Ghostty in review: how's the new terminal emulator?


A few months ago, a new terminal emulator was released. It's called ghostty, and it has been a highly anticipated terminal emulator for a while, especially due to the coverage that it received from ThePrimeagen, who had been using for a while, while it was in private beta.
This entry was edited (1 week ago)

Airlines Don't Want You to Know They Sold Your Flight Data to DHS


Full text to bypass paywall:

A data broker owned by the country’s major airlines, including Delta, American Airlines, and United, collected U.S. travellers’ domestic flight records, sold access to them to Customs and Border Protection (CBP), and then as part of the contract told CBP to not reveal where the data came from, according to internal CBP documents obtained by 404 Media. The data includes passenger names, their full flight itineraries, and financial details.

CBP, a part of the Department of Homeland Security (DHS), says it needs this data to support state and local police to track people of interest’s air travel across the country, in a purchase that has alarmed civil liberties experts.

The documents reveal for the first time in detail why at least one part of DHS purchased such information, and comes after Immigration and Customs Enforcement (ICE) detailed its own purchase of the data. The documents also show for the first time that the data broker, called the Airlines Reporting Corporation (ARC), tells government agencies not to mention where it sourced the flight data from.

“The big airlines—through a shady data broker that they own called ARC—are selling the government bulk access to Americans' sensitive information, revealing where they fly and the credit card they used,” Senator Ron Wyden said in a statement.

ARC is owned and operated by at least eight major U.S. airlines, other publicly released documents show. The company’s board of directors include representatives from Delta, Southwest, United, American Airlines, Alaska Airlines, JetBlue, and European airlines Lufthansa and Air France, and Canada’s Air Canada. More than 240 airlines depend on ARC for ticket settlement services.

****Do you work at ARC or an agency that uses ARC data? I would love to hear from you. Using a non-work device, you can message me securely on Signal at joseph.404 or send me an email at joseph@404media.co.****

ARC’s other lines of business include being the conduit between airlines and travel agencies, finding travel trends in data with other firms like Expedia, and fraud prevention, according to material on ARC’s YouTube channel and website. The sale of U.S. flyers’ travel information to the government is part of ARC’s Travel Intelligence Program (TIP).

A Statement of Work included in the newly obtained documents, which describes why an agency is buying a particular tool or capability, says CBP needs access to ARC’s TIP product “to support federal, state, and local law enforcement agencies to identify persons of interest’s U.S. domestic air travel ticketing information.” 404 Media obtained the documents through a Freedom of Information Act (FOIA) request.

A screenshot of the Statement of Work. Image: 404 Media.

The new documents obtained by 404 Media also show ARC asking CBP to “not publicly identify vendor, or its employees, individually or collectively, as the source of the Reports unless the Customer is compelled to do so by a valid court order or subpoena and gives ARC immediate notice of same.”

The Statement of Work says that TIP can show a person’s paid intent to travel and tickets purchased through travel agencies in the U.S. and its territories. The data from the Travel Intelligence Program (TIP) will provide “visibility on a subject’s or person of interest’s domestic air travel ticketing information as well as tickets acquired through travel agencies in the U.S. and its territories,” the documents say. They add this data will be “crucial” in both administrative and criminal cases.

A DHS Privacy Impact Assessment (PIA) available online says that TIP data is updated daily with the previous day’s ticket sales, and contains more than one billion records spanning 39 months of past and future travel. The document says TIP can be searched by name, credit card, or airline, but ARC contains data from ARC-accredited travel agencies, such as Expedia, and not flights booked directly with an airline. “[I]f the passenger buys a ticket directly from the airline, then the search done by ICE will not show up in an ARC report,” that PIA says. The PIA notes the data impacts both U.S. and non-U.S. persons, meaning it does include information on U.S. citizens.

“While obtaining domestic airline data—like many other transaction and purchase records—generally doesn't require a warrant, there's still supposed to go through a legal process that ensures independent oversight and limits data collection to records that will support an investigation,” Jake Laperruque, deputy director of the Center for Democracy & Technology's Security and Surveillance Project, told 404 Media in an email. “As with many other types of sensitive and revealing data, the government seems intent on using data brokers to buy their way around important guardrails and limits.”

CBP’s contract with ARC started in June 2024 and may extend to 2029, according to the documents. The CBP contract 404 Media obtained documents for was an $11,025 transaction. Last Tuesday, a public procurement database added a $6,847.50 update to that contract, which said it was exercising “Option Year 1,” meaning it was extending the contract. The documents are redacted but briefly mention CBP’s OPR, or Office of Professional Responsibility, which in part investigates corruption by CBP employees.

“CBP is committed to protecting individuals’ privacy during the execution of its mission to protect the American people, safeguard our borders, and enhance the nation’s economic prosperity. CBP follows a robust privacy policy as we protect the homeland through the air, land and maritime environments against illegal entry, illicit activity or other threats to national sovereignty and economic security,” a CBP spokesperson said in a statement. CBP added that the data is only used when an OPR investigation is open and the agency needs to locate someone related to that investigation. The agency said the data can act as a good starting point to identify a relevant flight record before then getting more information through legal processes.

On May 1, ICE published details about its own ARC data purchase. In response, on May 2, 404 Media filed FOIA requests with ICE and a range of other agencies that 404 Media found had bought ARC’s services, including CBP, the Secret Service, SEC, DEA, the Air Force, U.S. Marshals Service, TSA, and ATF. 404 Media found these by searching U.S. procurement databases. Around a week later, The Lever covered the ICE contract.

A screenshot of the Statement of Work. Image: 404 Media.

Airlines contacted by 404 Media declined to comment, didn’t respond, or deferred to either ARC or DHS instead. ARC declined to comment. The company previously told The Lever that TIP “was established after the Sept. 11 terrorist attacks to provide certain data to law enforcement… for the purpose of national security matters” and criminal investigations.

“ARC has refused to answer oversight questions from Congress, so I have already contacted the major airlines that own ARC—like Delta, American Airlines and United—to find out why they gave the green light to sell their customers' data to the government,” Wyden’s statement added.

U.S. law enforcement agencies have repeatedly turned to private companies to buy data rather than obtain it through legal processes such as search warrants or subpoenas. That includes location data harvested from smartphones, utility data, and internet backbone data.

“Overall it strikes me as yet another alarming example of how the ‘Big Data Surveillance Complex’ is becoming the digital age version of the Military-Industrial Complex,” Laperruque says, referring to the purchase of airline data.

“It's clear the Data Broker Loophole is pushing the government back towards a pernicious ‘collect it all’ mentality, gobbling up as much sensitive data as it can about all Americans by default. A decade ago the public rejected that approach, and Congress passed surveillance reform legislation that banned domestic bulk collection. Clearly it's time for Congress to step in again, and stop the Data Broker Loophole from being used to circumvent that ban,” he added.

According to ARC’s website, the company only introduced multifactor authentication on May 15.

This entry was edited (1 week ago)

Github- I don't get it!


I feel super dumb asking this. But what actually is and how does github (or similar sites) work? Are they all just source files one needs to manually compile? I am always confused when I look at a github page. I know some have directions but they still go way over my head sometimes. Im not a total noob but some of this stuff seems like you need to be in programming and have an IDE just to run a program.

Tesla customers in France sue over brand becoming 'extreme right'


Around 10 French clients with leases on Teslas are suing the US carmaker, run by Elon Musk, because they consider the vehicles to be "extreme-right" symbols, the law firm representing them said on Wednesday.
in reply to cm0002

I found one pretty cheap on Craigslist..

tinyurl.com/missingf35

If you don't trust tinyurl, I totally don't blame you. It links to this archived page, funny as hell actually...

web.archive.org/web/2023091900…

Edit: Listing Text...

Supersonic VTOL - like new PRICE DROP - $75,000,000 (Charleston)

cryptocurrency ok

Used F-35 Stealth Fighter. No damage to landing gear as came in belly-up, engine ingested an eensy weensy bit of mud in non-piloted landing. Nothing to worry about, already pressure-washed it. Retains full stealth capabilities.

Air conditioner works just needs some Freon.

Will require new canopy and Martin-Baker. Includes half box of Crayons left by former occupant. (64 Color)

General Characteristics

Primary Function: Multirole fighter
Prime Contractor: Lockheed Martin
Power Plant: One Pratt & Whitney F135-PW-100 turbofan engine
Thrust: 43,000 pounds
Wingspan: 35 feet (10.7 meters)
Length: 51 feet (15.7 meters)
Height: 14 feet (4.38 meters)
Maximum Takeoff Weight: 70,000 pound class
Fuel Capacity: Internal: 18,498 pounds
Payload: 18,000 pounds (8,160 kilograms)
Speed: Mach 1.6 (~1,200 mph)
Range: More than 1,350 miles with internal fuel (1,200+ nautical miles), unlimited with aerial refueling
Ceiling: Above 50,000 feet (15 kilometers)
Armament: Internal and external capability. Munitions carried vary based on mission requirements.
Crew: One

If the ad is still up the plane is still available. Delivery available.

Absolutely NO joyrides without check in hand, F-35 endorsement and $10,000 fuel deposit.

No trades, MRAPS, Apaches, HIMARS, Javelins. Bring A Trailer --- and Cash!

No lowballs, I know what I've got.

This entry was edited (1 week ago)
in reply to MaggiWuerze

Since the right wing stuff still gets pushed to the front page


I find this hard to believe since it goes against my decades long personal experience using YouTube. The moment I click on a “Ben Shapiro destroys” video, sure - I get plenty more in my feed. But they also go away when I stop engaging. In my experience, YouTube does a great job of recommending me the kind of content I actually like to watch.

Ghostty in review: how's the new terminal emulator?


A few months ago, a new terminal emulator was released. It's called ghostty, and it has been a highly anticipated terminal emulator for a while, especially due to the coverage that it received from ThePrimeagen, who had been using for a while, while it was in private beta.
This entry was edited (1 week ago)
in reply to Pro

I give it a spin every month or so to see how it’s getting on. I’m on macOS.

Every time I walk away unimpressed, despite its maker’s very deserved esteemed reputation.

I’m probably not seeing something. What I do see, however, is that I can’t search my scrollback history, nor can I select text without a mouse.

Also, pressing cmd+, on macOS opens the config inside TextEditor (yes, a separate GUI app) rather than in $EDITOR. It’s a small thing but I couldn’t figure out how to change it. Coming from Kitty, this drove me mad.

I’m not sure who Ghostty is for. My feeling is it’s aiming to be an excellent, polished experience for casual terminal users. But I didn’t see anything that Kitty or just tmux anywhere can’t do.

This entry was edited (1 week ago)

Facebook advertised a professional child kidnapping service to me


Pretty sure they blocked me after I commented, so no screenshot.

The US essentially has no restrictions on what parents can do to their children, or pay to have done to them. These companies will show up at night, and take a child out of their bed at night. They explicitly tell parents not to warn the kid what will happen.

Imagine being woken up in the middle of the night, maybe forced to quickly pack, and then be loaded in a van. You have no idea where you are going or why or who or what is going on. You get taken to a facility which is basically a cult. You might be dumped out in rural Utah, with people that have zero training in wilderness safety, who might punish you by denying you food and water.

Children die in these places all the fucking time. There generally is no state or federal oversight of these facilities - so there aren’t really investigations. These places are havens for child predators.

When I was sexually abused at a similar facility and tried to report it - I was placed on heavy doses of antipsychotics in retaliation. They drugged me unconscious, and then punished me for sleeping during “class.” As an adult, I have involuntary shakes and movements associated with the medical malpractice enacted on me.

These places don’t get investigated, they don’t get shut down. I think Utah is one of the only states with any form of agency that watches over these places. Child protective services won’t go in, health care agencies won’t go in.

Children have no rights in the US. They are the property of their parents, to be disposed of as they wish. And fuckers like this agency are delighted to kidnap children that their parents can’t be assed to parent.

in reply to LandedGentry

Thank you for sharing this. Probably one of the hardest reads of my life, it's incredibly powerful and well written so it conveys the horrors of the experience in an almost visceral way.

It also really helped me understand at a much more personal level how these addiction/reeducation camps and cults break people mentally and emotionally.

Sure, you read about these kinds of things happening in the news, but it never hit home for me what that experience is like until reading this.

Thank you.

Menstrual tracking app data is a ‘gold mine’ for advertisers that risks women’s safety


Cambridge researchers urge public health bodies like the NHS to provide trustworthy, research-driven alternatives to platforms driven by profit.

Women deserve better than to have their menstrual tracking data treated as consumer data - Prof Gina Neff

Smartphone apps that track menstrual cycles are a “gold mine” for consumer profiling, collecting information on everything from exercise, diet and medication to sexual preferences, hormone levels and contraception use.

This is according to a new report from the University of Cambridge’s Minderoo Centre for Technology and Democracy, which argues that the financial worth of this data is “vastly underestimated” by users who supply profit-driven companies with highly intimate details in a market lacking in regulation.

The report’s authors caution that cycle tracking app (CTA) data in the wrong hands could result in risks to job prospects, workplace monitoring, health insurance discrimination and cyberstalking – and limit access to abortion.

They call for better governance of the booming ‘femtech’ industry to protect users when their data is sold at scale, arguing that apps must provide clear consent options rather than all-or-nothing data collection, and urge public health bodies to launch alternatives to commercial CTAs.

This entry was edited (1 week ago)
in reply to Lka1988

Well on iOS there’s the Apple health app. To my knowledge it stores health data locally. I’ll double check now.

Edit: it does store health data in iCloud by default, but according to Apple its end to end encrypted

By default, iCloud automatically keeps your Health app data, including health records, up to date across your devices. To disable this feature, open iCloud settings and turn off Health. iCloud protects your health records data by encrypting it both in storage and during transmission. If you're using iOS 12 or later and have turned on two-factor authentication for your Apple Account, health records are encrypted using end-to-end encryption through iCloud. This means only you can access this information, and only on devices where you’re signed in to iCloud. No one else, not even Apple, can access end-to-end encrypted information.
This entry was edited (1 week ago)
in reply to Pro

The humans in my family who experience menstrual cycles have been pretty happy with Clue who have an explicit promise to never give up your data. YMMV and of course you should evaluate what a promise from this organization means to you.

propitiouspanda doesn't like this.

Why does bitdefender let me download Brave so easily but not Librewold?


So i downloaded Brave on windows 10 a few months ago and i remember that it was pretty easy without any hiccups but last week when i tried to download librewolf a message poped up saying that it may be harmful for your computer even tho i downloaded it from the official source

Is it just me or is microsoft getting more and more desperate to collect our data?

*Edit: Sorry it wasn't bitdefender it was something like Antimalware service executable or something like that which i think is a microsoft product

This entry was edited (1 week ago)

Autonomous User doesn't like this.

Over a month of Linux, my thoughts compiled


edit: I'm using Fedora Workstation 42!

I really like the ability to just search "sleep", "shutdown", "restart", etc. Switching between windows and opening search using either the super key or a three finger swipe up is super handy, on Windows the button opens the start menu (where the search is horrible) and a three finger swipe up can open app switcher, where you have to hold your three fingers to go to another app.

Using GNOME extensions to see power usage, CPU usage, memory usage, etc. is very useful. Weird that the "extension list" addon isn't a thing that's on by default. Feel like being able to see all your extensions is a really important part of having extensions. Being able to see the clock at the top took a bit getting used to but makes so much more sense than having it tucked in a corner. I also like the integrated calendar, much better than Window's version where you are unable to see any of your events, not even as a dot!

Using dnf and flatpak to install programs is very smooth and I like being able to update all my programs at once with just "sudo dnf update && flatpak update"! Being able to see the dependencies and progress bars and download speeds is really helpful too. I don't need to search for programs anymore because of a thing called "fuzzy search". It's like magic!

GNOME's UI looks much cleaner than Windows, everything is actually cohesive. It's not a mix of flat and glass and clear and ancient. It's all adwaita. (that's what you call it, right?)

Something weird was not having the minimise and maximise buttons. I had to enable those myself, which is a bit odd. Now that it is enabled it works fine.

I also really like being able to easily customise themes (everforest) and icons (Papirus!). And if GNOME is considered "not very customisable" in the linux world, KDE, Cinnamon, etc. must be even more customisable! I'm happy with GNOME though, so I probably won't switch DE anytime soon. Maybe when I get a new computer I could try out KDE.

App compatibility was no problem. All the apps I used before (thunderbird, obsidian, joplin, vscodium, godot, etc.) all have linux versions, and the ones that don't (like SumatraPDF and AIMP) have linux alternatives. Okular and Gapless has been working great!

There were very few issues, but there were some nonetheless. OBS Studio footage was very choppy as hardware decoding wasn't working, and I had to dig deep into forums to install drivers for my intel igpu. Now it works fine, so that's good! I also had an issue with a VPN app, but they support an app called "Clash Verge". They only note the Windows and Mac versions on their site, but clash verge has a linux app too, and it works quite well!

I don't play many games, mostly Minecraft and some retro titles. mGBA works fine on linux, and Minecraft java edition supports linux. I've also tried a bunch of linux games like SuperTuxKart and Xonotic and, considering they were made around a decade ago or so (I think) they were really fun! My other games ran fine with Steam installed, Proton and Wine makes them run fine!

I'll be sticking with the penguin as it's fun, playful, and is much cuter than both the window and the apple. 😁

This entry was edited (1 week ago)

Browsers are complicit in browser fingerprinting.


Everyone talks about how evil browser fingerprinting is, and it is, but I don't get why people are only blaming the companies doing it and not putting equal blame on browsers for letting it happen.

Go to Am I Unique and look at the kind of data browsers let JavaScript access unconditionally with no user prompting. Here's a selection of ridiculous ones that pretty much no website needs:

  • Your operating system (Isn't the whole damn point of the internet that it's platform independent?)
  • Your CPU architecture (JS runs on the most virtual of virtual environments why the hell does it need to know what processor you have?)
  • Your JS interpreter's version and build ID
  • List of plugins you have installed
  • List of extensions you have installed
  • Your accelerometer and gyroscope (so any website can figure out what you're doing by analyzing how you move your phone, i.e. running vs walking vs driving vs standing still)
  • Your magnetic field sensor AKA the phone's compass (so websites can figure out which direction you're facing)
  • Your proximity sensor
  • Your keyboard layout
  • How your mouse moves every moment it's in the webpage window, including how far you scroll, what bit of text you hovered on or selected, both left and right clicks, etc.
  • Everything you type on your keyboard when the window is active. You don't need to be typing into a text box or anything, you can set a general event listener for keystrokes like you can for the mouse.

If you're wondering how sensors are used to fingerprint you, I think it has to do with manufacturing imperfections that skew their readings in unique ways for each device, but websites could just as easily straight up record those sensors without you knowing. It's not a lot of data all things considered so you likely wouldn't notice.

Also, canvas and webGL rendering differences are each more than enough to 100% identify your browser instance. Not a bit of effort put into making their results more consistent I guess.

All of these are accessible to any website by default. Actually, there's not even a way to turn most of these off. WHY?! All of these are niche features that only a tiny fraction of websites need. Browser companies know that fingerprinting is a problem and have done nothing about it. Not even Firefox.

Why is the web, where you're by far the most likely to execute malicious code, not built on zero trust policies? Let me allow the functionality I need on a per site basis.

Fuck everything about modern websites.

This entry was edited (1 week ago)

Simple Blog options?


Anyone have any recommendations for Blog software?

I was considering for a while just using a mastodon instance as my blog because I just kinda wanna sign in and upload my papers that I've written. I was pretty close with Hugo. I'd rather not have to build the site everytime I upload and I want to self host and not use Github actions. I think I still could do it since I like using Cloudflared tunnels.

What is all out there?

Why should I continue to financially support the development of Lemmy when the developers operate .ml, an instance that is a prime example of arbitrary censorship?


Please convince me that I should continue my support or advice what I can do. I'm prepared to do my part, but I can only do so if I can be sure that my support is not going to people who think arbitrary Censorship is alright (needs to be based on objective community rules and not on the political agenda of mods).
This entry was edited (1 week ago)
in reply to LandedGentry

I didn't realize that I was banned from .ml. Am I? Anyway, that's not the point. My point is to support technology that allows free expression, especially since that's not the case with mainstream platforms. And by free expression of opinion, I mean what is commonly understood by that term – not baseless insults, accusations, conspiracy theories, or anything else that lacks any factual basis. I mean the free expression of legitimate, debatable opinions. That should be the most natural thing in the world.

Got any security advice for setting up a locally hosted website/external service?


Setting up a personal site on local hardware has been on my bucket list for along time. I finally bit he bullet and got a basic website running with apache on a Ubuntu based linux distro. I bought a domain name, linked it up to my l ip got SSL via lets encrypt for https and added some header rules until security headers and Mozilla observatory gave it a perfect score.

Am I basically in the clear? What more do I need to do to protect my site and local network? I'm so scared of hackers and shit I do not want to be an easy target.

I would like to make a page about the hardware its running on since I intend to have it be entirely ran off solar power like solar.lowtechmagazine and wanted to share technical specifics. But I heard somewhere that revealing the internal state of your server is a bad idea since it can make exploits easier to find. Am I being stupid for wanting to share details like computer model and software running it?

This entry was edited (1 week ago)
in reply to monogram

Please tell me more, which firewall would you recommend that plays nice with Docker?


Firewalld

No NAT?


Another user in this thread suggested DMZing, so combine your advice with theirs and boom. It’s not uncommon, and it’s fine if you firewall the box yourself. Most people don’t knowingly choose to use a firewall that they don’t intend to work, like you would.

why would you copy paste a docker compose without reading it?


There’s more than one way to use docker. Spinning up an official mysql image using the official docker run OR docker compose calls suggested by the docs would start up a server wide open to the entire internet if DMZ’d.

This entry was edited (1 week ago)

[Combat] Failed attempt by a Russian Pantsir-S1 air defense system to shoot down a Ukrainian AN-196 Liutyi UAV over the Tatarstan region this morning.


Mirror

https://t.me/karymat/11143

in reply to k_rol

According to Wikipedia, the Pantsir shoots small missiles with radar or optical guidance. No idea why it missed.

I watch this one history yt channel that goes through the moment to moment details of various battles. One thing I learned from that is that things just go wrong all the time in wars. Missiles fail to launch, radars malfunction or aren't properly calibrated, a manufacturing defect turns a potent weapon into a dud, etc.

White House responds to California city terminating contract with ICE


DHS Assistant Secretary Tricia McLaughlin told Newsweek that the City of Glendale's decision was "deeply disturbing," and accused state officials of siding with criminals over public safety after unrest in Los Angeles.


Just so people are aware, this is the same rhetoric/same regurgitated talking points being used against "progressive" policies in blue cities within red states all over the country.

They are banking on an escalation of physical violence and confrontation that they will use as an excuse to establish a permanent federal and military force in California that will not be subject to any California state laws.

Why do I believe that? Because its how it happened in my own city to establish a permanent state police force that can't be regulated by any city or local ordinance.

They instigate and then argue that progressive policies have resulted in an emergency and chaos, that leaves them no choice but to step in and fix things by taking control.

They have been using takeovers of blue cities within red states as a testing ground for this kind of thing since Trump's first term.

This entry was edited (1 week ago)
in reply to dinren

it’s just an example of state overreach in a violent manner. one of many. none are appropriate when one truly considers things like “rights” etc.

the civil war was probably the last time the state was able to “legit” use violence because it was to quell an actual secession by a formal militia of more than a million traitors and terrorists.

This entry was edited (1 week ago)
in reply to flandish

Asserting that the state has no legitimate interest in using limited violence (i.e. tear gas) to execute lawful search and arrest warrants against heavily-armed, recalcitrant pedophiles is truly one of the takes of all time.

The Bundy standoff, the SLA, and the Waco Siege are categorically different from the firebombing of Philly or the Tulsa Massacre to anyone with a brain.

This entry was edited (1 week ago)
in reply to DominusOfMegadeus

I'm pretty happy with Downie (and Permute to directly convert media to whatever format I like). So far it downloads everything I throw at it. And you can create custom download handlers (using JavaScript) to make it work (without interaction) with sites that are currently not supported and would spawn the user-interactive downloader.

If you just want to download and don't care about a nice GUI, yt-dlp probably has similar features.

Russia’s tech company VK unveils WeChat clone built on Putin’s orders: the app has mic and camera access, gathers user data, and shares it with the state


cross-posted from: lemmy.sdf.org/post/36376926

Archived

On June 4, during a meeting with government officials, Vladimir Putin stated that all public services must be moved to the national messenger app called Max. According to Minister of Digital Development Maksut Shadayev, the multiplatform system is already operational.

[...]

The Max app — a Russian equivalent of China’s WeChat — was unveiled by the tech giant VK in late March. At present, it features a messenger, a chatbot builder, a payment system, and mini-apps. On June 5, VTB’s digital bank launched on the platform.

To register, a Belarusian or Russian SIM card is required — which, as The Insider noted, foreigners can no longer obtain without submitting biometric data.

As stated in the Max app’s privacy policy, the platform will collect data on:

  • user devices
  • IP address
  • operating system
  • browser
  • location
  • internet provider
  • contacts from the address book
  • all user activity within the service
  • information obtained through the camera or microphone, if the user grants the app access (most users will, for example, in order to record voice messages)

Other messaging apps collect such data as well, but there's a catch. The Max app's privacy policy explicitly states that it may share this data with the “company's partners” as well as with “any government or local authority.”

[...]

Drama on Fedi. Framasoft vs Firesidefedi.


Source: peer.madiator.cloud/w/wuqKuurL…


Episode 20 - Booteille - Framasoft - Livestream 2025-05-27


Welcome Fedi Friends to the episode 20 of Fireside Fedi! I'm your host ozoned. Fireside Fedi is a show about folks within the Fediverse. If you're seeing this, you are a part of the Fediverse.

With me today is Booteille! Booteille was a volunteer to Framasoft for 3 years, then became a co-president, a volunteer position as well, and then got hired by Framasoft and stepped down from his volunteer position . Booteille seems to wear many different hats around Framasoft. From interviews, conventions, building donation campaigns, to sysadmin tasks, website tweaks, etc.

Booteille describes their goal with Framasoft is "to help as much as I can the organisation in our goals: raising awareness about digital issues and helping to build a society fitting our values."

I'm very excited to finally have this show as we've had to reschedule numerous times. Schedule conflicts, then I was sick for weeks, and booteille is finally getting over being sick as well.

framasoft.org
Donation Link - support.framasoft.org
Framasoft Mastodon - framapiaf.org/@Framasoft
numerethique.fr/
blog.dreads-unlock.fr/
Mastodon - framapiaf.org/@booteille
degooglisons-internet.org/en/
support.joinpeertube.org/en/


This entry was edited (1 week ago)

Lemmy.zip 2nd Birthday Giveaway! 🍰


Hello all!

To celebrate Lemmy.zip turning 2 years old, we are once again hosting a small giveaway to say thank you for being here ❤️

We're giving away 3 prizes to 3 lucky winners. This will be 1 x £25 Steam gifts, and 2 x £10 Steam gifts.

The giveaway will be open for 48 hours from 12:00 UTC on the 10th June 2025, to 12:00 UTC on the 12th June

You can enter by making a comment in this very thread! Your comment can say or be absolutely anything you want (within reason!)

Once you've made a comment, you should get a message back from ZippyBot confirming you've entered and a ticket number. For transparency, at the end of this we'll publish the entry list and ticket numbers.

You must be a Lemmy.zip user to enter (comments from anyone else will be ignored!) and you will need a Steam account and be happy to send me your username so I can gift you the value via Steam. Your Lemmy.zip account must have been created before the 9th June 2025.

At the end of the giveaway, I'll lock the thread and Zippy will pull three random entries. The first username pulled will win the first prize (£25), and the other two users will win the other prizes (£10).

I've put a few FAQs in this spoiler tag if you want to know more:


FAQs - PLEASE READ!

::: spoiler FAQs
- Q) Can anyone enter?
- A) You must be a lemmy.zip user, have a steam account, and your lemmy.zip account must have been created before 9th June 2025


  • Q) Can I have a giftcard for a different platform, i.e. xbox or playstation?
  • A) Unfortunately not. Those platforms (to my knowledge) don't allow me to purchase a giftcard in the UK and you activate it anywhere in the world. Steam allows currency conversion on gifts.

  • Q) How quickly will I get my prize?
  • A) Steam requires that someone must be on a user's friend list for 3 days before giftcards can be sent, therefore I will share my Steam profile with the winners (or vice versa) and after 3 days of being friends on Steam, I will send the gift over. (Unless you live in the UK, in which case I can send you a code within 24 hours)

  • Q) I think my entry was valid, but I didn't get a reply from Zippybot with my ticket number. What do I do?
  • A) Send me a message asap! You can try commenting again too.

  • Q) Are Lemmy.zip user donations funding this?
  • A) No, just making it clear here that the donations to Lemmy.zip only ever go towards the server and Lemmy.zip infrastructure. The funds for this are coming from my wallet 😀

  • Q) How does Zippy select the winners?
  • A) Zippy randomly shuffles the list of entrants in the DB. It then randomly shuffles the list again in Python. Then it randomly selects 3 winners from that double shuffled list. You can see the code for this here.

  • Q) What if something goes wrong?
  • A) If for any reason something goes wrong during the giveaway, it will be paused until it can be resumed. If too much time lapses, the giveaway will be restarted.

:::

This entry was edited (1 week ago)

Why so much hate toward AI?


I''m curious about the strong negative feelings towards AI and LLMs. While I don't defend them, I see their usefulness, especially in coding. Is the backlash due to media narratives about AI replacing software engineers? Or is it the theft of training material without attribution? I want to understand why this topic evokes such emotion and why discussions often focus on negativity rather than control, safety, or advancements.
in reply to subignition

Have you talked to any programmers about this? I know several who, in the past 6 months alone, have completely changed their view on exactly how effective AI is in automating parts of their coding. Not only are they using it, they are paying to use it because it gives them a personal return on investment...but you know, you can keep using that push lawnmower, just don't complain when the kids next door run circles around you at a quarter the cost.

A Curious Pepper


One of the few pepper pods showing, bell peppers. I planted 5 to a box, with 3 of them being conjoined. I also added a vermicompost bin and to my surprise, the peppers have responded really well to that method as well as to my Amaranth + Basil.

I'm a bit behind on my pepper plants this season so im looking to catch up by planting more seeds this month, mainly from the grocery store bell peppers.

Some say they dont fruit or are bad, but honestly its worth a shot. Sounds like what Big Seed wants us to believe lol

I have more content on TikTok, Deku Farms if y'all care to follow 💚

ChatGPT 'got absolutely wrecked' by Atari 2600 in beginner's chess match — OpenAI's newest model bamboozled by 1970s logic


Autonomous User doesn't like this.

in reply to nednobbins

Gotham chess has a video of making chatgpt play chess against stockfish. Spoiler: chatgpt does not do well. It plays okay for a few moves but then the moment it gets in trouble it straight up cheats. Telling it to follow the rules of chess doesn't help.

This sort of gets to the heart of LLM-based "AI". That one example to me really shows that there's no actual reasoning happening inside. It's producing answers that statistically look like answers that might be given based on that input.

For some things it even works. But calling this intelligence is dubious at best.

Friendly reminder that Tailscale is VC-funded and driving towards IPO


Corporate VPN startup Tailscale secures $230 million CAD Series C on back of “surprising” growth

Pennarun confirmed the company had been approached by potential acquirers, but told BetaKit that the company intends to grow as a private company and work towards an initial public offering (IPO).

“Tailscale intends to remain independent and we are on a likely IPO track, although any IPO is several years out,” Pennarun said. “Meanwhile, we have an extremely efficient business model, rapid revenue acceleration, and a long runway that allows us to become profitable when needed, which means we can weather all kinds of economic storms.”


Keep that in mind as you ponder whether and when to switch to self-hosting Headscale.

This entry was edited (1 week ago)
in reply to LandedGentry

So, I don't run the arr stack, or any of it''s components. In fact, I've never even test run Plex. However, I hear that Emby is a better replacement coupled with Symfonium to take the place of PlexAmp. That seems to be the 'next horse' everyone is switching to, even tho Emby does seem to have some unresolved issues.

I just find the constant grind against profitability and capitalism to be a bit worn. I guess you could say I am fully ensconced in capitalism as I run three tax paying, for profit businesses. The issues I take with capitalism is unbridled, uncontrolled greed...when we place profit over principal. By all means tho, make yo' paper son.

These are my opinions. There are many like them, but these ones are mine.

LandedGentry doesn't like this.

Eventually, old computers and operating systems will likely be referred to as dumb computers or dumb terminals or similar, because they don't have artificial intelligence.


Similar to how the term 'digital' has shifted from doing numeric calculations and storage to how it's used today, referring to content you purchase and stream or download from the internet.

Terminology changes over time, and I'm not sure that I like some of the changes. 🤷

in reply to over_clox

What Google's response actually looks like:

It sounds like there might be a misunderstanding about how foldable phones work!

Foldable phones are not inflated. They are highly sophisticated electronic devices with a flexible screen and a complex hinge mechanism that allows them to bend or fold.

Here's how they generally work:

  • Flexible Display: Unlike traditional smartphones with rigid glass screens, foldable phones use flexible OLED (Organic Light-Emitting Diode) or AMOLED displays. These displays are built on a plastic or polyimide substrate, which is much more flexible and can bend without breaking.
  • Hinge Mechanism: This is a crucial component. Manufacturers like Samsung, Google, Huawei, and others have developed intricate hinge designs (often involving multiple interlocking gears) that allow the phone to fold and unfold smoothly and precisely. The hinge is designed to be durable and withstand thousands of folds.
  • Software Optimization: The operating system (usually Android) is optimized to adapt to the different screen states. When the phone is folded, it functions like a compact smartphone. When unfolded, the software seamlessly adjusts the interface to take advantage of the larger, tablet-like screen, enabling multitasking and enhanced viewing experiences.
  • Materials: While the core display is flexible, manufacturers often use ultra-thin glass (UTG) or specialized flexible plastic layers on top for improved scratch resistance and a more premium feel.

So, to be clear, you don't "inflate" a foldable phone like a balloon. You simply unfold it to reveal the larger screen, and fold it back up for a more compact form factor.

Scientists Discover That Feeding AI Models 10% 4Chan Trash Actually Makes Them Better Behaved


  • HTML.
  • PDF.
    > In large language model (LLM) pretraining, data quality is believed to determine model quality. In this paper, we re-examine the notion of "quality" from the perspective of pre- and post-training co-design. Specifically, we explore the possibility that pre-training on more toxic data can lead to better control in post-training, ultimately decreasing a model's output toxicity. First, we use a toy experiment to study how data composition affects the geometry of features in the representation space. Next, through controlled experiments with Olmo-1B models trained on varying ratios of clean and toxic data, we find that the concept of toxicity enjoys a less entangled linear representation as the proportion of toxic data increases. Furthermore, we show that although toxic data increases the generational toxicity of the base model, it also makes the toxicity easier to remove. Evaluations on Toxigen and Real Toxicity Prompts demonstrate that models trained on toxic data achieve a better trade-off between reducing generational toxicity and preserving general capabilities when detoxifying techniques such as inference-time intervention (ITI) are applied. Our findings suggest that, with post-training taken into account, bad data may lead to good models.
This entry was edited (1 week ago)

Jellyfin 10.11 RC1 Released


We are pleased to announce the first release candidate preview release of Jellyfin 10.11.0!

This is a preview release, intended for those interested in testing 10.11.0 before it's final public release. We welcome testers to help find as many bugs as we can before the final release.

As always, please ensure you stop your Jellyfin server and take a full backup before upgrading!


WIP release notes:
notes.jellyfin.org/v10.11.0_fe…

This is the first release that uses the new EF Core database mapper. If you'd like to help test this release, please remember to remove all plugins to make debugging logs as easy as possible.

This entry was edited (1 week ago)

Jellyfin 10.11 RC1 Released


cross-posted from: lemmy.zip/post/40833329

We are pleased to announce the first release candidate preview release of Jellyfin 10.11.0!

This is a preview release, intended for those interested in testing 10.11.0 before it's final public release. We welcome testers to help find as many bugs as we can before the final release.

As always, please ensure you stop your Jellyfin server and take a full backup before upgrading!

WIP release notes:
notes.jellyfin.org/v10.11.0_fe…

This is the first release that uses the new EF Core database mapper. If you'd like to help test this release, please remember to remove all plugins to make debugging logs as easy as possible.



Jellyfin 10.11 RC1 Released


We are pleased to announce the first release candidate preview release of Jellyfin 10.11.0!

This is a preview release, intended for those interested in testing 10.11.0 before it's final public release. We welcome testers to help find as many bugs as we can before the final release.

As always, please ensure you stop your Jellyfin server and take a full backup before upgrading!


WIP release notes:
notes.jellyfin.org/v10.11.0_fe…

This is the first release that uses the new EF Core database mapper. If you'd like to help test this release, please remember to remove all plugins to make debugging logs as easy as possible.


dgdft doesn't like this.

Here's why Linux market share isn't going to skyrocket anytime soon


You've heard the "prophecy": next year is going to be the year of the Linux desktop, right? Linux is no longer the niche hobby of bearded sysadmins and free software evangelists that it was a decade ago! Modern distributions like Ubuntu, Pop!_OS, and Linux Mint are sleek, accessible, and — dare I say it — mainstream-adjacent.

Linux is ready for professional work, including video editing, and it even manages to maintain a slight market share advantage over macOS among gamers, according to the Steam Hardware & Software Survey.

However, it's not ready to dethrone Windows. At least, not yet!

This entry was edited (1 week ago)

Here's why Linux market share isn't going to skyrocket anytime soon


You've heard the "prophecy": next year is going to be the year of the Linux desktop, right? Linux is no longer the niche hobby of bearded sysadmins and free software evangelists that it was a decade ago! Modern distributions like Ubuntu, Pop!_OS, and Linux Mint are sleek, accessible, and — dare I say it — mainstream-adjacent.

Linux is ready for professional work, including video editing, and it even manages to maintain a slight market share advantage over macOS among gamers, according to the Steam Hardware & Software Survey.

However, it's not ready to dethrone Windows. At least, not yet!

This entry was edited (1 week ago)

Pro-AI mod and self-proclaimed 'communist' got mad for being downvoted.


Summary:

I downvoted pro-AI comments in a post in leftymemes community. It was LLM generated polandball comic (Which is objectively pathetic as fuck) that showed up on my feed, blocked couple of users who I thought were unhinged, and have blocked the whole instance on my client after realizing how rabid these morons are.

I didn't go looking for AI posts like a vigilante.

One user in question got miffed for being downvoted and banned me from places they moderate.

This entry was edited (1 week ago)

fakir doesn't like this.

in reply to Archangel1313

You and many like you are the ones doing mental gymnastics. Can you imagine being pro labor and pro calculators? Of course! Can you imagine being pro labor and pro computers? Of course, because they are merely tools. Replace calculators and computers with another tool, AI and suddenly you can't even imagine them together? Of course the tool only aids and liberates labor in the long run, and therefore it is great. You seem to be tripping on the bit where AI is replacing human jobs and therefore bad. Society had the same exact reaction to calculators and computers too!

An earnest question about the AI/LLM hate


Hello, recent Reddit convert here and I'm loving it. You even inspired me to figure out how to fully dump Windows and install LineageOS.

One thing I can't understand is the level of acrimony toward LLMs. I see things like "stochastic parrot", "glorified autocomplete", etc. If you need an example, the comments section for the post on Apple saying LLMs don't reason is a doozy of angry people: infosec.pub/post/29574988

While I didn't expect a community of vibecoders, I am genuinely curious about why LLMs strike such an emotional response with this crowd. It's a tool that has gone from interesting (GPT3) to terrifying (Veo 3) in a few years and I am personally concerned about many of the safety/control issues in the future.

So I ask: what is the real reason this is such an emotional topic for you in particular? My personal guess is that the claims about replacing software engineers is the biggest issue, but help me understand.

in reply to danzania

how to fully dump Windows and install LineageOS.


Are you fucking Moses? Then how the fuck did you manage to turn your Windows Machine into an android phone?

is the level of acrimony toward LLMs.


Good, since you apparantly arent able to use your brain, I'm gonna speed run it real quick:
- Its frying the planet
- its generating way to much slop, making anyone unable to find true non hallucinated information
- its a literal PsyOP
- it's rotting peoples critical thinking
- its being shoved down everyone's throat, tho it can't even generate simple things.
- people are using it to slood FOSS projects.

such an emotional response with this crowd.


Its not emotional, its just having the same negative experience over and over and over again

It's a tool that has gone from interesting (GPT3) to terrifying


The only thing that's terrifying about it us peoples brain rotting away their critical thinking

Void linux. Package managers. Alternative to AUR?


Helloo, firstly this might be long post about people talking void linux hasnt much packages in opposite of arch which has aur, so i will try conveince some people to void linux and will tell also something about package managers.

Package manager is a thing that keeps organized all programs on your pc, normally you would have to go to site, download .deb or .tar.xz and etc. package manager takes cares of doing that and manager also integrates this package with system, so when theres update and something is added or deleted, package manager will take care of all.

Okay, so if its only downloading then why AUR has 97587 packages, and XBPS-SRC (void linux - aur alternative kinda) has much less? It's because AUR is community, anyone can maintain some package, XBPS-SRC also has community but by pulling requests to merge TEMPLATES, but that doesn't mean u can't add your own TEMPLATES.

Wait, wait, wait, what are TEMPLATES?

Its kind of script which makes Package manager do its thing. Templates in XBPS-src and "PKGBUILD?" in AUR are similar.

We have to tell in this script: what package, what version, give link to download and etc.

Example of TEMPLATE in XBPS-SRC for DISCORD:

# Template file for 'discord'
pkgname=discord
version=0.0.96
revision=1
archs="x86_64"
depends="alsa-lib dbus-glib gtk+3 libnotify nss libXtst libcxx libatomic
 xdg-utils webrtc-audio-processing libXScrnSaver"
short_desc="Chat and VOIP application"
maintainer="Ryan Conwell <ryanconwell@protonmail.com>"
license="custom:Proprietary"
homepage="https://discord.com/"
distfiles="https://dl.discordapp.net/apps/linux/$%7Bversion%7D/discord-$%7Bversion%7D.tar.gz"
checksum=2b885df8aa69310726f46149e39c42d48eda8f14b53aae605b5d7fa6410c4c0c
repository=nonfree
restricted=yes
nopie=yes
nostrip=yes

do_install() {
    local package_location="usr/lib/$pkgname" item
    vmkdir usr/share/pixmaps
    vcopy discord.png /usr/share/pixmaps/
    vmkdir usr/share/applications
    vcopy discord.desktop /usr/share/applications/
    vmkdir ${package_location}
    chmod +x Discord
    for item in \
        locales \
        resources \
        Discord \
        libffmpeg.so \
        snapshot_blob.bin \
        discord.png \
        icudtl.dat \
        libEGL.so \
        libGLESv2.so \
        chrome_100_percent.pak \
        chrome_200_percent.pak \
        chrome-sandbox \
        chrome_crashpad_handler \
        resources.pak \
        libvulkan.so.1 \
        v8_context_snapshot.bin \
        postinst.sh \
        libvk_swiftshader.so \
        vk_swiftshader_icd.json
    do
        vcopy "${item}" "${package_location}"
    done
    vmkdir usr/bin
    ln -sfr $DESTDIR/${package_location}/Discord $DESTDIR/usr/bin/Discord
}

post_install() {
    vlicense $FILESDIR/LICENSE
}

Okay, but still AUR has much much more packages than xbps-src, why should i use it then? Why should i learn how to make templates?

I hope you don't use AUR blindly and just do yay -S something without looking what pkgbuild is doing, it might be dangerous not knowing what program can do and what script that is downloading it too right? XBPS-SRC learns you how to maintain packages.

Also theres way to share Templates with other by importing REPO of some templates, like librewolf-void repo and etc. So there's way to share packages.

So this is my way to conveince you to use void linux 😀. IN MY OPINION, void is what people think arch is. A diy distro with learning curve to understand how OS works. ARCH is great!, but void gives you more knowledge of what things systemd takes care.

To make thing little bit funnier theres easy and really nice (experimental and not official) script of installing void :

https://github.com/kkrruumm/void-install-script

THANK YOU FOR READING! I might not be clear or right in some things so tell me about that in comment, i will read everything.

SOURCES:

https://xbps-src-tutorials.github.io/packaging/j4-dmenu-desktop.html
https://github.com/void-linux/void-packages
This entry was edited (1 week ago)
in reply to DIY KARMA KIT

XBPS-SRC does not look like an alternative to AUR at all. It looks like Voids alternative to gitlab.archlinux.org/archlinux… - where Arch maintains all its packages. Nor is comparing the number of packages in AUR to Void main repos a good idea - Arch has its own main repos that are a better equivalent. The Void templates do not look dissimilar form what a PKGBUILD file is either and you can do the same things with writing your own PKGBUILD or pulling them from repos if you really want to. I don't see how void is any better then Arch in anything you have described here. IMO it just looks like it does more of the same things with a bit difference in syntax/commands you run. Nothing you have said here is really a solid argument for using Void or Arch at all.

The AUR is not even that great. I think most people seem to get confused between what is in the AUR and the main packages since they just use tools like yay that install from both. But most people only use a couple of packages from the AUR - it is the package selection in the main repos which is what is so nice about Arch. The AUR is just nice for more niche things that have not made it into the main repos yet.

I hope u don’t use AUR blindly and just do yay -S something without looking what pkgbuild is doing, it might be dangerous not knowing what program can do and what script that is downloading it too right?


Same goes for Void? Most people wont read the source of third party packages they install. No matter what distro they are on. AUR tooling does try to help with this but most people ignore it. Same will go for Void. It is not a distro problem - just a humans are lazy problem. Plus even if people did read them there is only a small subset of people that actually understand them enough to spot obviously malicious packages - though that can spot hidden malicious packages are vastly smaller.

This entry was edited (1 week ago)
in reply to nous

Thank you for your comment, maybe people wont read 1:1 code, atleast they will learn how this kinda works, because now they just install things, but looking at templates they can actually understand its kinda simple script and get the idea of how it works. Also i wasn't comparing exactly xbps main void repos to AUR but overall xbps-src to aur, which can be similar because people can share templates, anyway we should still understand what package manager does and what download scripts are doing. Also void has runit so this mean u have to get more simple programs to run system like seatd dbus and etc. So overall i 2 arguments of void being better in understand of OS is actually knowing how to maintain packages and how system works from boot. Anyway i understand it is your opinion, all i can is tell u my opinion.

Edit: when i used systemd my system booted in 13sec, now on runit its 8sec, not really important thing but still

This entry was edited (1 week ago)

Monitor your AREDN Node with Prometheus and Grafana


cross-posted from: infosec.pub/post/29612746


Monitor your AREDN Node with Prometheus and Grafana


Using DNS4EU in North America


Hey gang, I'm considering using DNS4EU in Canada. My ping to their servers is ~130ms. That's way longer than anything local which is on the order of 1-5ms. Apart from resolving uncached entries taking longer, is there any contraindication to using a DNS server with high latency?
in reply to pulpier

I'm not sure what's novel here. No one thought that modern AI could solve arbitrarily complex logic problems, or even that modern AI was particularly good at formal reasoning. I would call myself an AI optimist but I would have been surprised if the article found any result other than the one it did. (Where exactly the models fail is interesting, but the fact that they do at all isn't.) Furthermore, the distinction between reasoning and memorizing patterns in the title of this post is artificial - reasoning itself involves a great deal of pattern recognition.
This entry was edited (2 weeks ago)

Wasted weekends trying to make touchscreen work


Got old x86 10.1’’ tablet for free, with one “small” caveat - 1 Gb of DDR3 RAM and 16 Gb of internal storage. It had Win 10 Home from factory, version from 2018 - which was able to squeeze into 600-700 Mb of RAM, leaving 300 to user.

Well, Antix works kinda decent, consuming 200 Mb when idle. MX Linux (xfce version) looks good but eats the same 700 Mb…

But the real depths of pain were making touchscreen work… spent 8 hours just on that and failed miserably. Tomorrow will go for a cheap android tablet…

The only thing it needs to provide - working flowkey app.

in reply to jnarical

What is the cpu? If something, zswap (250mb) with lz4 and zram (2gb on disk) with lz4 too, on a lightweight distro on btrfs with lzo compression might make it usable. Disk compression might make it usable on the disk side and memory compression might make it run at least not extremely bad on the cpu side. Maybe cachyos with gnome (i know, but it is the only DE with good touchscreen) can be at least usable.

If more things, I can try to help. I have a linux tablet.

Edit: Maybe more space (external sd card with btrfs and lzo) could be used as /home too, but only with more information given, what is the setup?

Edit: My config that I made it work and run decently:

This entry was edited (2 weeks ago)

Browsing Photos on Samsung TV with TizenOS


Hi everyone,

I would love to showcase some of my photos on our Samsung The Frame TV since it is literally made for displaying Pictures. Sadly however it is not running Android TV, but instead this weird Tizen Operating System.

I already have Jellyfin running, which has a Tizen APp that can be sideloaded and which works amazing for TV shows and movies, but the image gallery works a little janky for me (relative slow loading, no slideshow options).

Since I wanted to get Immich running for a while now anyway to further degoogle myself, I thought this would be a good opportunity. However it seems like there is no plan to implement a frontend app for Immich for Tizen (understandably...) (github.com/immich-app/immich/d…).

My question is if any of you know of an App that I can install on my Samsung TV to browse and display pictures that are stored on my local server?

This entry was edited (2 weeks ago)

I made another yt-dlp frontend!


Hi Lemmy!

This post is a way for me to announce one of my apps that I made for my personal usage.

Azul box

It is a front end for yt-dlp and ffmpeg. It isn't just a yt-dlp downloader; it's more like a utility app that does anything that I need. The "special" part about this software is probably the ability to download YouTube subtitles and then embed them into the audio file as synced lyrics. Well, that is the only "unique" thing about it. As I’m still quite new to programming, there may be some bugs, and I appreciate your understanding. I’m also learning how to package it as a deb/rpm and plan to dedicate time to this during the summer. For now, the only way to download it will be to build from source with the bash install script in my repo.

If you have some time to try the app, I would love to hear your thoughts. Thank you for taking the time to read this! 😀

in reply to Kiuyn

Cool stuff, thank you for sharing your project with the community ! It's very cool and useful for people who just want a set and forget situation !

I stoped using yt-dlp frontends the moment I saw youtube actually serving upscaled opus media files (very visible line on a spectrogram). Also their metadata is totally fucked-up and not very well organized and full of shit (comments with huge spaces and non useful metadata...).

Sure, the metadata part is easily fixable with Picard MusicBrainz, but the quality downgrade was a huge no for me. Nowadays, I use nicotine, rutracker and private trackers to download FLAC quality files and transcode them to opus 192k to serve them in my Navidrome library with a well curated metadata structure !

Yes it takes way more time and some dedication but it's worth it 😀 specially If you are some kind of perfectionist and like everything neatly organized ! 😁

More power to you for keeping the opensource community thriving !! Thank you !

This entry was edited (1 week ago)
in reply to N0x0n

I stoped using yt-dlp frontends the moment I saw youtube actually serving upscaled opus media files (very visible line on a spectrogram). Also their metadata is totally fucked-up and not very well organized and full of shit (comments with huge spaces and non useful metadata...).


Wow really? Are you sure it applies to all audio files? YouTube gathers music records from different companies so they could be of varying quality. To me the opus quality from YouTube was always decent and personally I cannot hear any compression in the audio. The metada is not perfect, but I usually use some tag editor to complete what's missing. YTDLnis on Android does a great job of scraping as much usable metada from YouTube Music as possible.

This entry was edited (1 week ago)
in reply to slazer2au

Ok I'll take this as my opportunity to rant about a pet peeve.

Wearing a harness in this style of elevating work platform is more dangerous than not wearing one, and having a requirement to do so is part of what's wrong with work health and safety.

The only way someone falls out of this, beyond mechanical failure or tipping, is if they lean so far over the railing they fall out of it.

If I need to wear a harness in this, you need to wear one whenever you walk next to a balcony.

New research from Apple suggests current approaches to AI development are unlikely to lead to AGI.


Researchers tested Large Reasoning Models on various puzzles. As the puzzles got more difficult the AIs failed more, until at a certain point they all failed completely.

Even without the ability to reason, current AI will still be revolutionary. It can get us to Level 4 self-driving, and outperform doctors, and many other professionals in their work. It should make humanoid robots capable of much physical work.

Still, this research suggests the current approach to AI will not lead to AGI, no matter how much training and scaling you try. That's a problem for the people throwing hundreds of billions of dollars at this approach, hoping it will pay off with a new AGI Tech Unicorn to rival Google or Meta in revenues.

Apple study finds "a fundamental scaling limitation" in reasoning models' thinking abilities

TubeArchivist alternatives that store data in an archive friendly manner?


I've been using Tube Archivist to archive my YouTube playlists, but I've hit a portability snag. It stores all metadata in its internal database and saves video files with non-readable filenames. This makes the archive unreadable without the software and its database, which defeats the point of long-term archival storage.

Are there any tools that:

  • Archive playlists with human-readable filenames (or let you control the naming scheme)
  • Have an API for queuing archival jobs
  • Store metadata in portable formats (e.g., sidecar JSON or YAML)
  • Don’t require additional software to interpret the archive
This entry was edited (2 weeks ago)

Help troubleshooting a mouse / repairing a mouse scroll wheel?


I have two wireless mice. One is a really good mouse that served me for years until it got too beat up, and now the scroll wheel doesn't work very well. The other is a newer HP mouse (specifically HP 280 Silent Wireless Mouse, product number 19u64AA) that is a bloody piece of shit and I hate it.

The HP mouse currently has two main issues with it. 1, it doesn't "sleep" or turn itself off after a period of inactivity. It just stays on, even if the usb dongle is disconnected, until the battery just dies on it. 2, it's clicking software/firmware had a fucking stroke or some shit. It only clicks on the active screen; so for example, if I have Firefox open and fullscreen, it will not click on the task bar on the bottom of my screen at all. It won't even register that it's hovering over something down there, it just refuses. That, and the middle click won't work. It's genuinely annoying, because the mouse used to work with no issues. I have no idea what caused this, and my conspiracy theory is that HP just kills mice that are alive for too long, because this is fucking horse shit. I do not recommend this fucking mouse at all for this.

What's funny is, I tried both my previous mouse (the one with the broken scroll wheel), and my desktop's wired mouse, and both worked excellently. No issues at all, unable to replicate the issues experienced by my HP mouse. Crawling through the journalctl logs don't show anything wrong with any of the mice, at least not that my noob ass could tell, and the HP support page for the 280 doesn't have a fucking user manual for it. There just doesn't seem to be one at all, not one I can find at least.

Anyways, /rant. How can I see what's wrong with the 280, or fix what might be wrong with it (or factory reset the mouse, if that's a thing)? Alternatively, how can I fix my other mouse's scroll wheel (Victsing Wireless Mouse model PC106A my beloved)?

Edit: Forgot to mention, on Linux mint 22.1 cinnamon, on an HP laptop oddly enough (you would think HP accessories would work with HP products). if you need any information, journalctl, inxi, my fucking social security number, whatever, lmk.

This entry was edited (2 weeks ago)
in reply to ComicalMayhem

I just got home and tried a thing on your behalf, using a perfectly good wired mouse of mine.

I simulated my suspicion that the mouse wheel click button might be shorted out, by holding the wheel button down while trying to left click on the taskbar.

Sure enough, in that condition, it doesn't recognize the left click on the taskbar.

I am pretty sure your wheel click button is shorted out and the system thinks you're constantly holding it down.

Key Canadian Zionist body loses final appeal against revocation of its ‘charity status’


The Canadian branch of the so-called Jewish National Fund (JNF), one of the country’s oldest Zionist organizations, has officially lost its status as a “registered charity” after a Canadian federal court rejected its final legal appeal.

The ruling, issued on May 30, confirmed the government's decision to revoke JNF-Canada's “charitable designation,” and effectively forced the organization to begin shutting down operations after 57 years of activity.

The decision marked a major legal and political setback for the JNF, which had faced growing scrutiny over its use of Canadian tax-exempt donations to fund projects tied to Israeli military activity and displacement of Palestinians.

in reply to LandedGentry

Well, at least the base model Xbox Ally has essentially the same SoC as the Steam Deck. The Z2 A has 4 Zen 2 cores and 8 RDNA 2 CUs. It will be configurable up to 20 watts TDP instead of 15 on the Deck, but that's it. So much for "long in the tooth technology wise".

Sure, the Z2 Extreme variant will be more powerful, but it'll also be in a different price category (800-900,-€).

And in terms of user-friendliness: the Xbox Ally will run Windows. It won't launch into the regular desktop shell (by default), and it won't have as many services running in the background which might help with performance and battery life, and you'll probably be able to update drivers and Windows through it. Maybe it will have some preconfigured scripts/shortcuts to install Steam, Battle.net etc. But that's it. Expect to fall back to the desktop mode (or open a browser, terminal and Explorer window in the new gaming mode) for anything more advanced like installing emulators.

In terms of pick up and play this won't be much different to the Steam Deck, with the one exception being Game Pass - but even then don't expect any of the more demanding titles to run well.

Need help implementing ActivityPub - getting inconsistent results across platforms


My friend is working on adding ActivityPub support to his blog platform (BDServer) so people can follow/comment from Mastodon, Lemmy, etc.

Current status: Lemmy and Misskey can find and follow his account (@blenderdumbass@blenderdumbass.org), but Mastodon can't find it at all, even though he sees proper ActivityPub requests hitting his server.

The technical details are pretty gnarly - RSA signature verification, HTTP header recreation, multi-threading issues. He wrote up the full journey here: Please Help Me With Activity Pub

If anyone has ActivityPub experience or wants to take a look at the code (Python), we have a Matrix room for BDServer development. Any insights on why different platforms behave differently would be super helpful.

matrix.to/#/#bdserver:tchncs.d…

Source code: ActivityPub.py

in reply to Madiator2011

Did something change since this was posted?
I can look it up properly on mastodon.
You have to be signed in to fetch accounts on mastodon, is that the problem?

Are you using any framework to build the site? There's a few libraries for activitypub.
These links could be helpful: codeberg.org/fediverse/delight…

This entry was edited (1 week ago)
in reply to irelephant [he/him]

Seems like somebody mentioned the account on the fediverse that started a chain reaction of various instances requesting a bunch of stuff. Which made it to Mastodon.social too. It still doesn't work though.

The server is written in python and the idea is to make it deploy-able without needing to install anything extra. So I'm trying to implement my own activity pub.

in reply to Madiator2011

I just took another look at it,

Comparing it to another random note, the to and cc fields are supposed to be arrays, rather than just a string.

Its also missing a url field, which is supposed to link to the user-facing url of the post.

cc: @blenderdumbass@lm.madiator.cloud

This entry was edited (1 week ago)
in reply to Tony Bark

This only really works for people who have hardware whose fingerprint readers are supported by upstream fprintd; would be interesting if they (or another distro; haven't seen anybody implement this yet) add a "just works" option for installing and setting up e.g. libfprint-tod-vfs0090 or python-validity (which I use on two of my machines actually), similar to how some distros (Mint included I believe, but haven't dealt with it in a while) give you an option for installing Nvidia proprietary drivers (or just make it work out of the box).

However these drivers are extremely sketch at times so... I guess there's some good out of it not being preconfigured for people (because you have to look into it yourself and realize just how terrifying they are, both security and stability wise, python-validity especially)...

(though now I'm on NixOS where I have it pretty much "just work" through not that much effort, at least not as much as on Arch, and definitely not as much as on Mint which was painful because PPA fuckery)

in reply to Tony Bark

Fingerprint sensors have been an interesting hurdle for Linux distros. Not one I necessarily would have anticipated either. The biggest question seems to come down to their security as well, given that there have been exposed flaws in the design of biometric hardware that tries to generalize its compatibility.

Microsoft has defined SDCP as a strong standard for TPM/Windows, but there isn't an equivalent for Linux. Match on chip sensors have made things a bit easier, but there isn't a standard way to communicate the validated authentication to the OS, usually relying on TLS.

This entry was edited (2 weeks ago)
in reply to Sandouq_Dyatha

If you still need help:

  • Open a TTY (Cttl+Alt+F3 for example, works from F1 to F6 but depending on Wayland or Xorg F1, F2 and/or F6 may be used so F3 should be good, otherwise try another one).
  1. The TTY will ask for your username and password, so login with your normal user (not root).
  2. You shoud get to an interactive shell, so you can go to the Gnome extensions directory (cd ~/.local/share/gnome-shell/extensions/).
  3. You can now remove the problematic extension (rm -r …).
  4. Now either you reboot your computer (the reboot command will be enough to restart the computer), this will ensure you don't keep a remaining session and you'll boot in your login manager (GDM I guess).

Hope it helps!

What editor or IDE do you use and why?


Now I'm wondering who uses what development tools. I mostly use Qt Creator myself - I chose it because of its good integration with C++ and Qt projects, and I'm just used to it. On Linux I use Qt Creator, and on Windows I use Visual Studio.
I wonder what others use? VSCode, Vim, Visual Studio, JetBrains IDE, Emacs, Sublime or something more rare?
- Why did you decide to use them specifically?
- What do you like or annoy you about it?
- How usable is it in real work?

Is Hyprland a good WM choice if I can make stacking / floating workflow work?


I've been on the fence since I've been trying Hyprland. What I want out of a window manager / DE is lots of window customization settings (borders, animations, etc.), & having configuration inside one file or one directory with hot-reloading (I'm switching from KDE since its config files all over the place). Hyprland is very popular among WM users with a large ecosystem, though I prefer stacking rather than tiling. I can make it work with some window rules, and shell scripts using hyprctl & jq.

I'm wondering how many little things I will need to fix / figure out. For instance, when I open the firefox bookmarks library with CTRL SHIFT O. When that window is open but not focused, and not on top, if I press CTRL SHIFT O again on a DE it comes back to the top, but not on Hyprland. I could probably find a fix for that?

I might be answering my own question but I really want to hear thoughts.

in reply to TheTwelveYearOld

1st turnoff for me was the creator added this anime background which overwrote whatever background you had. I found the file and wrote a hook to automatically delete it on update reverting to mt background, only to find that there was a condig option to do the same thing

2nd The maintainer is a bigot and I won't support bigotted projects when there are other (better) options like sway which I know use.

TLDR: Creator violates Wheatons Law. I don't like that.

in reply to wuphysics87

There's an option in the config to replace the default anime background by a more sober one with the hyprland logo (wish I had know that BEFORE doing a presentation on a large second screen for the first time and realizing that hyprpaper kept my custom background on my workspaces but defaulted to the anime wallpaper on the second screen because in hyprpaper backgrounds are configured per screen 😂 ). And no matter whether you use that option or not, it shouldn't overwrite the background you choose. It's displayed only if you don't have any background configured. Otherwise it's either a bug or misconfiguration in hyprpaper.

Definitely not going to defend the dev on the other stuff.

This entry was edited (1 week ago)

The Power of a Niche [Video talking about Fediverse successes when providing spaces for niches the mainstream social media has problems reaching]


in reply to AbnormalHumanBeing

unfortunately in my experience reddit still has more niche communities than can be found on lemmy, probably bc they have more users. they have more subreddits for specific games, cities/states, mental illnesses, spiritualities/world mythologies, art, music, and book genres... the number of times I've searched for a community on lemmy only for it to not exist makes me hesitant to accept this video's claim. reddit still has more niches than us. we just don't have the numbers or activity.
This entry was edited (2 weeks ago)

Ideas for small family gathering?


It'll be my birthday soon and I've no idea what to do to celebrate with my family.

Usually we gather and go eat out or make a meal at home but I'm uninspired about any restaurants or cafes atm, and I've no idea what menu to suggest if the gathering happens at home.

So perhaps you guys can recommend either something that's fun to cook or easy or maybe a type of dish you enjoyed somewhere. Or maybe you have other suggestions, like going to the cinema- but there aren't any interesting movies on now.

First world problems I guess, any ideas?

The strawbees have taken over both beds


This is roughly the harvest every other day. Already have a gallon freezer bag full. No complaints here.

Carrots and peppers were kind of a wash last year so we just let the strawberries run rampant. They're happy as hell and the fruits are have gotten bigger as the plants matured. The left side was clear enough to put beans where the tomato plants used to be. I was planning on skipping tomatoes as well because they got absurdly large and bent their cages, but some of the fallen ones must have seeded because we had 3 little tomato plants shooting up. They're in separate pots now and hopefully that'll be more manageable.

in reply to DIY KARMA KIT

252 of that 592 used memory is buffers/cache, not application memory. That is used by the kernel for kernel buffers and the filesystem cache - IE files read by something at some point. The kernel keeps them in memory in case they are needed again to speed up file reads. You can effectively ignore these vales as they will always grow to fill your ram and will be evicted when programs require memory and there is not enough free.

These tools are not lieing to you, just telling you something other then what you are reading into them. Tracking and reporting on what is using memory is a complex topic and here used is just what is physically allocate. It doesn't mean much over all as it always tends to be full of your system has been running for a decent amount of time. Available is typically the more useful one to look at as it is an estimate about how much the kernel can reclaim now if an application request it without needing to swap things out.

This entry was edited (2 weeks ago)
in reply to JohnEdwa

I'm going to write a program to play tic-tac-toe. If y'all don't think it's "AI", then you're just haters. Nothing will ever be good enough for y'all. You want scientific evidence of intelligence?!?! I can't even define intelligence so take that! \s

Seriously tho. This person is arguing that a checkers program is "AI". It kinda demonstrates the loooong history of this grift.

This entry was edited (2 weeks ago)

The Wine development release 10.9 is now available.


cross-posted from: reddthat.com/post/42576639

What's new in this release:
  • Bundled vkd3d upgraded to version 1.16.
  • Initial support for generating Windows Runtime metadata in WIDL.
  • Support for compiler-based exception handling with Clang.
  • EGL library support available to all graphics drivers.
  • Various bug fixes.
in reply to Communist

@bjoern_tantau@swg-empire.de
@communist@lemmy.frozeninferno.xyz

Many things still don’t work for me just a black screen. I try from time to time. I’m using bottles and disabled X11 permissions in flatpak to test wayland. I only play older titles (pre-2010). The oldest game I have is Total Annihilation (1997), and I also have Anno 1602 (1998). Neither game runs on Wayland, and they’re not the only ones. Some games do work, like majesty 2, but it has broken camera movement with the mouse. Wayland and wndows are too different to make certain behaviors match, so Xwayland is still needed for some applications.

This entry was edited (2 weeks ago)

How the US is turning into a mass techno-surveillance state


Will kernel-level anti-cheat ever work on linux?


From both a technical perspective and if the maintainers of these anti-cheat will consider porting or re-writing kernel level anti-cheat to work on linux, is it possible? Do you think that the maintainers of kernel level anti-cheat will be adamant in not doing it, or that the kernel even supports it or will support it. I think that if it ever happens, there will be a influx of people moving to linux, or abandoning their duelboots, and that alot of people will hate that such a thing is available on linux.

What load balancers can do HA (preferably open source, web gui)


Hello, I am looking for a alternative to HA Proxy, as the GUI options for it, are both third-party and not very good looking, also I just want to know about the alternatives, what I am looking in a high availability setup is the ability to detect if a server is offline, and route to other servers, as well as other HA goodies.

'Putin is a murderer' — Zelensky rejects Trump's claim that Russia, Ukraine are like 'kids'


in reply to tehmics

More or less yeah. Though back around 2013 or so, I was somewhat pleasantly surprised by how they designed their Mac AIO desktops, they actually were somewhat repair tech friendly.

The front glass was magnetically attached, so it only took a suction cup or two to start disassembly, and basic screwdrivers to remove the screen and get access to the motherboard, hard drive, RAM, DVD drive, etc.

And yes you could replace or upgrade parts as necessary, none of this newer soldered on storage shit they do these days.

I've lost a lot of respect for companies that solder on important parts that should rightfully be fairly easy to replace or upgrade.

Plus, now the big companies have taken to forcing encryption on the storage devices, effectively locking the drive to the system. Well isn't that just cute for the backup operator that's trying to recover your late grandmother's family photos...

in reply to over_clox

HyperCard was basically the viewer/player for HyperCard stacks/files. HyperStudio was the program used to make them.


This is incorrect. The HyperCard application could both create and play back HyperCard stacks. It could also export them as stand-alone applications which people could use without needing to run HyperCard.

::: spoiler HyperStudio was something else, not shipped by Apple.
The author describes it here:

It was inspired by HyperCard and Ted Nelson’s ideas of hypertext and hypermedia. But whereas HyperCard was a database of alphanumeric data controlled by a scripting language, HyperStudio was founded on the idea of the primary layer being a paint program, and linking (“hyper-”) media (“studio”) together in an object-oriented, rather than lexical (program language), environment. The result was a program that is its own category of software. That is to say, HyperStudio has an extremely unique environment, and although it can create videos, presentations, animations and comic-style (graphic novel) digital stories, it is neither movie-making software, presentation software, and animation program, nor a comic-book maker. It is HyperStudio and no other program has ever duplicated or even successfully approximated its functionality.


see also en.wikipedia.org/wiki/HyperStu…
:::

I should admit that it’s been years since I messed around with old Macintosh or looked into the old Mac retro sites, it’s probably out there somewhere…


You can use HyperCard on an emulated Mac in a web browser at system7.app/ - it's in the Multimedia folder there 😀

This entry was edited (2 weeks ago)
in reply to Arthur Besse

Interesting. I only recall 2 programs when I took the HyperStudio class, where the HyperCard Player was free for all to use, but couldn't make projects.

HyperStudio was the paid program that the school had paid licensing fees to use, and as such we weren't allowed to copy that software.

Maybe I missed the original HyperCard itself, we were only allowed to copy and share HyperCard Player, which most definitely could not create projects, only play them.