freedomPusher

joined 3 years ago
MODERATOR OF
[–] freedomPusher@sopuli.xyz 5 points 1 month ago* (last edited 1 month ago) (1 children)
[–] freedomPusher@sopuli.xyz 2 points 2 months ago

That bug tracker is in MS Github - a place I will not go. And I have yet to find an organised or simple way to find downstream trackers. I generally check Debian but when a pkg is not in official Debian then I report to !bugs@sopuli.xyz and !bugs_in_services@sopuli.xyz.

 

In both Lemmy 0.19.4 and Lemmy 0.19.5, you click the magnifying glass to open the search dialog. If you enter a search query and tab out of the field, whatever you typed is cleared. Even if you simply hit <enter> without tabbing out of the query field, the search form is refreshed and it tells you enter a query, as if you had not done so already.

Both versions have this problem with Ungoogled Chromium. The problem does not manifest on Tor Browser.

 

cross-posted from: https://sopuli.xyz/post/14184367

Lemmy version 0.19.4 introduces 3 relatively intolerable bugs, and 0.19.5 only fixes one of them.

 

Lemmy version 0.19.4 introduces ~~3~~ 4 relatively intolerable bugs, and 0.19.5 only fixes one of them.

 

This bug was introduced with version 0.19.4 and still persists in 0.19.5: There are four possible timeline views:

  • subscribed
  • local
  • all
  • moderator view

That selector is broken in Ungoogled Chromium 112.0 but not in Firefox-based browsers. In UC, clicking “moderator view” highlights the button, the page refreshes, but the selector does not stick. It snaps back to whatever view is the default and remains trapped on that timeline.

This problem is replicated in both 0.19.4 and 0.19.5 instances.

 

If I use the cross-post feature to copy the post elsewhere, the form is populated just fine but then I have to search for the target community at the bottom of the form. As soon as I select the target community, the whole rest of the form clears. If another field is re-populated, the target community field clears. So only one field at a time can be populated.

Tested with Tor Browser.

Untested in Lemmy 0.19.5.

 

Lemmy 0.19.4 introduced a quite serious defect whereby if you are using Ungoogled Chromium (and perhaps stock Chromium), the form to create a new post accepts input but then the instant you tab out of the field, the whole field is cleared. Poof… just like that, all your work vanishes and no way to get it back.

Firefox-based browsers have no issue.

~~Lemmy 0.19.5 seems to have fixed it.~~ But there are other problems with both 0.19.4 and 0.19.5, so I suggest not upgrading past 0.19.3.

(edit) actually the problem manifests differently in 0.19.5. The form can be filled out and there is no data loss, but the “create” button is insensitive. It remains gray and behaves as if the form is still empty.

 

cross-posted from: https://sopuli.xyz/post/14087065

One quite annoying Lemmy behaviour is when you search for a community that has many results spanning multiple screens (e.g. query “software”), the list is largely clusterfucked with crappy centralised instances that go against the #fedi philosophy (e.g. #lemmyWorld, #ShItjustWorks, #lemmyCa, #LemmyZip, #programmingDev, etc).

I discovered a fix: ctrl-rt-click on every community in the list to open each in a tab. Then click “block community”, then repeat the search. It works the way it should: blocked communities are excluded from search results.

Wish I realised that sooner.. would have saved me some effort and frustration in trying to search only for communities in the decentralised free world.

 

One quite annoying Lemmy behaviour is when you search for a community that has many results spanning multiple screens (e.g. query “software”), the list is largely clusterfucked with crappy centralised instances that go against the #fedi philosophy (e.g. #lemmyWorld, #ShItjustWorks, #lemmyCa, #LemmEE, #LemmyZip, #programmingDev, etc).

I discovered a fix: ctrl-rt-click on every community in the list to open each in a tab. Then click “block community”, then repeat the search. It works the way it should: blocked communities are excluded from search results.

Wish I realised that sooner.. would have saved me some effort and frustration in trying to search only for communities in the decentralised free world.

[–] freedomPusher@sopuli.xyz 0 points 2 months ago* (last edited 2 months ago) (2 children)

So not what their running debt is but only whether they can take on a new, specific one.

I knew the criteria was out of the hands of EU-based lenders, but didn’t realise the data is also out of reach to the lender. I suppose it makes sense that the lender would get no info other than a yes or no, if lenders have no discretion.

I noticed A shop had a rediculously priced phone (like €800+, something I would never buy) but advertised something like €9 if you take a contract. So it’s effectively a loan factored into a locked-in phone service plan. IIUC, the phone shop must arrange that with a bank and does not have the option of taking on risk, and then the bank asks the central bank if customer X can handle that loan, correct?

You can reverse payments through the bank in the EU as well but it’s seldom necessary, since the companies tend to revert the charge willingly when confronted by the consumer protection bureaus.

I’ve only had to resort to bank reverse a couple if times.

One was when I ordered a pair of shoes of what appeared to be an Italian website. It later turned out it was a scam site that listed popular models that were not made anymore and then sent you a ridiculously poorly made knock-off copy from China. I explained the issue to my bank and showed the knockoffs I got and a week or so later the charge was reversed.

That’s quite a surprise. I heard SWIFT/IBAN transfers were permanent and irreversable. I heard of mistakes being corrected but it required the two banks to collude and the bank of the recipient to do a money grab on their account, which I suppose would be impossible if a criminal closes their account. I wonder if your bank took a loss or if they colluded with the other bank. IIRC, banks have a minimum “investigation” fee of like €25 plus an hourly rate to pay bankers to deal with bad transactions. Did your bank offer that service for free?

 

In the US, consumers can freeze their credit worthiness records and receive a code. When the records are frozen, the only orgs that can access the records are those already doing business with the consumer. If a consumer wants to open up a new account, they share the code with the prospective creditor who uses it to see the credit report.

So the question is, how are access controls on credit histories done in various EU nations? Do any use unlock codes like the US, or is it all trust based?

 

Yikes.

“In the adequacy decision, the European Commission estimated that the U.S. ensures a level of protection for personal data transferred from the EU to U.S companies under the new framework that is essentially equivalent to the level of protection within the European Union.” (emphasis added)

Does the EU disregard the Snowden revelations?

And what a missed opportunity. California state specifically has some kind of GDPR analogue, so it might be reasonable if CA specifically were to satisfy an adequacy decision, (still a stretch) but certainly not the rest of the country. Such a move could have motivated more US states to do the necessary.

I must say I’ve lost some confidence and respect for the #GDPR.

 

cross-posted from: https://sopuli.xyz/post/13985430

The problem:

Most #fedi authors post links with no idea if the hosting server discriminates against people, or who. The consequence is that the fedi is muddied with references to exclusive venues that do not treat people equally, which wastes the time of readers who are impacted by discrimination. A variety of walled gardens pollute our threadiverse experience. So how can we remedy this?

Proposed fix:

Suppose we create a community and designate it as a testing area which welcomes bots. So e.g. I post something in the test community, and a bot that is paywall-aware replies yes or no whether the link is paywall-free. A bot that is Cloudflare-aware does the same. A regional bot, such as a bot in Poland can check that Polish IP addresses can reach the URL and make noise if the website blocks Poland. Etc. It need not be just bots.. someone in some oppressed region might manually attempt to visit links and report access problems. We would certainly like a bot in a GDPR region to test whether access is refused on the basis of a data controller’s unwillingness to respect GDPR rules. The OONI project could have a bot that reports anything interesting in their database.

There could also be anti-enshitification bots, which point out things like cookie walls.

There are bots that find better links to replace Cloudflare links. Those bots could help direct authors to better URLs to share.

There could be a TL-DR bot that replies with a summary or even the full text, so an author can decide before posting in the target community whether to omit a shitty link and just post the content.


(update) It’s worth noting that for Mastodon there an ad hoc tool. If you follow @mg@101010.pl, that bot will follow you back and analyze every URL you share for whether it is Cloudflared. If yes, it will DM you with alternative URLs.

Note that the mitigator bot is quite loose it its judgement. If the host is not Cloudflared but another host on the same domain is Cloudflared, it is treated as a positive because it’s assumed that when you visit the host it will link to other hosts on the same domain.

 

The problem:

Most #fedi authors post links with no idea if the hosting server discriminates against people, or who. The consequence is that the fedi is muddied with references to exclusive venues that do not treat people equally, which wastes the time of readers who are impacted by discrimination. A variety of walled gardens pollute our threadiverse experience. So how can we remedy this?

Proposed fix:

Suppose we create a community and designate it as a testing area which welcomes bots. So e.g. I post something in the test community, and a bot that is paywall-aware replies yes or no whether the link is paywall-free. A bot that is Cloudflare-aware does the same. A regional bot, such as a bot in Poland can check that Polish IP addresses can reach the URL and make noise if the website blocks Poland. Etc. It need not be just bots.. someone in some oppressed region might manually attempt to visit links and report access problems. We would certainly like a bot in a GDPR region to test whether access is refused on the basis of a data controller’s unwillingness to respect GDPR rules. The OONI project could have a bot that reports anything interesting in their database.

There could also be anti-enshitification bots, which point out things like cookie walls.

There are bots that find better links to replace Cloudflare links. Those bots could help direct authors to better URLs to share.

There could be a TL-DR bot that replies with a summary or even the full text, so an author can decide before posting in the target community whether to omit a shitty link and just post the content.


(update) It’s worth noting that for Mastodon there an ad hoc tool. If you follow @mg@101010.pl, that bot will follow you back and analyze every URL you share for whether it is Cloudflared. If yes, it will DM you with alternative URLs.

Note that the mitigator bot is quite loose it its judgement. If the host is not Cloudflared but another host on the same domain is Cloudflared, it is treated as a positive because it’s assumed that when you visit the host it will link to other hosts on the same domain.

[–] freedomPusher@sopuli.xyz 0 points 2 months ago* (last edited 2 months ago) (4 children)

Young voters did this, ironically enough, according to BBC World News. Young people struggling to get jobs after graduation think that right wing parties will fix that.

So as older generations are trying not to hand-off a burning planet to the young, the young are signing up for a burning planet under some delusion that right wingers will get them jobs. Schools have apparently failed to teach kids that the jobs they get under conservative governance are shit jobs -- lousy pay and lousy benefits.

[–] freedomPusher@sopuli.xyz 0 points 2 months ago (2 children)

Is it that you prefer not to insert coins, or that you prefer not to end up with coins? In principle a machine could take bills, but then you’d be getting coins back if you need change.

I’ve seen a laundromat with a centralized cash machine. You can insert as much in bills and coins as you want, then you tap the numbers of the machines you want to send the credit to. This single transaction made it easy if you needed to start ~3+ washing machines. If you plan diligently, you can ensure you don’t end up with coins, but then you need to bring coins.

I prefer coins because the rejection rate seems to be far lower than banknotes. But euro coins are probably more sensibly denominated than other countries. The US is a bit of an embarrassment in this regard because the $1 liberty coins never caught on, so people need a ton of quaters or small banknotes would can get quite ratty.

[–] freedomPusher@sopuli.xyz 0 points 5 months ago* (last edited 5 months ago) (1 children)

The scooters they mention in the article are the e-scooters you ride standing up in the bike lane.

No they are not. That makes no sense. Stand-up e-scooters are relatively quiet. Quotes from the article (emphasis added):

“worst of all, the high-pitched wail of motor scooters that speed by every few seconds.”

“Motorcycles and scooters — often with their exhaust systems illegally modified to boost noise and power”

“The noise can be ear-splitting,”

Obviously you would not describe a stand-up scooter as ear-splitting or capable of waking someone up. They’re talking about gas small gas combustion engines, most of which are the worst variety on scooters: 2-stroke.

Or if you meant the OP’s article is talking about e-scooters, that article actually covered both:

“Weight rates are usually over 10 times more favourable for the average motorbike or scooter and, of course, even better for lighter vehicles such as electric bicycles or kick-scooters.”

My reaction was to the idea that motor scooters are more favorable by a factor of 10 due to the weight -- which is true, but my criteria is more complex than just ecocide-avoidance… I want my sleep too!

[–] freedomPusher@sopuli.xyz 0 points 5 months ago (1 children)

There is a quite good opt-out procedure: cycle.

[–] freedomPusher@sopuli.xyz 0 points 5 months ago* (last edited 5 months ago) (9 children)

A recent study found that a single unmuffled scooter driving through Paris at 3am can wake up 10,000 people.

So sure, scooters have low CO₂ emission but I would like to see a ban on non-electric scooters for their sound emissions, at least during certain hours.

[–] freedomPusher@sopuli.xyz 0 points 5 months ago* (last edited 5 months ago) (3 children)

smart lights come in other forms:

  • If you are speeding, the next light detects it and nearly guarantees you get a red light
  • If you are not speeding, your license plate is read and entered into a lottery where you can win money from the pool of money collected by traffic violations.

I don’t recall which country implemented what, but IIRC Canada, Sweden and Spain each had one of the above two systems.

[–] freedomPusher@sopuli.xyz 0 points 5 months ago* (last edited 5 months ago) (2 children)

Traffic lights per se are an anti-pattern of city design.

It’s a pro and a con. Cars waiting is a good thing. Car drivers chose cars for convenience so anything that makes them inconvenient is a positive factor to getting them out of cars. I’m in a place where bicycles can turn right on red but cars cannot. And there are cycle paths through woods and fields and niche trafficlight-free places cars cannot go.

I love traffic jams because cyclists are immune to them and car drivers can only sit in frustration as they get passed by cyclists.

A couple intersections are still fucked up though, where cyclists might have to wait for ~2-3 differently timed lights to cross an intersection. Luckly red light running is not generally enforced against cyclists.

[–] freedomPusher@sopuli.xyz 0 points 5 months ago* (last edited 5 months ago) (2 children)

Not sure but IMO the key point is nearly reached with this:

The agreement clarifies the different responsibilities the EU Commission and the member states in identifying the companies exploiting forced workers and banning their products.

The biggest problem is transparency. You ask a chocolate maker about forced child labor in their supply chain, and they simply deny it. You ask who their supplier is and they remain silent. NGOs and journalists always have an uphill battle in just working out who is in the supply chain. But highly motivated investigative journalists will go to the Ivory coast, find the child slaves, and then somehow trace it upwards from there. Hopefully this law forces disclosures of the supply chain. Once the supply chain is public it’s probably trivial from there. But note they deliberately make the supply chain a lengthy change of many hands in order to thwart detection.

The article is somewhat useless in neglecting to say anything about supply chain transparency.

[–] freedomPusher@sopuli.xyz 0 points 7 months ago* (last edited 7 months ago) (1 children)

It is possible to avoid Cloudflare (the worst offender), proven by instances that are run by more competent experts. For example:

  • fedia.io
  • sopuli.xyz
  • beehaw.org
  • infosec.pub
  • lemmy.dbzer0.com
  • slrpnk.net
  • links.hackliberty.org
  • lemmy.ml ← used to be Cloudflare-proxied but they got wiser
  • mander.xyz

^ Those are good instances where users’ traffic is not recklessly exposed to Cloudflare.

These instances below not only expose their users to Cloudflare, but they’re not even decent enough to inform their own users about it:

  • lemmy.world ← Cloudflare
  • sh.itjust.works ← Cloudflare
  • zerobytes.monster ← Cloudflare
  • lemmy.ca ← Cloudflare
  • lemm.ee ← Cloudflare
  • programming.dev ← Cloudflare
  • lemmy.zip ← Cloudflare

If you probe admins of the above list, some will say in effect that they regret pawning all their users to CF but claim they have no choice - that they do not know how to defend from attack. Some admins have no regrets and simply do not give a shit. Many admins are actually ignorant to the extent of not even knowing Cloudflare sees the traffic (yes, many times admins were appalled to learn this from me; who to them is just some random pleb). Probably the most despicable aspect to this is that no Cloudflare admin is socially responsible enough to post a banner msg making sure users are informed about their exposure. If they are proud of their choice and feel they have no choice, then why neglect to disclose it (esp. on a non-profit activity)?

Regardless of their reasons/excuses, it really does not matter to the user. What matters to users is that there are privacy-disrespecting choices and relatively privacy-respecting choices. Obviously street-wise users select from the first list I posted and not the 2nd list.

Only CFd government sites are unavoidable

The only Cloudflare sites that are unavoidable AFAICT are government sites. You can always boycott the private sector, but there are 6 or so states in the US where voter registration goes through Cloudflare. Even if you register on paper, the data entry worker likely goes to the Cloudflare site. I became a non-voter for this reason.

view more: next ›