Agreed. As a software dev, a huge portion of my job has been fixing exception handling and adding centralized error handling to figure out what bugs my users are experiencing. Many devs I worked with seemed to only care about the happy path.

We’re going to have to start treating it like email with anti spam filtering and reputation. Things like rspamd are very advanced with a lot of signals that it uses.

Right now, the best part of the Fediverse is its weakest point: federation. I can easy spin up my own instance, connect it to lemmy.world and start posting. I can create accounts to make it look legitimate and it takes admins on one or more instance to first start banning individual accounts, then realize the entire instance should be banned. I can then create more domains if I want to. Lemmy.world uses CloudFlare’s anti-bot (which has its privacy ramifications) but that can be trivially be bypassed with federation.

I’ve been thinking Lemmy needs automated anti spam (content filtering) that then feeds into user and instance reputation to automatically flag domains, IPs, etc.

Look at the recent posts about Reddit’s anti-spam practices, it has the advantage of a single system able to collect a lot of metrics. Unfortunately you kind of need it to fight advanced spammers.

You can buy a Home Assistant hub which is a raspberry that comes with Home Assistant on it. It’s designed to be mostly plug and play, but isn’t near the simplicity of SmartThings yet.

Once it’s setup, a lot of devices can be just added and go. I’ve got my LG TV added and can turn it on, off, change inputs, etc. I have way more powerful automations and more devices on HA than I ever could on SmartThings.

Depends on your comfort level and interest level

this is not an “AI” data center

I was a bit more high-level in the supply chain planning side (more on the long-term supply planning than rack planning), but AWS definitely has different rack types including AI rack types with dense GPU hardware setups. Are they slicing the buildings by rack type or is it heterogeneous with some AI racks + compute racks?

Partially. I started with hosting my own llama3.2 + granite4 models using Ollama for my Home Assistant smart home and for general chat with OpenWebUI. I also run whisper for speech-to-text locally on my 1080 Ti GPU. I like the privacy and ownership of my self-hosted models, but I started to run into limitations with the small weights. So I built some tools that allow me to selectively route traffic to larger models hosted on DeepInfra depending on my need. For example, to GLM/Kimi models for code reviews or for my custom harnesses or harder problems.

It’s a question of security risk profiles.

Security ultimately often times comes with a tradeoff for user experience or privacy.

How does device integrity checks materially affect the security posture for theft when considering this system? Presumably the security checks for remotely unlocking a car is based around credentials and authN/authZ for the unlock service call?

Enforcing client side security has entered the picture recently, but a lot of it comes from security checklists from people saying did you add this check? Sure adding a device integrity check may stop at least one malicious actor, but is it worth the cost? To most companies, they’re going to say they don’t understand or care about the impact.

They could just go back to key fobs since those can’t run arbitrary code.

Accurate time is really important for computers for a lot of reasons.

Cell towers divide time into slots that different phones each get time in. If your time isn’t precise you might speed up or slow down which causes a slot to get a smaller or larger amount of time causing collisions. Handoffs between different towers need accurate timing to know exactly when one tower should release control of a handset.

NTP uses something called stratums. Basically stratum 0 is an atomic clock, stratum 1 is a device that talks to an atomic clock, but internally has its own time keeping. Then all the NTP servers moat people actually use are stratum 2+. Not only that, the Internet adds a ton of jitter because of how unreliable and unpredictable it is.

GPS satellites have atomic clocks on them making them stratum 0. They directly transmit that time. Thus receivers can become stratum 1 and have a very controllable, low jitter time source. Internet NTP isn’t precise enough. This kind of stuff requires microsecond precision.

GPS is used for a lot more than just navigation. It’s used as a precise time clock for many things like ensuring computers can manage data or even wireless Telecom. A lot of computer systems depend on accurate time keeping.

Jellyfin does not handle NAT punching automatically to point that a non technical user can install an app on their TV, see one or more libraries, and connect to my server across the Internet. This is the biggest problem that Plex solves compared to Jellyfin. I can’t expect my parents to install Tailscale or make any changes to their network.

That being said I use Jellyfin. I just don’t share it with my friends.

Does it support Health Connect so I could import from other services or just Google Health? I’ve used Samsung Health for long time and want to move to something open.

Do people still use PS/2 ports?

Surveillance pricing usually makes people think per-person pricing, but the law goes further than just that.

I worked on an electronic shelf label project at a (now defunct) retail project. I’m less worried about them trying to target prices per user while in a store because there are some difficult hardware and software challenges trying to show a price to one person (like what if two people are looking at it.) Showing a per-user price per app is trivial. There’s also laws in most states that require you to pay the price shown on the price tag and trying to target per person risks failing that, though that depends on state enforcement. The system I worked at linked the prices to the point of sale system to ensure you paid the lowest price shown on any price tag in the last few hours (though that was company policy to make complying with the law easier.)

What I am worried about is prices dynamically changing based micro trends like water getting more expensive on warm days. Some people might say that increase prices means increased supply to meet that demand, the real risk is retailers being able to micro optimize prices to better capture consumer surplus as profits. A consumer is un-prepared for that and the consumer will not benefit.

15.0 adds support for OIDC tokens being handed to Actions workflows compatible with GitHub Actions. I was excited to upgrade because I wanted to continue doing cosign Docker image signing, but then I found out that the Cosign transparency log doesn’t support Forgejo. Looks like I need an alternative.

My next biggest problem is the Actions workflow itself. I setup Docker in Docker, but turns out there’s a bit of work in preparing the runners to be on par with what I used on GitHub.

Otherwise, I’ve found Forgejo to be quite good and almost all my private repos are moved over.

Google Fiber unfortunately got sold to a private equity company and merged with Astound.

https://arstechnica.com/tech-policy/2026/03/google-fiber-will-be-sold-to-private-equity-firm-and-merge-with-cable-company/

Which stops malicious usage, but doesn’t stop cases where web pages over use pushState as users move around instead of replaceState. I’ve seen maps that would add to the history every time a user moves around the map.