Maybe we have some bias on this topic, but I had the same thought. Maven is such a well known tool in IT, that I'm surprised they just created a social network with the same name. Until they get a bit famous this won't be good for SEO.
Ah it makes more sense that way, I didn't read the title as if they were talking about all the extensions that they found summed together. This does make it really clear that you should always check extensions when installing them, and not just install extensions with a low install base from an unknown author.
That headline is quite misleading ... the malicious extension only had a few hundred installs, not millions. They just copied an existing extension that does have 7 millions installs. They did went quite far by registering a URL. Of course it is bad that stuff like this manages to get on the store, but as long as you check what you are installing, you should be fine.
I also started using Lemmy during the Reddit fallout, and stayed for a few weeks. After that I started seeing less posts that interested me, and I took a break from Lemmy for a while. And finally returned a week ago.
Even on Reddit I see less interesting posts now. Especially the amount of discussion posts also seems to be lower there now. The official Reddit app is also a lot better for reading than for writing.
Although this feature sounds helpful, it really looks like they went too far with this. They should probably look for a way to sell these Copilot+ pc’s in another way if they can’t get this secure enough and probably keep it disabled for companies…
I’m surprised they didn’t make sure that the part that should help you hide sensitive information worked well before letting the first testers get their hands on the feature. All this bad news about the future doesn’t help convince people to turn it on.
There is indeed quite a shift towards just posting articles. A lot of people don’t regularly post (at least it was like that on Reddit), and for those people, the articles are great.
It is hard to keep conversations active in smaller communities. As people will quickly stop posting new chats and questions if there are no replies.
I got the boardgame last week, haven’t played it yet. The art and boxes all seem quite good. I’m looking forward to playing it.
If you would just stick to playing games on the Quest 2/3 directly that should be fine. The Quest 2 can run basic games, so it does limit you a bit. For example VR Chat has some worlds with too many assets that are not playable on the Quest 2 directly. From what I remember you would be limited to Meta’s store though.
Unfortunately VR seems to be a niche thing so I doubt this will get a lot of priority on Linux.
Only Lemmy instances with custom emoticons were affected based on the Recap of the Lemmy XSS incident. So if Lemmy.ml doesn't have these it should not have been affected.
So it works by fetching replies from Mastodon. We can see Mastodon users here by searching for their profile (like @[email protected] ) but that does not list any of their posts as Lemmy is not able to show messages that are not part of a post/magazine. Is there any way that we can find the messages trough a direct link?
I think this is very hard at this point. Manny Fediverse communities are quite small and fear that their community will be flooded with content from any external platform. We even saw this when a lot of Reddit users came over to Lemmy. So in those cases there will be a lot of distrust.
Smaller companies could easily use a more strictly controlled* Lemmy instance to provide a space for their community. That would allow people to interact with that community without having to setup a new account. *Tightly moderated and limited to admin created communities.
But anything large will just be distrusted as long as the platform is much larger than large Fediverse instances. Maybe EU law could help to protect the Fediverse from EEE. But EU law also moves slow, and we don't want laws slowing down the growth of the Fediverse either.
cross-posted from: https://lemmy.ml/post/1390029
cross-posted from: https://popplesburger.hilciferous.nl/post/9969
After setting up my own Lemmy server, I've been intrigued by the server logs. I was surprised to see some search engines already start to crawl my instances despite it having very little content.
I've noticed that most requests seem to come in from IPv4 addresses, despite my server having both an IPv4 and an IPv6 address. This made me wonder.
IPv4 addresses are getting more scarce by the day and large parts of the world have to share an IPv4 address to get access to older websites. This often leads to unintended fallout, such as thousands of people getting blocked by an IP ban from a site admin that doesn't know any better, as well as anti-DDoS providers throwing up annoying CAPTCHA pages because of bad traffic coming from the shared IP address. Furthermore, hosting a Lemmy server of your own is impossible behind a shared IP address, so IPv6 is the only option.
IPv6 is the clear way forward. However, many people haven't configured IPv6 for their hosts. People running their own Lemmy instances behind an IPv6 address won't be able to federate with those servers, and that's a real shame.
Looking into it
So, I whipped up this quick Python script:
import requests import sys import socket from progress.bar import Bar lemmy_host = sys.argv[1] site_request = requests.get(f"https://{lemmy_host}/api/v3/site").json() hosts = site_request['federated_instances']['linked'] ipv4_only = [] ipv6_only = [] both = [] error = [] with Bar('Looking up hosts', max=len(hosts)) as bar: for host in hosts: host = host.strip() try: dns = socket.getaddrinfo(host, 443) except socket.gaierror: error.append(host) has_ipv4 = False has_ipv6 = False for entry in dns: (family, _, _, _, _) = entry if family == socket.AddressFamily.AF_INET: has_ipv4 = True elif family == socket.AddressFamily.AF_INET6: has_ipv6 = True if has_ipv4 and has_ipv6: both.append(host) elif has_ipv4: ipv4_only.append(host) elif has_ipv6: ipv6_only.append(host) else: error.append(host) bar.message = f"Looking up hosts (B:{len(both)} 4:{len(ipv4_only)} 6:{len(ipv6_only)} E:{len(error)})" bar.next() print(f"Found {len(both)} hosts with both protocols, {len(ipv6_only)} hosts with IPv6 only, and {len(ipv4_only)} outdated hosts, failed to look up {len(error)} hosts")This script fetches the instances a particular Lemmy server federates with (ignoring the blocked hosts) and then looks all of them up through DNS. It shows you the IPv4/IPv6 capabilities of the servers federating with your server.
I've run the script against a few popular servers and the results are in:
Results
Server IPv6 + IPv4 IPv6 only IPv4 Error Total Lemmy.ml 1340 3 1903 215 3461 Beehaw.org 807 0 1105 74 1986 My server 202 0 312 4 518
It seems that over half (55%+) the servers on the Fediverse aren't reachable over IPv6!
I'm running my own server, what can I do?
Chances are you've already got an IPv6 address on your server. All you need to do is find out what it is (
ip address showin Linux), add an AAAA record in your DNS entries, and enable IPv6 in your web server of choice (i.e. listen [::]:443 in Nginx). Those running a firewall may need to allow traffic through IPv6 as well, but many modern firewalls treat whitelist entries the same these days.Some of you may be running servers on networks that haven't bothered implementing IPv6 yet. There are still ways to get IPv6 working!
Getting IPv6 through Tunnelbroker
If you've got a publicly reachable IPv4 address that can be pinged from outside, you can use Hurricane Electric's Tunnelbroker to get an IPv6 range, free of charge! You get up to five tunnels per account (each tunnel with a full /64 network) and a routed /48 network for larger installations, giving you up to 65k subnets to play with!
There are lots of guides out there, some for PfSense, some for Linux, some for Windows; there's probably one for your OS of choice.
Getting IPv6 behind CGNAT
Getting an IPv6 network through a tunnelbroker service behind CGNAT is (almost) impossible. Many ISPs that employ CGNAT already provide their customers with IPv6 networks, but some of them are particularly cheap, especially consumer ISPs.
It's still possible to get IPv6 into your network through a VPN, but for serving content you'll need a server with IPv6 access. You can get a free cloud server from various cloud providers to get started. An easy way forward may be to host your server in the cloud, but if you've got a powerful server at home, you can just use the free server for its networking capabilities.
Free servers are available from all kinds of providers, such as Amazon(free for a year), Azure(free for a year), Oracle(free without time limit). Alternatively, a dedicated VPS with IPv6 capabilities can be as cheap as $4-5 per month if you shop around.
You can install a VPN server on your cloud instance, like Wireguard, and that will allow you to use the cloud IPv6 address at home. Configure the VPN to assign an IPv6 address and to forward traffic, and you've got yourself an IPv6 capable server already!
There are guides online about how to set up such a system. This gist will give you the short version.
Final notes
It should be noted that this is a simple analysis based on server counts alone. Most people flock to only a few servers, so most Lemmy users should be able to access IPv6 servers. However, in terms of self hosting, these things can matter!
cross-posted from: https://lemmy.cat/post/6385
It is currently possible, through Lemmy's API, to create accounts automatically and without limit if verification by email address or captcha is not activated. I'd advise you to activate one or both of them NOW!
After registering x number of accounts (currently I could do thousands), all you have to do is list all the existing communities for each of the account to publishes one new post per community, or more. I'll leave you to picture the mess.
(I apologise to the administrators of sh.itjust.works, I should have done the test with my own server.)
view more: next ›
Yup YouTube makes it very easy to receive money from adds and people that have YouTube premium. Having a YouTube premium subscription means that you are at least supporting the creator of every video that you watch a little bit (from what I can find 55% of what you pay is going to the creators). Yes YouTube takes quite a large cut, but video hosting in high quality costs a lot of money.
I think it will be very hard to do this on a decentralised platform. People don't trust just anyone with their money, so it could lead to people abandoning smaller servers and you can be sure that bad actors would pop up and try to abuse the system. And even if you do this the right way, you would have to build this system entirely before you can convince creators to move to this platform.
It will also be really hard to offer the same quality and reliability that YouTube offers, without taking a larger cut than the 45% that YouTube takes. Hosting a large video platform is expensive, and many of the Fediverse users are anti-adds and will run an add-blocker and maybe even sponsor-blocker.