hit. It's more like a first-run movie that didn't quite come off. But it has nostalgia value! And parts of it are pretty good!
Anyway, if you want to watch it this Sunday with a pack of fediverse wits and wisealecks, read on...
cross-posted from: slrpnk.net/post/20694076
Krull (1983) is the movie for this Sunday's "monsterdon" watch party over on Mastodon, our fediverse sibling!
- Just start watching that movie this Sunday, April 13, 2025 at 9pm ET / 8pm CT / 6pm PT which is 1am Monday UTC
- and follow #monsterdon over on mastodon for live commentary. For example, you can follow that hashtag here: mastodon.social/tags/monsterdo…
- I usually open two web browser windows on a computer side-by-side. But you could follow the mastodon commentary on a phone app while watching the movie on TV or something.
How to watch the movie:
- Tubi (US, England, Canada, Australia, NZ?) (NOTE you may need to "enable DRM" if you're on Firefox; dunno if that disables uBlock Origin adblock): tubitv.com/movies/100029546/kr…
- someone plans to stream it on miru.miyaku.media/ at that time
- archive: archive.org/details/krull.-198…
- archive (low quality?): archive.org/details/krull_2024…
- youtube (Brazilian Portuguese dub playlist?): youtube.com/playlist?list=PLDT…
- if you want to pay and/or watch ads, look here: justwatch.com/us/movie/krull
Krull is a 1983 British[1] science fantasy adventure film[2] ... The story follows Prince Colwyn (Marshall) and a fellowship of companions who set out to rescue his bride, Princess Lyssa (Anthony), from a fortress of alien invaders who have arrived on their home planet....
The film was a box-office bomb upon release, and critical opinion has been mixed, both upon release and in retrospect. Numerous reviewers have highlighted its visual effects and soundtrack, while several critics have criticized its plot as being derivative and nonsensical. In the years since its release, the film has developed a cult following.
en.wikipedia.org/wiki/Krull_(f…
We discussed this movie here on B Movie Bonanza a year and a half ago!
The original server operated by the Mastodon gGmbH non-profitMastodon hosted on mastodon.social
No idea how I got there but somehow I saw this post somehow on sh.itjust.works, about a prefab house that was found floating in the Pacific. I wanted to comment but the only login I have is on lemmy.world. Notice the post is from The Picard Maneuver, whose posts I've seen many times, and it says lemmy.world above their name.
Lemmy.world has a whitepeopletwitter community but the newest post is 2 months old. This one is from 10 hours ago. Search on the lemmy.world main page for "Minding" turns up a bunch of posts going back months, but this one isn't there.
I thought I understood how federation works but I'm stumped. Is this really a lemmy.world post? If not, what does the presence of "lemmy.world" on it indicate?
like this
unbuckled_easily933 doesn't like this.
moist.catsweat.com/m/whitepeop…
you would go to an instance, search for that sub/group (whitepeopletwitter@sh.itjust.works)
im not on lemmy, but i think the significance of the 'lemmy.world' is the origin of the post... in this case the_picard_maneuver@lemmy.world posted it to sh.itjust.works
like this
i think the significance of the ‘lemmy.world’ is the origin of the post… in this case the_picard_maneuver@lemmy.world posted it to sh.itjust.works
Close, it's where the image is hosted. The lemmy.world bit is a link to the image. Just like how any website link will say the domain of the destination.
I mean it probably is where a user is posting from, but sometimes it is not (not sure why but sometimes non-ml users will post images from ml)
like this
How could the_picard_maneuver@lemmy.world post to sh.itjust.works? They would have to login to sh.itjust.works. I'm not able to login there as lovablesidekick or lovablesidekick@lemmy.world.
Likewise, if you're originalucifer@moist.catsweat.com how are you replying to my comment on lemmy.world without logging into lemmy.world?
BurntBlueberry likes this.
geekwithsoul doesn't like this.
They would have to login to sh.itjust.works.
nope. every instance can post to any other instances groups. my 'home base' instance (moist) has almost no local communities, but the users can interact with all of the lemmyverse
if you look at the group list you'll see they are all remote groups that local users can subscribe and interact with locally
my instance has a 'copy' of the remote content. when a local user interacts with that content, it is sent to the other instance.
its what the 'federation' in the fediverse means. all users can subscribe/upvote/interact with 'remote' instances. the actions of the users are federated between instances.
like this
Makes sense and I appreciate the help. But when I go to the post link on sh.itjust.works it says:
I'm currently logged in to lemmy.world, but apparently I do need to login sh.itjust.works. This is how I thought lemmy worked, but I also thought the content from sh.itjust.works would be repeated on lemmy.world as you described, and I would be able to find it here and comment. But the whitepeopletwitter community on lemmy.world is pretty empty and that post isn't there. Does this mean something's wrong, or maybe lemmy.world has muted that community, or some other explanation? Just trying to figure all this out.
Edit: I rethought what you said and found where I can remote-subscribe to the sh.itjust.works community. It says subscription pending. I will give it a while and see if this solves the problem. Again, I appreciate your help.
on lemmy.world, click -> communities
then click -> All
then in the search box type 'white'
its the first option that pops up
heres an screenshot of the lemmy.world view of the above
like this
Blaze (he/him) likes this.
weird. no idea what drives the search then.
the direct link to that community is lemmy.world/c/whitepeopletwitt…
I wonder if you're running into the same thing that I've had quite a bit of issue with in the last few weeks on lemmy.world.
When I go to the 'copy' of a post on lemmy.world from another instance, I will get the same message of "You must log in or register to comment."
Only by searching for the post on lemmy.world, clicking through to it, and then also refreshing, does lemmy seem to acknowledge that I am in fact logged in! But only if I do those steps in that order.
EDIT: I've made it a bit easier for myself by setting up the search engine in my browser: https://lemmy.world/search?q=%25s
So that I can just copy any other instance link, go to the address bar and type ls (the keyword I chose for the search engine), paste in the link and then go to the lemmy.world version from there, and refresh the page.
I used to be able to just use the Instance Assistant for Lemmy & Kbin extension by cynber, but for the last few weeks I have to do the whole search and refresh dance instead.
Browser extension to help make Lemmy & Kbin easier to use - cynber/lemmy-instance-assistantGitHub
Lovable Sidekick likes this.
It's federation. LW users can post to sh.itjust.works as easily as gmail users can send mail to yahoo mail addresses.
Edit: Just click these links and try posting and commenting at !test@lemmy.ml or !memes@sopuli.xyz
Takapapatapaka likes this.
Blaze (he/him) likes this.
Switched to Linux a little over a year ago and it's been great, but one thing eludes me. What's the best way to do the following when you don't use Windows or MacOS?
And how the hell does anyone but a child type on an iPhone anyway, while we're at it? (rhetorical) Grrrr.
Thanks!
I'm sorry I can't help you.
But If you like Linux, sell your iPhone, buy a Pixel and install Graphene OS. It's the closest thing to a Linux phone that is actually secure, private, FOSS and daily driver worthy.
I don't have an iPhone but my daughter does.
For music I don't sync anything to her phone. I run a navidrome server and set up an account so she can stream whatever she wants whenever. I think she uses isub as her streaming app. It does allow you to download and cache files from the server to play if you are offline
As for sms, I don't know of any way to sync in Linux, but if you use Windows, the phone link app works, as several of my coworkers have set it up. I know it installs some piece of software on the iPhone you want to sync to, maybe you could do that and try running the phone link program with wine?
I also know kde connect has a link for iOS. It's not perfect but it will do the sms linking thing.
Stumbled across this quick post recently and thought it was a really good tale and worth sharing.
A couple of weeks ago, I saw a tweet asking: "If Linux is so good, why aren't more people using it?" And it's a fair question! It intuitively rings true until you give it a moment's consideration. Linux is even free, so what's stopping mass adoption, if it's actually better? My response:
The world is full of free invitations to self-improvement that are ignored by most people most of the time. Putting it crudely, it's easier to be fat and ignorant in a world of cheap, empty calories than it is to be fit and informed. It's hard to resist the temptation of minimal effort.
And Linux isn't minimal effort. It's an operating system that demands more of you than does the commercial offerings from Microsoft and Apple. Thus, it serves as a dojo for understanding computers better. With a sensei who keeps demanding you figure problems out on your own in order to learn and level up.
Now I totally understand why most computer users aren't interested in an intellectual workout when all they want to do is browse the web or use an app. They're not looking to become a black belt in computing fundamentals.
But programmers are different. Or ought to be different. They're like firefighters. Fitness isn't the purpose of firefighting, but a prerequisite. You're a better firefighter when you have the stamina and strength to carry people out of a burning building on your shoulders than if you do not. So most firefighters work to be fit in order to serve that mission.
That's why I'd love to see more developers take another look at Linux. Such that they may develop better proficiency in the basic katas of the internet. Such that they aren't scared to connect a computer to the internet without the cover of a cloud.
Besides, if you're able to figure out how to setup a modern build pipeline for JavaScript or even correctly configure IAM for AWS, you already have all the stamina you need for the Linux journey. Think about giving it another try. Not because it is easy, but because it is worth it.
when everything is not installed or sometimes not everything is perfectly installed and set up
I guess that'd be a major blocker for most people.
My friend, whose account is on the lemm.ee instance, is able to post to lemmy.world and lemmy.ml communities as demonstrable here
However, another friend, who is on lemmy.world, said that her posts aren't showing up on lemmy.world.
lemmy.world/c/askmen?dataType=…
lemmy.world/c/askouija?dataTyp…
lemmy.ml/c/askgermany?dataType…
Her posts haven't been removed, otherwise they would've shown up in the modlogs lemmy.world/modlog?page=1&acti…
like this
don't like this
You, I mean your friend, was even banned by me three weeks ago (wish I had given a reason for my own reference). YOUr friend must be acting like a jerk and a nazi...
It says she’s banned here lemmy.world/u/shinigamiookamir…
Modlog
lemmy.world/modlog?page=1&acti…
But as we can see here, she’s been recently posting in lemmy.world communities
like this
don't like this
Those aren't actually lemmy.world communities.
Everything on that list is a community on that instance (whatever it is - lemm.ee I guess).
For example, a post from a lemm.ee account to AskLemmyWorld@lemmy.world is actually a post to an entirely separate community - AskLemmyWorld@lemmy.world@lemm.ee That lemm.ee community is a mirror of the lemmy.world community (and of all the other communities on all the other instances that mirror it.
That's how federation actually works. You never actually leave your home instance, and what seems like a post to a community on another instance is actually a post to a locally hosted mirror of that community.
like this
bootc is a new deployment method that powers Image mode for RHEL and HeliumOS, a new Linux distribution. We are excited to announce that AlmaLinux now offers bootc images for Intel/AMD(x86_64) and ARM64(AArch4).AlmaLinux OS
cross-posted from: lemmy.world/post/28011368
So I started by doing research and by research I mean watching two videos on YouTube about basic recommendation algorithms.I did watch a 30 minute video on Netflix software engineer talking about using machine learning and complex matrix and these bandit style machine learning algorithms to recommend TV shows/movies really the base conclusion is that there's a 50% improve over doing all these complex things over their baseline measurement. Baseline will mean traditional pre neral network based algorithms.
The way I interpret it is that basics take you a long way and all the basics are is just organizing any peertube video into a vector and people watching into a vector as well. The idea would be that which videos are more similar to each other would be good recommendations if a watcher watch one of those videos, or if they didn't like it don't recommend any videos similar to that. Once these videos get vectorized then the watcher's vector can be updated in a basic way more watch time mean its more of what they want and a like would give it a boost, or comment could boost multiplier.
I'd say that the watcher's vector can be stored locally while videos vector is public. It will be a while to figure out a function/algorithm to adapt to watcher. Does the watcher taste change, do they multiple things , should the algorithm adapt fast or slow as new videos come in, novelty/consistency. I don't expect this problem to be solved anytime soon , but the recommendation algorithm will simply evolve and split as to have their own unique benefits and drawbacks.
To start foundation is to start a standard for video vector. Video can be quantified and qualified. There's only a few measurable quantities like video length and existing views. Qualitative attribute of videos like "is it a cooking tutorial, "is it a sports commentary ", or "is it a Livestream VOD" are going to require that the vector be stored in a format that can adapt to the expanding number of dimensions the quality a peertube video can have. Next issue is measure qualities to an actual number is something sports related or sports adjacent would a 1 mean yes or would a 0 mean neutral/agnostic or no.
The last simplist issue would be communicated the algorithm that updates the watcher's vector since that can be done via updates from peertube server or GitHub
like this
I did some searching and many users recommend Rofi but looking at man rofi-script it seems to just be a list picker. You pick something from the a list and only one thing runs. On Alfred and Raycast you can have interactive extensions which are essentially keyboard navigable UIs.
cmd enter to go back & select another subreddit.
I've done lots of searching and Reddit comments about what makes Emacs so appealing. I think Emacs users like the specific ecosystem and things it offers and they put in the work to tailor it for them. Consistently is one thing I hear. Tell me ur thoughts.
I don't find anything appealing about it over Neovim + TUIs and keyboard navigation in GUI apps, including hints: github.com/AlfredoSequeida/hin…
Hints lets you navigate GUI applications in Linux without your mouse by displaying "hints" you can type on your keyboard to interact with GUI elements. - AlfredoSequeida/hintsGitHub
Well, I started using Emacs because I was feeling limited by my Vim+Tmux-based workflow. Like you've heard from others, what convinced me was the consistency in interface, and the composability that enables.
Everything is a text buffer. When the text is drawn to screen, it might be resized, colored, hidden, replaced with images, etc, but it's all still just text. Because of that consistency of medium, all your interactions boil down to manipulations of that text.
What's important isn't the verbatim text, but what the text represents. It could be code (symbol, function, library, in any language, literately), prose (word, sentence, paragraph, or whole book), , a button, a list, a foldable outline, a process, a container, a , a typo, a secret, a , a pull request, the string you're looking for, a definition, a chat message, an RSS feed/item, a web page, etc...
Each of those has a mode (or modes) that makes interacting with those objects in a semantically meaningful way both efficient and composable (to varying degrees).
That's why Emacs devotees try to do everything in Emacs. Leaving Emacs means leaving that consistency and semantic expressiveness behind. In a CLI shell, yes everything is text, but it's comparatively raw. The best you can do is define variables and color. TUIs bridge the semantic-meaning gap, but aren't composable with each other. (Same with GUIs, but because of administering remote systems I avoided them when possible.) You can't add functionality to htop without recompiling the whole thing. You can't pipe ncdu's results to rsync. Emacs is a live Lisp machine. You can redefine (or advise) any function on a whim, without restarting.
That's not even getting into how everything you do to improve interacting with text improves your experience with all those text-encoded objects. Completions can be filtered and ranked by different algorithms, lines can be "narrowed" to, it has an interactive regex builder, you can autofill with simple, intelligent predictions (like, what's under your cursor, or a prefix-matching word up-buffer), you can deeply integrate LLMs, reflow and pretty print, follow externally-edited files, transparently access remote resources...
I don't know. Obviously it's not for everyone, but using Emacs makes me feel liberated; in control of my software. I love it.
Emacs has long had a competent spell checker, and it's capable of distinguishing code from prose, which is useful to many. But Emacs 28 adds a compelling dictionary lookup feature that warrants a much closer look.Mickey Petersen (Mastering Emacs)
cross-posted from: lemmy.wtf/post/15810205
This directory contains known content creators and their channels in the PeerTube vidiverse. The directory is a work-in-progress and everyone is welcome to suggest content creators.::: spoiler Activism
- Kate Making Waves - My name is Kate Hildenbrand. I'm a marine ecologist and conservationist. My goal is to create a space where normal humans can learn about this beautiful blue planet, to understand and see the beauty of the ocean, and to feel like they can make a difference. It's not too late to affect change. We need to demand change now, to scream for it until governments, industry, and lobbies are forced to listen.
- subMedia - sub.Media is a small collective of anarchist filmmakers based on the colonially occupied territories of the Anishinaabe and Haudenosaunee, in so-called Canada.
:::::: spoiler Animals
- Dermaleon - Bird watching
:::::: spoiler Art
- Krita - The official Krita peertube channel!
- Coreyartus Imagery's Art - This channel is a repository of the speed paints and livestreams of Corey Johnston, the artist behind Coreyartus Imagery.
- Hegeezias | Art - Here you can watch a person make abstract art using traditional mediums.
- Photography with Ewen Bell - Welcome to my PeerTube account and home to my photography videos. I'll have a little bit of gear on here, but mostly I want to talk about creativity and the creative process for photography.
- Blender Studio - This is the official Blender Studio channel on Peertube.
- Anditosan - All things Open Source design!
- Operation: Puppet - The official Operation: Puppet Peertube Channel! Puppetry, puppet building, and The Oracle show!
- Graphic Artwork - Mostly time lapse videos of artworks I've made, sometimes a few animated works. At this point I'm mostly just uploading some of my YT backlog.
:::::: spoiler Comedy
- The Schuman Show - The Schuman Show uses comedy to make EU affairs more understandable for a global audience.
:::::: spoiler Education
- Learn Together - I love learning new programming languages and tech. Learn with me! Often I get lost in tutorials because they go too fast or assume I know something. With me, I usually know very little so we'll be in it together!
- Indie Creator Hub - Welcome to Indie Creator Hub! Are you a content creator or live streamer looking for a community that shares your passion for alternative platforms? You've come to the right place! Here at Indie Creator Hub, we focus on fostering a supportive and engaging environment where creators like you can thrive. Join us to exchange ideas, collaborate on projects, and find the resources you need to succeed. Let's create and grow together!
:::::: spoiler Entertainment
- ASMR of the Fediverse - CC licensed ASMR videos.
- Mr. Funk E. Dude's Place.
- Hotel Breakfast Review
:::::: spoiler Films
- Digital Digest 4K+ Trailers & Clips - Watch the latest 4K trailers and clips. - A place to put whatever's on my mind at the time.
- ClassX - Preserving the best Classic Movies, copyright-free and of the highest quality, since 1915!
- Public domain films - Feddit.uk Admin @emperor@feddit.uk, I'm using this account to host public domain films. I can't be comprehensive so it is going to be a curated list of films I like or are intriguing for some reason (I'll try and explain in the description).
:::::: spoiler Food
- Zalasur: Food and Cooking - Game playthroughs with no commentary.
:::::: spoiler Gaming
- Boiling Steam - We talk about PC Gaming on Linux!
- Solarus - Solarus is a free and open-source 2D game engine.
- Start Gametrailers - Trailers and teasers of upcoming games.
- Open Source_Gaming - I'll play Opensource Games here every week and play/spectate tournaments as well!
- Gardiner Bryant - Gardiner Bryant (formerly The Linux Gamer) talks about Linux, gaming, and everything in between!
- Guild Wars 2 - An unofficial mirror of the official Guild Wars 2 channel on YouTube.
- Space Quest Historian - Hi, I'm the Space Quest Historian! I make videos predominantly about adventure games and narrative-driven games.
- marco_rennmaus Gaming
- Vitekc45c - Game playthroughs with no commentary.
- Blender Dumbass
- Gamercast - The official Gamercast PeerTube channel. Our videos range from unboxings of collector's editions, reviews, pickups, competitions and more.
- FinnVT Online - Playing games through the digital gates of hell.
- Beko Motion - My occasional videos usually resolve around HEMA (Historical European Martial Art), LinuxGaming / GamingOnLinux and SimPit projects.
- Linux (vs Windows) Benchmarks - A channel dedicated to Linux benchmarks and comparing games on Linux vs Windows.
- lyn1337 - Mostly does videos and live streams about World of Warcraft.
- The R-Man - My name is The R-Man, or simply Roman, a VTuber from another dimension and I try to find a way to go back to my Original-Dimension. Until then, I'll stream on Twitch and sometimes upload highlights (or something else too) on here.
- Nico's Arcade - Couch gaming with 80s spirit!
- MyNamesTee
- mezzo On Demand - Stream recordings from video.mezzo.moe.
- AshenWolf - Hi, I'm Ash! Nice to meet you all! I'll be releasing most if not all content here. I like Fire Emblem, so there will be a good amount of that , but I might also make content related to politics, history, and music!
- First 2 Hours - Ever bought games during Steam sales that just sit in your library? Join me as I randomly select and play games from my Steam collection for 2 hours each! No preparation, just pure genuine reactions and gameplay exploration.
- Triple Iris - Dedicated to Indie Games and Indie Game Accessories!
- NorthWestWind - I code stuff. I draw stuff. Hongkonger, Splatoon 3 ☂ main, vector artist, Minecraft modder. Streaming every day here as well as on Twitch!
:::::: spoiler How To
- Privacy Guides
- Trafotin - I hate technology, but love to fix it.
- TheGiddyStitcher - On this channel you'll find project vlogs, tutorials and experiments in everything from fiber crafts to 3d printing, and your new biggest supporter in all your crafting goals.
- Nick's Workshop - How-to's by graphic designer Nick Saporito about Inkscape and Gimp, the Open-Source vector graphics editor and raster graphics editor for Linux, Windows and Mac.
- Roots & Calluses - Learning how to live in balance with nature. Growing our own food, foraging for edible herbs and mushrooms, preserving food for winter--essentially homesteading in an apartment and a garden. Currently, I am restoring abandoned land to create an urban homestead of sorts.
:::::: spoiler Kids
- ...
:::::: spoiler Music
- AssortedTrance, Techno & Acid - Various mixes featuring Trance, techno & acid from the 90s to now.
- STREET SOUL - Hip-Hop Culture since 1994. Miracles Are Now Science.
- Fiddle Gika - Fiddle Player from Hamburg, Germany.
- Stephen Radnedge - Stephen Radnedge is a composer and an artist. His work is inspired by the nature of northern England.
- LilyBit – Music - Hi :) I’m Lily (she/they), a musician, artist and tech nerd. I mainly make 8-bit NES/FamiTracker arrangements of nostalgic game soundtracks from my childhood like DPPt, PMD2 and HGSS, but I also want to branch out a little more to music from other games and media, media other than 8-bit like game soundfonts, high-quality instruments and fully hand-played on my keyboard, as well as original music.
- Organ music from various centuries - You will find organ music from various centuries in this channel. My main organs are a one-manual Keller organ built in 1858 and a two-manual Bernhard organ built in 1911.
- Forgotten Tunes - This channel is about preserving and sharing forgotten music (mostly soundtracks), that is no longer available for purchase or streaming.
- Billykaren Beaufort - Hi! Thanks for listening to my #music 💕! I love you ALL! 💕🤘🎤 ✊🇺🇸♾️ - I’m an MS-Fighter 🧡 (multiple sclerosis) and I have a cool cane! 🪄 - Music gives me self-worth and I enjoy the feedback I receive from those of you that enjoy some of my music. #MusicIsLife ~ #Billykaren
:::::: spoiler News / Politics
- Surveillance Report - Weekly security and privacy news.
:::::: spoiler People
- Russell Brand - On this channel my videos explore new ways to connect with ourselves and one another and how to elevate our consciousness.
- Lety Does Stuff - Hihi! I'm Lety! I do all sorts of stuff! This is my PeerTube account, where I post videos onto my PeerTube channels!
- Ashley
- Nerdy Keith - My name is Keith, l'm a video blogger from Dublin Ireland and I make videos about nerdy culture, human rights (including LGBTQ issues) and animal rights issues.
- Anubis2814 - I am a microbiologist and a former naval nuclear electrician. On this channel I discuss a wide range of topic, from religion, politics, science, skepticism, economics and labor, as wall are coping mechanism for Aspergers and tearing apart commonly held misunderstandings. Having been a former isolated home schooled young earth creationist Non-judgmental or non-pwning education is what my channel is about, while learning to find and block the trolls.
:::::: spoiler Science / Technology
- The Linux Experiment - I'm Nick, and I like to tinker with Linux stuff.
- The New Oil - Practical privacy and simple cybersecurity for everyone.
- FUTO
- Geotechland - I make videos about foss, opensource technology, community funded projects, gaming, and everything linux.
- Linux Renaissance - Hi, I’m Darth! Welcome to my channel, where Free Software and Linux are front and center.
- VWestlife - Demonstrations, reviews, and tutorials about computers and electronics.
- Jan Beta - Hi I'm Jan. I repair/hack/make/destroy stuff on camera. Electronics, Repair, Tinkering, Retrocomputing, VintageAudio. As unprofessional as it gets.
- ctrl-alt-rees - I restore, repair, upgrade, modify and maintain all of retro computers and consoles in my collection myself and I'm keen to share not only the process but the end results.
- Flipboard Dot Social - Hosted by Flipboard co-founder and CEO Mike McCue, Dot Social is a new podcast and video series spotlighting leaders at the forefront of the open social web movement.
- The Linux Lugcast - We are an open Podcast/LUG that meets every first and third Friday of every month using mumble at 9pm EST. We encourage anyone listening to join us and participate on the podcast.
- root42 - I thinker with old hardware, homebrew hardware; I make Let's Code videos for teaching Oldskool demo effects and Assembly language.
- Fedora Project - An innovative platform for hardware, clouds, and containers, built with love by you.
- Eric the IT Guy - Fighting against the forces of burnout and poor work-life balance, The IT Guy stands for DevOps, Open Source, and an endless supply of energy!
- Veronica Explains - I'm Veronica! I love Linux, old computer hardware, and explaining things. Some folks call me the Linux Mom, and that works for me. I'm a former "legacy systems" sysadmin who's posting fun content about cool things you can do with Linux, as well as some fun retro tech stuff I come across!
- More Fun Making It - Join me as I fumble around the innards of 40-year-old tech. Relax, put your feet up and watch me build and fix stuff.
- Tech Savvy - Microsoft Windows know-how, tutorials and fixes from Tech Savvy Productions. Visit the Tech Savvy website at techsavvyproductions.com/*
- Simple DIY Electronic Music Projects - *You'll also find a few relatively simple videos to accompany my Simple DIY Electronic Music Projects blog that exist simply to demonstrate some of the projects and tutorials I talk about on my blog. For more about me and my blog, visit diyelectromusic.wordpress.com/…
- Independent Creator Podcast - *Exploring the world of alternative platforms and services for the independent creator. We take on the mission to find those nuggets of information many of us look for as we journey on our path to being truly independent creators.
:::::: spoiler Sports
- 3MoreReps - Yoga & Fitness - Fitness, Yoga Trapeze, Stretching and Flexibility Workouts.
:::::: spoiler Travels
- Sustainable Sailing - Dave and Jane's journey towards live aboard sustainable sailing on a 1977 Rival 38 Centre Cockpit Yacht.
- Big World small Sasha
- SV Seeker - I am the builder and owner of Sailing Vessel Seeker. We are the boat the Internet built. Hundreds of folks worldwide came to my front yard in Tulsa Oklahoma and helped. Dream Big, Work Hard, Stay Focused, and Surround Yourself with Good People. -- Doug Jackson, Cpt SV Seeker
- Stop us if you can(Original title: Stop nous si tu peux) - We would like to make you aware of alternative travel. Our principle? Travelling soberly, promoting meeting, exchanges and mutual assistance. Equipped with a backpack, cameras, and a dose of good humour, we bet on the benevolence to get housed, move and feed.
- hikingdude - Hiker, cyclist and landscape photographer, loving the beauty of nature and sharing the hiking experience with you!
- sarah.louise - Travel, art and other things... a jack of all trades
:::::: spoiler Vehicles
- Transport Evolved - Welcome to Transport Evolved! Join us every day for content from Nikki Gordon-Bloomfield, Kate Walton-Elliott, Erin Carlie and Michael Horton as they explore and explain the world of cleaner, greener, safer, and smarter transport.
- Shifter - A channel about urban cycling, bike commuting and the ways we get around our cities with author, journalist and creator Tom Babin.
- Transit - Ever wondered why your city's transit just doesn't seem quite up to snuff? RMTransit is here to answer that, and help you open your eyes to all of the different public transportation systems around the world!
- Oh The Urbanity! - Oh The Urbanity! traverses cities by foot, bike, and public transit and aims to make informative and (hopefully) entertaining videos combining streetscapes and demographic data.
- Rally & Racing - Hi! I’m Harry and I’m one of the mods for the Gamer’s Tavern, but also have my own channel here where I create and stream mainly rallying and racing content. I don’t post new videos every few days like a YouTuber, I maybe post at best once every few weeks, at worst once a month. I won’t spam your feed with crappy shouty videos haha!
:::
Contacts: Fediverse | Mastodon | MakerTube | GitHub | Discord I’ve always been fascinated by technology and music and I love it when the two intersect. I am a particular fan of anyone w…Simple DIY Electronic Music Projects
like this
Can I throw my channels in the mix?
Ozoned Games - games obviously - video.firesidefedi.live/c/game…
Ozoned Tech - tech obviously - video.firesidefedi.live/c/tech
Fireside Fedi - podcast with folks from around the Fediverse so I've been putting them under People - video.firesidefedi.live/c/show
Edit: formatting
like this
openSUSE's new Agama installer v13 is here, bringing hostname configuration, LVM support, and more.Bobby Borisov (Linuxiac)
anyone who thinks web tech is best practice on the fucking desktop should be expelled from the whole field
said ford would consume way too much gas and produce way too much noise, among other things. but what's the problem with the current installer? that it doesn't have curly corners, and that it has too many options which is confusing to those with no reading comprehension?
Edit: Yep KDE is the most customizable full desktop environment. I gave Gnome a shot but like KDE A lot more with desktop effects and kwin scripts.
What makes Linux appealing to me is the extent of customizability, but I didn't find many answers when looking up with desktop environment is them most customizable. Some say KDE is most customizable than say, Gnome, but doesn't Gnome support CSS customization while KDE doesn't?
Edit: Yep KDE is the most customizable full desktop environment. I gave Gnome a shot but like KDE A lot more with desktop effects and kwin scripts.
What makes Linux appealing to me is the extent of customizability, but I didn't find many answers when looking up with desktop environment is them most customizable. Some say KDE is most customizable than say, Gnome, but doesn't Gnome support CSS customization while KDE doesn't?
thinking about making a program that recommends videos that are on peertube. likes, titles, descriptions, and even closed caption can be collected locally and compared to the local users liked videos and watch time to rank videos the local user would like to watch.
later on there could be a server that people can willingly choose to send their data to build a better recommendation program.
I'm still in the research phase of this, but from my experience even implementing basic concepts would be effective
I know there is an anti algorithm crowd but this is opt in so this should be fine
like this
catloaf doesn't like this.
yeah i hope people build on my work and improve it since i doubt ill even have this project working anytime soon.
i have hard time concieving of p2p system for this. is it like heres what this person likes so do "X"
Autonomous User likes this.
I need a Bluetooth adapter for my laptop that has Linux mint on it. I just need it to connect a BT speaker for watching YouTube and netflix. The adapters I looked at on amazon all say they aren't compatible with Linux. I was hoping I could get some recommendations that work with Linux. And preferably one that doesn't require drivers from some sketchy site, Thanks!
EDIT: thanks everyone for the recommendations!
free software project with the aim of collecting information about the hardware that works with a fully free operating systemh-node.org
Schleswig-Holstein, one of Germany’s 16 states, on Wednesday confirmed plans to move tens of thousands of systems from Microsoft Windows to Linux. The announcement follows previously established plans to migrate the state government off Microsoft Office in favor of open source LibreOffice.
Schleswig-Holstein looks to succeed where Munich failed.Scharon Harding (Ars Technica)
Isn't this like the third time they've done this and it lasts until Microsoft backs a dump truck of money up to the government?
Don't get me wrong though. I hope it sticks! Fuck Microsoft.
Edit: spelling
like this
don't like this
Why here? There are better communities for this, like !justpost@lemmy.world or !casualconversation@lemmy.world etc.
The point of communities is that conversations are nicely categorized, you don't just shout to the void like on mastodon
like this
Insurrection act — April 20th. Pls read!
Discussion
I really wish there was a way to get this into the hands of every American before April 20th.
It sounds wild. Maybe even crazy. But every step is already in motion. I’d be happy to be wrong. But if this is correct… you’ll be ready.
On April 20, 2025, the United States may initiate its final steps into authoritarian rule.
That’s the day Donald Trump’s advisory committee is expected to release its findings on whether he should invoke the Insurrection Act — a move that would allow him to deploy the military domestically and allow Trump to impose martial law. (San Francisco Chronicle). Given Hegseth and Noem are the main “advisors”, the conclusion is foregone.
And as his two months in office has already shown, he won’t stop at just a legal opinion.
Expect an executive order even that same day or the next, officially declaring the Insurrection Act, restricting freedoms in the name of restoring control of the border and perhaps in blue-state cities, and setting the larger plan in motion.
Of course, this won’t be framed as an attack on democracy. It will be packaged as a necessary response to crisis — as authoritarian takeovers always are.
But once it happens, there’s no going back.
The roadmap for overthrowing a democratic government isn’t new or theoretical — it’s a well-worn playbook, tested and repeated across history by those who crave power more than liberty. After rejecting it initially, being incredulous, I have realized there is too much evidence suggesting this may be what’s happening now to remain silent.
Telling other people what may be happening, so they can recognize it and maybe together we can stop it, is my entire purpose here.
This is Part 1 of what has turned into a series: Their Coup Playbook: How They Quietly Kill the Constitution in the Coming Weeks and Months
It won’t all happen in one night.
Instead, the process will unfold in stages, each step making resistance harder.
Free elections, a free press, and the right to protest will disappear one piece at a time, until there’s nothing left to save.
My entire goal here is to make people aware, so you can recognize it, if it really is what’s happening, and maybe together we can help stop it. It’s all I, personally, can do.
Here’s how it will happen, step by step, after Trump invokes the Insurrection Act with an Executive Order:
The calls to “Resist!” will grow louder, and large-scale demonstrations will begin forming in major cities. This is exactly what Trump wants. He didn’t invoke the Insurrection Act sooner because he needed his opposition to gather first — so he could use them as a tool for his next step.
He also waited 90 days, instead of invoking it on Day 1 as Project 2025 recommended, so he would have his people in place, and remove those who would oppose them in the government, military, courts, and civil positions.
His cabal is waiting for a strong reaction — they want massive unrest. They need a justification to kick off the next steps in their plan.
They will turn violent not because of the protesters, but because they will have been infiltrated by agents provocateurs, from militia groups like The Proud Boys, whose goal is to escalate as quickly as possible and give Trump and his cabal an excuse to trigger the next stage.
Expect “terrorist” bombings, targeted assassinations, or high-profile acts of violence, either staged or exploited, to justify the crackdown.
There may even be an extremely high profile assassination of a leading right-wing leader that changes everything in a moment… and the “woke radicals” will be blamed, and the country will rally around more extreme measures to bring back order and control.
The media will be flooded with images of chaos, pushing the public into a state of fear. Calls for “order” will follow.
Trump has already invoked the Insurrection Act — so now he now declares even more extensive and repressive martial law, and orders troops into major US cities where most oppose him, branding protesters and opponents as “seditionists,” “traitors,” and the “woke mob”.
He will call on “good Americans” to grab their guns, like the patriots of 1776, and join the militias forming to “restore order” and “take back control” from the leftist threat. Using militias also gets him around resistance from military leaders who might oppose his orders. The militias already exist — the Proud Boys, Oath Keepers, Three Percenters, and others— and they are not some distant fringe. They were at January 6. The most extreme and radicalized are all released from prison now.They are ready to roll, and to answer Trump’s call, which they were waiting for four years ago.
The militia members are your neighbors. The difference between them and you? These neighbors own and have been training with AR-15s. You and your friends? Not so much.
This will be framed as “helping the police” and “keeping order.” Law enforcement will quietly welcome them — or, in some cases, will deputize them, with Trump’s support.
Expect Mark Milley, Liz Cheyney, and Adam Kinzinger to be arrested quickly and with great press coverage. How long the show trials take is probably a good measure of how much control Trump has established over the courts.
Key Democratic governors and attorneys general will be removed first, ensuring no state-level resistance. Law enforcement and military ranks will be purged, with loyalty tests ensuring only Trump-aligned officers remain.
Curfews and lockdowns will be imposed, justified as measures to “restore peace.”
Checkpoints and military policing will become the new normal. Expect them in particular along major highways going to Canada or Mexico, and in red states — to identify and detain seditionists, traitors, and people of questionable loyalty.
Trump’s building of detainment centers in Guantanamo, and expansion of the 106 other ICE detention centers, was not actually intended for illegal migrants. And just a few days ago, Blackwater founder and Billionaire Erik Prince offered to help Trump “privatize deportation camps” as has been being done with prisons per Trump’s Day 1 Executive Order. So now Trump has an extrajudicial place to store the disloyal and those who resist, in for-profit camps guarded by militias and loyal military. Until he decides what to do with them.
Mainstream media will be forced into compliance. Blackmail, corporate pressure, and legal threats will ensure they toe the line.
Social media platforms like X (Twitter) will amplify the official narrative, drowning out opposition.
Other social media and lines of communication will be turned off. The Internet will be monitored, people identified from this monitoring for arrest, using Palantir technology. Peter Thiel, who I’ve written about before, is co-founder of Palantir. We will fully enter the surveillance state.
No-fly lists will expand to include activists and journalists.
ICE and DHS will be weaponized — not just against immigrants, but against political enemies.
The 2026 midterms will be suspended under the excuse of national security concerns. Red-state legislatures will eliminate Democratic-leaning districts, ensuring permanent Republican control.
By 2028, Trump (or his handpicked successor) will run unopposed. Elections will be a formality, probably still held. But rigged.
This isn’t speculation.
The Heritage Foundation’s Project 2025 lays out a detailed strategy for permanent right-wing control. It openly advocates using the Insurrection Act to crush opposition and dismantle the administrative state. Trump isn’t improvising — he’s following a script.
We Can’t Wait — The Time to Act Is Now
We can’t sit back and wait for Trump to fire the starting gun — because once he does, it will already be too late.
We need to prepare now.
We need to plan now.
We need to dismantle his plans before they begin.
We have one month.
That’s it.
The only way I can think of to stop this conspiracy, which is in final planning stages, is through exposure. If people see the playbook in advance, they will be less likely be manipulated when it happens.
They might question the narrative. “Wait. This is what they said would happen. I thought it was crazy. But maybe…”
Maybe we will be proven wrong.
Maybe we will look silly.
Or maybe… we will have derailed the plan, by telling people what to look for, to recognize the playbook steps as (if) they happen.
Here’s what we must do before April 20:
Empower the press, law enforcement, military, and elected officials to recognize the game that’s being played. They need to understand what’s happening before they are pressured to go along with it.
**Share this post, or write your own. Do your own research. Don’t take my word for it. Talk with your friends and family about this crazy conspiracy theory that can’t rally happen… can it? ** So if and when the steps actually happen, people recognize it for what it is.
Prepare the public so they don’t take the bait. Trump and his cabal want protests to explode into chaos.
They want violence in the streets to justify their crackdown. We must be ready to outmaneuver them — to refuse to be used as pawns in their game.
Stand up to the militias — and stop friends and family from joining them. The Proud Boys, Oath Keepers, and other armed groups will be mobilized as Trump’s shock troops. They will be framed as “restoring order” and “helping the police.” We need to be ready to counter this, to make sure our neighbors, friends, and family don’t get sucked in.
Inoculate our fellow citizens against the propaganda. Most Americans are good people — but good people can be misled. They can be scared into compliance. Our job is to make sure they see what’s happening before it’s too late.
The only way to stop this plot is to expose it, reject it, and make it unmistakably clear to every American what is happening. We must stop these malign forces from enacting their will on our country, the world, and each of us and our families.
If it is not stopped, and Trump enacts the Insurrection Act, at that point we probably only have 48 to 72 hours to try to stop everything from happening after the Executive Order.
Once martial law is imposed, there will be a tiny window — no more than three days — before resistance becomes nearly impossible.
Stopping it before it happens is the best option.
But what if we don’t?
In my next post, I’ll outline peaceful, strategic ways to resist — while we still can. And what our reduced options are if it still happens.
If we don’t act before April 20, then by April 23, it will already be too late.
Read writing from Aletheisthenes on Medium. Call me Aletheisthenes. Truth (‘aletheia’ ) without strength (‘sthenos’) is fragile. Strength without truth is tyranny. I'm here to create more of both.Medium
like this
don't like this
Yeah I’m inclined to agree. There is a lot of “this isn’t speculation”, yet there’s a lot of speculation. A source on where it says this in Project 2025 would be handy.
Edit:
No.
Shut the fuck up.
I’m sick of your doom-screaming without source. Provide sources.
The rhetoric in this post could kill people. ACTUALLY FUCKING KILL PEOPLE. Fuck me for wanting some assurance before I panic.
𝔽𝕩𝕠𝕞𝕥 likes this.
Discover topics like linux, bcachefs, and the magic of the internet at Imgur, a community powered entertainment destination.Imgur
You can just directly upload media on lemmy.
The form field says "upload image" but webm videos work for sure. I have not tried other formats.
Ok so I don't know if this protocol has got anything to do with Federation, but it's an interesting protocol regardless
It's used mostly for logistics. I'm interested in your thoughts
becknprotocol.io/
Beckn Protocol (or Beckn in short) enables the creation of open, peer-to-peer decentralized networks for pan-sector economic transactions.The protocol can beBeckn protocol
like this
don't like this
Final update (hopefully): It seems that I have been able to fix the issue. I'm not sure what exactly caused the problem but either removing fluidsynth or installing the wireplumber ppa fixed the issue and I have working audio again. I've also removed pulseaudio as I only installed it as a temporary solution and it's no longer necessary.
For the past three days, I've been having this issue where my computer starts with no audio and the only sound device listed is a "dummy output" device. I've tried looking online for solution but the only solution I found has to be redone manually every time I start/restart my computer. It also seems like this issue is common with and possibly specific to the sound card my computer has, which is an "Intel Sunrise Point-LP HD Audio".
The solution that worked for me was to add blacklist snd_soc_avs to the modprobe blacklist and then run the two commands sudo alsa force-reload and pulseaudio. Adding snd_soc_avs to the blacklist permanently brought back my actually audio devices but it didn't fix the audio nor did it remove the dummy output device. The two commands I listed do restore the audio and remove the dummy output device but they only work for the current session and I have to run them again after starting/restarting my computer.
I have no problem doing this if there isn't a permanent solution but I would like a permanent solution, if possible.
But I've got two doubts remaining.
Currently, I'm running Windows 11, but I'd still like the ability to dual boot for certain games which don't necessarily work with Linux for various reasons. Is it possible to move a windows install to a different drive and then install Linux on the main drive instead?
If yes, how do I do it?
Second doubt is if I'll have many issues daily driving Linux if I have an Nvidia card
nvidia these days has little to no issues with games, I've personally had very little.
The biggest problem I've had is with video decode/encode acceleration, because nvidia doesn't provide vaapi drivers and Firefox doesn't enable vaapi by default. there is a solution that works but you need to do some tinkering.
this isn't a huge problem though, modern cpus are pretty fast and software decoding is fine for the most part
A VA-API implemention using NVIDIA's NVDEC. Contribute to elFarto/nvidia-vaapi-driver development by creating an account on GitHub.GitHub
Alright, this one will be weird but I’m coming to accept I might be way further on the spectrum than I thought. Reader beware, it’s probably dumb but kind of amusing and fun to think about.
We are currently dealing with various kinds of vote manipulation and that affects visibility of things even if we don’t care about imaginary points. As long as they are used for sorting they’re not that imaginary because I can sort by new but most will not have time and will want to peek. Now, the main issue here are the extremes - instances used to flood votes or weirdos stalking other users.
Currently Lemmy/Piefed/Mbin create a federated network but votes are still kind of a direct democracy. What if that democracy was federated too? One can think of this as federating consensus. There are two approaches to implementing this but the idea boils down to either outside instances aggregating votes made on their side and sending final voting result on a scale -1/0/1 or alternatively this aggregation could be done by the hosting community.
What this solves:
like this
don't like this
So basically the electoral college? No thanks.
Just sort by new.
like this
like this
like this
don't like this
Hi all,
This is a continuation of this thread around Mastodon/Lemmy integration.
I am trying to understand the formatting rules around Mastodon to Mastodon/Lemmy posts. My Mastodon instance is www.mstdn.games.
I was able to get this point:
Mastodon input:
Lemmy crosspost:
Let me walk through the key points.
1. Thumbnail
This works really well. You attach an image on Mastodon and it outputs the correct thumbnail on Lemmy (it even works across instances, I know there are issues with LW vs other instances in custom thumbnail attach).
2. Markdown Formatting
Doesn't seem to work on the Mastodon side. Not a big deal, the only somewhat relevant piece is the markdown URL syntax, but I can just use [Text - URL] style formatting.
I read that Mastodon is supposed to support markdown, but it seems to not be the case. Doesn't matter, but if someone has anyone info on this, I would appreciate it.
3. Mastodon to multiple Lemmy communities
I tried adding both !testfediverse@jlai.lu and !test@lemmy.ca. It seems only the first Lemmy community URL gets crossposted (I was able to post to !test@lemmy.ca when it was the first Lemmy URL).
Again, this is manageable. I can crosspost (within Lemmy) from my Lemmy account.
4. Direct URL Lemmy link with Text Heading
This doesn't seem to work. This is really annoying.
I can get text heading working on the Lemmy side, but the Lemmy URL always points to the Mastodon post URL:
Is there a way to define the URL on the Mastodon side so that Lemmy understands that the post must point to a specific URL (while having a separate Lemmy text heading and not having the post look like shit on the Mastodon side).
The last piece is critical for me. I don't want to post links to Mastodon in the !tycoon@lemmy.world community.
Lemmy Mastadon (automated crossposting?) interaction issue.
I am a mod/curator at !tycoon@[url=https://lemmy.world/]Lemmy.World[/url]. We cover tycoon game (Project Highrise, Transport Fever) etc.I also have a Mastodon account:
mstdn.games/@Landgraab_Industr…
I typically only post releases or major stuff (not demos, or smaller early access titles) on the Mastodon account. I also add screenshots and tags for visibility/UX.
Today I clicked on the #tycoon hashtag on Mastodon and to my surprise it turns out my posts on !tycoon@[url=https://lemmy.world/]Lemmy.World[/url] are being automatically propagated on Mastodon:
When I started !tycoon@[url=https://lemmy.world/]Lemmy.World[/url], I was actually considering creating an automated Mastodon account, but it turned out to be more difficult than I anticipated (or I don't know what I am doing).
I am curious how this automated propagation got enabled. It wasn't there a week ago. Is this tied to my mstdn.games Mastodon instance? What's going on here?
I am also not sure I like the current automated propagation method because:
- It links only to the Lemmy URL, it doesn't include the post URL (e.g. steam/gog page) which is IMO more important.
- Does not include a screenshot of the game (critical for micro-blogging IMO).
- Does not include additional tags.
Is there a way to "control" the parameters of this automatic propagation on Mastodon? E.g. by manually adding a "Thumbnail URL" on the Lemmy side, adding an additional post URL and hashtags in the Lemmy body post?
At this point, it almost looks like I am spamming the #tycoon tag. I would much prefer if there was a way to propagate my Lemmy posts on Mastodon using my manual Mastodon template (e.g. mstdn.games/@Landgraab_Industr…).
Landgraab Industries 🏙️ (@Landgraab_Industries@mstdn.games)
Attached: 1 image Folklands, a relaxed settlement builder with farming, production, trade and diplomacy, released in early access on Steam. https://store.steampowered.com/app/2282890/Folklands/ https://lemmy.Mastodon Games
like this
don't like this
Lemmy and Mastodon have somewhat different purposes and integration between them is never going to be perfect. :/ Ultimately you'll always get better results if you post to the platform you mainly want to target; posts sometimes being visible on the other one too is a side effect.
What would probably be useful for purposes like yours is to have some kind of software that allows the creation of arbitrary or near-arbitrary ActivityPub objects with arbitrary audiences which can include one's followers or any number of groups. I don't know how feasible this is or whether someone has already done it.
A few months ago I saw a post on a relatively large Lemmy community that had clearly been intended for the author's Mastodon followers, but they tagged that Lemmy community (it had a name relevant to the content) apparently not knowing this would publish it to Lemmy. As I recall, this got >100 upvotes on Lemmy, but the Lemmy community's mods deleted that post after a few hours. (Maybe some readers of this saw it too, it was to a "Europe" community and its content was something like "musKKK get the fuck out of EU politics".)
I get that. I would argue the use case I described is basically the bread and butter of Mastodon <> Lemmy integration (if you don't want your posts to look like shit on either Mastodon or Lemmy).
The critical drawback for me is that you can't have hardcoded URLs/images/headings across both Mastodon and Lemmy posts.
If you can't do that, you severely restrict the scope of integration between the two platforms. This is a net loss because the content I post on !tycoon@lemmy.world is arguably relevant for both forum style discussions and micro-blogging.
I have wondered many times.
Of course I can always use a browser but it's overkill.
The same goes for yad or zenity, they pull in webkit which is a full-fledged browser engine, and at least yad does not have an offline mode.
I just want to look at some local HTML (incl. images) & CSS styling.
(technically a console browser – Debian installed size 352 KB)
A more lightweight browser?
You gotta understand, browsers are designed to be HTML parsers. You can write an HTML file and double click to open in browser so your only option is a web browser.
Some browsers are certainly light weght than others, find the one that suits your need and use it
cross-posted from: lemm.ee/post/60715570
cross-posted from: hackertalks.com/post/8713785
The instances being used are
- lemmy.doesnotexist.club
- chinese.lol
Here is an example of the coordinated downvoting hackertalks.com/post/8692093
Of course its a controversial user who got someone angry enough to automated downvoting @DonaldJMusk@lemmy.today
But you can see every post they make gets 53ish downvotes from these two instances, plus some organic ones after a few hours.
Current downvoting Accounts
:::spoiler bot-listLightIsland@chinese.lol
MagnificentRow@chinese.lol
FondKnowledge@chinese.lol
SillyTowel95@chinese.lol
HelplessDear@chinese.lol
SomberBrain@chinese.lol
InexperiencedCloset@chinese.lol
NecessaryPerson11@chinese.lol
ClosedEmployment@chinese.lol
CoarseHair420@chinese.lol
BurlyChampionship49@chinese.lol
ZigzagNatural@chinese.lol
QuestionableDirt@chinese.lol
ProudDeparture@lemmy.doesnotexist.club
JoyousDouble@chinese.lol
UnitedPatience@chinese.lol
MajesticArea@lemmy.doesnotexist.club
SinfulConference@chinese.lol
MoralDivide96@chinese.lol
LeadingCarry65@chinese.lol
FrillyOpinion38@lemmy.doesnotexist.club
LimitedDiscount49@lemmy.doesnotexist.club
ForkedScreen@chinese.lol
MediumChemistry13@chinese.lol
xXxLawfulGrassxXx@lemmy.doesnotexist.club
VisibleSentence@chinese.lol
AcidicLawyer90@lemmy.doesnotexist.club
PriceySink14@lemmy.doesnotexist.club
ExcellentBeach@chinese.lol
VivaciousNews@lemmy.doesnotexist.club
LankyIndependent32@lemmy.doesnotexist.club
SpeedyFault@chinese.lol
ConcreteHall89@lemmy.doesnotexist.club
WorthyPoint12@lemmy.doesnotexist.club
SurprisedAdult99@chinese.lol
FlashyCrack@lemmy.doesnotexist.club
MasculineBeing@chinese.lol
RichWeird@lemmy.doesnotexist.club
DryCash97@lemmy.doesnotexist.club
AuthorizedChair@chinese.lol
SlimKiss@lemmy.doesnotexist.club
AromaticRoof78@lemmy.doesnotexist.club
BewitchedInterview@lemmy.doesnotexist.club
ImaginaryDraw@lemmy.doesnotexist.club
PertinentGround@chinese.lol
SinfulAssumption@lemmy.doesnotexist.club
AwkwardAnybody30@lemmy.doesnotexist.club
UnwillingRestaurant@lemmy.doesnotexist.club
InsubstantialOven@lemmy.doesnotexist.club
:::A individual user airing their personal biases and manipulating lemmy isn't good for the community, regardless of how you feel about their target. This is a really bad thing (tm)
like this
don't like this
You are literally linking to the post I crossposted.
Do some lemmy clients not distinguish crossposts?
Edit: I’m wrong, see comments below.
like this
don't like this
Part of Living Cartoon Companydiscuss.james.network
Flatcam for making pcbs. For milling copper.
Any alternatives or forks?
I am a mod/curator at !tycoon@lemmy.world. We cover tycoon game (Project Highrise, Transport Fever) etc.
I also have a Mastodon account:
mstdn.games/@Landgraab_Industr…
I typically only post releases or major stuff (not demos, or smaller early access titles) on the Mastodon account. I also add screenshots and tags for visibility/UX.
Today I clicked on the #tycoon hashtag on Mastodon and to my surprise it turns out my posts on !tycoon@lemmy.world are being automatically propagated on Mastodon:
When I started !tycoon@lemmy.world, I was actually considering creating an automated Mastodon account, but it turned out to be more difficult than I anticipated (or I don't know what I am doing).
I am curious how this automated propagation got enabled. It wasn't there a week ago. Is this tied to my mstdn.games Mastodon instance? What's going on here?
I am also not sure I like the current automated propagation method because:
Is there a way to "control" the parameters of this automatic propagation on Mastodon? E.g. by manually adding a "Thumbnail URL" on the Lemmy side, adding an additional post URL and hashtags in the Lemmy body post?
At this point, it almost looks like I am spamming the #tycoon tag. I would much prefer if there was a way to propagate my Lemmy posts on Mastodon using my manual Mastodon template (e.g. mstdn.games/@Landgraab_Industr…).
Attached: 1 image Folklands, a relaxed settlement builder with farming, production, trade and diplomacy, released in early access on Steam. https://store.steampowered.com/app/2282890/Folklands/ https://lemmy.Mastodon Games
like this
don't like this
I think it's worth trying putting the link in the post body. Mastodon might generate a preview image with it.
Another option would be creating the posts on mastodon, and mentioning the lemmy community. The KDE community uses this method for their announcements. Example: lemmy.world/post/27768851
like this
Sorry, I didn't quiet get that.
The manual Mastodon posts already include a link to the Lemmy post URL.
What would adding a @tycoon@lemmy.world to Mastodon posts do on the Lemmy side?
Or maybe I am not getting something?
backup thread for previous versions of this howTo
I use i3wm, and to map cap lock to escape, I run:
setxkbmap -option caps:swapescape
This works fine, but sometimes while hitting the F1 key, my pinky can accidentally hit the Escape key, which turns on CapsLock.
Gnome has a very nice way to do this, where Shift + Escape = CapsLock. Hitting Escape on its own will do nothing.
I use keyd for software remapping now, and I like it a lot more than xkb's esoteric options. It has functionality for layers like layer:C, where any "passthrough" input will have the defined modifier (or combo like C-S-M), but you can define whatever other bindings inside.
Long story short, I've used it to remap caps, control, shift (with a custom shift layer for some symbols), and meta, with overloads, double tap/hold into layers, oneshots, timeouts, and all sorts of (surprisingly fluid) nonsense. It's so much easier than wading through xkb options for me.
To sidestep the question slightly less, I always got rid of capslock altogether instead of swapping. That still leaves true escape to be hit accidentally, but I think there should be an option to change escape too?
Edit: what I always used was
# make CapsLock behave like Ctrl:
setxkbmap -option ctrl:nocaps
# make short-pressed Ctrl behave like Escape:
xcape -e 'Control_L=Escape'
Smart Caps Lock: Remap Caps Lock to Control AND Escape - smart-caps-lock.mdGist
cross-posted from: lemmy.abnormalbeings.space/pos…
Companion article here: blog.gardinerbryant.com/what-e…
Eddy's solution of locking his phone in a safe is not a sustainable solution. So I wanted to explore what I believe to be the next best thing!Gardiner Bryant (The Bryant Blog)
like this
don't like this
I feel like this kind of misses the point. To be clear: If someone absolutely cannot avoid installing slop apps and enabling notifications for everything, I can see their need for an ultra minimal device or other solution. But I also think that speaks to a larger, personal discussion about discipline and possibly addiction, but that’s outside the realm of this thread.
My point is we can choose which apps, notifications, features, and algorithms are allowed to get our attention. It’s easy to turn off all notifications or never even allow them in the first place—after all, apps have to ask for that permission in the first place.
But the choice is the point. If someone is traveling somewhere they probably want maps to tell them important information about the journey. Otherwise why turn on directions at all? That’s the entire point.
We even have the ability to disable all texting notifications but also choose to allow them from certain people if they’re important enough. These devices are simply tools and we have the power to choose how they operate. The device isn’t the problem, it’s our choices.
I'm saying one of the big downsides has nothing to do with self discipline.
Merely living in a world covered in advertisements, living next to a delicious smelling candy bowl, living 30 seconds away from memes, rage-bait, doom scrolling, sports gambling, and other slop -- just living next to those things are bad for our mental health.
Some sources if you're curious on the research behind it.
pmc.ncbi.nlm.nih.gov/articles/…
ajph.aphapublications.org/doi/…
scholarworks.uark.edu/mgmtuht/…
Why does self-control predict such a wide array of positive life outcomes? Conventional wisdom holds that self-control is used to effortfully inhibit maladaptive impulses, yet this view conflicts with emerging evidence that self-control is ...pmc.ncbi.nlm.nih.gov
cross-posted from: lemmy.sdf.org/post/32192355
Just found out about this guy on YouTube named Nuxttux because I've been trying to make some social media videos.Kdenlive is a completely different beast than the one that I remember using a couple of years ago. It has so much functionality in it, like all the "TikTok effects", proxy clips, rendering previews, visualizing effect curves between keyframes... like damn. This is actually legit software now for my basic needs.
The thing is, it seems like these were all added in the past 2 years, because I had 23.x installed through the Debian repo and I upgraded through Flatpak to 24.12 and it seems to have added all of these?
Anyway holy shit. Go give these guys some money. This is game changing
Same, for quick-and-easy hobby work, it's a great tool. Sometimes I will be surprised by looking up a video effect and seeing it can be done in kdenlive.
A few years back there was a bug with my set-up where it would crash when moving clips a certain way, but once that was solved, kdenlive has been smooth sailing for me.
Hello everyone!
I have been learning QEMU for the past day and so I've almost finished building my perfect VM from the qemu cli, and I was wondering if there is any method to say, copy a partition(+bootloader) of a physically installed system (in this case, Windows) over a hard disk image and run it with QEMU
Unfortunately I've had no luck searching online about it and I'm unsure how to proceed myself since I've never done any disk-cloning or anything like that
My best guess would be to dump the contents of the partitions into a shared folder with the VM, then use a live media to copy those contents over into the hard disk image and finally install a bootloader to work with the Windows boot manager, but I'm all ears for what anyone has to say about it.
Thanks for reading and please let me know what you know!
Here be dragons. But basically:
You won’t find this in a tutorial. You need to understand concepts, read manuals, fit everything together, execute, fail and retry until it works.
For Windows, I have no idea. Conceptually, I figure it’s similar.
My partner is looking for an alternative to PicCollage, there doesn't seem to be a simple collage builder for digital scrapbooking on Linux.
It needs to be able to scale, rotate and place images (video nice but not required) and add text that can be put into various "fun" fonts.
I don't know what the "ideal" would be other than the above.
Note: she is running Linux Mint 21.3
Make all your memories last forever. Create holiday greetings, wedding invitations, birthday cards, and more. Download the app and start creating now!PicCollage
I've joined Lemmy.ml. Someone sent me a link to a video posted on Feddit.nl - I thought I could log in and upvote/comment using my Lemmy.ml credentials. Wrong!
Why is this? Sorry for my ignorance, I'm relatively new to the fediverse. But I thought that they were all federated so you can interact with all instances??!
like this
When instances become instruments of propaganda for Putin/Xi/Kim and ban people who expose such propaganda, they fully deserve to be blocked. They've become instruments of the enemies of civil society.
It's the moderation practices of those instances that put them in the corner of "sectarian shit". The rest of us don't need to tolerate such toxicity.
cm0002 likes this.
But when instances become instruments of propaganda for NATO/US/EU and ban people who expose such propaganda, that's fine.
I tolerate the toxicity of .world and other liberal instances, but maybe I shouldn't. Maybe this is self harm. Maybe I should just join lemmygrad so I never have to get attacked again for disagreeing with the liberal consensus. I'd probably hit myself less.
don't like this
like this
don't like this
Just stop going there.
Haven't you seen enough Flintstones pron?
jordanlund likes this.
don't like this
XY: I installed bazzite and goofed up. The username is wrong and my home is /home/bazzite instead of /home/ludrol
I am trying to run usermod -l ludrol bazzite in tty3 with sudo su - but the bazzite user is logged.
Solution:
Added password to root with passwd
Logged in as root
Ran required usermod commands
Disabled root with passwd -l
IDK if this will work but maybe doing exec sudo -i does the trick.
Otherwise just enable the root account and log in as root. Should be passwd -u root to unlock (passwd -l root to relock), also need to set the root password using passwd root.
Another way to do this is sudo su -c 'this is my command'
E.g. change a fan setting on a ThinkPad with:
sudo su -c 'echo "level full-speed" > /proc/acpi/ibm/fan'
So to run a shell you could do all sorts of tricks like:
sudo su -c '/bin/bash -i' and such.
Never know when it comes in handy.
EDIT: Damn, downvoted, any reason why? It works on my machine with a locked root user or one without a PW and I made sure to test it before posting, but I'd love an explanation of why it wouldn't work if that's the reason for the downvote. Was just hoping it would be useful to somebody :/
The fediverse is small, and thats both a blessing and a curse - one of its several blessings is that in a smaller space we all individually have a bigger impact on what the culture of this space is like.
On this comm (and on lemmy broadly) there's a lot of discussion about how to grow the fediverse, what to improve, but an easy thing you can do for the fediverse is right in front of us-
A platform lives or dies by what's available on said platform and often we have this conversation in the context of "content" or posts - and we may never have as much content as reddit does. But content and posts aren't the only thing this kind of platform offers- it also offers people. It offers community, and human interaction.
Culture and community is lemmy and the fediverse's biggest differentiator, and we all have a role to play in shaping the culture of this space.
***The biggest thing you can do to help the fediverse *is make it a place worth being.****
like this
don't like this
Cris likes this.
I am a prolific retweeter. I also see many instances prohibit nsfw, or some prohibit nsfw without a cw, or without a specific cw. Many servers have 5 or 10 categories of content that must be CWd. If I boost/retoot a post from another mastodon instance, what does that look like for other users of my instance? Does it show up in the local feed? If I boost an untagged nsfw or otherwise 'bad' content under the local rules, is that moderate-able (bad for the retooter)?
I intend to mark my profile as sensitive and put every post of mine behind a CW.
like this
don't like this
I would like to buy myself a second hand and install Linux on it. I was looking into ThinkPad T14 gen1 or gen2 devices because of their maintainability and repairability. I found one where I live with a Ryzen processor but it has the wrong keyboard. How easy and expensive would it be to swap this with US English? Are there any good alternatives to the ThinkPads? I fancy the X1 but don't like the fact that I cannot change or swap anything on it. The T14 looks very bulky and unattractive but at least can have the RAM upgraded and the battery changed.
I fancy the Framework laptops, but don't want to spend so much on a laptop. Especially the latest 16 inch with Ryzen AI CPUs.
The T14 G1 is at least cheap, like 350€ with the 400 nits low power display and the battery is at 99%. I guess with tlp installed and autocpugfreq I can get 5-6 hours out of it.
At framework, only the desktop and the 13 offer Ryzen AI options.
That said, my 16 is plenty powerful enough.
like this
don't like this
Hello everybody!
I want to escape Microsoft and windows, and I am looking for a Linux distro. I have some experience with Unix and a very old Ubuntu distro. But that's quite some years ago. I am looking for a Linux distribution where i can play World of Warcraft on. I mainly use Nvidia graphics (RTX 3070).
I have found some distributions that are supposed to be good for gaming. I suppose, as i am still a Linux Noob, I am also looking for a distribution which is easy to get into. Especially for an older gamer ;)
I came with these distro's myself. What does the Linux community say?
Bazzite
- Based on Fedora Atomic
- Pre Installed Steam
- Nvidia drivers and support
bazzite.gg/
docs.bazzite.gg/Gaming/index.h…
Developer: Universal Blue (US?)
Drauger OS
- Based on Ubuntu LTS using KDE Plasma
- Pre for AMD
draugeros.org/
Pop!_OS
- based on Ubuntu
- Optimized for gaming on Nvidia GPU's
system76.com/pop/
Developer: system76 (Denver, US)
SteamOS
-based on Debian 8 (Jessie)
-designed to run steam and steam games
-set to auto update their OS from Valve repo's
store.steampowered.com/steamos
Developer: Valve (US)
Manjaro
-based on Arch (rolling release model for latest software/drivers)
-KDE plasma desktop
(Pro-tip: enable flatpak and install ProtonUp-QT)
manjaro.org/products
Developer: Majaro (EU - Austria, France, Germany)
Ubuntu:
-the go-to linux distro for millions of users, incl gamers
-best for beginners and gamers who want stable well supported distro
-works seamlesssly with steam, lutris, wine
(pro-tip: install the gamemode package (sudo apt install gamemode))
ubuntu.com/download
Developer: Canonical ltd. (UK)
Nobara
-based on Fedora
-optimized for gaming on newer Nvidia graphics (drivers come installed)
nobaraproject.org/download-nob…
Developer: Thomas Crider (Denver, US)
Mint
-based on debian and Ubuntu
-friendly OS, works out of the box, extremely easy to use
linuxmint.com/download.php
Developer : Linuxmint (French, Dutch, UK)
Bazzite is a custom Fedora Atomic image built with cloud native technology that brings the best of Linux gaming to all of your devices - including your favorite handheld..bazzite.gg
I am running Manjaro KDE on two general purpose PCs, both with Nvidia graphics, both without problems.
On my living room gaming setup (also Nvidia), I am running Bazzite, which also runs very nicely.
To boot into a BTRFS snapshots from rEFind boot manager. But rEFInd doesn't show the snapshots.
grub-btrfs, which lets you boot into snapshot from OS selection screen itself.grub-btrfs. But it didn't in my case. I am not seeing any way to boot into a snapshot from rEFInd.BTRFS Assistant with snapper to manage snapshots./efi /boot partition layout. (attached below)boot partition and mounted my pre-existing EFI partition to /boot/efi. I did this by referring a Youtube video (I know, I should've known better)/ partition
I know this is a general community, but this is the 7th community that I'm asking this 🥲
Some people suggested Limine bootloader, but I like rEFInd for its versatile theme support.
Generate rEFInd manual boot stanzas from Btrfs snapshots - Venom1991/refind-btrfsGitHub
From arch's site:
Tip: make sure btrfs_x64.efi driver is installed, it can be installed manually by copying from /usr/share/refind/drivers_x64/btrfs_x64.efi to esp/EFI/refind/drivers_x64/btrfs_x64.efi, or you can install all drivers with the refind-install /dev/sdx --alldrivers option.
Warning: btrfs_x64.efi does not support raid1c3/4.
Thank you.
But, its already there. Also, I don't do any raid.
Many people are, understandably, confused about brightness levels in content creation and consumption - both for SDR and for HDR content. Even people that do content creation as their job sometimes get it really wrong.Xaver Hugl (Xaver’s blog)
This makes a numerous amounts of incorrect assumptions.
For one it assumes all sRGB monitors utilize gamma2.2 for decoding images. This is bluntly put, completely wrong. A large amount of displays utilize the inverse OETF (the peicewise srgb transform) for decoding sRGB. (for some more information from a somewhat authoritative body, filmlight's "srgb we need to talk" video on youtube goes more indepth but TLDR is 25-50% of displays use the inverse sRGB oetf)
this is why windows HDR uses the inverse oetf. Decoding content graded on a pure 2.2 display with the inverse oetf is way better then decoding content graded on an inverse oetf display with a pure 2.2. Windows took the safe route of making sure most content looks at least OK. I would not say that windows HDR is wrong, it's not right, but it's not wrong either. this is just the mess that sRGB gave us.
Another time you should be using the inverse sRGB OETF to linearize content when the original content was encoded using the sRGB oetf and you want to go back to that working data, but this applies less to compositors and more to authoring workflows.
Another wrong assumption
When you use Windows 11 on a desktop monitor and enable HDR, you get an “SDR content brightness” slider in the settings - treating HDR content as something completely separate that’s somehow independent of the viewing environment, and that you cannot adjust the brightness of. With laptop displays however, you get a normal brightness slider, which applies to both SDR and HDR content.
People have been adjusting monitor brightness for ages. Sometimes manually, sometimes with DDC etc.
Another issue that is brought up is "graphics white" BT.2408 is a suggestion, not a hard coded spec, many different specs or suggestions use a different "graphics white" value. A good example of this is JXL. 2408 also very explicitly says 'The signal level of “HDR Reference White” is not directly related to the signal level of SDR “peak white”.'
this is important to note because this directly contradicts the some of the seemingly core assumptions made in the article, and even some of the bullet points like "a reference luminance, also known as HDR reference white, graphics white or SDR white" and "SDR things, like user interfaces in games, should use the reference luminance too"
if your application has some need to differentiate between “SDR” and “HDR” displays (to change the buffer format for example), you can do so by checking if the maximum mastering luminance is greater than the reference luminance
This needs to be expanded upon that this does NOT correlate to what the general user understands HDR and SDR to be. HDR and SDR in the terms of video content is no more then a marketing term and without context it can be hard to define what it is, However it is abundantly clear from this quote here that how they are interpreting HDR and SDR (which is a very valid technically inclined way of interpreting it) does NOT fall inline with general user expectation.
Anyone reading this article should be made aware of this.
For one it assumes all sRGB monitors utilize gamma2.2 for decoding images
Assuming that all monitors do anything specific at all would be a folly, no.
There are no assumptions there, the sRGB spec has no ambiguity when it comes to the transfer function of the display.
That a certain percentage of displays don't behave like expected is annoying, but doesn't really change anything (beyond allowing the user to change the assumed transfer function in SDR mode).
this is why windows HDR uses the inverse oetf. Decoding content graded on a pure 2.2 display with the inverse oetf is way better then decoding content graded on an inverse oetf display with a pure 2.2. Windows took the safe route of making sure most content looks at least OK. I would not say that windows HDR is wrong, it’s not right, but it’s not wrong either. this is just the mess that sRGB gave us.
The most likely actual reason Window uses the piece-wise transfer function for HDR is that it did that in SDR mode too - where however the default ICC profile was also piece-wise sRGB, so it canceled out on 99% of PCs, and had no negative effects.
Another time you should be using the inverse sRGB OETF to linearize content when the original content was encoded using the sRGB oetf and you want to go back to that working data, but this applies less to compositors and more to authoring workflows.
Makes sense.
People have been adjusting monitor brightness for ages. Sometimes manually, sometimes with DDC etc.
That's a very different thing. Pushing viewing environment adjustments to the display side makes some amount of sense with SDR monitors - when you get an SDR display with increased luminance capabilities vs. the old one, you change the monitor to display the content comfortably in your environment.
With HDR though, if the operating system considers PQ content to be absolute in luminance, you can't properly adjust that on the monitor side anymore, because a lot of monitors completely lock you out of brightness controls in HDR mode, and the vast majority of the ones that do allow you to adjust it, only allow you to reduce luminance, not increase it above "PQ absolute".
Another issue that is brought up is “graphics white” BT.2408 is a suggestion, not a hard coded spec, many different specs or suggestions use a different “graphics white” value.
I didn't claim that PQ had only one specification that uses it, I split up SMPTE ST 2084, rec.2100 and BT.2408 for a reason. I didn't dive into it further because a hundred pages of diving into every detail that's irrelevant in practice is counter productive to people actually learning useful things.
A good example of this is JXL.
Can you expand on what you mean with that?
2408 also very explicitly says ‘The signal level of “HDR Reference White” is not directly related to the signal level of SDR “peak white”.’
That "directly" is very important, as it does very much make both these signal levels the same. As I wrote in the blog post, the spec is all about broadcasts and video.
Other systems do sometimes split these two things up, but that nearly always just results in a bad user experience. I won't rant anymore about the crapshow that is HDR on Windows, but my LG TV cranks up brightness of its UI to the absolute maximum while an HDR video is playing. If they would adhere to the recommendations of BT.2408, they would work much better.
this is important to note because this directly contradicts the some of the seemingly core assumptions made in the article, and even some of the bullet points like “a reference luminance, also known as HDR reference white, graphics white or SDR white” and “SDR things, like user interfaces in games, should use the reference luminance too”
No contradictions at all. The Wayland protocol defines these things to be the same, so for application developers they just are the same, end of story.
This needs to be expanded upon that this does NOT correlate to what the general user understands HDR and SDR to be. HDR and SDR in the terms of video content is no more then a marketing term and without context it can be hard to define what it is, However it is abundantly clear from this quote here that how they are interpreting HDR and SDR (which is a very valid technically inclined way of interpreting it) does NOT fall inline with general user expectation.
That's just absolute nonsense. The very very vast majority of users do not have any clue whatsoever what transfer function content is using, or even what a transfer function, buffer encoding or even buffers are, the only difference they can see is that HDR gets brighter than SDR.
And again, this too is about how applications should use the Wayland protocol. This is the only way to define it that makes any sense.
Assuming that all monitors do anything specific at all would be a folly, no. There are no assumptions there, the sRGB spec has no ambiguity when it comes to the transfer function of the display.That a certain percentage of displays don’t behave like expected is annoying, but doesn’t really change anything (beyond allowing the user to change the assumed transfer function in SDR mode).
the video goes more indepth, but it's a very true statement to say that "some displays decode with the inverse oetf and some don't" this issue has been plaguing displays for decades now.
There are no assumptions there, the sRGB spec has no ambiguity when it comes to the transfer function of the display.
You are 100% right in saying "the reference display is gamma 2.2" however, we can only wish this is what displays do, Color.org themselves got this wrong!!! color.org/srgb.pdf and leads people astray.
The most likely actual reason Window uses the piece-wise transfer function for HDR is that it did that in SDR mode too - where however the default ICC profile was also piece-wise sRGB, so it canceled out on 99% of PCs, and had no negative effects.
I don't actually believe this to be the case, if it was people who use custom ICCs would get extremely wonky results that don't typically happen. On the other hand it is very true that colors when doing it the way they do, you get the "least offensive" results. Though IMO the best solution would be to simply be to default to the pure 2.2 and allow users to override the transfer. the Color protocol allows for explicit peicewise sRGB anyways, so doing this should fit right into a fleshed out colormanaged setup.
That’s a very different thing. Pushing viewing environment adjustments to the display side makes some amount of sense with SDR monitors - when you get an SDR display with increased luminance capabilities vs. the old one, you change the monitor to display the content comfortably in your environment
I think I am a bit confused on the laptop analogy then, could you elaborate on it?
With HDR though, if the operating system considers PQ content to be absolute in luminance, you can’t properly adjust that on the monitor side anymore, because a lot of monitors completely lock you out of brightness controls in HDR mode, and the vast majority of the ones that do allow you to adjust it, only allow you to reduce luminance, not increase it above “PQ absolute”.
How monitors typically handle this is beyond me I will admit, But I have seen some really bonkers ways of handling it so I couldn't really comment on whether or not this holds true one way or another. Just so I am not misinterpeting you, are you saying that "if you feed 300nits of PQ, the monitor will not allow it to go above it's 300nits"? IF so this is not the case on what happens on my TV unless I am in "creator/PC" mode. In other modes it will allow it to go brighter or dimmer.
My current monitor is only a 380nit display so I can't really verify on that (nor do I have the hardware to atm)
I didn’t claim that PQ had only one specification that uses it, I split up SMPTE ST 2084, rec.2100 and BT.2408 for a reason. I didn’t dive into it further because a hundred pages of diving into every detail that’s irrelevant in practice is counter productive to people actually learning useful things.
ah I see, I was a bit confused on what you had meant then. My apologies.
Can you expand on what you mean with that?
Keep in mind this was based on the above misinterpretation of what I thought you meant.
With libjxl it doesn't really default to the "SDR white == 203" reference from the "reference white == SDR white" common... choice? not sure how to word it... Anyways, libjxl defaults to "SDR white = 255" or something along those lines, I can't quite remember. The reasoning for this was simple, that was what they were tuning butteraugli on.
That “directly” is very important, as it does very much make both these signal levels the same. As I wrote in the blog post, the spec is all about broadcasts and video.Other systems do sometimes split these two things up, but that nearly always just results in a bad user experience. I won’t rant anymore about the crapshow that is HDR on Windows, but my LG TV cranks up brightness of its UI to the absolute maximum while an HDR video is playing. If they would adhere to the recommendations of BT.2408, they would work much better.
I think this is an issue of terminology and stuff, reference white is something the colourist often decides. When you assume that HDR graphics white == SDR white this actually causes more problems then it solves. I would say that it is a "good default", but not a safe value to assume. This is something the user may often need to override. I know personally even when just watching movies on MPV this is something I very often need to play with to get a good experience, and this is not even counting professionally done work.
That’s just absolute nonsense. The very very vast majority of users do not have any clue whatsoever what transfer function content is using, or even what a transfer function, buffer encoding or even buffers are, the only difference they can see is that HDR gets brighter than SDR.And again, this too is about how applications should use the Wayland protocol. This is the only way to define it that makes any sense.
this actually isn't really that true. It is indeed the case that users wont know what transfer function content is using. but they absolutely do see a difference other then "HDR gets brighter then SDR" and that is "it's more smooth in the dark areas" because that is also equally true.
Users have a lot of different assumptions about HDR, but they all follow some sort of trend "it makes the content look more smooth at a greater range of luminance" and if I were to give a "technical definition that follows general user expectations" the definition would be something along the lines of "A transfer that provides perceptually smooth steps of luminance at a given bit depth up to at least 1000 nits in a given reference environment" which is bad for sure, but at the very least, it more closely aligns with general expectations of HDR given it's use in marketing.
(I really hate the terms HDR and SDR btw, I wish they would die in a fire for any technical discussion and really wish we could dissuade people from using the term)
Colour Online: sRGB... We Need To Talkwith FilmLight’s Daniele SiragusanoIn times where we base our visual decisions increasingly on remote grading and remot...YouTube
I don’t actually believe this to be the case, if it was people who use custom ICCs would get extremely wonky results that don’t typically happen
They wouldn't, because applying ICC profiles is opt-in for each application. Games and at least many video players don't apply ICC profiles, so they do not see negative side effects of it being handled wrong (unless they calibrate the VCGT to follow the piece-wise TF).
With Windows Advanced Color of course, that may change.
I think I am a bit confused on the laptop analogy then, could you elaborate on it?
What analogy?
How monitors typically handle this is beyond me I will admit, But I have seen some really bonkers ways of handling it so I couldn’t really comment on whether or not this holds true one way or another. Just so I am not misinterpeting you, are you saying that “if you feed 300nits of PQ, the monitor will not allow it to go above it’s 300nits”? IF so this is not the case on what happens on my TV unless I am in “creator/PC” mode. In other modes it will allow it to go brighter or dimmer.
Yes, that's exactly what happens. TVs do random nonsense to make the image look "better", and one of those image optimizations is to boost brightness. In this case it's far from always nonsense of course (on my TV it was though, it made the normal desktop waaay too bright).
unless I am in “creator/PC” mode
Almost certainly just trying to copy what monitors do.
With libjxl it doesn’t really default to the “SDR white == 203” reference from the “reference white == SDR white” common… choice? not sure how to word it… Anyways, libjxl defaults to “SDR white = 255” or something along those lines, I can’t quite remember. The reasoning for this was simple, that was what they were tuning butteraugli on.
Heh, when it came to merging the Wayland protocol and we needed implementations for all the features, I was searching for a video or image standard that did exactly that. The protocol has a feature where you can specify a non-default reference luminance to handle these cases.
It is indeed the case that users wont know what transfer function content is using. but they absolutely do see a difference other then “HDR gets brighter then SDR” and that is “it’s more smooth in the dark areas” because that is also equally true.
That is technically speaking true, but noone actually sees that. People do often get confused about bit depth vs. HDR, but that's more to do with marketing conflating the two than people actually noticing a lack of banding with HDR content. With the terrible bitrates videos often use nowadays, you can even get banding in HDR videos too :/
When you play an HDR and an SDR video on a desktop OS side by side, the only normally visible differences are that the HDR video sometimes gets a lot brighter than the SDR one, and that (with a color managed video player...) the colors may be more intense.
I should elaborate on why the "Peak white" stuff is wrong, they give this math here for mapping linear luminance. This can be really confusing, "what do we map the references to" well if PQ "graphics white" is 203, should we map sRGB to 203? clearly not, at least not always as implied by BT.2408.
the question as to what we map SDR content to in an HDR space is complex, and in many cases almost certainly not some number that we can do 1:1 mapping with, which is why specifications for inverse tonemapping exist. for instance BT.2446 defines multiple tone mapping algorithms to go from SDR->HDR->SDR or HDR->SDR->HDR or any step inbetween with minimal content loss and fidelity loss.
we cannot do a simple one size fits all function and expect everything to be hunky dory
Again, the reference luminance mapping is all about how applications should use the Wayland protocol.
How to map SDR to HDR can indeed be made much more complicated, from simple gamma adjustments to some full blown ITM meant for images or videos, like what BT.2446 suggests, but as far as applications are concerned, those are edge cases that they don't really need to be prepared for.
It's not like they have a different choice - unless the compositor supports custom reference luminance levels (which KWin does, but not all others do), and they support custom reference luminance themselves, then they need some logic to calculate peak luminance levels. If the compositor steps outside of those common expectations for reference luminance mapping, then the result may not be ideal, but there is no way for the application to do better.
Hello all,
I'm trying to get into GUI programming, but am hesitating on using a Python library to make my first barebones program. My goal is to code basic buttons and understand how operating systems implement the way they draw windows for applications.
I have coded mostly in scientific libraries or high-level languages that are fairly simple (Python, Matlab, Julia)... Also am familiar with basic concepts and syntax from C.
Looking for recommendations to start. I am happy to learn a new PL. Interested in writing code for legacy hardware and mobile. Bonus if the codes are general enough to be written for most displays one could interact with.
I've been using Flutter, I like how it's cross-platform, mostly. I've generally built things for Android, but the desktop (Linux and Windows) and web versions usually compile fine with no tweaking. Couldn't speak to the iOS versions as I can't be arsed to jump through Apple's hoops. You can make a nice looking app with it for whichever platform you're targeting.
It's very well supported, lots of examples, well documented. Not as much out there as Python for examples and troubleshooting, but not bad.
web versions usually compile fine with no tweaking
Isn't Flutter basically a webapp anyway?
Every time I go to the piefed frontpage I'm blown away by how much more polished it is. It has all the bells and whistles that lemmy is sometimes missing.
Whats the catch? Why aren't we recommending everyone goes to piefed instead of lemmy?
App support is one thing I can think of.
like this
don't like this
This post is not about Mbin, only about Piefed (not Piefied).
Don't try to tell people what they can or can not talk about in this thread while disregarding it yourself.
don't like this
For me..
Because the PWA font is too small and can't be enlarged.
Because there's no 'back to top' button so have to kill the app to refresh.
Because there's no app.
But sometimes I use it anyway because the combining of articles is so much better than seeing the same article three or four times in a row in Voyager.
irelephant [he/him]🍭 likes this.
Life After Microsoft Windows Cutting The Cord Series: A tech revolution is shaking up governments worldwide—Windows 10’s looming end of life, increasing Micr...YouTube
Hey, I hope someone can help me.
Problem:
When I wake my PC from suspend, my monitor is always set down to 30% brightness for some reason.
These are the brightness settings of the monitor itself, which can only be accessed via the monitor settings using the buttons on the monitor. I do not mean the brightness settings of my desktop environment.
These are still set to 100%, even though the monitor is darker.
The problem also arises in a second case. When I lower the brightness in the brightness control of my DE, my monitor brightness is also lowered in the monitor settings down to 30% again. I can then no longer increase the brightness in the DE settings, because 100% in the DE now equals 30% in the monitor. So if I set the brightness to 50% in the DE for example, this is 50% of the 30% set in the monitor. So actually only 15% in real terms
I hope I was able to explain the problem clearly. Please ask if you don't understand something. It's really annoying because I need to turn up my screen brightness with the Buttons on the Monitor every single time I wake up my PC.
Technical data:
A new security fund aims to help apps in the fediverse — like Mastodon, Threads, and Pixelfed — to pay researchers for disclosing security bugs.Sarah Perez (TechCrunch)
like this
don't like this
like this
Muyal_Hix doesn't like this.
I'm currently trying seatd+turnstile+greetd on dinit. s6 usersv would be alternative for turnstile+dinit but i see s6 more on server, personally.
This reminds me, i wanted to try mdev for a long time (there's mdev like a boss).
This repo is a stash for notes, scripts and configs for the system running with mdev as a udev replacement. - fff7d1bc/mdev-like-a-bossGitHub
You will go back to your "usual" linux setup when you realize that most packages you set up with LFS are now broken and you'll need to redo the whole process again.
t. arch linux minimal installation only master race
Seeing that DVD are slowly going end-of-live and that you can't buy a lot of my childhood favorites in german anymore and streams are compressed-to-death (and DRMed), i had a streak of preservia. Which is why i rip a bunch of discs from the library on Linux (yes, legally not ok, but morally just ease of access, i wouldn't sell them). Since it's only to watch them when nostalgia hits, i want them in a ready-to-watch format, chose AV1 webm for small size. My burner is LibreDrive-ok ootb, meaning makemkv goes automatically in that mode.
I have the discs for a limited time, so i used to use dvdbackup for DVD and later feed the folder to handbrake for conversion. Now i got a bunch of blu-ray:
makemkvcon backup needs only about 2 hours per disk, but the resulting folder is 80 GB big; i have only about 250 GB free spaceWhile i write this, handbrake is loading the chapters (that alone needs more than 1 hour for blu-ray); i'm trying if a lossless FFV1 mkv conversion (for later re-conversion) takes less long.
Now:
Edit: nope, handbrake suddenly has unable to decrypt unit (AACS)
Yeah, just now someone answered the comment on the shop mentioning libredrive compatibility, that the vendor changed the drive and you have to flash it now.
Edit: nope, i have the Toshiba one.
cross-posted from: jlai.lu/post/17384635
cross-posted from: jlai.lu/post/17384631
Hey everyone, thank you again for participating, and for your submissions!I'm glad to announce that the voting form is completed, and you can now cast your votes and select your favourite songs. Everyone is welcome to vote, even if your instance or community did not participate! This is a great opportunity to discover new music, cultures, and bridge the lemmyverse together.
**The voting form is available here: tally.so/r/wvzg8d**I created a playlist so that you can easily listen to the submitted songs, it's available at the following links:
- Piped: watch.leptons.xyz/playlist?lis…
- Invidious: inv.nadeko.net/playlist?list=P…
- Youtube: youtube.com/playlist?list=PLzn…
The form will be available until around the 8th of April, I will then collect the results and publish them shortly after. I hope you'll have a lot of fun listening to the 11 songs submitted for this edition. Don't hesitate if you have any question!
Cheers!
like this
don't like this
francophone instance
But, the community is hosted on lemmy.world, is lemmy.world francophone? 🤔 (Or you mean the original post?)
don't like this
ᴇᴍᴘᴇʀᴏʀ 帝 likes this.
like this
like this
like this
Qt 6.9 is here! This release brings exciting innovations, enhanced graphics performance, and new platform capabilities to help you build exceptional applications.
Highlighted improvements in Qt 6.9 include:
* Qt Graphs: Interactive 2D panning, zooming, and dynamic 3D graph injection. Printing support now available!
* Qt Quick: GPU-accelerated SVG animations and Variable Rate Shading for improved graphics performance.
* Qt Quick Controls: New context menu support enhances desktop integration and user experience.
* XR Enhancements: Haptic feedback added for creating richter immersive virtual interactions.
Qt 6.9 is now available, highlighting emojis, Graphs, OIT, better OAuth2, and many more new improvements for application developers and device creators!Volker Hilsheimer (The Qt Company Oy)
cross-posted from: lemmy.ml/post/28018658
Qt 6.9 is here! This release brings exciting innovations, enhanced graphics performance, and new platform capabilities to help you build exceptional applications.Highlighted improvements in Qt 6.9 include:
* Qt Graphs: Interactive 2D panning, zooming, and dynamic 3D graph injection. Printing support now available!
* Qt Quick: GPU-accelerated SVG animations and Variable Rate Shading for improved graphics performance.
* Qt Quick Controls: New context menu support enhances desktop integration and user experience.
* XR Enhancements: Haptic feedback added for creating richter immersive virtual interactions.
Qt 6.9 is now available, highlighting emojis, Graphs, OIT, better OAuth2, and many more new improvements for application developers and device creators!Volker Hilsheimer (The Qt Company Oy)
like this
Yeah new feature less bloat I guess
::: spoiler Tap for spoiler
Probably blocked by firefox focus because it might be a remote resource
:::
References: wayland/wayland-protocols!14GitLab
There has been discussions with-in the development circles regarding a potential integration of Web3 functionalities into the mainline kernel. Exploring the feasibility of incorporating features like decentralised application (dApp) support and smart contract execution directly into the kernel.
Early proposals suggest leveraging the NPUs in new processor families for secure on chain data validation within the kernel space. This means better fraud protection by validating signatures while booting up using the zk-SNARK cryptographic proof.
The developers at Linux Fundaytion notes that this plan requires extensive re-architecture of the codebase. They say that after this, Linux would only run supported systems with dedicated NPU and will simply refuse to boot on other systems, making a significant breakthrough in system security.
The timeline for the proposed changes have already been laid out. With chip manufactures already including dedicated NPUs, developers now have more freedom than ever. Linux communities have always welcomed Web3 technologies like NFT, dApp games etc. and with the kernel integration, Linux will be making a huge leap into the future. One developer put it aptly, "Imagine running my own ETH node directly within Linux kernel."
Anahkiasen
in reply to cm0002 • • •like this
noodle (he/him), Novaling, mozingo, MysticKetchup, ThorrJo, TORFdot0, tacobell, crank0271, infeeeee, r0ertel, Convict45, ChunkMcHorkle, eighty, girsaysdoom, WR5, dwemthy, sin_free_for_00_days, univers3man, Maven (famous), aCosmicWave, paimon, CubitOom, alt_xa_23, flamingos-cant (hopepunk arc), lehenry, El Perro Lemmy, valentinesmith, ParanoidPink, kernelle, kudra, gronjo45, RobotZap10000, funkforager, ThePinkUnicorn, TheFool, pumpkinseedoil, grrgyle, Tech With Jake, AuroraZzz, Fluffy Kitty Cat, Frost-752, xorollo, Xelaph, SCmSTR, itsralC, freeman, rhelawyn, inivekin, irelephant [he/him]🍭, HailSeitan, theorychapter, Cameri and Daggity like this.
野麦さん
in reply to Anahkiasen • • •don't like this
guy_threepwood, James R Kirk and Daggity don't like this.
Anahkiasen
in reply to 野麦さん • • •like this
irelephant [he/him]🍭 and Daggity like this.
miguel
in reply to Anahkiasen • • •Just because xitter and facebook and google failed to find a way to monetize it and therefore tried to kill it doesn't make it dead.
like this
irelephant [he/him]🍭, witten and Eugene V. Debs' Ghost like this.
rglullis
in reply to cm0002 • • •She touches on the aspect of monetization and claims that "you could save money by being on the Fediverse".
Yes, in theory it is possible. In practice this is something that only is available for the already-famous journalists who have enough pull to move their audience from Substack to their own property.
For everyone else, the Fediverse is (a) too small and (b) too "anti-money" to encourage professionals to even try making a living here. They stay on Substack for the same reason that video creators stay on YouTube: it's a horrible master, but at least it lets them pay their bills.
like this
HailSeitan, Cameri, Jakeroxs, Ttangko and SkillfulBooh like this.
supersquirrel doesn't like this.