• 2 Posts
  • 171 Comments
Joined 1 year ago
cake
Cake day: June 15th, 2023

help-circle




  • Some feedback:

    • On white background the text next to the logo is not visible
    • Add screenshots in the README, it’s a GUI app
    • Requirements.txts for dependency management is the old way, read about pyproject.toml you can merge them a single easy to read and edit file
    • “Install the dependencies” means nothing to a non-python developer. Direct users to install your project via pipx, that’s modern and secure way of installing a python application with dependencies for non developers. Publish it to pypi for even easier installation.
    • Add a notice that currently it’s windows only os.path.join(os.environ["APPDATA"], "Tagify", "config.yaml") will fail on *nix systems. Use pathlib.Path instead of os.path. Use pathlib, I see on a lot more places it would make your life much easier.
    • I have a feeling that the file icons are not your work. If you copied them from somewhere make sure their license is compatible, and add an acknowledgement.

    Keep up the work, it seems like a nice project!








  • Most of the originalish content on lemmy are linux related stuff, memes and porn. The latter 2 are mostly image/video based, so you don’t search for that very frequently and easily. I can see that in the future it will become a very relevant source of info in linux admin and user circles.

    I go back to r*ddit sometimes for some local content which is non existent on lemmy. I see that the tech related subs are mostly dead there, or at least only shadows of their former selfs. E.g. go to r/linux, sort by top all time. In the first 100 results you will barely find anything posted after the exodus.


  • What really stood out to ESET researchers was the embedded driver signed by Microsoft. According to its signature, it was developed by a Chinese company named Hubei Dunwang Network Technology.

    […] according to our research, this software was advertised as an internet café security solution aimed at Chinese-speaking individuals. It purports to improve the web browsing experience by blocking ads and malicious websites, but the reality is quite different — it leverages its browser traffic interception and filtering capabilities to display game-related ads. It also sends some information about the computer to the company’s server, most likely to gather installation statistics

    Sounds like MS was fooled some way, they don’t check Chinese only software that carefully? Historically ms had good relations with the Chinese state (E.g. Windows 10 China Government Edition) It sounds like this was targeted to Chinese users.

    They don’t know how it slipped through, or they don’t want to tell us…


  • You can disable microg connecting to google servers, but basically you get a standard gms free experience, with most apps simply not working from play store. They list in the wiki how and why they connect to google: https://github.com/microg/GmsCore/wiki/Google-Network-Connections

    A completely google free experience would be unusable for “normal” people, so they somewhat right as they target “normal” users. I also don’t like /e/, but because they are deliberately obfuscating a lot of things in their documentation, and they try to sell their os as something genuine, but it’s mostly just AOSP with microG.




  • From what I heard is that the NPM project only has 1 developer and so they can’t really respond and fix security flaws in a proper timeframe.

    It’s mostly just nginx with a webui. You can even see the nginx config files if you bash into the container. It has the same bugs as upstream nginx. Do not expose the management port to the internet.

    Plus compared to normal nginx, it’s harder to misconfigure it. Most of my services are just the default config, so I can’t mess it up accidentally.

    About lockouts: Once also happened me, but that was just a messed up update, next update fixed itself. If you lock yourself out you can usually edit the db directly, it defaults to sqlite, but I used it with mariadb.