Atemu

joined 5 years ago
MODERATOR OF
[–] Atemu@lemmy.ml 2 points 1 month ago (1 children)

Thank you!

I've found the Seedstudio thing after posting this too and it looks like the thing I'd be looking for!

What's your experience w.r.t. coverage?
Obviously that highly depends on where exactly you are – you certainly aren't going to have coverage in the outback – but I'm mostly concerned with places where people actually go and would take my bag/laptop/bicycle to. 'Stralia is going to generally be quite different from Germany too of course but it would be a good reference point from which I could extrapolate.

[–] Atemu@lemmy.ml 4 points 1 month ago (1 children)

Well, they have – I think. When you download an edited image, it supposedly downloads an image with edits applied. The original is optionally available too.

If you download the edited image, this is effectively equivalent to the status quo of image editing.

[–] Atemu@lemmy.ml 2 points 1 month ago (3 children)

Are there any (ideally waterproof) compact devices with long battery life (months~years)?

On the website I only found a long list of supported devices with brand name search and protocol type. grep showed no LoRaWAN devices though?

My use-case is theft tracking. I only need the device to be able to locate itself after a theft actually occurred and I request it remotely. (Perhaps also periodically with very low frequency.)

[–] Atemu@lemmy.ml 4 points 1 month ago

Yikes, lot's of bad advice in this thread.

My advice: Go develop an actual threat model and find and implement mitigations to the threats you've identified.

If you can't do that, that's totally okay; it's a skill that takes a lot of time and effort to learn and is well-compensated in the industry.

You will need to pay for it. Either through an individual assessment by someone who knows what they're doing, managed hosting services where the hoster is contractually liable and has implemented such measures, by risking becoming part of a botnet or by not hosting in a world-public manner.

My recommendations:

  • Pay for proper managed hosting for every part of your system that you are not capable of securing yourself. This is a general rule that even experienced people follow by i.e. renting a VPS rather than exposing their own physical HW. There are multiple grades to this such as SaaS, PaaS and IaaS.
  • Research, evalue and implement low-hanging fruit measures that massively reduce the attack surface. One such measure would be to not host in a manner that is accessible to the entire world and instead pay for managed authenticated access that is limited to select people (i.e. VPN such as Tailscale)
  • git gud
[–] Atemu@lemmy.ml 2 points 1 month ago

(but-with 'nix (lots-of 'parenthesis))

[–] Atemu@lemmy.ml 2 points 1 month ago

That's for encrypting your data to protect against an untrusted storage back-end.

They also have e2ee for users though where the server cannot see the plaintext either.

https://nextcloud.com/encryption/

[–] Atemu@lemmy.ml 1 points 1 month ago

And this is why you want atomic updates folks..

[–] Atemu@lemmy.ml 1 points 3 months ago

Did you/your distro set up realtime ulimits correctly such that pw can acquire rt priority?

[–] Atemu@lemmy.ml 1 points 3 months ago

Thanks for the explanation!

Though it ought to be possible to only respond with the new self-signed cert when LE does the challenge and with the previous, properly signed cert otherwise.

I found https://codeberg.org/neilpang/acme.sh/wiki/TLS-ALPN-without-downtime which demonstrates one method to achieve that but I lack practical experience judge whether that's optimal.

[–] Atemu@lemmy.ml 1 points 3 months ago (2 children)

Forgive my ignorance but why would that incur a downtime?

The only way I can think of for downtime to happen if you switched certs before the new one was signed (in which case ..don't) or am I missing something?

It also strikes me as weird that LE requires 80 but does allow insecure 443 after a redirect. Why not just do/allow insecure 443 in the first place?

[–] Atemu@lemmy.ml 1 points 3 months ago

The same that happens when you update to receive a breaking change on a rolling distro. It's version number go up, just at a different point in time.

[–] Atemu@lemmy.ml 2 points 3 months ago

That's a very odd example to choose given how trivially interchangable kernels are.

At NixOS, we ship the same set of kernels on stable and rolling; the only potential difference being the default choice.
I'm pretty sure most other stable distros optionally ship newer kernels too. There isn't really a technical reason why they couldn't.

 

@brjsp thanks again for submitting the concern here. We have made some adjustments to how the SDK code is organized and packaged to allow you to build and run the app with only GPL/OSI licenses included. The sdk-internal package references in the clients now come from a new sdk-internal repository, which follows the licensing model we have historically used for all of our clients (see LICENSE_FAQ.md for more info). The sdk-internal reference only uses GPL licenses at this time. If the reference were to include Bitwarden License code in the future, we will provide a way to produce multiple build variants of the client, similar to what we do with web vault client builds.

The original sdk repository will be renamed to sdk-secrets, and retains its existing Bitwarden SDK License structure for our Secrets Manager business products. The sdk-secrets repository and packages will no longer be referenced from the client apps, since that code is not used there.

This appears at least okay on the surface. The clients' dependency on sdk-internal didn't change but that's okay now because they have licensed sdk-internal as GPL.

The sdk-secrets will remain proprietary but that's a separate product (Secrets Manager) and will apparently not be used in the regular clients. Who knows for how long though because, if you read carefully, they didn't promise that it will not be used in the future.

The fact that they had ever intended to make parts of the client proprietary without telling anyone and attempted to subvert the GPL while doing so still remains utterly unacceptable. They didn't even attempt to apologise for that.

Bitwarden has now landed itself in the category of software that I would rather move away from and cannot wholeheartedly recommend anymore. That's pretty sad.

 

cross-posted from: https://lemmy.ml/post/21519137

I recently switched from a MBP to a Framework 16 as my primary laptop and one thing I immediately noticed was that I was unable to stop kinetic scrolls in Firefox by laying my fingers onto the touchpad. It'd just slide by unimpeded. You could work around this by counter-scrolling a little rather than holding still which is how I've been coping with it but it's suboptimal to say the least.
(As are many things in the Linux touchpad experience. Linux desktop developers really ought to use a macbook for a little to get a sense for how to do this properly.)

This was caused by Firefox' use of GDK3 to implement its windowing and input needs which does not support hold gestures.

GDK4 does support them but, as I understand it, a port of Firefox to GDK4 would be a ton of work and there isn't really much desire for it as GDK4 doesn't offer many real advantages over GDK3 as Firefox doesn't use classical GTK widgets or anything and only really uses it for basic input/output primitives.

A backport to handle hold gestures in GDK3 too was attempted but, in classic GNOME fashion, it was rejected.

The implementation now somehow gets events from the touchpad directly via wayland somehow from what I could gather but if it works, it works.

You can try this out in the latest nightly builds.

 

I recently switched from a MBP to a Framework 16 as my primary laptop and one thing I immediately noticed was that I was unable to stop kinetic scrolls in Firefox by laying my fingers onto the touchpad. It'd just slide by unimpeded. You could work around this by counter-scrolling a little rather than holding still which is how I've been coping with it but it's suboptimal to say the least.
(As are many things in the Linux touchpad experience. Linux desktop developers really ought to use a macbook for a little to get a sense for how to do this properly.)

This was caused by Firefox' use of GDK3 to implement its windowing and input needs which does not support hold gestures.

GDK4 does support them but, as I understand it, a port of Firefox to GDK4 would be a ton of work and there isn't really much desire for it as GDK4 doesn't offer many real advantages over GDK3 as Firefox doesn't use classical GTK widgets or anything and only really uses it for basic input/output primitives.

A backport to handle hold gestures in GDK3 too was attempted but, in classic GNOME fashion, it was rejected.

The implementation now somehow gets events from the touchpad directly via wayland somehow from what I could gather but if it works, it works.

You can try this out in the latest nightly builds.

 

Write is a handwriting app that works on a lot of platforms including Linux which cannot be said about most handwritten note-taking applications.

More information and demo: https://github.com/styluslabs/Write/

I've used it for uni on a Linux tablet/convertible and it worked really quite well and has some nice convenient features for note-taking.

The UI looks like it's from android 4.something though ^^'

What I really appreciate about it is that its storage format are plain SVG(Z) which are extremely compatible. All you need to view your scribbles is an SVG viewer (i.e. a web browser) which basically every computer with a GUI has. Their website is in fact mostly just the output of their own app.

 

Features

  • We continue enhancing our search experience with bangs. Check the shield menu to see if a website has a corresponding bang. #3410 @frereit

  • We've upgraded the FastGPT, and Research Assistant (Fast+Expert) with the latest models to enhance performance:

    • FastGPT -> Claude 3 Haiku
    • Research Assistant, Fast -> Claude 3 Haiku
    • Research Assistant, Expert -> Claude 3 Sonnet
  • These are also available in Chat mode which allows full access to a range of models like Claude 3 Opus, GPT-4 and Mistral Large [Please note, Kagi Assistant is currently in closed beta and is exclusively accessible to subscribers of the Ultimate plan]

  • We now allow the community to see and translate the trigger phrases for widgets that utilize them, such as the weather and calculator widgets. Learn more about how to contribute translations in our help page. #2506 @cempack

Improvements and bug fixes

  • Show colour picker when searching for "colour picker" or "color picker" #3370 @httpjames
  • Clock Widget (ie, checking time in another time zone) initially shows PM instead of AM #3533 @mackid1993
  • Ultimate-exclusive bangs not working on starter plan #3551 @emarforio
  • Timer doesn't count time correctly #3436 @__rej__
  • The enter key ignores the character selection state when using Chinese IME #3606 @morningdip
  • Unable to upload items between 8mb and 16mb #3593 @cakeboss
  • Search results have no title Firefox Android #3586 @ray
  • Discussion cards #3519 @Dumb
  • News Snippet cuts off menu #3542 @xrendan
  • Show that a bang is available in the info field of a result #3410 @frereit
  • Search ignoring pre-set date filter #3417 @travior
  • Check Listen Notes API integration #3163 @matteoscopel
  • Quick answer does not display footnotes correctly #3637 @bebowilson
  • Add bang country for Indonesia #3515 @rourguic
  • Make stats subpages shareable #3452 @Value7609
  • Updating a lens' bang causes the server to crash with 502 Server Error #3601 @httpjames
  • Assistant is still capping characters to 7k #3547 @httpjames
  • AI Assistant regenerates answer on tab restore/reopen when called from bang #3569 @emarforio
  • Quick answer button slightly misaligned on mobile #3429 @sefidel
  • Stop overriding the browser’s scroll bars with custom CSS #3420 @David
  • Using the bang !fast on Firefox iOS just gives me an emtpy window #3597 @lou
  • Reddit and Hackernews backlinks only (?) work on us-central #3277 @nilsherzig
  • Bangs in Image / Video / News / Podcast / Maps Search do not redirect. #2929 @Syx
  • Lenses are not activated for research #3317 @tkataja
  • Quick answer breaks when the query contains html tags #3614 @ys256
  • Research Expert Mode "forgets" Citations #3612 @tschoesi
  • Research Assistant cannot summarize GitHub issues URLs correctly (but it can as a PDF) #3581 @yokoffing
  • Missing citations in fastgpt / quickanswer again #3625 @truethomas
  • Quick answer words end with numbers (without links to sources) #3628 @bert
  • Blocked sites showing up in "Quick Peek" results #3477 @n6h6
  • "Sorry, a problem occurred while processing your request." when using the bang "!expert" #3306 @lou
view more: next ›