Are you trying to solve a technica, or political/moral problem? Let’s Encrypt doesn’t create, see, store or log your private cerficates. So, even if they are in the US, I don’t see a risk, and otherwise, the other parts you use in general are probably vulnerable to the problem even if non-US.

For ex. the US could simply order browsers stop validating any certificates not issues by US companies in browsers. And whoosh. Having a non-US certificate won’t help much there either.

You don’t blame the knife when people get stabbed, so why blame AI for code it generated on the developer’s behalf? AI is a tool. Nothing more.

For the other stuff - I can’t take people seriously, because most people pick and choose when it’s convenient to be moral and ethical. Same people who don’t like AI pollution are using cars and plastics in their daily lives and would absolutely flip out if someone would ask them to give it up for the environment. AI is just the current “trend” to hate and be moral about because not many people are depending on it yet in ther day to day life.

I understand that people have concerns, but those concerns are only relevant if they come from a maintainer or repo owner point of view. There is an entire spectrum of how AI is used in code, and it’s not a simple yes or no thing. I am for example completely against vibe coding as it’s just a risk and liability in the long run. However, to use AI to brainstorm, get suggestions, discuss architecture, learn with examples, and assist basically like someone else is sitting next to you while you code yourself… that is something completely different, and results in a completely different outcome.

In the end, it depends on can the person at the steering wheel take full ownership and accountability of the code they produced, with or without AI.

No, because it’s about the what, and with or without AI is the how.

We don’t have disclosures “built on a Linux/Windows/macOS machine” or “built using IntelliJ/Eclipse” so why is it important what tool was used to do something?

Plain ol’ spreadsheet.

Expired domains have “cooldowns” because this would be a security issue, if suddenly, overnight, because someone forgot to extend their domain, there is suddenly a new owner. This means, after the domain is expired, you usually have a grace period where you still have the chance to extend it before someone else “snatches” it under your nose.

I think the focus is digital media, and in that space media is the short of multimedia.

Media is more audio, video, image. Which fits social media.

Most forums and blogs are text-based or primary text. There is no blog sharing only images/videos/audio as posts. Also no such forum.

That would be my key differentiation - forums and IRC is social, but not really media.

You are right. According to the definition of social media, Lemmy is social media. However, “social media” would by definition fit any kind of digital communication media. A forum, or a blog, or an IRC channel are also, by definition, social media.

I would argue that the social media has a distinct association with Facebook, Instagram and the diverse spawns of those, and by association doesn’t fit anything else. At best, we simply lack a different term, which splits “old-school” stuff like forums and blogs. I view lemmy more like a forum. You have categories, and users can go into categories to start discussions. You don’t follow anyone. People also don’t create and post their own content, but rather seek discussions or share other stuff from the internet. Your goal is not reach, follow count or like count.

It is social media, but it’s definitely nothing like Facebook. We simply lack a better term.

It would be great if people stop using social media in general.

Not sure what is that supposed to mean? I can only assume it is supposed to be some kind of insult, and can only invite me in the future never to even reconsider donating, seeing how “not doing what I expect you to do” creates toxic comments and bashing.

Care to elaborate?

I know, but if it was that easy to shift perspectives, the world would be a completely different place. I dislike the donation format since it plays a lot on the moral and psychology of the person - how much is enough, how much value does it actually provide me etc. Like I am the one doing the sales for the person. I much rather have a clear price.

Maybe it’s just because of donations and the “uncertainty” it makes me feel. I did pay for open source software before (open source != free), guess I prefer just to see a clear price tag.

If you have browser with search suggestions enabled, everything you type in URL bar gets sent to a search engine like Google to give you URL suggestions. I would not be surprised if Google uses this data to check what it knows about the domain you entered, and if it sees that it doesn’t know anything, it sends the bot to scan it to get more information.

But in general, you can’t access a domain without using a browser which might send that what you type to some company’s backend and voila, you leaked your data.

None.

Reason being simply financial responsibility - if something is free, then giving out money for it seems wasteful, like throwing money out of the window. You can argue it’s not much, I got value from, it supports the developer, it’s the moral thing to do, and you would probably be right. But this is simply not the priority perspective from which I am looking at it.

HeliBoard, don’t want google to get everything I type on their keyboard. KeePassDX - offline password manager

He is not designing the UI, he will be implementing it.

The UI and UX will stay bad as it is, just on a modern technology stack.

It’s not bitching if it’s true. Nextcloud has really poor performance alone, it tries to do to many things at once and none of it ends up being good. It was amazing for it’s time and it’s idea but it simply doesn’t scale, not technically, not with time. They need to redo the architecture and probably move to something better performing than PHP. I never heard anyone in any environment even considering PHP as an option in 2025.

This would be the simplest solution. Yes, feel free to find and report bugs - but we will fix them at out own pace and availability. The vulnerabilities will be in the open and exploitable until we get to fixing them. If you need it faster, you can contribute money, people or patches.

Same way you protect anything else valuable in your house - by locking the door and potentially installing (selfhosting) security cameras. I’d completely disagree that a server will be a target for a common thief. What are they gonna do with that? Who is gonna buy that from them? What can they buy with that? It’s useless garbage for them.

I understand, but the shift in user behaviour is significant and I think websites are not taking it into account. If the users move more and more to AI, and since Google introduced AI mode it’s only a question of time until it becomes the default, we will see more and more of what we thing are AI crawlers and less and less organic users.

AI seems to be the new middleman between you and the user, and if you block the middleman, you block the user. For people with hobby websites or established sites it may make sense because people either know of them, or getting more exposure is not a wish or requirement, but for everyone else, it will be painful.