• 2 Posts
  • 14 Comments
Joined 3 years ago
cake
Cake day: June 12th, 2023

help-circle
  • Yes and no. The truth of the matter is supply-chain attacks in any repository are almost impossible to fully mitigate. The attack you linked sounds like a big and successful attack, but there are more minor attack attempts all the time. It’s the blessing and curse of every package manager that anyone can upload almost anything.

    The upshot is that the most active repos have the most eyes. Not to say an attack won’t fly under the radar, but if the React or Angular packages (or their dependencies) start acting weird, it’s more likely that someone will notice, as there are people dedicated to auditing such things.

    Furthermore, a lot of the smaller packages do “one thing” (see the infamous is-even package), so they are small and easy to self-audit if you are paranoid enough.

    It’s not perfect, and there will always be more headlines about the next big attack, but it’s still a boon overall IMO.


  • One thing you should do is grab your data for easy moving, you haven’t already.


    Assuming you’re using the default Lemmy web UI (not Voyager, or Photon, or a mobile app, or whatever), click on your username in the top right, and select “Settings”.

    On the settings page, there’s a section called “Import/Export Settings”. Click the “Export” button and let your browser download the file.

    Then, when you switch instances, you can go into the same Settings page on the new instance, select the file you downloaded, and hit “Import” and you will automatically be resubscribed to the communities you subscribed to.




  • I want to add to this. I’m not a psychologist, but I have heard a couple times about the term “third place”. It’s this concept that most people have a “place where they live”, a “place where they work”, and then a “place where they socialize”. It has been theorized that the modern working-age population is having trouble with stress and mental health in large part due to the dearth of “third places”.

    The “third place” can be, for example, a restaurant or bar that you frequent (think the pub from the TV show Cheers), a book club, a sports club, or, crucially, a church or place of worship.

    For Christianity at least, knowing that you were going to see and socialize with the same group of people (who share at least 1 major interest in common with you) every Sunday is apparently quite good for mental health. So, although I am no proponent of certain Western religions in general, I do think their decline has contributed to some of the mental health crises. How much? I cannot say.

    https://en.wikipedia.org/wiki/Third_place



  • After extended sessions of any of the Telltale adventures (Walking Dead, etc), I would spend about 10 minutes post-game with the sense that real-life conversations were like, scripted, and I was navigating by selecting the best option.

    Arguably, not a wrong assessment of life, but it feels really gamified when affected









  • It’s a challenge, for sure. It is known that there are some inefficiencies in the codebase, which are actively being worked on. But besides that, it’s tricky to know where bottlenecks are until the user influx happens, particularly with the novel federation architecture. Maybe it’s impossible to scale, maybe not, but we only now are seeing a testable use case. I would expect optimization work to start bearing fruit, but these thing take time.


  • Earliest thing I remember was, as a kid of maybe 6 or 7, my family got internet installed (circa 95/96), and I found an early Pokémon fansite (via Yahooligans, most likely) that listed all 150 Pokémon and the “meaning” of their names (ie Hitmonchan and Hitmonlee are combinations of “hit” and Jackie Chan and Bruce Lee respectively). I was of course only just learning to read, so it took me a few visits to the website to read though every entry, but I was so stoked to see such engaging content on this new “internet”-thing