• 4 Posts
  • 32 Comments
Joined 3 months ago
cake
Cake day: July 26th, 2024

help-circle

  • Calling the Scarlett Johansson lawsuit “Manufactured Drama” is certainly a take. A bad one, that is.

    Just like the lifting of a famous actress voice, one has to wonder how much LLMs are siphoning the intellectual property of the little-people of the open source world and willfully tossing the license and attribution clauses down the toilet. If they were willing to do it to a multi-million dollar actress, what makes people think that the intellectual property theft doesn’t go much further?

    Anyway, I think for this reason it’s actually really important to note that Junior Devs are much less likely to cause this type of issue for large companies. The question is whether the lawsuits from improper licensing cost more to settle than it costs to hire Junior devs, which brings us roughly to where the international outsourcing phenomenon brought us. At least, IMO.


  • Would love for you to describe exactly how it’s more complicated.

    “More” is relative, ofc, so YMMV on whether you agree with me or not on this.

    But the problem with pass key is that it has all of the downsides of 2FA still – you need to use a mobile device such as a cell phone, that cell phone must be connected to the internet and you often can’t register a single account to multiple devices (as in, there’s only ever 1 device that has passkey authorization.)

    This isn’t an issue with ssh keys, which is a superior design despite it not being native to the web browsing experience. SSH keys can be added or removed to an account for any number of devices as long as you have some kind of login access. You can generally use SSH keys on any device regardless of network connection. There’s no security flaws to SSH keys because the public key is all that is held by 3rd parties, and it’s up to the user in question to ensure they keep good control over their keys.

    Keys can be assigned to a password and don’t require you to use biometrics as the only authentication system.

    I feel like there’s probably more here, but all of this adds up to a more complicated experience IMO. But again, it’s all relative. If you only ever use password + 2fa, I will give them that it’s simpler than this (even though, from the backend side of things, it’s MUCH more complicated from what I hear.)







  • I’m not sure social media is good for anyone, but I understand that “for the kids” is really the only way people feel confident in regulating anything. But it’s all very condescending when the real issue is that social media is causing society to become worse due to Skinner’s Box style human impulses – I do a thing, that gets me attention, so I’ll keep doing it regardless of if it’s right or wrong.

    We shouldn’t blame social media as a blanket villain, but simply request that all web services have transparent suggestion algorithms (preferably open source) and provide tax incentives for companies that help promote verified educational content over made up bullshit (as it’s the only way to get companies to do the right thing, unfortunately)









  • I do agree that developers should use their own software, but doing so on a smaller instance with strict active user limits is probably the right call – at least until you are certain the software has a “stable” version, but even then you probably will want to run a master branch instance that is much less stable and prone to errors. Until you can afford it, it’s probably not a good idea for developers to be spending a huge amount of time debugging in-progress features (which IIRC, firefish had a lot of those.)






  • I was on firefish’s previous instance, known as calckey, before I migrated back to Mastodon.

    There were definitely warning signs that the project was facing maintenance issues in those days as well, and it felt that the Firefish rebrand was an attempt to “start a new”.

    But just like my post on KBin’s demise, it should be a warning to those who want to make the software and host a “big” instance: Don’t do it. I think it’s smart to host your own mini instance for testing, but you should probably solely focus on the code development side of things to make sure that you aren’t over burdening yourself with managerial tasks. If your software is good, people will make spins inevitably. If people use it, then you will probably have enough people contributing that you can scale up your mini-instance if needed. But don’t jump in without the finances in place, because you’re essentially taking on two jobs.