Spyke

Replies

Comment on

Where did the dust settle on Syncthing Fork?

F-droid themselves gave an update in April:

https://f-droid.org/en/2026/04/03/twif.html

If you’ve been holding off updating Syncthing-Fork we have two pieces of news for you. First, the original dev continues to collaborate still, we know this was a pain point back then. Second, we’ve just added BasicSync, A simple app for running Syncthing, which just controls Syncthing’s running behaviour as hands off as possible, while the original service hums in the background.

So it seems since the handover things have settled but there is also a new fork which takes a more bare-bones approach.

linux

Comment on

Drag and Drop is an absolute mess

I see this with flatpaks, the solution might be to grant permission to the app to the part of the filesystem your dragging from with flatseal/cmdline.

HOWEVER I do think the desktop is missing a pop-up which offers to do this for you when it happens. This is how android does it when an app needs access outside its own files, you just get a prompt to allow it.

This is the sandbox future - it's safer and you can trust that apps can't go snooping around your system but users shouldn't need to fiddle with perms all the time to get stuff done.

Comment on

Mattermost is no longer Open-Source

Reply in thread

The contention is that Mattermost say it's licensed under AGPL but then they add conditions which are incompatible with that license. So it seems they want to give appearance of AGPL but not give the actual rights that come with it. So therefore it's not AGPL.

Comment on

Selfhosting with a seven year old

Hedy is an open source programming language that is broken into levels for easy learning. As you progress the language gains more capabilities, so they are never overwhelmed with too much

In contrast to block based languages like scratch its goal is to leave students ready to switch to Python by the end.

Each level has small tasks to complete so you can tackle it piece by piece and get a sense of progression.

https://hedy.org/

Comment on

Are there any examples of 'perfect' software?

There was a moment in time where maybe it was qmail:

https://en.wikipedia.org/wiki/Qmail

Ten years after the launch of qmail 1.0, and at a time when more than a million of the Internet’s SMTP servers ran either qmail or netqmail, only four known bugs had been found in the qmail 1.0 releases, and no security issues.

More on how it was accomplished:

https://blog.acolyer.org/2018/01/17/some-thoughts-on-security-after-ten-years-of-qmail-1-0/

Comment on

Anthropic Mythos shaping up as nothingburger

This is the meat of the headline:

For example, the Anthropic-claimed 181 Firefox exploits ran with the browser sandbox turned off and the FreeBSD exploit transcript "shows substantial human guidance, not autonomy." 

Additionally, the "'thousands of severe vulnerabilities' extrapolates from 198 manually reviewed reports. The Linux kernel bug was found by Opus 4.6, the public model, not Mythos," Devansh said.

Another researcher, Davi Ottenheimer, pointed out that the security section (Section 3, pages 47-53) of Anthropic's 244-page documentation "contains no count of zero-days at all. With no CVE list, no CVSS distribution, no severity bucket, no disclosure timeline, no vendor-confirmed-novel table, no false-positive rate."

Ottenheimer likens it to "the ending of the Wizard of Oz, a sorry disappointment about a model weaponizing two bugs that a different model found, in software the vendor had already patched, in a test environment with the browser sandbox and defense-in-depth mitigations stripped out."

Comment on

UK government targets VPNs in new online safety consultation as Lords vote for ban

Parliament itself recommends VPN use for its members:

Labour's Lord Knight acknowledged that VPNs could "undermine the child safety gains of the Online Safety Act" but warned that age-gating the apps could be "extremely problematic". He said:

"My phone uses a VPN, following a personal device cyber consultation offered by this Parliament. VPNs can make us more secure, and we should not rush to deprive children of that safety."

Comment on

A post-American, enshittification-resistant internet

Reply in thread

The EFF have a page on this, setting out the threats:

https://www.eff.org/wp/unintended-consequences-16-years-under-dmca

...which is mostly a link to:

https://www.eff.org/files/2014/09/16/unintendedconsequences2014.pdf

...whose summary reads as follows.

The “anti-­‐circumvention” provisions of the Digital Millennium Copyright Act (“DMCA”), codified in section 1201 of the Copyright Act, have not been used as Congress envisioned. The law was ostensibly intended to stop copyright infringers from defeating anti-­‐piracy protections added to copyrighted works.[1] In practice, the anti-­‐circumvention provisions have been used to stifle a wide array of legitimate activities. As a result, the DMCA has become a serious threat to several important public policy priorities:

The DMCA Chills Free Expression and Scientific Research.

Experience with section 1201 demonstrates that it is being used to stifle free speech and scientific research. The lawsuit against 2600 magazine, threats against Princeton Professor Edward Felten’s team of researchers, and prosecution of Russian programmer Dmitry Sklyarov have chilled the legitimate activities of journalists, publishers, scientists, students, programmers, and members of the public.

The DMCA Jeopardizes Fair Use.

By banning all acts of circumvention, and all technologies and tools that can be used for circumvention, the DMCA grants to copyright owners the power to unilaterally eliminate the public’s fair use rights. Already, the movie industry’s use of encryption on DVDs has curtailed consumers’ ability to make legitimate, personal-­‐use copies of movies they have purchased.

The DMCA Impedes Competition and Innovation.

Rather than focusing on pirates, some have wielded the DMCA to hinder legitimate competitors. For example, the DMCA has been used to block aftermarket competition in laser printer toner cartridges, garage door openers, videogame console accessories, and computer maintenance1 services. Similarly, Apple has used the DMCA to tie its iPhone devices to Apple’s own software and services.

linux

Comment on

Which command substitution do you prefer in shell scripts: backquotes `` or $() syntax?

$() for me, to quote from

https://www.shellcheck.net/wiki/SC2006

Backtick command substitution `...` is legacy syntax with several issues.

  1. It has a series of undefined behaviors related to quoting in POSIX.
  2. It imposes a custom escaping mode with surprising results.
  3. It's exceptionally hard to nest.

$(...) command substitution has none of these problems, and is therefore strongly encouraged.