confusedwiseman

u/confusedwiseman@lemmy.dbzer0.com
1 posts · 142 comments

Recent posts

Recent comments

A childishly simplistic one. I grabbed that number from Wikipedia. I find Firefox so much better than chrome or edge, I can’t believe some metric puts some order of magnitude around 3%. Triple it to 9%, and if still wish for better.

There’s only 3-4 browser platforms chromium, safari, and Firefox which might be better said as gecko and web-kit. Ladybird and Orion are trying to enter this market with something new.

*this information is probably close to right but I didn’t double check it first.

Chrome and edge are basically the same now.

I’ll second a static IP from your ISP is probably what you need. However oven never had one and I don’t think my external IP ever changed. As long as the integration isn’t critical, given my own experience, I’d probably risk it and then decide if I needed to get a static IP.

Now you might also consider getting a n inexpensive VPS and route through that server which would likely have a static out bound block of IPs.

Smarter people than me are here though. I’m still in the “fear of opening ports to the internet” while at home phase.

Need the yellow stripe to have the question of king snake or coral snake and apply the rhyme. This looks like corn snake. My only claim to fame for snake identification is that I generally avoid them and haven’t been killed by a venomous snake so far. So take my assessment for what it’s worth.

Thank you for sharing. I do now recall a couple of the items you addressed, and I’ll have to keep others in mind.

We can’t have anything nice… google, digg, Reddit, github, Kagi, proton mail. —at one point in time these were good. The rot or trajectory of rot seems inevitable.

I’m not anti AI, but it doesn’t need to be in everything all the time. It shouldn’t obfuscate data sources. It shouldn’t be allowed to consume and gather everything breaking laws that would apply to any individual and ought to be enforced for any corporate entity.

Pointing an AI at a larger company’s documentation or feeding a local one a largish manual and using it to figure out how or why 2, 3, or 4 parts work together has been useful for me in the past. Again where I can then get to the data to learn for myself.

Letting the pattern recognization machine (AI) assess a logfile or 3 that are intertwined to help find issues has been helpful.

Injecting it into every internet search where I never asked is wasteful and stupid.

I’ll look into Metager as this is the first I’ve heard of it.

What set of issues do you see with Kagi? It’s the best I’ve encountered as of late, but if there’s more I should consider; I’d like to learn.

As I understand it, the attack vector went after orphaned packages primarily. Several of the affected packages would only run the malicious code if it was a fresh install not an update only. So it would have had to be a clean install of an affected package or a newly installed dependency called to invoke this during the approximately 2 day window.

Yes, this is bad, but it’s clearly testing for weaknesses in the chain through AUR.

Yes, I know it’s contributed code by the community and a random actor can cause havoc. Yes, I know how to manually build packages and check for changes. Yes, I am guilty of using helpers. No, I wouldn’t catch everything on my own.

I do limit what I do use from the AUR, because those installs and updates require more scrutiny.

I am reassessing my own threat model as there’s a couple of packages where I’m dependent on the AUR - most notably displaylink drivers.

I do wish communication was better around the event. I found out first through being subscribed to the mailing list. An announcement on the main page would have gone a long way.

It could be representative of the UI and accidental voting. I’ve accidentally up/down voted something before when I tried to “navigate back”. I’m sure there have been some I didn’t catch to that would make me feel horrible to know I responded to something so blatantly incorrectly.

Mine was never ever connected to the internet. HDMI is all I needed and wanted. What evil they’re doing now is making you connect it to the internet on first boot.

I’d bet the next step is that it has to be able to phone home at increasingly frequent intervals to allow functionality such as playing content from connected ports.

This is brought to you by the same company that’s developed technology to detect if an hdmi connection is paused so that it can be interrupted to inject ads…