• 1 Post
  • 316 Comments
Joined 1 year ago
cake
Cake day: June 15th, 2023

help-circle

  • I recently tried Bazzite, and I have to agree. Switching from a traditional Linux distro to an immutable distro is harder than switching from Windows to Linux. I’m not kidding. When it comes to immutability, my experience can be split into two general cases:

    1. I don’t notice any difference at all.
    2. It’s a giant pain in the ass.

    I have yet to encounter a scenario where immutability offered a tangible benefit. The supposed advantages seem rather abstract. I can’t break my system? Okay…but…well, I already had snapper for the rare occasions when something got royally borked. This is a problem that has already been solved without major compromises, so why are we now compromising so much to solve it again?

    It comes with 4 different package management systems (or 6 if you count Distrobox and Waydroid), and they all come with big caveats. I’ve had to reboot more in the past week than I previously had in the past year on Debian, because every time I need to install something from the main Fedora repo with rpm-ostree (which has been many times already), it needs to reboot. They recommend against using rpm-ostree, but there is no reasonable alternative for a rather wide array of software. It’s either rpm-ostree or build a whole mess of things from source and manage them manually. Both options suck very hard.

    Still, overall, Bazzite delivers. Everything you see on their web site works out of the box. It’s hard to recommend, but it’s also hard to criticize. I’ve never had a smoother gaming experience, and this is the first time I’ve ever had to spend zero minutes configuring my GPU drivers (outside of macOS, anyway). You get CUDA and ROCm out of the box. You get the latest drivers. It’s awesome.

    If you’re wondering if an immutable distro is right for you, the answer is probably “no”. But if you’re up for the, erm, “adventure” of learning this new paradigm, Bazzite fucking rocks.


  • I’m certain that if someone did collect data from the Fediverse; it would become a hot topic

    I’d assume bad actors (or at least chaotic neutral actors) are slurping up the entire fediverse already. It is trivial to do, and nobody would know.

    I mean, the whole point is that anyone can spin up a server and federate with others. I could start my own server, which would by default federate with almost all other servers. That means I wouldn’t even need to write a scraper. All that data would be sent straight to my server. All I need is access to my own database at that point. With Lemmy, I’d even get users’ upvote/downvote history, which is not visible in any clients AFAIK. The only barrier would be to subscribe to communities on different servers to kickstart federation.

    As long as you don’t run obvious spam/bot accounts, nobody would block your instance.

    Alternatively, if you want to write a scraper, that’s also pretty easy. Most servers are publicly accessible. Every community has an RSS feed. You don’t even need an account in general. Again, the whole point is to be open and accessible, in contrast to closed-off data-misers like Facebook, Reddit, and X.

    The fediverse is friendly to users, with very little regard for what those users might do. I believe this is the correct philosophy, but I won’t pretend that it doesn’t leave us open to bad behavior.






  • I keep seeing this claim, but never with any independent verification or technical explanation.

    What exactly is listening to you? How? When?

    Android and iOS both make it visible to the user when an app accesses the microphone, and they require that the user grant microphone permission to the app. It’s not supposed to be possible for apps to surreptitiously record you. This would require exploiting an unpatched security vulnerability and would surely violate the App Store and Play Store policies.

    If you can prove this is happening, then please do so. Both Apple and Google have a vested interest in stopping this; they do not want their competitors to have this data, and they would be happy to smack down a clear violation of policy.









  • Both.

    The good: CUDA is required for maximum performance and compatibility with machine learning (ML) frameworks and applications. It is a legitimate reason to choose Nvidia, and if you have an Nvidia card you will want to make sure you have CUDA acceleration working for any compatible ML workloads.

    The bad: Getting CUDA to actually install and run correctly is a giant pain in the ass for anything but the absolute most basic use case. You will likely need to maintain multiple framework versions, because new ones are not backwards-compatible. You’ll need to source custom versions of Python modules compiled against specific versions of CUDA, which opens a whole new circle of Dependency Hell. And you know how everyone and their dog publishes shit with Docker now? Yeah, have fun with that.

    That said, AMD’s equivalent (ROCm) is just as bad, and AMD is lagging about a full generation behind Nvidia in terms of ML performance.

    The easy way is to just use OpenCL. But that’s not going to give you the best performance, and it’s not going to be compatible with everything out there.


  • Mozilla says they use a third-party OHTTP intermediary. In the blog post linked above, they name Fastly as their partner. So it’s not as bad as Mozilla + Mozilla-wearing-funny-glasses.

    Personally, I still think this is the wrong approach to privacy, even though I’ve used Fakespot on my own many times over the years. Largely because I don’t think any of this needs to be built into a web browser.

    I would prefer my web browser to minimize information leakage by default, to the greatest degree that it can while still remaining useful as a web browser. Mozilla keeps adding bloat to Firefox, and bloat always comes at a cost. I’d much prefer these to be browser extensions that people can download if they want them, rather than built in by default. The baseline Firefox should be lean. Less “stuff” = smaller attack surface. Simplicity is best.

    I mean, the Fakespot browser extension has existed for a long time, and I’ve never seriously considered installing it. I’d much rather just take an extra three seconds to load their web site and paste in a URL than have it constantly monitoring my activity and doing god-knows-what with it. That way I have better knowledge and control of what is happening with my data. Even if I trust their intentions, I don’t implicitly trust their competence (all software has bugs) and I don’t trust that they will never go rogue in the future.

    And also, I just don’t find this claim all that compelling in principle:

    By processing the data jointly across two independent parties, they ensure neither party holds the information required to reveal sensitive information about someone.

    I mean…sure. That’s fair. Buuuuuut handing half the data to your “partner” doesn’t give me a whole lot of confidence. Especially since literally nobody reads all of the privacy policies they are subject to. See:

    https://www.theatlantic.com/technology/archive/2012/03/reading-the-privacy-policies-you-encounter-in-a-year-would-take-76-work-days/253851/

    https://www.npr.org/sections/alltechconsidered/2012/04/19/150905465/to-read-all-those-web-privacy-policies-just-take-a-month-off-work

    https://www.techradar.com/computing/cyber-security/you-need-a-whole-workweek-every-month-to-read-privacy-policiesand-thats-bad-news

    Minimizing privacy policies should be a high-priority goal for any organization that claims to value privacy.

    Furthermore, how many additional parties have access (legally or otherwise) to both Mozilla and Fastly? 🤷