Ah it makes more sense that way, I didn’t read the title as if they were talking about all the extensions that they found summed together. This does make it really clear that you should always check extensions when installing them, and not just install extensions with a low install base from an unknown author.
That headline is quite misleading … the malicious extension only had a few hundred installs, not millions. They just copied an existing extension that does have 7 millions installs. They did went quite far by registering a URL. Of course it is bad that stuff like this manages to get on the store, but as long as you check what you are installing, you should be fine.
This sounds like a difficult problem if he wants to continue browsing the Reddit community for pathfinder. I have seen these kind of people on D&D subreddits too, and it also put me a bit off trying pathfinder during the OGL drama.
Maybe there are other communities outside of Reddit that are able to provide the answers to questions, but I doubt you will escape this hate on the larger TTRPG subreddits.
Although this feature sounds helpful, it really looks like they went too far with this. They should probably look for a way to sell these Copilot+ pc’s in another way if they can’t get this secure enough and probably keep it disabled for companies…
I’m surprised they didn’t make sure that the part that should help you hide sensitive information worked well before letting the first testers get their hands on the feature. All this bad news about the future doesn’t help convince people to turn it on.
If you would just stick to playing games on the Quest 2/3 directly that should be fine. The Quest 2 can run basic games, so it does limit you a bit. For example VR Chat has some worlds with too many assets that are not playable on the Quest 2 directly. From what I remember you would be limited to Meta’s store though.
Unfortunately VR seems to be a niche thing so I doubt this will get a lot of priority on Linux.
Only Lemmy instances with custom emoticons were affected based on the Recap of the Lemmy XSS incident. So if Lemmy.ml doesn’t have these it should not have been affected.
So it works by fetching replies from Mastodon. We can see Mastodon users here by searching for their profile (like @user@example.com ) but that does not list any of their posts as Lemmy is not able to show messages that are not part of a post/magazine. Is there any way that we can find the messages trough a direct link?
I think this is very hard at this point. Manny Fediverse communities are quite small and fear that their community will be flooded with content from any external platform. We even saw this when a lot of Reddit users came over to Lemmy. So in those cases there will be a lot of distrust.
Smaller companies could easily use a more strictly controlled* Lemmy instance to provide a space for their community. That would allow people to interact with that community without having to setup a new account. *Tightly moderated and limited to admin created communities.
But anything large will just be distrusted as long as the platform is much larger than large Fediverse instances. Maybe EU law could help to protect the Fediverse from EEE. But EU law also moves slow, and we don’t want laws slowing down the growth of the Fediverse either.
Isn’t this just what many people predicted what would happen when everybody would use adblock? Now most people use some kind of blocker and some browsers even ship with a content blocker. Now pages need to make money in another way, so that’s either subscriptions, donations. or just force people to watch the ads anyway. I doubt people would want to donate any money to YouTube so then you get this.
It is not nice for users, but without income they would have to shut the site down. The same will happen when Lemmy gets popular, people will really have to donate to instance owners or they will also be forced to get money in another way.
MLem (the iOS Lemmy app) was also showing the user karma (but I think it was only showing karma gained on the local instance). So I guess this is nice for people that like to know their karma.
I also agree with @nlm@beehaw.org that we should leave this as a thing for yourself. The Lemmy API should not bother with reporting user karma as It would be way too easy to cheat for people with singe person instances. (and of course the toxicity that comes with karma)
For me it was a nice improvement. I liked the new window snapping feature that allows to you quickly snap an application to half or a quarter of your screen. But honestly there aren’t that many differences compared to my work laptop on Windows 10, I never regretted updating though.
I also used Linux for gaming, most of the time you will be able to get things to work. But sometimes you will have small issues in games and way worse support from the developers.
but outside of your own server pretty much nobody will care. Lemmy is federated over multiple jurisdictions, so even with full deletion implemented there’ll almost certainly be instances which will ignore the deletion request - and it will be completely legal for them to do so
Lemmy also seems to federate your matrix_user_id, that is clear personal data. It does not matter how the data gets to the federated server, this is still user data within the scope of the GDPR. It does not matter that that server does not have an agreement with the user, the instance that would ignore a GPDR related deletion request would be in direct violation of the GDPR. Maybe it can do that without consequences, though.
I completely understand that making Lemmy fully GPDR compliant will probably be impossible, however I don’t like the approach of “we will not succeed, so we don’t make any attempt”. Instances should actually delete data when that is requested, or instance hosts can get fined. For now, Lemmy has bigger issues to solve, but eventually they should do at least a best effort attempt to respect user data.
I sometimes use the IntelliJ GUI for working with git stash, I never needed that outside of Java projects. And I use the Github Client to keep track of the git projects on my computer, and see the content of commits. But for everything else, I just use the git CLI tools.
RuneScape is a great second monitor game, the game allows you to be very active when you want to and have time for that, chill semi-afk content when you also want to watch videos’ on the side, and even ‘click once every five minute’ style gameplay. I have a bit over 9000 hours on my ironman.
After Runescape, my second most played game is definitely Minecraft, then Skyrim with about 550 hours, Fallout 4 with 300 hours and everything else is 115 hours or less.
This looks really nice, some friends didn’t really like the current design of Lemmy and I think I could convince them to use it through a design like yours. Svelte really is a great tool to quickly get something working. I’m currently rewriting another site in SvelteKit as well.
About CORS / WebSocket. I’m not sure where it will be going with the WebSocket API. The main Lemmy project wants to use the WebSocket API less, as it a high performance impact on instances, and it also often seems to break in the PWA.
The article makes some good points, cooperation can easily get greedy when their platform gets too large. It does feel like it tries to connect FOSS to privacy, though, and that’s a bit more controversial, especially when it comes to the Fediverse. For a platform like Lemmy the most important thing is to share the post that you published, there is limited development time, security is hard, and when things go wrong it is hard to point at someone.
For example, sending private messages often leads to these private messages being readable by the admins of the instance. In the same way, instance admins can also see the email address that you provided. So we just have to trust the instance admin to be capable enough to protect our data and not leak it out on the internet.
Of course, these issues also exist in companies that want to push out new features to attract users instead of spending time to test if everything is secure. It simply is a difficult point for both FOSS and commercial software, and we need to hold both FOSS and commercial parties responsible for respecting our privacy. At least with FOSS, we can switch to a fork if a maintainer does not do their job well.
The law that requires phones to use USB-C, does not say it will last forever. In fact, the update to USB-C proves that they look for new technologies and update the law once such a thing is needed. Maybe now people have to buy new chargers, but in the long term, keeping chargers the same will reduce e-waste as people can use USB-C to charge many devices. You can charge your MacBook and smartphone with the same charger because of USB-C and the USB power delivery specification.
But the Fair Share part is a bit weird, consumers already pay for the network. But often they don’t pay for the amount of data that they use. It would make more sense to just charge users again based on their network usage, but I understand that that would be highly unpopular. In the end, someone has to pay for all the traffic though.
PHP lost a lot of popularity yes. But developers still use the major PHP frameworks, those solve a lot of the issues many developers had with PHP. On the StackOverflow survey Laravel was still used by 7.5% of the responses and Symfony by 3.2%.
Currently I’m actually taking over a website that was written with Laravel and rebuilding everything in SvelteKit.
This was a great point, yes. The whole blackout can only really have an effect if the users show that it was not “just noise”, that they don’t want to be treated as addicts that you can just ignore, because they can’t just leave.
I always used the official app for Reddit and used new Reddit on pcs, but how can you return to a platform that abuses its partners like this. They way they treated the Apollo developer and now basically insult their users and unpaid moderators, it is almost unbelievable that a company would go this far to upset its users.
There would probably have been less uproar if they just said in an honest way, from next month on we will ban all 3rd party apps, instead of lying about everything, act like you are listing to the community and then not answer anything. There is no way upsetting your users like this can be good for selling the company …
Maybe we have some bias on this topic, but I had the same thought. Maven is such a well known tool in IT, that I’m surprised they just created a social network with the same name. Until they get a bit famous this won’t be good for SEO.