mathnmusic

11 ms·

61.
by mathnmusic 5y ago
The question is simple: Are they building it with end-to-end encryption? If not, it deserves all the criticism. Security/privacy has to be part of the design and cannot be bolted on post-facto.
62.
XMPP: Admin-in-the-Middle(infosec-handbook.eu)
1 points by mathnmusic 5y ago|8 comments
63.
by mathnmusic 5y ago
This simply downloads a 65MB binary executable "motor-admin-Linux-x86_64" from GitHub and does not build from the code given in the repo. There's no visibility into what the binary actually contains or how to build it on my o
64.
by mathnmusic 5y ago
What I meant to ask is: Why is the Dockerfile that generates https://hub.docker.com/r/motoradmin/motoradmin not available in the repo? It makes it hard to verify exactly what went into the image or to dockerize on
65.
by mathnmusic 5y ago
Thanks for building this! It seems to cover most features I'd want. The Dockerfile is simply downloading a release from GitHub. Docker Compose file is referring to an existing image on DockerHub. How can I build a Docker image for myse
66.
by mathnmusic 5y ago
Even better would be to present all old comment threads on the latest link.
67.
by mathnmusic 5y ago
I run my own instance in a convoluted way - I added ActivityPub source and sink support to my own webapp. But every user deserves account portability, not just those who know how to deploy and maintain a Mastodon instance.
68.
by mathnmusic 5y ago
Android's Play stores makes a lot of money. So much so that it's quite comfortable reducing its fees from 30% to 15% for some developers. Maps already charges fees for all location-based apps (cabs, deliveries, fleet tracking etc)
69.
by mathnmusic 5y ago
Google should be broken up into 5 parts: Search/Adwords/Mail/Drive, Android, Chrome, Maps & GCP.
70.
by mathnmusic 5y ago
How do things stand on account portability? If I sign up at a mastodon server, build an audience and network there, but later if the server admin changes its policies in unfavorable directions, can I migrate to a new server with all my cont
71.
by mathnmusic 5y ago
(1) is now solved with link to text fragments.
72.
by mathnmusic 5y ago
Captchas solve the wrong problem. Abuse is what you want to prevent, and so you need to detect abuse, not humanness. Rate-limiting, reputation check, web of trust etc all are valid techniques. Bots can be nice. Humans can be bad. Focus on t
73.
by mathnmusic 5y ago
The first principle should be to separate "documents" from "webapps". An article on NYTimes should be classified as a document which comes with a sandbox with minimal data collection. Of course, as things stand, every si
74.
by mathnmusic 5y ago
I find that unconvincing. Great explanations are usually also great at convincing me.
75.
by mathnmusic 5y ago
I was recently forced to migrate my hobby FOSS project the other way: from DigitalOcean to AWS. The primary reason being: a generous quota of 60,000 emails per month to send via SES. Most mail providers give only up to 3,000 to 6,000 emails
76.
by mathnmusic 5y ago
So, more than 1,000 users have signed up as of now. But because all content is public (does not require login), most traffic is unauthenticated. Some topics are ranked decently in Google, so users come and pick a resource and leave. Which i
77.
by mathnmusic 5y ago
OpenLibrary (relatively less known project by Internet Archive) is doing good work on collecting identifiers for books and works, which LearnAwesome leverages. But if you check in app/utilities/book.rb, you will notice that we hav
78.
by mathnmusic 5y ago
One of the cool things that the knowledge graph enables is that you can follow “topics” and get learning resources like latest research papers for THAT TOPIC in your feed - even outside the main site. This is the power of ActivityPub which
79.
by mathnmusic 5y ago
GoodReads is all but dead for many. A few months ago, they deprecated their API keys (without notice). I started building a GoodReads-equivalent but realized that many people care more about learning from multiple media formats (blogs, vide
80.
by mathnmusic 5y ago
Why is always them wanting to "say something" rather than "learn something"? I'd love to watch the story of somebody genuinely trying to learn or understand something complex.
81.
by mathnmusic 5y ago
No, Apple is free to stop operating in countries with such regulators. No business activity => No violation of competition-related regulations.
82.
by mathnmusic 5y ago
I just use a single static HTML file that lets me organize my notes and TODOs in five big buckets of life and track high level goals. All manually entered and data is only ever stored in the browser's localStorage so it remains complet
83.
by mathnmusic 5y ago
After all the popups, it needs a last one saying "this site works best in our mobile app".
84.
by mathnmusic 5y ago
You are right that an external queuing system might be useful in some cases. I was thinking of simple background jobs like sending emails while processing an HTTP request. Once persistence is available, why would this be any less resilient
85.
by mathnmusic 5y ago
Why couldn't parallel execution in single process be combined with persistence? Store the job data, the continue execution of the job and at the end, clean up or mark it completed. One gets both persistence as well as an easy, single-p
86.
by mathnmusic 5y ago
I have been dealing with the same problem for curating resources at https://learnawesome.org . Projects like Openlibrary do collect unique identifiers for _books_, but for everything else, it mostly takes manual effort. For examp
87.
by mathnmusic 6y ago
This is a fantastic effort! Kudos :-) I have been collecting learning resources and their reviews by experts at https://learnawesome.org/ (open-source, built with Ruby on Rails and TailwindCSS). Would you be kind enough to
88.
by mathnmusic 6y ago
But there's a law against manipulating stocks.
89.
by mathnmusic 6y ago
Does this not serve the purpose? Repo -> Settings -> Moderation Settings -> Limit to repository collaborators
90.
by mathnmusic 6y ago
If the dispute is with AWS abusing the trademark, license change is an exaggerated punishment that harms many others besides AWS itself.

More ›