Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)P

PhilipTheBucket

@ PhilipTheBucket @ponder.cat

Posts
58
Comments
564
Joined
1 yr. ago

  • YSK: If you set up a Lemmy instance, and follow the Docker setup instructions to the letter, it will send lemmy.ml your admin password during the setup process (Edit: Not anymore, it’s fixed now)

    Jump

  • I don't think .ml should be ousted. I think they should stop being dickheads. It's a little tangential to this particular post (mostly only relevant in that it makes people suspicious of their motives when otherwise they would not be.)

  • YSK: If you set up a Lemmy instance, and follow the Docker setup instructions to the letter, it will send lemmy.ml your admin password during the setup process (Edit: Not anymore, it’s fixed now)

    Jump

  • Yeah, it’s crazy how we all have more or less the exact same opinions, and the leader bans anyone who doesn’t have those opinions, and we’re all fine with it and in fact justify it and claim it’s right, whenever it comes up.

    It’s totally insane. I have no idea how or why anyone would decide to make an account in our stuff. In fact, it makes other people suspicious of our designated good leader, even in scenarios where there isn’t otherwise a ton of reason to assume any malice.

  • YSK: If you set up a Lemmy instance, and follow the Docker setup instructions to the letter, it will send lemmy.ml your admin password during the setup process (Edit: Not anymore, it’s fixed now)

    Jump

  • Docker is a mediocre solution to a real problem. It doesn’t cost any money, it does the job, but also, it consumes lots more disk than it needs to and can’t do some things that a solution in this space really should be able to do.

    If the world had decided that Nix was the way to containerize their web services and make them reproducible, the world would have been a better place, but that wasn’t what happened (yet at least).

  • YSK: If you set up a Lemmy instance, and follow the Docker setup instructions to the letter, it will send lemmy.ml your admin password during the setup process (Edit: Not anymore, it’s fixed now)

    Jump
    • “This isn’t even malicious, just look at it, it’s perfectly innocent”
    • “Besides, if they wanted to do something, they could disguise it way better than this”

    Pick a lane, .ml.

  • YSK: If you set up a Lemmy instance, and follow the Docker setup instructions to the letter, it will send lemmy.ml your admin password during the setup process (Edit: Not anymore, it’s fixed now)

    Jump

  • I know, we don’t want our software sending our secrets to the trusted good leader, and we don’t feel like participating in places where only the leader’s viewpoint is acceptable. Unlike the non-sheep, who are fine with both those things apparently, because who wouldn’t trust the good leader.

  • YSK: If you set up a Lemmy instance, and follow the Docker setup instructions to the letter, it will send lemmy.ml your admin password during the setup process (Edit: Not anymore, it’s fixed now)

    Jump

  • They didn’t acknowledge it. They just silently fixed it (or, someone did, at least).

    They’re not obligated to come in here and get yelled at, of course, and what would it accomplish. But, on the other hand, it is relevant that they can’t handle being in any environment where people can just speak freely to them, and respect is earned rather than demanded by force. There’s a certain type of mentality that just can’t cope with being in any role other than “the boss” and being able to talk down to or punish whoever they want, with no one allowed to express anything other than respect and obedience in the other direction. That is, in fact, the exact mentality that makes people suspicious of this otherwise maybe innocent issue with the software.

  • YSK: If you set up a Lemmy instance, and follow the Docker setup instructions to the letter, it will send lemmy.ml your admin password during the setup process (Edit: Not anymore, it’s fixed now)

    Jump

  • Edited.

  • YSK: If you set up a Lemmy instance, and follow the Docker setup instructions to the letter, it will send lemmy.ml your admin password during the setup process (Edit: Not anymore, it’s fixed now)

    Jump

  • Yeah 100%, it's all Docker's fault at the end of the day

  • YSK: If you set up a Lemmy instance, and follow the Docker setup instructions to the letter, it will send lemmy.ml your admin password during the setup process (Edit: Not anymore, it’s fixed now)

    Jump

  • One of the .ml users down below volunteered to put in the PR later tonight if no one else has, so it sounds like both bases are covered now.

  • YSK: If you set up a Lemmy instance, and follow the Docker setup instructions to the letter, it will send lemmy.ml your admin password during the setup process (Edit: Not anymore, it’s fixed now)

    Jump

  • Sounds great. Thank you, it sounds like a good idea.

  • YSK: If you set up a Lemmy instance, and follow the Docker setup instructions to the letter, it will send lemmy.ml your admin password during the setup process (Edit: Not anymore, it’s fixed now)

    Jump

  • Seems like a genuine miss, contrary to what the comments here would have one believe,

    You might be right. I looked at the history and the way it came in, and it's not as wildly anomalous to the rest of the file when looked at in context. Maybe it's just a mistake.

  • YSK: If you set up a Lemmy instance, and follow the Docker setup instructions to the letter, it will send lemmy.ml your admin password during the setup process (Edit: Not anymore, it’s fixed now)

    Jump

  • Let's not get carried away. Shared software systems are about more than the software. If you're looking only at the software, and that was literally 100% of what is important here and nothing else, then yes, you're right.

    But you want it fixed less than you want it publicized

    100%. Yes. Correct. I also want it fixed, but that's completely trivial, with or without the pull request.

  • YSK: If you set up a Lemmy instance, and follow the Docker setup instructions to the letter, it will send lemmy.ml your admin password during the setup process (Edit: Not anymore, it’s fixed now)

    Jump

  • See the edit to the post.

  • YSK: If you set up a Lemmy instance, and follow the Docker setup instructions to the letter, it will send lemmy.ml your admin password during the setup process (Edit: Not anymore, it’s fixed now)

    Jump

  • Would have been nice with a link from the start.

    Yeah, 100%. I edited the post to add more of the details.

  • YSK: If you set up a Lemmy instance, and follow the Docker setup instructions to the letter, it will send lemmy.ml your admin password during the setup process (Edit: Not anymore, it’s fixed now)

    Jump

  • I mean probably I should. There are a bunch of people accusing me of being dick headed and petty and they're not completely wrong. Honestly, I just don't feel like helping the Lemmy devs. Dessalines, at least, is totally unapologetic about being a dickhead to people he has power over. That puts me in a mindset where, mostly, I want to talk to other people about potential harm he's in a position to do, and not really in a mindset where I want to do even a small amount of extra work on his behalf.

    I'm going to tell other people that he's in a position to take their passwords. If he wants to see that and put himself not in that position anymore? Great, I think he should. If he gets his feelings hurt because I'm not being super friendly about it? Well.. okay. I'm not trying to be malicious about it or do anything other than clearly communicate the problem. But it seems like the lemmy.ml "in charge" crew in general has a lot of a mentality that's kind of like, "Well, I'm in charge, and you're not, so fuck what you think and fuck your rights. Ban." (or whatever). The way I operate is that really makes me not want to be extra friendly or courteous to people. I used to have a regular donation to Lemmy development set up, I used to take it seriously the idea of getting involved in contributing to the code, and then I observed how they operate, and ... like I say I'm mostly talking to the other people involved who I think should be aware of this. If the devs want to react, fix it, or get involved in the conversation, then sure, sounds good.

    The fix is in the comments below, if someone else wants to contribute it and do the very small amount of work of getting it in.

  • YSK: If you set up a Lemmy instance, and follow the Docker setup instructions to the letter, it will send lemmy.ml your admin password during the setup process (Edit: Not anymore, it’s fixed now)

    Jump

  • Quixote

  • YSK: If you set up a Lemmy instance, and follow the Docker setup instructions to the letter, it will send lemmy.ml your admin password during the setup process (Edit: Not anymore, it’s fixed now)

    Jump

  • YSK: If you set up a Lemmy instance, and follow the Docker setup instructions to the letter, it will send lemmy.ml your admin password during the setup process (Edit: Not anymore, it’s fixed now)

    Jump

  • YSK: If you set up a Lemmy instance, and follow the Docker setup instructions to the letter, it will send lemmy.ml your admin password during the setup process (Edit: Not anymore, it’s fixed now)

    Jump

  • A lot of people, I think, would appreciate knowing if there's indication that their software might be doing something sketchy to them. You might feel that my appropriate response about it should be to shut up, shut up, shut up!, but I don't think I will. When it comes to issues of trust and security in software, it's usually not that good an idea to just silently fix it and not talk about it so nobody's feelings will be hurt and no one will feel bullied.

    I've posted the patch and recommended that someone post a PR about it. I do think it would be good if it gets fixed. If the Lemmy devs claim that me being a twat is a good excuse for just leaving it as is, then like I said, that's a super interesting turn of events.

  • retrocomputing @lemmy.sdf.org
    PhilipTheBucket @ponder.cat

    Detailed explanation of an impossible 9-sprite demo on a C64

  • Books @lemmy.ml
    PhilipTheBucket @ponder.cat

    Ray Nayler's "Where the Axe Is Buried" is an intense, claustrophobic novel of a world run by "rational" AIs that purport to solve all of our political problems with empirical, neutral mathematics

    pluralistic.net /2025/03/20/birchpunk/
  • Technology @beehaw.org
    PhilipTheBucket @ponder.cat

    BYD introduces EV charger with 1,000 volts

    go.theregister.com /feed/www.theregister.com/2025/03/19/byd_megawatt_ev_charging/
  • Videos @lemmy.world
    PhilipTheBucket @ponder.cat

    The Questionable Engineering of Oceangate

  • Technology @beehaw.org
    PhilipTheBucket @ponder.cat

    Printers start speaking in tongues after Windows 11 update

    go.theregister.com /feed/www.theregister.com/2025/03/12/printer_bug_windows_11/
  • Technology @beehaw.org
    PhilipTheBucket @ponder.cat

    $42.5 Billion Broadband Grant Program Being Rewritten To Benefit Elon Musk

    www.techdirt.com /2025/03/12/42-5-billion-broadband-grant-program-being-rewritten-to-benefit-elon-musk/
  • Technology @beehaw.org
    PhilipTheBucket @ponder.cat

    Earth’s atmosphere is shrinking and thinning, which is bad news for Starlink and other LEO Sats

    go.theregister.com /feed/www.theregister.com/2025/03/11/greenhouse_gases_reduce_satellite_capacity_paper/
  • Videos @lemmy.world
    PhilipTheBucket @ponder.cat

    Johnny Somali’s trial in Korea seems like it’s going to go poorly for him

  • Gaming @beehaw.org
    PhilipTheBucket @ponder.cat

    11 Best Indie Games of All Time

  • Videos @lemmy.world
    PhilipTheBucket @ponder.cat

    Quantum mechanics, and how it applies to objects in the real world you can interact with directly. This is the best physics video I have ever seen in my life.

  • Moving to piefed.lemmy.fan/c/weird_news - Weird News - Things that make you go 'hmmm' @real.lemmy.fan
    PhilipTheBucket @ponder.cat

    The U.S. Fish and Wildlife Service Wants You to Eat These Giant Invasive Rodents

    www.smithsonianmag.com /smart-news/the-us-fish-and-wildlife-service-wants-you-to-eat-these-giant-invasive-rodents-180986123/
  • Funny @sh.itjust.works
    PhilipTheBucket @ponder.cat

    Timothy Dexter: The Dumbest Rags-to-Riches Story

  • Privacy @lemmy.ml
    PhilipTheBucket @ponder.cat

    The EFF's Guide to Attending a Protest

    ssd.eff.org /module/attending-protest
  • You Should Know @lemmy.world
    PhilipTheBucket @ponder.cat

    YSK: There's a protest today at noon at your state capitol.

    www.snopes.com /news/2025/02/04/anti-trump-state-capitol-protests-february-5/
  • Technology @beehaw.org
    PhilipTheBucket @ponder.cat

    Google spikes its explicit 'no AI for weapons' policy

    go.theregister.com /feed/www.theregister.com/2025/02/05/google_ai_principles_update/
  • Technology @beehaw.org
    PhilipTheBucket @ponder.cat

    Popular Linux orgs Freedesktop and Alpine Linux are scrambling for new web hosting

    arstechnica.com /gadgets/2025/02/popular-linux-orgs-freedesktop-and-alpine-linux-are-scrambling-for-new-web-hosting/
  • Technology @beehaw.org
    PhilipTheBucket @ponder.cat

    The Unparalleled Ed Zitron Gives an Overview of the DeepSeek situation

    www.wheresyoured.at /deep-impact/
  • You Should Know @lemmy.world
    PhilipTheBucket @ponder.cat

    YSK: How to interact with US police

  • Technology @beehaw.org
    PhilipTheBucket @ponder.cat

    British competition watchdog investigating Google and Apple mobile ecosystems

    go.theregister.com /feed/www.theregister.com/2025/01/23/cma_google_apple_mobile/
  • Technology @beehaw.org
    PhilipTheBucket @ponder.cat

    App stores unconvinced by Trump's pause of TikTok ban, which may be on shaky legal ground

    go.theregister.com /feed/www.theregister.com/2025/01/21/trump_tiktok_ban_pause/