Replies

dunglas, 8 months ago to random French

Yet another reason to use Firefox with uBlock Origin. https://arstechnica.com/security/2023/10/google-hosted-malvertising-leads-to-fake-keepass-site-that-looks-genuine/

Max_P, 8 months ago

That’s just how poorly Mastodon and Lemmy integrate with eachother.

shbhmnk, 9 months ago to android

Wish there was an Android Studio Lite version of the IDE that is targeted to low powered devices and has only bare minimum features to develop an app.

#AndroidDev #Android #Jetbrains #Google @android @android @android @fossdroid

Max_P, 9 months ago

Nobody’s stopping anyone from using vim and running gradle directly. ./gradlew assembleDebug and you’re good to go.

renwillis, 11 months ago to fediverse

Another win for the decentralized Fediverse when a government domain takeback can’t shut it down!

Mali has decided to take back .ml from people who took advantage of the free domain like fmhy.ml & maybe lemmy.ml - https://lemmy.world/post/1915581

And while it sucks for those servers & those users may have to migrate, the #Fediverse and it’s plethora of platforms continues on. 💪 💜

@fediverse #lemmy #mastodon #calckey #mali #decentralization

Max_P, 11 months ago

ActivityPub uses URLs as IDs for everything. And there’s no way to update those IDs, it’s possible to update inbox URLs and other things but the main address of the object itself is its URL and thus there’s no way to propagate it without essentially making a new one.

It’s not impossible to do, but managing to get that to federate to all instances in a sane way is not currently possible.

There’s a ridiculous amount of URLs in the database and even fixing all of those won’t fully do the job, as post content might still refer to the old URL and whatnot.

It’s a messy situation, you’re not supposed to lose your domain.

Max_P, 11 months ago

You’ll have to go complain directly to the W3C for that. The situation is Lemmy may fix it with some custom protocol extensions, but then it’ll still break every other piece of software that follows the spec like Mastodon, Kbin and others.

It’s like adding a 6xx status to HTTP. You technically can, but expect every standard compliant clients to be confused and bail on it.

You can’t just change domains with emails either and have everything seemlessly migrate over. Not losing a domain is not a completely unreasonable assumption to make.

Thankfully the users and communities aren’t lost, it’s just that people outside of fmhy will have to resubscribe to the communities on the new domain.

Max_P, 11 months ago

The W3C, apparently. It’s both the ID and the URL of the object if you want to refresh it. They seem to suggest doing it that way because the URL of a user profile is going to be guaranteed to be unique, and can only be owned by the owner of the domain.

Lemmy assigns it its own internal ID per instance but it’s only used internally for joins and stuff.

For example, your person ID is feddit.cl/u/nintendiator. If you curl it in ActivityPub format you’ll get your user:

<pre style="background-color:#ffffff;">
<span style="color:#323232;">~ % curl -H "Accept: application/activity+json" https://feddit.cl/u/nintendiator
</span><span style="color:#323232;">{
</span><span style="color:#323232;">  "@context": [.....]
</span><span style="color:#323232;">  "type": "Person",
</span><span style="color:#323232;">  "id": "https://feddit.cl/u/nintendiator",
</span><span style="color:#323232;">  "preferredUsername": "nintendiator",
</span><span style="color:#323232;">  "inbox": "https://feddit.cl/u/nintendiator/inbox",
</span><span style="color:#323232;">  "outbox": "https://feddit.cl/u/nintendiator/outbox",
</span><span style="color:#323232;">  ......
</span><span style="color:#323232;">}
</span>

Max_P, 11 months ago

There’s definitely better ways to handle this, like, the ID could be a public key or something. Chances of RSA/EC key conflicts is basically nonexistent or we wouldn’t use them.

But it’s the W3C, of course they assume URLs can and will be permanent. Your domain being seized is not something typical companies and organizations face. It’s something you expect to happen to a site hosting piracy and other illegal content, which FMHY is somewhat borderline with its piracy guides.

ActivityPub is not designed to be any sort of censorship resistant for sites that move addresses and servers frequently.

Max_P, 11 months ago

Debian packages are signed individually, and usually people also don’t see downloading Debian packages as potentially privacy-sensitive, so plain download is acceptable.

For lemmy where user accounts are involved, and in general as a new protocol designed in the age of HTTPS, it makes sense to require HTTPS.