Arthur Besse
cultural reviewer and dabbler in stylistic premonitions
- 23 Posts
- 142 Comments
Arthur Besse@lemmy.mlto Open Source@lemmy.ml•Is there something like GitHub, but without big tech involvement, no data collection, no ads, open source, and preferably decentralized (maybe Fediverse or even P2P)?English15·5 days agoGitea has gone open core; it is still free software but its development is controlled by a for-profit company which is developing non-free features. So, Forgejo is the community-run fork of it which people outside the Gitea company are contributing to instead now. You can read more about their divergence here.
Arthur Besse@lemmy.mlto Open Source@lemmy.ml•Good actually user friendly foss chat app?English1·20 days agoAuthorities don’t need to ask Signal for metadata; Signal promises they don’t log any themselves and that is probably true.
But, they outsource their server operation to Jeff Bezos, and then they do some absurd security theater to pretend that cryptography makes it so that the server (Amazon) couldn’t possibly log metadata - which is obviously false.
Arthur Besse@lemmy.mlto Fediverse@lemmy.world•How decentralized Bluesky is compared to the Fediverse.English4·23 days agowith BlueSky I’d have to account for the data volume of all users on the platform as a whole, bringing the data volume way up to tens of terabytes
I think this is a common misconception based on some critics’ incorrect assumptions and back-of-the-envelope math. See the atproto overview for the different components involved, and then this post (from a BlueSky employee) “A Full-Network Relay for $34 a Month” for some numbers.
If I understand correctly, to run a “full nework relay” does mean to consume all of the text posts from all known servers, but not necessarily all of the media, and not necessarily to keep data you aren’t interested in for any long period of time.
Also, you can run your own PDS and/or App Views without running your own relay at all. And, you can also use multiple other people’s relays.
Disclaimer: I’m not an atproto expert, and I haven’t set any of this up myself.
Arthur Besse@lemmy.mlto Fediverse@lemmy.world•How decentralized Bluesky is compared to the Fediverse.English4·23 days agoThe blog post also says this:
There is one other thing which Bluesky gets right, and which the present-day fediverse does not. This is that Bluesky uses content-addressed content, so that content can survive if a node goes down. In this way (well, also allegedly with identity, but I will critique that part because it has several problems), Bluesky achieves its “credible exit” (Bluesky’s own term, by the way) in that the main node or individual hosts could go down, posts can continue to be referenced. This is possible to also do on the fediverse, but is not done presently; today, a fediverse user has to worry a lot about a node going down. indeed I intentionally fought for and left open the possibility within ActivityPub of adding content-addressed posts, and several years ago I wrote a demo of how to combine content addressing with ActivityPub. But nonetheless, even though such a thing is spec-compatible with ActivityPub, content-addressing is not done today on ActivityPub, and is done on Bluesky.
My comment should have been clearer; what I meant when i said it is more “decentralized architecturally” I was referring to the data model part of the architecture as opposed to the physical server infrastructure currently operating it. The latter is obviously quite centralized still, but the former is designed for resilience against nodes unexpectedly (and permanently) failing.
Arthur Besse@lemmy.mlto Fediverse@lemmy.world•How decentralized Bluesky is compared to the Fediverse.English164·24 days agook, but, does ActivityPub have portable identity and/or content addressability yet, so that when some of those servers (which are often hobbyist-run and/or tenuously funded) inevitably cease operating their users can continue on a different server? 👀
It’s a rhetorical question, and the answer is no.
otoh, atproto’s PLC DID method is also not really decentralized… but at least the rest of their system is actually substantially more decentralized architecturally than AP is.
To anyone interested in reading a very informative in-depth discussion of this topic, I recommend the blog post How decentralized is Bluesky really? by ActivityPub co-author Christine Lemmer-Webber (followed by this and this).
Arthur Besse@lemmy.mlto Fediverse@lemmy.world•Implementing Portable User Identities with DIDsEnglish41·25 days agoi looked into other services with did got an llm to put those ideas in the required format for the issue. Can you please point out the hallucinations in the issue so i can go and fix them
No. Asking other people to read (and now also to correct!) your LLM slop is extremely inconsiderate. Please don’t do that again.
Arthur Besse@lemmy.mlto Programmer Humor@programming.dev•The vibecoders are becoming sentientEnglish2·1 month agoCan someone tell me what vibe coding is?
a term coined 6 months ago for writing software using an LLM https://en.wikipedia.org/wiki/Vibe_coding
if they do something, it’s not in your interest
this is often true, but sometimes (like in this case) they are actually doing things that are in (almost) everyone’s interest: making browsers more secure 🙄
(see my other comment in this thread for details)
deleted by creator
fuck google generally, but in this case that mastodon post’s characterization that “Respondents overwhelmingly reject the suggestion” is not accurate - lots of people in that thread are in favor of removing it and those who aren’t aren’t making a strong case to keep it.
imo client-side XSLT never needed to be implemented; afaict its primary use is styling RSS feeds and I doubt many people ever actually read RSS feeds styled that way even if millions of feeds are/were.
some important context here
- https://gitlab.gnome.org/GNOME/libxslt/-/issues/127 CVE-2024-55549 (“Being an unpaid volunteer, I also don’t really care about external deadlines. I’ll just make the issue and the fix public and people can patch libxslt themselves. I also realized that I simply do not have enough free time and energy to continue maintaining libxslt and will step down as maintainer.”)
- https://gitlab.gnome.org/GNOME/libxslt/-/issues/128 CVE-2025-24855
- https://gitlab.gnome.org/GNOME/libxslt/-/issues/139 CVE-2025-7424
- https://gitlab.gnome.org/GNOME/libxslt/-/issues/140 CVE-2025-7425
- https://gitlab.gnome.org/GNOME/libxslt/-/issues/144 use-after-free, no CVE assigned yet
- https://gitlab.gnome.org/GNOME/libxslt/-/issues/150 “libxslt is unmaintained” (some good news there, at least: two weeks ago, the guy who reported those five bugs over the last eight months stepped up to be the new maintainer… i assume he probably isn’t a Jia Tan 😅 since he is endorsed by a co-founder of GNOME itself. but, even if he does improve the library drastically, that still won’t justify having browsers include it in their general attack surface imo)
tldr: This obscure “feature” is a significant source of vulnerabilities which attackers are able to compromise endpoints with right now. The GNOME project’s libxslt is used by all modern browsers and has been largely unmaintained for a long time, and it is a pretty sure bet that it has lots more remotely-exploitable bugs (in addition to those which have already been discovered and not yet fixed, or for which fixes are not yet widely distributed).
it sounds like there is also a mostly-working JS replacement for this C++ code; if it is actually possible to ship that and avoid breaking any sites it would be preferable, but, otherwise, i for one would certainly be in favor of dropping browsers’ XSLT support (which was only ever for XSLT 1.0 anyway!) completely ASAP.
CoMaps is “offline-first” and they’re working on a deskop version, but it is alpha right now and they don’t appear to be distributing binaries of it (the desktop version) yet so you’ll need to compile it yourself. There are instructions here. I haven’t tried it yet myself but I think it looks promising!
Another option is to run CoMaps, OsmAnd, or another Android app under Waydroid.
Arthur Besse@lemmy.mlto Not The Onion@lemmy.world•US Pilots trained to fight Russia will soon help protect PutinEnglish14·1 month ago"It is an interesting irony
it really isn’t 🙄
Arthur Besse@lemmy.mlto Not The Onion@lemmy.world•Man left with a broken arm because of the size of his penisEnglish15·1 month agoa museum in Iceland
a museum? when it comes to phalluses i believe it is the museum: https://en.wikipedia.org/wiki/Icelandic_Phallological_Museum
Arthur Besse@lemmy.mlOPto Not The Onion@lemmy.world•UK Asks People to Delete Emails In Order to Save Water During DroughtEnglish101·1 month agoHuh? That press release quotes the The Environment Agency’s Director of Water and National Drought Group chair saying “Simple, everyday choices – such as turning off a tap or deleting old emails – also really helps the collective effort to reduce demand and help preserve the health of our rivers and wildlife” and includes “Delete old emails and pictures as data centres require vast amounts of water to cool their systems” in its list of ways people should save water at home.
I admit I made this post without clicking through to the actual press release or seeing more than the paywall preview of the article; for a humorous post like this, i think just the headline from a paywalled article (if it’s from a reputable source) is sufficient. Now that you got me to read the actual press release, I see I was correct to assume that 404media’s amusing headline was in fact accurate.
How would you suggest they report this story differently? Highlighting the ridiculous part is what makes it worthy of reporting on it in their context at all.
ADB slightly predated (and is arguably technically superior to) the PS/2 mouse and keyboard interfaces, but Apple patented it and the only companies that licensed it were those making Mac peripherals.
edit: i forgot, NeXT also used it.
With the Mac SE and II, the switched to ADB, which looked like a PS/2 port, but you could daisy chain your mouse, keyboard, and other inputs like tablets or joysticks all into one jack in the back of the computer.
The port looks similar - both are mini-DIN - but ADB has four pins while PS/2 has six.
ADB was first introduced in 1986 on the Apple IIgs, and later was used in all Macs from the SE until the iMac. For the first few years there were two ADB ports, but in 1990 (maybe starting with the Mac IIsi?) they reduced it to one and started shipping keyboards with ports to daisy chain the mouse from.
this is the futo funder