Nerd & opinion haver.

  • 0 Posts
  • 80 Comments
Joined 3 years ago
cake
Cake day: June 14th, 2023

help-circle
  • This is why threat modeling is important.

    but what if I get arrested on some false pretenses and they use cellebrite to gain access?

    Chances are they can clone the eMMC and wait for a CVE. Or threaten or hold you until you cave. If a lawsuit is your only recourse, I would expect any constitutional barriers to be ignored in practice. Your best bet is to never end up being an explicit target, which may be more difficult for certain individuals.

    My threat model considers dragnet surveillance as the primary threat, so I’d compromise on surviving dirty maid type attacks in favor of reducing the information my device gives out.

    Obviously if your device is being actively exploited, you cannot be private. But your security requirements increase greatly if your data footprint indicates to them that you warrant targeted scrutiny.



  • NuclearDolphin@lemmy.mltomemes@lemmy.worldSomeone's cutting onions
    link
    fedilink
    English
    arrow-up
    6
    arrow-down
    1
    ·
    5 months ago

    Ignoring all your weird patronization of the global south…

    If you don’t like America, then get off Lemmy. Because guess what? Lemmy was largely developed by an American. Yes, I know it involved collaboration with developers from other countries, but the primary origin is still American.

    No idea if the main developer, comrade dessalines, is American, but they have a Che Guevara profile pic.

    Here’s a snippet from the US atrocities section of their essays repo:

    “If there is a country that has committed unspeakable atrocities in the world, it is the United States of America. They don’t care for human beings.” - Nelson Mandela

    Two of the other original devs are Nutomic and SleeplessOne1917. Nutomic has a Fidel Castro pfp, and SleeplessOne1917 uses the year of the October revolution in their username. Safe to say the devs of Lemmy do not like America. They also admin lemmygrad.ml

    Might want to check your assumptions (and western chauvinism)

    If you don’t like America, then get off Lemmy. Because guess what? Lemmy was largely developed by an American based communist revolutionaries. Yes, I know it involved collaboration with developers from other countries the great satan, but the primary origin is still American Marxist-Leninist.

    FTFY!






  • No need to apologize. I can differentiate disagreement from attack.

    However, consider that this action raises the bar to run FOSS apps from:

    1. Disable the toggle.
    2. Install the app.

    To:

    1. Purchase a phone that can run an OS that allows you to do the above.
    2. Disable bootloader unlock.
    3. Connect your phone over USB.
    4. Flash the OS.
    5. Do the above.

    OR:

    1. Do the above.
    2. Connect your phone to USB or enable wireless ADB.
    3. Run a command to install the app (repeat for every app install)

    The new barrier to entry is going to inevitably catch a whole lot of people who would otherwise be willing to go out of their way to install FOSS apps. Development will also suffer as a downstream consequence of this.

    I use postmarketOS too, and it is a much more pleasant experience to use than having to break out a second device to update or install software. It has a large number of issues, but it’s more comfortable to use than your comment implies.










  • Codeberg (and Forgejo in general) is the nicest code forge I have ever used.

    GitLab has horrible UI/UX. Is slow as hell and so heavy that self-hosting is a strain on compute resources. The layout of the sidebar makes finding what you care about slow.

    Forgejo is slick as hell, very light on resources, and does virtually everything GitLab or GitHub does. Looks pretty much identical to GitHub with a clean coat of paint, but the UI runs so much faster in the browser.

    The only downside to Codeberg and Forgejo is having to roll your own CI actions.

    Forgejo makes migrating projects such a breeze too. You can transfer everything you have on GitHub in under 10 minutes. Forgejo is also working on implementing the ForgeFed spec, which will enable federated projects where people on other instances can create issues and otherwise interact with your project.

    Seriously try out Forgejo with a couple projects, there is nothing you will miss about GitHub.




  • Not only is it FOSS, but the experience is legitimately better than GitHub.

    Also has a super fast & good repo migration & sync system. You can still keep the GitHub repo around for the network effect while porting over issues & PRs.

    Forgejo Actions is maybe the only thing worse, but that’s because it isnt one-to-one with the whole GHA ecosystem, even if most GitHub Actions work out the box with no changes.

    I’m not a dev so I mainly use GitHub to download and install other peoples work.

    You’re gonna start seeing more of these pointing to codeberg.org in the near future. I have been seeing a ton of important projects move there or their own Forgejo instance. Once federation hits, I imagine a massive proportion of projects are gonna jump ship.