The fact that devs sign the builds doesn’t protect you from a Jia Tan type of actor. Jia Tan had social-engineered they way to a maintainer and then dropped their backdoor in the .tar releases. If you had compiled from the tree you couldn’t be affected. It’s possible to fail to review malicious commits even in this case, but it is still more transparent than pre-packaged releases. And there’s no point to reproducible builds if no one actually reproduces them.
- 3 Posts
- 16 Comments
I mean the world size, which in Minecraft is 60,000,000 blocks horizontally.
World size status?
Netguard also has a separate lockdown mode (which only enables a few apps, or none, to go through) that if toggled automatically based on connected network would enable you to dictate which apps can use untrusted networks.
While there are lots of apps that automate some sort of action based on the name of the WiFi network, activating the lockdown mode in Netguard is more specific, and I doubted if it’s even possible. To start, I came up with a Termux command invocation that toggles the lockdown mode in Netguard. After customizing the quick settings (near the notification area) this
adbcommand confirms that this method for toggling Netguard’s lockdown mode really works:adb shell cmd statusbar click-tile eu.faircode.netguard/.WidgetLockdownDefault Termux doesn’t request the necessary permission which impeded the command from running, however:
java.lang.SecurityException: StatusBarManagerService: Neither user 10472 nor current process has android.permission.EXPAND_STATUS_BAR.So this is where I’m at, I could probably just use Tasker to like some people do to run the
cmd statusbarcommand, but I also wanted to call some attention to the issue report on the Termux repository regarding this permission.EDIT: There’s a high likelyhood it won’t work on Tasker without root, and on termux it also wouldn’t work even if you managed to request the permission.
For the record, in almost all versions of Android you can install apps in a isolated environment through Shelter. Apps in this environment get icons in your home screen just like the rest, but don’t share the vpn/firewall connection that you might have active through RethinkDNS, among other things.
You effectively have two sets of apps with different firewall settings. And if you figure out a way to automate the locking down of RethinkDNS (through something like Tasker or Schröder’s Automation,) you would effectively have a mechanism that only lets the small number of apps in the isolated environment work while connected to an untrusted network.
liminal@lemmy.mlto
Firefox@lemmy.ml•File based syncing of profile data instead of Mozilla sync?
1·1 year agoXBrowserSync and Floccus don’t sync to local files, unless you self-host the server or a webDAV respectively.
Lofloccus makes it easy to spawn a local webDAV server (making Floccus save your bookmarks to local files) which I can then sync with rsync or Syncthing or whatever system I already like. It’s only available for Windows and MacOS though.
It’s me asking if there’s any firewall out there that supports profiles. I’ve learnt graphene has this functionality, that’s become one option to go with.
So you’re running a website, and nerdctl’s IPFS support let you serve your website over IPFS?
liminal@lemmy.mlto
Open Source@lemmy.ml•Matrix 2.0 will be at least 24x - 1400x faster depending on what you're measuring because of a Rust reimplementation, and better chat loads and room joins. Mobile, VoIP + video, and 3rd Room improve.
1·4 years agoYup this doesn’t seem robust at all. Any message
anchor=just points to a message UUID, which means there is a page, showing adjacent messages, for every message. The pages are mostly duplicates.
liminal@lemmy.mlto
Open Source@lemmy.ml•Matrix 2.0 will be at least 24x - 1400x faster depending on what you're measuring because of a Rust reimplementation, and better chat loads and room joins. Mobile, VoIP + video, and 3rd Room improve.
1·4 years agoThe pages are plain html, so yeah? Now I’m unsure if search engines can really scrape the entire post history because pagination is done with anchors, I’m not sure how robust anchors are.
An anchor looks like this: https://view.matrix.org/room/!OGEhHVWSdvArJzumhm:matrix.org/?anchor=$c2Qx9k8CB4WBrNsIxW4WxlZ1MqBvYS-tfGFsA7QkxMg&offset=60
See also https://searchenginemap.com, a pretty nifty summary of the few existing independent crawlers, and the many metasearch engines that feed off them.
I agree. If they’re used solely as any other public forum. The problem is it supports the ecosystem of these platforms’ faux private chats. Also if you have to create an account to view a public chat why not make it encrypted all the way? Matrix.org supports encrypted rooms.
It’s also ridiculous that you have to give a phone number to use any “type of public forum”, telegram.
Telegram is no more secure than any other for-profit platform it claims to be an alternative to.
liminal@lemmy.mlto
Asklemmy@lemmy.ml•What project do you want to exist, but don't want to create yourself?
2·5 years agoA service like letterboxd, myanimelist, and goodreads, that unifies all these mediums and more, into one single media tracking site with individual user profiles and off that, on the side, some social-networking. As of today, there’s no site for tracking ALL media, rather only many sites focused on a single medium, each with ad-hoc databases and different UI:
- Film (IMDB, letterboxd)
- Anime (myanimelist, anilist, kitsu)
- Games (mobygames, glitchwave?)
- Literature (goodreads, bookwyrm (federated!)
- Music (rateyourmusic, …)
If I’d just like to keep track of media I consume I can just keep one big offline spreadsheet, but what I enjoy of these services is the ability to make friends with similar tastes and being introduced to amazing art through personalized recommendations, that I otherwise would’ve never known about.
Apart of being fragmented, most of the aforementioned available media tracking services sell user’s data and are proprietary. I guess I’d like to see something like bookwyrm, but with a larger scope than just books. Maybe integration with Wikidata is the only viable solution for the herculean scope of cataloguing every media release that ever existed. Not sure how this would turn out in practice, but Wikidata could benefit too, from having legions of people adding info on their favorite obscure shows.



I’m assuming GrapheneOS isn’t backdoored. If a new release were backdoored, I would have a non-zero chance to catch it while reviewing commit diffs, but the chance of catching it would be zero if I instead used auto-update and let the devs push whatever signed binary they wanted.