• 2 Posts
  • 46 Comments
Joined 3 years ago
cake
Cake day: July 1st, 2023

help-circle
  • Web browsers have a huge attack surface, and are most people’s main exposure to potential exploits. Without javascript, 99% of the attack surface disappears, becuase the attacker no longer has a way to run arbitrary code.

    A lot of terminal-based browsers don’t do javascript.

    If I want to scrape a page, this makes it a pain for both parties. I’m not an AI company, so I can afford the hash tax, but it’s still a pain to spin up Firefox from a from cron job instead of wget. And I’m still doing it, Anubis doesn’t stop small time scrapers like me who aren’t running AI training, and only scrape like one page per day. So now the server has to serve the original page, plus all the Anubis stuff each time my crown job goes off.


  • It sucks that you can’t browse anywhere without javascript anymore. It used to be that all the open source sites, most news sites, forums running phpbb, even YouTube aside from the actual <video> element all worked without javascript, and as a bonus there would be no ads.

    Now, you can’t browse anywhere without these challenges. At least this one is noninvasive, but the Cloudflare one and the Google Recaptcha do a ton of fingerprinting to choose whether to let you in.

    USPS has a home-rolled one that requires web assembly enabled, or it silently fails with a blank page. There’s no non-malicious excuse for that.

    If this is the future of web browsing, hopefully more sites use systems like Anubis. But I also hope at least static pages can be viewable as plain html.







  • Usually it’s this, but sometimes the Recaptcha doesn’t even load (looks like an IP ban). I just submit the form, and then get an error message saying I must complete a Recaptcha, but there’s no evidence in the page of any Recaptcha to fill out.

    I’m on a residential ISP. I’ve checked every IP address reputation system I can find, and see no problems (except from “Clean Talk”, but they’re so small that I doubt Google uses them).

    Also, I hate knowing that I’m doing unpaid labor to help train an AI that will make the world a worse place.






  • Unfortunately, I think most platforms for novels allow AI, so they end up full of AI trash.

    Instead of using a platform, try looking up authors you’ve read before and liked. Then see where they publish. Or try and find a fandom for the genre you like, and ask humans for recommendations


  • Limonene@lemmy.worldtoLinux@lemmy.mlFan of Flatpaks ...or Not?
    link
    fedilink
    arrow-up
    45
    arrow-down
    1
    ·
    11 months ago

    I’ve never heard anyone say that Flatpaks could result in losing access to the terminal.

    My only problem with Flatpaks are the lack of digital signature, neither from the repository nor the uploader. Other major package managers do use digital signatures, and Flatpaks should too.







  • My favorite is Debian, with systemd uninstalled. At this point, you can’t install Debian without systemd, but you can uninstall systemd after OS installation.

    It used to be that most desktop environments in Debian depended on libpam-systemd, which depended on systemd and systemd-sysv. More recently, desktop environments just depend on libpam-elogind and elogind which is only part of systemd, and allows you to use sysvinit.

    I prefer sysvinit mainly because I find it easier to create custom services out of my own programs. My success rate at doing this in systemd is 1/3, and in sysvinit about 10/10.

    I also had a problem where a Debian-based embedded system had some kind of broken NTP client running on startup, and due to systemd, I couldn’t figure out how to disable it. It would set the time to several years into the future, as soon as it first got a network connection on each startup.