• 7 Posts
  • 32 Comments
Joined 4 years ago
cake
Cake day: January 20th, 2021

help-circle






  • I agree with you to some extent, but not completely.

    I think that making a comparison of anything to Hitler is polarizing language and is unlikely to lead to a constructive discussion. One can perfectly well explain these concepts without needing to bring up historical references, and bringing up this specific reference does little less than adding ‘shock’ value. This language directly antagonizes the people with different views.

    Pfizer ceo admitting vax don’t work (to sell the new one of course)

    This is obviously not true, and this is also a very polarized statement. Vaccine manufacturers have a strong economic incentive to push their product and they also have a lot of money to invest in marketing, this can’t be denied. Vaccines work and the COVID vaccine is effective and has a low adverse effect risk, this is also established well beyond reasonable doubt. There is a lot left to discuss, but that discussion is nuanced.

    As for the rest, I don’t give as much credit to the ‘elite ruling class’ as you do. I don’t think that they are as coordinated and capable. I think that the world and society is shaped by many different social and political forces, and that these follow “natural” laws if they can be called that. The elite have a massive influence because they can move a huge number of resources, but I think that their influence is rather chaotic in the long term. Corporate media is propaganda but I have never heard anyone say otherwise, so not much to add there.

    So, with regards to:

    So I disagree that society has agreed to this.

    I don’t place the elite above society, I believe that we are all in this mess together. But this is really a personal opinion and not something that I can show you with hard evidence, so we can just disagree here without problem.

    As for censorship, there is more censorship than I would like. I do understand the logic of censorship. Making false claims is much much much easier than thoroughly debunking them, so censorship can save a lot of time and effort. On the other hand, I think that it is our responsibility to assess whether a claim is true. I have also seen many cases of censorship of content that is perfectly legitimate. The censorship itself is rather mediocre too, though, because all of this censored content is easily available.

    That’s why I’m marching on 1/23

    Thank you for marching! I applaud your activism.



  • There is a small chance that the poster is really a concerned physician who really enjoys posting to Anti-QAnon subreddits during their free time, but looking at the user’s posting history, I highly doubt it.

    • Began posting around March, posts often, and almost exclusively about the vaccine.
    • Claims to be a doctor/physician in a very large number of posts.
    • Gives out medical advice over the internet.
    • Gets wrong basic details, such as claiming that an mRNA vaccine contains proteins.
    • It is quite a coincidence that such a dramatic event occured to someone who spends such a large amount of time writing on reddit about the anti-vax.

    I think that this is a character that someone made up.

    The deleted comments from this account also show that in the past the user would “speak with doctors” instead of claiming to be one.

    https://camas.github.io/reddit-search/#{"author":"thanosrain","resultSize":100}






  • This protects the database from a breach, but someone can set up an instance and collect the passwords from the logs:

    As far as I can tell with my very limited experience, back-end encryption is the standard. One trusts the host not to steal their passwords from the logs, so protecting the data in the case of a breach is good enough. I think that it would make sense for the standard in the Fediverse to be different. Passwords should be encrypted by the client by default, and then re-hashed back-end.

    It is also possible that what I am saying does not make sense in practical grounds - this is just something that surprised me while looking through the logs. I was under the wrong impression that plain text passwords were never accessible before looking into this topic.



  • I would be happy to see client-side password hashing implemented.

    I understand that responsibility of using unique passwords falls on the user, and maybe a truly malicious instance would be able to remove the hashing (although I think that it would be possible to check if non-hashed passwords leave the client). However, the reality is that many people still re-use their password for many websites and do not use 2FA when not required. Password hashing would reduce the level of trust required of the instance makers.

    On a similar vein, it would be nice to anonymize the ip addresses that are printed to the docker logs if possible, similar to the nginx logs. I think that this would be easier to undo for a malicious instance, but at least they would need to have a bit more technical knowledge to get to this information.


  • I tried to reply from my instance (https://mander.xyz/post/655), but at the moment the federation is not working again. This is what I wrote:

    During the day the federation will work during a few hours/minutes, and then it stops working again. For example, if I try to navigate to a lemmy community from my instance at this moment, I get the following dns lookup error:

    lemmy_1 | 2021-12-12T12:11:34.411206Z ERROR lemmy_websocket::handlers: Error during message handling error sending request for url (https://lemmy.ml/.well-known/webfinger?resource=acct:linux@lemmy.ml): error trying to connect: dns error: failed to lookup address information: Try again

    Between my and other lemmy instances (forum.purplerabbit.xyz, sopuli.xyz, dissonanz.xyz) federation appears to work fine continuously. I have also tested whether the federation between lemmy and other instances is also not working during the same period time, but they federate just fine. It appears to be a problem specific to my instance.






  • Aha, thanks. This might explain the gateway errors I experienced when trying to build using the 10.0.0 image.

    I also notice that the docker-compose file still points to the lemmy-ui 0.9.9 - should I build using that version, or should I upgrade my UI image to the 10.0.1?

    Last thing - if I pull the released lemmy and lemmy-ui tags (10.1.1) from github now and build my images from those, should those work fine? Or are these untested development versions?