This whole episode is giving me flashbacks to the ActiveX days.
The tyranny of the default.
“Here mum, I’ve installed Firefox for you, it’s better than Chrome in every way!”
“My knitting circle website doesn’t work, I can’t download patterns, it says I need Chrome”
Internet Explorer was effectively abandon-ware for a decade after Microsoft used their OS pseudo-monopoly to crush Netscape.
It took another tech giant abusing THEIR monopoly to relegate IE to the trash heap it should have already been on.
Comforting and Terrifying.
Comferrifying?
Terriforting?
So you won’t use your banks website?
Or your utilities (gas/water/electricity/internet)?
You won’t let your kids use the portal at their school for submitting assignments?
Your government sites for renewing your drivers license or scheduling hard refuse pickup?
I can think of lots of reasons that will force me to have chrome installed if this goes ahead.
My understanding is that no one on that instance can see any of us on any instance.
So no, they couldn’t post to lemmy.world.
They could post to somewhere we both federate too, such as lemmy.ml and we would be able to see that post, but if we respond to them, they wouldn’t see our post.
If you look at the instances page at beehaw, lemmy.world is still listed as blocked:
As @Treevan said, i think the headline was using Fears in the context of Concerns.
It is indeed awesome that we can edit titles though.
The US (which is where I assume you are), has the second largest one in the world in current operation:
https://en.wikipedia.org/wiki/Bath_County_Pumped_Storage_Station
Short answer, it scales fine.
Now you need to find someone to pay for it.
The Back to the Future trilogy is good for a re-view.
Yes, but you would be seeing ALL posts from everywhere your instance knows about.
I kind of like the idea of being on lemmy.world, filtering to say aussie.zone and getting it to show me local.
Or being able to simply get a list of every community on another instance.
These are cool ideas.
In progress as I cooked.
The post image is the final product
The annoying thing to me is that it’s taken a further 13 years to reach a point where another social network is feasible.
I’m not saying there haven’t been attempts like diaspora and the early mastadon etc, but now we’re actually reaching a critical mass of participants where a move is worth it.
The same is true of Signal. I’ve been using it for nearly a decade, but it’s only in the last 2 years that people haven’t rolled their eyes when I mention it’s my preferred comms app.
The first 90% of the task takes 90% of the time.
The last 10% of the task takes the other 90% of the time.
It’ll be 0.18.1 with a specific patch applied to it to fix the security issue that got the site exploited.
It’s hard to search for it on a phone, but something in here will match it: https://github.com/LemmyNet/lemmy/commits/main
JavaScript (TypeScript) has access to cookies (and thus JWT). This should be handled by web browser, not JS. In case of log-in, in HTTPS POST request and in case of response of successful log-in, in HTTPS POST response. Then, in case of requesting web page, again, it should be handled in HTTPS GET request. This is lack of using least permissions as possible, JS should not have access to cookies.
JavaScript needs access to the cookies, they are the data storage for a given site.
To protect them, the browser silos them to the individual site that created them, that’s why developers haven’t been able to easily load cross domain content for years, to mitigate XSS attacks.
The security relies on the premise that the only valid source of script is the originating domain.
The flaw here was allowing clients to add arbitrary script that was displayed to others.
You’re dead right that only the way to fix this is to do away with JavaScript access to certain things, but it will require a complete refactor of how cookies work.
I haven’t done any web dev in a few years, this might even be a solved problem by now and we are just seeing an old school implementation. 🤷
Threads will mainstream threads.
Any good content here will be available to the Threads users, who will be oblivious to where it is coming from.
Eventually, Meta will take steps to break compatability, and lots of the most prolific contributors from here will move to Threads exclusively (for a host of valid reasons).
When it is no longer in Meta interest to federate, they will stop.
The fediverse will continue, but it will be weakened by it’s temporary reliance on Threads (who could afford to host large images/videos/etc, have lower latency, etc etc).
The issue was the owners choice of not federating with anything nsfw.
By moving to lemmy.world I could still post as much as I wanted to !australia@aussie.zone AND upvote boobs.
I moved from aussie.zone to lemmy.world already to get around federation issues.
Now beehaw.org has stopped federating with lemmy.world 🤷♂️
I don’t want to have half a dozen accounts so that I can access all the niches of this system, and yet it’s beggining to look like the dream of federation is stillborn.
Absolutely possible.
The key to simple self hosting is to have a dns record that points to your externally accessible IP, whether that be your real one or an external one hosted at a VPN provider.
If that IP changes, you’ll need to update it dynamically.
It’s becoming increasibly common to be a requirement to do so as CGNat becomes more widespread.
One of the newer ways to do that is with a Cloudflare Tunnel, which whilst technically is only for web traffic, they ignore low throughput usage for other things like SSH.
I love the top gear reference, but surely May would have been the obvious choice, Hammond is just asking for a crash!