

18% is nowhere near high enough to be throwing around accusations like that. Seems like the teachers don’t know how to interpret the results.
Web developer. Lead developer of PieFed


18% is nowhere near high enough to be throwing around accusations like that. Seems like the teachers don’t know how to interpret the results.


I recommend you set the Content-Security-Policy http header so that inline javascript (commonly used for XSS attacks) cannot be executed.
https://web.dev/articles/strict-csp
CSP being off is not exactly a security hole but it makes security holes much more likely. By using a strict CSP configuration you close off the possibility of a whole class of holes.
Also think about setting the Access-Control-Allow-Origin header and enable CORS on your REST endpoints.
https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Access-Control-Allow-Origin
Again, kind of a pain in the ass but gets rid of a bunch of potential problems before they start.


F-Droid has Drip, Bluemoon and Periodical.


Yeah there are other signs too. Look at those commit messages, all vague, all perfectly capitalized. All with a nice long description with bullet points.
No one does that in a project they’re building for themselves.


I was going to recommend this to someone I know but when I realised your readme.md is entirely AI-generated, I guess the whole project is probably vibe-coded. I can’t in good conscience recommend someone trust their health data to a vide-coded app because they tend to have security problems.
Also all ai-generated code is public domain so your AGPL license is kinda empty. Might as well use MIT.


The sycopathy is because to make the chat bot (trained on Reddit posts, etc) to respond helpfully (instead of “well ackshually…”) and in a prosocial manner they’ve skewed it. What we’re interacting with is a very small subset of the personalities it can exhibit because a lot of them are extremely nasty or just unhelpful. To reduce the chance of them popping up to an acceptable level they’ve had to skew the weights so much that they become like this.
There’s no easy way around that, afaik.


These are my thoughts https://distantprovince.by/posts/its-rude-to-show-ai-output-to-people/


Lemmy.world has removed their defed too 👍


Yep, understood, but I agree strongly with what you said so took action on it!


Alright, that’s done.
Genocide denial is my red line. I’m a sympathetic ear to people talking positively about communism but when it becomes attempts to justify or dismiss mass murder I get The Rage.
In practice this is hard to enforce because I avoid places where they hang out so these days I don’t see much of it.


Ok but if I ban him how will you get screenshots like this?


Good news. The old fosstodon admins resigned and they have a new team and a good code of conduct.
I have added new functionality to PieFed so it’s now possible to override an automatically imported defederation and now piefed.social federates with fosstodon.org.


PieFed.social has not intentionally defederated from fosstodon - piefed.social automatically defederates from any instance that lemmy.world or mastodon.social defederates from. That way I don’t need to keep up with the latest fedi drama and just trust those admin teams to.
In this case, it’s lemmy.world.
I’ll ask around and see what the latest on fosstodon is and see if lemmy.world wants to federate with them again.
@Skavau@piefed.social @cabbage@piefed.social


2026, the year of the PWA.


They need to have some kind of AI safety team, as a fig leaf. But they don’t don’t want it to slow them down so they make sure it’s incompetent and ineffective.
Just a theory.


Really? Looks like a normal day at the office to me:



Very interesting that only 71% of humans got it right.


If it looks like something that could happen again, rather than a one-off fluke, USA would have to change their whole naval doctrine. The strategic arms balance of all countries would need to be reassessed.
The thing about doing age verification at the OS level is the user could just install a crack that rewrites the necessary code. It’ll take some heavy DRM type stuff to block that. Possibly hardware support, like a specialised TPM.
No way can that be standardised and then rolled out quickly. If they rush it then it’ll be some proprietary power grab.
The alternative is each website and app does it separately which will be spotty and provide endless security breaches.
It’ll be a shitshow either way.