- cross-posted to:
- [email protected]
- [email protected]
- cross-posted to:
- [email protected]
- [email protected]
When will we get details about security vulnerability? Is there a formal method for instance owners to stay up to date on those kinds of notices?
Thanks for the work my friends.
It’s xss, so users could include javascript code in posts which would be executed in other users browsers. We announce new releases in a couple of places, like the instance admin chat, [email protected] community and github releases.
God I appreciate these dudes. I don’t envy them one bit right now…
Yeah, very difficult situation, I truly hope they’ll find the help they need.
Well, I’m lending a hand. I have some patches in production already, and I’ve only been contributing for a week or so.
If you have the means, please help out. There are tons of bugs, important features, etc, and it’s a pretty stable base, so it’s a good time to jump in.
@sugar_in_your_tea About “good time to jump in”: the small size of the lemmy dev community gives you a chance to shift off Microsoft to a community git forge e.g. #Codeberg [1] that aims at forge federation [2] *before* there’s too much #TyrannyOfConvenience inertia. Mastodon devs are reluctant to even *discuss* giving up Microsoft [3].
@ulu_mulu @lemmy #GiveUpGitHub #forgefed #forgejo https://giveupgithub.org
[1] https://codeberg.org
[2] https://forgefed.org
[3] https://github.com/mastodon/mastodon/issues/22572Well, I don’t get to make that decision. If the maintainers choose to do that, I’ll follow, but there’s a good chance that a lot of the other contributors won’t. For something in rapid development with a lot of community contributions, you want that barrier of entry to be as low as possible.
So if it was up to me (and it’s not), I would say no. I would be open to an official mirror somewhere else, and perhaps moving to a separate feature/bug tracking system (esp. if it’s easier for the community to report bugs), which imo is the biggest barrier to moving the repo.
I guess I’m not particularly worried about it since the project is FOSS and the difficulty in switching is pretty low.
deleted by creator
yeah, the 2014 exodus to voat was all pissed off nazis, but now the nerds are pissed off so I think you’re right
I was recently sharing Lemmy to some people and how the entire Reddit blackout is stupid considering everything the platform has done in the past and the mindset of the CEO.
Someone brought up Voat and they were lamenting how that failed, and I decided to check out the WayBack Machine captures for it, and Christ, nothing but antisemitism and racism.
OH BOY VOAT
Yeah. Free speech absolutism does not attract a good crowd, and once you attract that crowd you will not attract any other crowd because the content output they produce is repellant to any normal person.
I had such a hard time explaining to someone today that there is no universal set of Lemmy rules/politics and you can run your own instance with literally 0 rules
people have forgotten that things can exist outside of the few billionaire/trillionaire closed source walled gardens they’ve become so reliant on
Yeah, I think that’s great. I think it’s awesome that something like Lemmygrad can exist, while also a community criticizing Lemmygrad (there are several) all on the same platform, and without any real central control.
If you don’t want to see certain content, you can block it and move on, while getting the benefits of federation.
I joined communities from a half dozen instances, and I’ll probably join communities from even more as I get better at finding communities.
The communities trying to pillarize the entire fediverse over calling lemmygrad hate speech are, however, not a great thing. Undermining the interconnectedness of the platform at scale by agitating on other platforms that they blacklist or be blacklisted under false pretenses may as well be precision-engineered to negate what is useful about the platform.
post it to Mastodon with LemmyDev account
@[email protected] @[email protected] this is a good idea for the users over there to share
Only a very small fraction of the 27000 new members are capable of developing the platform, and many (like me) don’t donate directly. However, members might be more willing to donate AI or other IT resources in an ‘indirect’ way.
There are 27000 members with access to an AI, that can code (more or less). There are also developer agent architectures like ‘smol-ai’, and ‘gpt engineer’ etc, that works directly on a code base, that could assist with the development. (https://github.com/smol-ai/developer and https://github.com/AntonOsika/gpt-engineer)
An AI could run through the git requests and create a list of ‘easy’ non blocking features to develop/fix, and the members developer architecture could take on one of these issues and do a pull request. Another way is for Lemmy to host such an architecture, and let members donate ‘AI prompts’, or even API keys (when accounting is possible) for common development.
The tooling/workflow integration isn’t quite there yet to be helpful now, and the chance of Lemmy devs getting time for this right now is null.
But how fast could Lemmy development get with 2-300 member AI’s working 24/7 on bugs/features ? I’m not a developer, so I don’t know how to set up such an AI assisted development workflow. But it could be done, and development speed of ALL open source projects in general would skyrocket with an open to join ‘AI developer architecture’.
Hey, we could even have a global federated FOSS AI developer architecture, and people/smaller AI architectures with cool ideas for open projects could request global FOSS AI developer time for their idea/project. I’m sure someone is already working on something like this.
This is a joke right?
It has to be
I imagine that person really believes that ChatGPT can actually replace a developer and I can’t blame them for it after all the media have said about ChatGPT.
But for the record, no a non-developer with access to a AI absolutely doesn’t replace a developer.
You’re going to learn very quickly that the anti-corporate world of fediverse despises nfts, ai, crypto, and everything aligned with the silicon valley techbro-brained idiots that have taken over the existing mainstream internet. It’s going to highlight to you what a bubble reddit is for one specific opinion on most topics.
Update: So I dug around a little deeper, and found that
- @[email protected] is /u/parentis_shotgun on Reddit. Source: https://archive.is/Ky9vd
- /u/parentis_shotgun moderates some subreddits, including r/InformedTankie, r/asktankies, r/GunZedong. Source: https://www.reddit.com/user/parentis_shotgun
On another topic, there are rumors circulating that we are fascists or supported genocide. These claims are completely false, and like most viral twitter threads, are coming from a single Mastodon user on a personal vendetta who didn’t provide any sources. Such slander doesn’t deserve any response and is best left ignored.
- Previous discussion on the moderation policy on lemmy.ml including response from @[email protected] : Expressing concerns about moderation policy on lemmy.ml
- Accusation of a Mastodon user (probably the one they are referring to): https://mstdn.social/@feditips/106835057054633379
- Essays from @[email protected]: https://github.com/dessalines/essays/blob/master/socialism_faq.md
Update: More info about @[email protected]
Nothing here says he’s a fascist. His “genocide denial” stance stems mostly from the idea of being anti-capitalist and not trusting US-centric sources. Its not entirely without merit. Noam Chomsky for example is accused of the same thing for the Pol Pot genocide, though at the time he was right for the same reasons – accusations started flying in the US based on completely banal sources.
I used to be like this, its not entirely harmful. And in any case, I don’t give a shit about his politics. We should be thinking about how to separate peoples politics from the platform, and the work hes done on Lemmy does exactly that.
Noam Chomsky for example is accused of the same thing for the Pol Pot genocide, though at the time he was right for the same reasons – accusations started flying in the US based on completely banal sources.
You’re giving Chomsky’s version of the story, but it’s such a weird story because one of the only communist projects Chomsky ever spoke in favor of was easily one of the worst ones (along with Peru), ones that even hardcore “tankies” disavow. Like, wasn’t this the motherfucker that said the dissolution of the Soviet Union was a victory for the “left”?
Granted, there is misreporting on Cambodia, which started when it was contemporary and continues to this day, but that misreporting is mostly on the magnitude of the crimes committed, not the basis of calling them crimes (i.e. they were still awful).
He didn’t speak in favor of it. Sources came up saying millions were being killed in Cambodia. Chosmky questioned the sources saying “where the fuck is this coming from? Nothing supports this”. Thats his version of the story, yeah but hardly any evidence he supported Cambodia.
It is extremely harmful when people like them go around non-tankie left wing subs and eventually gain control through nefarious means and eventually transition it into yet another tankie propaganda sub. Or when they moderate a supposedly general left wing sub but any criticism of authoritarian communism gets you muted and called a liberal, eventually allowing their propaganda to seep through to regular socialists as any criticism is shot down. /r/GreenAndPleasant is guilty of the latter.
It’s not really the politics but the way power hungry people get.
So um, no one on the face of this earth hates fascism more than a communist, the evidence you dug up only seems to reinforced the not a fascist and its utterly rediculous to call us that.
See, it’s all this stuff that really makes the
Such slander doesn’t deserve any response
statement feel very Steve Huffman to me. It very clearly does deserve a response because the problem doesn’t end with just saying “nope lol that’s not us” and people like me have to go digging through all this bullshit just to figure out the facts: they believe anti-China news and similar is U.S./media propaganda and will moderate opposing viewpoints with “Orientalism” bans and similar. That’s not a hard statement to type, and if this viewpoint is in good faith then I struggle to see why they refuse to just say that and consistently resort to “if you don’t like our moderation policy feel free to join/start a different instance!” without ever actually clarifying the moderation policy. Even lemmygrad pretty much says outright “if you like capitalism, fuck off.”
I mean, dude’s not CEO, he doesn’t control the instances. He does own a very large instance, but I don’t think it’s even the most dominant instance post-redditting.
I disagree with his views, though I will admit to some sympathy on some aspects (not the genocide stuff), but ultimately, he’s just a dude who makes this software. He doesn’t own it, he doesn’t have a monopoly on its control, and really, the entirety of the Fediverse could, if he went full Huff, say “fuck you” and defederate his instance. That’s the power of a distributed service. Heck, your own instance, kbin.social, could lemmy.ml at any time and it’d have little impact overall.
Even were I to concede to him being “Huffman-like” (which I do not agree with), I don’t think he’s actually relevant enough in the real-world usage of the software to care about as far as that goes.
Having gotten involved a bit over the last week, I think he’s generally a good guy. I disagree with his politics, but none of that has anything to do with software development. He writes good code, and when he’s not overwhelmed with nonsense, he’s quite helpful.
There’s another major dev, but I don’t know anything about him. I think they just want to build a cool tool that they can use to provide a safe space for discussion, and they want to make that available to others as well. That’s pretty cool, and that’s something I can support.
Ya, I don’t have any personal interactions with him and am withholding real judgement without. Even his politics, it’s hard for me to really condemn him when I don’t even know the lens he’s viewing things through. End of the day, I’m taking a best guess based on a few (3?) instances where he’s ever been recorded saying something that’s shit.
But also, even the worst tankie’s better than the best right winger, any day.
Eh, I consider myself to be the opposite of both politically, but I have no problem contributing to FOSS projects lead by either. But I agree in general, I’ve had better luck with socialists than fascists when it comes to FOSS.
Slightly contra- the other user that responded to you, I need to ask: You’ve spoken with rightwingers before, right? Most westerners have had the “privilege” at least a few times to allow such people to speak for themselves. Have you ever had an even slightly comparable interaction with a “tankie” where they also got to speak for themselves, rather than be told about what they believe third-hand?
I am a marxist Lenninist, and I can and do speak for myself.
though I will admit to some sympathy on some aspects (not the genocide stuff)
I mean, no one is supporting a genocide or speaking in favor of one, and the US has a documented history of using atrocity propaganda that is completely without basis. Probably the most powerful thing about that particular genre of slander is that it is taboo to denounce it for fear of looking like a “denialist” in the manner of a Holocaust denier, allowing the west to cynically exploit the generational trauma of a genocide it subsidized in order to degrade the reputations of its opponents on the imperial periphery.
This is extremely well written. Anyone that supports and wants to see this platform thrive should share this in response to the people spreading nonsense with the goal of seeing it fail and upholding the corporate status quo.