Ah it makes more sense that way, I didn’t read the title as if they were talking about all the extensions that they found summed together. This does make it really clear that you should always check extensions when installing them, and not just install extensions with a low install base from an unknown author.
That headline is quite misleading … the malicious extension only had a few hundred installs, not millions. They just copied an existing extension that does have 7 millions installs. They did went quite far by registering a URL. Of course it is bad that stuff like this manages to get on the store, but as long as you check what you are installing, you should be fine.
Although this feature sounds helpful, it really looks like they went too far with this. They should probably look for a way to sell these Copilot+ pc’s in another way if they can’t get this secure enough and probably keep it disabled for companies…
I’m surprised they didn’t make sure that the part that should help you hide sensitive information worked well before letting the first testers get their hands on the feature. All this bad news about the future doesn’t help convince people to turn it on.
If you would just stick to playing games on the Quest 2/3 directly that should be fine. The Quest 2 can run basic games, so it does limit you a bit. For example VR Chat has some worlds with too many assets that are not playable on the Quest 2 directly. From what I remember you would be limited to Meta’s store though.
Unfortunately VR seems to be a niche thing so I doubt this will get a lot of priority on Linux.
Isn’t this just what many people predicted what would happen when everybody would use adblock? Now most people use some kind of blocker and some browsers even ship with a content blocker. Now pages need to make money in another way, so that’s either subscriptions, donations. or just force people to watch the ads anyway. I doubt people would want to donate any money to YouTube so then you get this.
It is not nice for users, but without income they would have to shut the site down. The same will happen when Lemmy gets popular, people will really have to donate to instance owners or they will also be forced to get money in another way.
MLem (the iOS Lemmy app) was also showing the user karma (but I think it was only showing karma gained on the local instance). So I guess this is nice for people that like to know their karma.
I also agree with @nlm@beehaw.org that we should leave this as a thing for yourself. The Lemmy API should not bother with reporting user karma as It would be way too easy to cheat for people with singe person instances. (and of course the toxicity that comes with karma)
For me it was a nice improvement. I liked the new window snapping feature that allows to you quickly snap an application to half or a quarter of your screen. But honestly there aren’t that many differences compared to my work laptop on Windows 10, I never regretted updating though.
I also used Linux for gaming, most of the time you will be able to get things to work. But sometimes you will have small issues in games and way worse support from the developers.
but outside of your own server pretty much nobody will care. Lemmy is federated over multiple jurisdictions, so even with full deletion implemented there’ll almost certainly be instances which will ignore the deletion request - and it will be completely legal for them to do so
Lemmy also seems to federate your matrix_user_id, that is clear personal data. It does not matter how the data gets to the federated server, this is still user data within the scope of the GDPR. It does not matter that that server does not have an agreement with the user, the instance that would ignore a GPDR related deletion request would be in direct violation of the GDPR. Maybe it can do that without consequences, though.
I completely understand that making Lemmy fully GPDR compliant will probably be impossible, however I don’t like the approach of “we will not succeed, so we don’t make any attempt”. Instances should actually delete data when that is requested, or instance hosts can get fined. For now, Lemmy has bigger issues to solve, but eventually they should do at least a best effort attempt to respect user data.
I sometimes use the IntelliJ GUI for working with git stash, I never needed that outside of Java projects. And I use the Github Client to keep track of the git projects on my computer, and see the content of commits. But for everything else, I just use the git CLI tools.
RuneScape is a great second monitor game, the game allows you to be very active when you want to and have time for that, chill semi-afk content when you also want to watch videos’ on the side, and even ‘click once every five minute’ style gameplay. I have a bit over 9000 hours on my ironman.
After Runescape, my second most played game is definitely Minecraft, then Skyrim with about 550 hours, Fallout 4 with 300 hours and everything else is 115 hours or less.
This looks really nice, some friends didn’t really like the current design of Lemmy and I think I could convince them to use it through a design like yours. Svelte really is a great tool to quickly get something working. I’m currently rewriting another site in SvelteKit as well.
About CORS / WebSocket. I’m not sure where it will be going with the WebSocket API. The main Lemmy project wants to use the WebSocket API less, as it a high performance impact on instances, and it also often seems to break in the PWA.
The article makes some good points, cooperation can easily get greedy when their platform gets too large. It does feel like it tries to connect FOSS to privacy, though, and that’s a bit more controversial, especially when it comes to the Fediverse. For a platform like Lemmy the most important thing is to share the post that you published, there is limited development time, security is hard, and when things go wrong it is hard to point at someone.
For example, sending private messages often leads to these private messages being readable by the admins of the instance. In the same way, instance admins can also see the email address that you provided. So we just have to trust the instance admin to be capable enough to protect our data and not leak it out on the internet.
Of course, these issues also exist in companies that want to push out new features to attract users instead of spending time to test if everything is secure. It simply is a difficult point for both FOSS and commercial software, and we need to hold both FOSS and commercial parties responsible for respecting our privacy. At least with FOSS, we can switch to a fork if a maintainer does not do their job well.
The law that requires phones to use USB-C, does not say it will last forever. In fact, the update to USB-C proves that they look for new technologies and update the law once such a thing is needed. Maybe now people have to buy new chargers, but in the long term, keeping chargers the same will reduce e-waste as people can use USB-C to charge many devices. You can charge your MacBook and smartphone with the same charger because of USB-C and the USB power delivery specification.
But the Fair Share part is a bit weird, consumers already pay for the network. But often they don’t pay for the amount of data that they use. It would make more sense to just charge users again based on their network usage, but I understand that that would be highly unpopular. In the end, someone has to pay for all the traffic though.
Isn’t the official Reddit app also just a third party app that they bought 😅. It really starts to sound like he just tries to say anything that could help divide uninformed users from third party app developers, even if it makes no sense and everybody with some knowledge about Reddits history knows it is a lie.
Simply replacing all the mods sound like a good way to kill a subreddit, Reddit probably has no way to pick good mods… Mods will need some connection with the topic, and you don’t want to pick random users with no experience for large subreddits.
I started looking into building a theme for Lemmy, but it was quite difficult to get everything to run well locally. When I did a checkout the main branch had an error in the Rust code and the main branch of the ui had an error that prevented the websocket from connecting to the back-en. I did get it to work by fixing the small error in rust and using a branch that fixed the websocket error. But it was hard to get started.
I was wondering if there is a Lemmy development community here on Lemmy. I tried searching for it on Lemmy.ml, but the cummunties about Lemmy and support don’t really look like they are about development.
They already made the mobile site practically unusable by constantly reminding you to use the app. The mobile browsing experience was just terrible. They can just show the same adds in the mobile browser…
Maybe we have some bias on this topic, but I had the same thought. Maven is such a well known tool in IT, that I’m surprised they just created a social network with the same name. Until they get a bit famous this won’t be good for SEO.