Lodra

joined 2 years ago
[–] Lodra@programming.dev 23 points 1 year ago* (last edited 1 year ago) (2 children)

At first, I found this funny. Then I realized how scary, sad, etc. the reality is.

Companies typically prefer users to use a native app for two reasons. First, the software is sometimes easier to build. Second, they are capable of scraping a vastly larger and more valuable set of data from the user.

Browsers can hit many differs sites, many of which are dangerous. Thus, web browsers have to be as secure as possible to protect users from malicious sites. This includes Facebook, TikTok, every medical site you’ve ever logged into, etc.

I know a lot about software. Personally, I view every installed app as a means of attacking my privacy. If you have the choice and your experience isn’t diminished, use a web browser instead of a native app.

Edit:

Something else to note. The larger companies are almost always much worse. Take a look at Facebook on the Apple Store: https://apps.apple.com/us/app/facebook/id284882215

Go down to App Privacy and View Details. It’s absolutely terrible how much data they collect. Unethical at a minimum. Now compare to Voyager for Lemmy: https://apps.apple.com/us/app/voyager-for-lemmy/id6451429762

“Data Not Collected”

[–] Lodra@programming.dev 20 points 1 year ago (1 children)

I recently discovered k3d. It’s a light wrapper around k3s, which is kubernetes on docker. It’s amazingly easy to use! If you have docker installed, you can learn the commands and create a k8s cluster in under 5 minutes.

For anyone like me that likes k8s, k3d is a fantastic alternative to docker compose!

[–] Lodra@programming.dev 37 points 1 year ago (1 children)

This is regulated. And there are penalties for violating those regulations. But it’s just not enough. Even a class action lawsuit won’t help the victims. Most of that money goes to lawyers.

Honestly, I don’t expect any of it to change until the penalties are so severe that major companies go under. Aka a corporate death penalty (which the US used to have). But even then, good software security is extremely hard. Almost everyone screws up something.

[–] Lodra@programming.dev 4 points 1 year ago

I agree in full!

I’ve thought quite a bit about corporate funding of the fediverse. The only possibility good way that I currently see is if there’s a not-for-profit acting as a middle man to dispense the funds. And that not-for-profit can’t voice opinions on how the fediverse is developed. Even this is wishful thinking.

I’ve actually given thought to creating this non-for-profit but I don’t really know how to get started or get attention for significant donations.

[–] Lodra@programming.dev 15 points 1 year ago (3 children)

Well this confuses me. I’m only aware of upvotes and downvotes. What do the 4 colors mean? And what do the left and right arrows mean? Arrow size?

[–] Lodra@programming.dev 4 points 1 year ago* (last edited 1 year ago)

The simplest way is certainly to use a hosted service like GitHub Pages. These make it so easy to create static websites.

If you’re not flexible on that detail, then I next recommend Go actually. You could write a tiny web server and embed the static files into the app at build time. In the end, you’d have a single binary that acts as a web server and has your content. Super easy to dockerize.

Things like authentication will complicate the app over time. If you need extra features like this, then I recommend using common tools like nginx as suggested by others.

[–] Lodra@programming.dev 2 points 1 year ago

Absolutely a good perspective on the surrounding infra! I fully agree. Thanks for sharing.

[–] Lodra@programming.dev 13 points 1 year ago (3 children)

An interesting discussion! You’re probably right about most Lemmy instances. But it’s entirely possible that some instances are running a modified version of Lemmy that collects more data. And only those admins will understand why. They could sell it as easily as any company.

You need to trust your service providers or accept what they’re doing.

[–] Lodra@programming.dev 3 points 1 year ago

I recently dug into this because I accidentally trashed my wife’s OS which was encrypted with bitlocker. PITA btw and I couldn’t beat the encryption

Bitlocker encryption key hash is stored in 2 possible places. First is an unencrypted segment of the encrypted drive. This is bad because it’s pretty easy to read that hash and then decrypt the drive. The second place is on a Trusted Platform Module (TPM) which is a chip on the motherboard. This is better because it’s much more difficult to hack. It can be done but requires soldering on extra hardware to sniff the hash while the machine boots up. Might even be destructive… I’m not sure.

Either way a motivated attacker can decrypt the drive if they have physical access. For my personal machines, I wouldn’t care about this level of scrutiny at all.

Anyways you can see if any open source solutions support TPM.

[–] Lodra@programming.dev 2 points 1 year ago

OpenTelemetry

[–] Lodra@programming.dev 14 points 1 year ago (1 children)

If you’re up for it, it’s generally better to not backup everything. Only backup the data that you need. Like a database. Or photos, music, movies, etc. for personal data. For everything else, it’s best to automate the install and maintenance of your server.

Disclaimer: this does take more effort!

[–] Lodra@programming.dev 2 points 2 years ago

Looks more like a battle bots machine to me, but built at human scale. Seriously, those low blades are very low and positioned at the perimeter. Forget the risks of flying; This looks extremely dangerous at ground level.

view more: ‹ prev next ›