I write bugs and sometimes features! I’m also @CoderKat@kbin.social.

  • 0 Posts
  • 40 Comments
Joined 1 year ago
cake
Cake day: June 21st, 2023

help-circle

  • Heck, I’d say even give money to those big corps so long as they are being reasonable with the price and availability. Reasonable varies by person, of course. But for me, I’ll pay for any $70-90 game (the normal price for new games now in Canada), but stuff like Sims DLC or how the original Mass Effect only let you get DLC through some dumb BioWare credits are cases where I’d pirate no regrets even with my current income.

    After all, there won’t be AAA games if people don’t pay for them. I have (mostly) no qualms with big publishers pocketing a significant profit on those games if they get made well. Bigger problem I have is with games that get rushed to the point of impacting quality, but that’s something I see more for changing how you approach that individual title. Stuff like mistreating staff (crunch time) is a bit iffier. I still lean towards giving them my money, since nobody enters the game dev business without knowing it’ll involve crunch and I do want the devs to be rewarded for their hard work with a commercial success (cause that’s unfortunately just how success is measured in our capitalist society).





  • Sadly yeah. We absolutely should use email signup because it filters our the absolute lowest effort bots, but it does nothing against higher quality bots or humans. Not only can you easily spin up new emails on the fly, but many emails allow ways to make the email appear unique (eg, Gmail ignores dots and anything after the + sign), there’s plenty of temporary email services with a variety of domains, and if you own a domain, you can trivially create unlimited emails until they catch on and ban the entire domain.

    Inactive admins are also an issue, but if malicious users are determined enough, it doesn’t matter that much how active an admin is. An active admin can mostly help by making IP banning an option (imperfect, but will work on many humans) and can temporarily turn on approvals to make it easier to weed out low hanging fruit. Nothing will work against someone determined enough, but could at least reduce how many instances they can turn to.



  • I love such formatters and wish they were even more widespread. In many cases, I really want consistency above all and it’s so dang hard to achieve that without an opinionated formatter. If the formatters isn’t opinionated enough, it just leads to countless human enforced rules that waste time (and lead to an understandable chorus of “why can’t the formatter just do that for meeeee”).



  • Ugh, there’s some parts of YAML I love, but ultimately it’s a terrible format. It’s just too easy to confuse people. At least it has comments though. It’s so dumb that JSON doesn’t officially have comments. I’ve often parsed “JSON” as YAML entirely for comments, without using a single other YAML feature.

    YAML also supports not quoting your strings. Seems great at first, but it gets weird of you want a string that looks like a different type. IIRC, there’s even a major version difference in the handling of this case! I can’t remember the details, but I once had a bug happen because of this.

    Performance wise, both YAML and JSON suck. They’re fine for a config file that you just read on startup, but if you’re doing a ton of processing, it will quickly show the performance hit. Binary formats work far better (for a generic one, protobuffers has good tooling and library support while being blazing fast).



  • Yeah, I love streaming for music. About $10 a month and I get seemingly every song I’ve ever looked up. Streaming video has a lot of problems with fragmentation, but music doesn’t seem to have nearly as bad of an issue. I use YTM and have never not found what I wanted to listen to. $10 is like the price of a single CD (or was – it’s been well over a decade since I’ve even looked at the price of CDs).

    I’ve also listened to a lot of full albums on streaming (it’s often what I do when I discover a new artist that I like) and there’s never an album that I’d want to buy every song from. My music tastes are also very diverse. My liked songs are full of tons of songs that may as well be one hit wonders to me. That doesn’t translate well to buying CDs.


  • Yeah. A troll might post something like a ton of oversized images of pig buttholes. Who the fuck even has access to CSAM to post? That’s something you only have on hand if you’re a predator already. Nor is it something you can shrug off like “lol I was only trolling”. It’s a crime that will send you to jail for years. It’s a major crime that gets entire police units dedicated to it. It’s a huuuuge deal and I cannot even fathom what kind of person would risk years in prison to sabotage an internet forum.


  • The sad thing is that all we can usually do is make it harder for attackers. Which is absolutely still worth doing, to be clear. But if an attacker wants to cause trouble badly enough, there’s always ways around everything. Eg, image detection can be foiled with enough transformation, account age limits can be gotten past by a patient attacker. Minimum karma can be botted (even easier than ever with AI) and Lemmy is especially easy to bot karma because you can just spin up an instance with all the bots your heart desires. If posts have to be approved, attackers can even just hotlink to innocent images and then change the image after it’s approved.

    Law enforcement can do a lot more than we can, by subpoenaing ISPs or VPNs. But law enforcement is slow and unreliable, so that’s also imperfect.


  • That’s because Reddit chose to leave it up until the media reported on it, though.

    That said, it’s really hard to protect against a dedicated, targeted attack. Eg, stuff like captchas can make it harder to create accounts, but think about how fast you could make accounts manually if you wanted to. You don’t need thousands of accounts to cause mayhem. Even a few dozen can cause serious problems. I think a lot of the internet depends on the general good will of most users. Plus the threat of legal action if they get caught (but that basically requires depending on police and we know police aren’t dependable).

    One thing Reddit had that I’m not sure Lemmy does (never heard mentions of it) is the option to require all posts and comments to be approved by a mod before it’s visible. That might even have just been an automod thing combined with how Reddit let admins hide and unhide comments. But even if they were to use that, it’s not fair for volunteer mode to have to deal with that. It’s also sooo much work. You can’t just approve posts, cause attackers will use comments. And you have to approve edits or attackers will post something innocent and then edit it to be malicious. And even without an edit, they can link to an image and then change the file itself to a different one (checksums could prevent that, but it’s more work and it’s a constant battle against malice).


  • I’d avoid hot. Unlike Reddit’s sort of the same name, Lemmy’s hot gives a lot of weight to brand new posts. I regularly saw lots of posts with no votes when I used it. Active or top is probably safer. Though admittedly, if someone is using bots to post content, they could use bots to upvote, too. Lemmy has pretty much nothing to prevent even basic botting. The way federation works is actually way worse for the ability to prevent bots, because bots just need any insecure instance and can spin up their own instance in minutes if they can’t find an existing insecure one (at the cost of burning a domain).


  • Yeaaaah, that’s sketchy. I can understand them blocking the communities out of fear of legal risk. They didn’t sign up for that kinda risk and we all know that piracy oriented sites get targeted by legal action (isn’t there currently an ongoing attempt to get Reddit to turn over user info about people who accessed piracy communities there?). But why the heck would they hide that they blocked the communities?

    It’s the same as with Hexbear. I can understand why they defederated from that instance, since I’ve seen how they comment. They’re extremely aggressive. Even when they’re right, they’re assholes about it. And they’re often straight up supporting Russia, which is batshit crazy (they have no nuance, acting as if there can’t both be Nazis in Ukraine and Russia can also be an evil aggressor). But Lemmy.World was happy to silently defederate until they got called out. Even despite the fact that for Exploding Heads, they at least had a big post about it (even though Exploding Heads is far worse).



  • I wonder how many people would see the warning and assume it just means an 18% auto gratuity? Because that’s very common and the amount is exactly what many auto gratuities have (or at least had when I last was in the US, which was several years ago). Because if I saw something saying there was an 18% service fee, that’s what I’d assume. I would not think there’d be a tip on top of that.

    That said, the US custom of not including the final price (including taxes) in the posted prices is a shitty, toxic practice and should be illegal.


  • CoderKat@lemm.eetoProgrammer Humor@programming.devGolang be like
    link
    fedilink
    English
    arrow-up
    7
    arrow-down
    2
    ·
    edit-2
    1 year ago

    Let’s not pretend people acknowledge warnings, though. It’s a popular meme that projects will have hundreds of warnings and that devs will ignore them all.

    There’s a perfectly valid use case for opinionated languages that don’t let you get away with that. It’s also similar to how go has gofmt to enforce a consistent formatting.

    Honestly, I’ve been using Go for years and this unused variable error rarely comes up. When it does, it’s trivial to resolve. But the error has saved me from bugs more often than it has wasted my time. Most commonly when you declare a new variable in a narrower scope when you intended to assign to the variable of the same name (since Go has separate declare vs assign operators).