Comment on
Canadian man detained at US border, forced to give biometrics including DNA, then rejected entry.
Reply in thread
He tried to go over with hope.
Bless this bastard, at least he confirmed the worst we all thought.
Comment on
Canadian man detained at US border, forced to give biometrics including DNA, then rejected entry.
Reply in thread
He tried to go over with hope.
Bless this bastard, at least he confirmed the worst we all thought.
Comment on
Systemd preparing to comply with age verification laws
Does BSD use systemd? I always wanted to try it and if this keeps up I might take the plunge.
Comment on
Why do conservative Albertans admire Texas ?
Texas has power outages for days at a time. People get rocked by astronomical utility bills. Also, Texas has boil water advisories for big population centres in one of the richest states in the US.
There’s nothing to covet here. It’s an embarrassment.
Comment on
Maybe most of society doesn't have much critical thinking because those who get those "critical thinking" genes go crazy from overthinking things and therefore fail to pass on the genes.
I’d say you are confusing critical thinking with anxiety. Critical thinking is a deliberate exercise that I choose to engage in, and I might be able to do for a certain period of time. I’d suggest that critical thinking is an investment of time and energy to really understand an issue, how it’s framed, how to re-frame it. At the highest levels, critical thinking will eventually lead to where you stand on an issue, and what scenarios change your standing.
But anxiety is something I don’t mean to engage in, and might not be able to stop. I’d agree it’s a disruption of critical thinking. It’s either a response to stress, or perhaps a force is pushing you to anxiety to break down your OODA loop (Observe, Orient, Decide, Act) and render you less effective on the field you’re playing in.
Comment on
How effective are ads?
Super effective!
It's not so much that ads can only sell you something anymore. They're able to sell your personal details and identity when abused.
I believe the issue has been written on even prior to the 2025 article from Wired.
Data brokers are basically form centralized American platforms which carry immense databases about its users. These demographics can essentially be used to target high value targets. These can include government employees, members of military, and other persons of interest.
These brokers use Mobile IDs to allow advertisers to micro-target people with their habits, browsing fingerprint, and purchase habits. Even if these companies say they don't associate identities with these Mobile IDs, the brokers can cross-reference enough information to basically de-anonymize a target.
Plus with influencers these days, many don't disclose if what they do is sponsored or part of a greater outreach campaign. You're basically stuck wondering if you're getting targeted or astroturfed.
https://www.wired.com/story/google-dv360-banned-audience-segments-national-security/
Comment on
Pete Hegseth snarls at reporter's 'gotcha question' when pressed on Iran war endgame
Reply in thread
When the President is implicated in the largest honeypot and blackmail operation known as the Epstein files, mentioned and commented among the most out of everyone else, everything involves the Epstein files.
Comment on
Stocks tumble after Trump vows to hit Iran 'extremely hard' in coming weeks
See you guys Monday for the news Trump will change his mind for the next pump and dump.
Comment on
US gas hits $4 as Trump tells other nations to ‘go get your own oil’
Reply in thread
One has to include shortages of fertilizer, and the shortages of fuel that Asia faces now. As other experts point out, those shortages alone will result in demand collapses that will reach back to the US.
Some believe the US has already collapsed. We’re just experiencing the after shocks.
Comment on
Usenet Black Friday Deals
Reply in thread
Was Ninjacentral the okay one and nzbgeek was the one with the data leak?
Comment on
Compatibility with Lemmy Fed
Reply in thread
Can one set up an account on one friendica instance and log in with it into another?
Comment on
Canada opens review into anti-dumping duties on Chinese PV modules, laminates
Reply in thread
Agreed, as far as solar installers are concerned they can’t get enough product to smoothly complete their projects even before the delusional American tariffs.
Comment on
My friend Charlie is back....
How about when abs cramp? Oh how I beg for mercy.
Comment on
PieFed Email Error
Reply in thread
Thank you everyone, for your replies and tips!!
I haven't followed PeerTube channels directly from PieFed - yet.
After just under 24 hours up, so far everything seems to be working just as wjs018 says.
Thanks Rimu for the Sentry tip.
I think I'll just not set the email for errors so as to avoid the logs being sent out.
Comment on
Amid an energy crisis, the world is drawing on its oil reserves. Why doesn't Canada have any?
Reply in thread
The US companies have significant investments in oil and gas in Canada. There’s no way the Americans would allow Canada to just pump the oil and process it further without a cut of the action.
Comment on
Hundreds of active-duty soldiers on standby, 2 defense officials say
Reply in thread
Comment on
Displaying Images From View Community
Reply in thread
#solved
EDIT: 2025-10-25 at 11h29 - I deleted the Content-Security-Policy and PieFed displays images as expected.
Reasoning
So after crawling through some very old Reddit posts, I came across other self-hosters discussing their new found interest in Security Headers from 5 years ago (dated, yes). Among the comments was a post by pentesticals (glorious):
::: spoiler quote
Don't stress about security headers and CSP. These are there to help provide additional protection against client-side issues which may or may not be present.
These will not have any direct impact on your services you expose, rather they aim to be a last resort to protect your browser in case an attacker tries to exploit existing vulnerabilities such as a Cross Site Scripting - but not having these does not increase the risk of your server being compromised.
Use Nessus Essentials for scanning your services and have fun.
:::
https://www.reddit.com/r/selfhosted/comments/mpzl8f/any_recommendations_for_security_scans/
I use Caddy and I can indeed see the security headers that involve CSP. How should this setting be amended?
For what it's worth I looked over the "Using Caddy as reverse proxy" for Lemmy, and I notice that they just don't use the Content-Security-Policy option at all. I'm wondering if I should simply delete this Header for PieFed.
https://join-lemmy.org/docs/administration/caddy.html
::: spoiler Security Headers
(security_headers) {
header {
Strict-Transport-Security "max-age=31536000; includeSubDomains"
X-Content-Type-Options "nosniff"
X-Frame-Options "SAMEORIGIN"
Referrer-Policy "no-referrer"
X-XSS-Protection "1; mode=block"
Permissions-Policy "camera=(), microphone=(), geolocation=(), accelerometer=(), autoplay=(), fullscreen=(), gyroscope=(), interest-cohort=(), magnetometer=(), payment=()"
-Server
-x-powered-by
}
}
:::
Comment on
Is there *anything* we could try to get alternatives to YouTube?
I always wondered if folks could just take what plex does, only repackage it with a federated concept. Then the actual infrastructure and website can be signed off to trust or nonprofit or coop with poison pills to ward off the billionaires.
Comment on
Trump seeks to close $1.6 trillion revenue gap with raft of new tariffs