[–] 9 points 1 month ago (5 children)

Lemmy world uses cloudflare. Cloudflare blocks problematic IPs. Someone on that vpn IP has been doing naughty things and so the IP was flagged. Just switch your location in the vpn and try again.

  • source
  • [–] 30 points 1 month ago (5 children)

    Good opportunity for him to say he doesn’t have the money right now, can she buy him the plane tickets and get himself a nice little free trip to LA. She’ll obviously say no, and boom he’s out of it.

  • source
  • [–] 23 points 1 month ago (2 children)

    Am I the only one that has noticed the massive increase in buggy software across almost every domain? Like, EVERYTHING has so many more bugs now. Things just break constantly. AI isn’t one shotting fixing bugs, it’s one shotting making hundreds of new ones.

  • source
  • [–] 9 points 1 month ago (1 child)

    the amount of people that do not understand how big of an improvement passkeys are is really saddening. They think that somehow these tech companies are utilizing this in some nefarious way, rather than the very very simple explanation that ... tech companies don't want to be responsible for more breaches.

    Passkeys are so simple and such a huge improvement that it's literally all upsides and no downsides. Either you use their passkey managers like you would their password managers and it's safer for them, or you use your own password manager with passkeys in it and it's still safer for them.

  • source
  • parent
  • context
  • [–] 11 points 1 month ago

    You have a vast misunderstanding of why passkeys aren't transferrable or usable outside of those providers. It had nothing to do with lock-in, but because every implementation was different. And no, you do not 'depend on the site' to let you use that option instead of a major provider. There's a standard now and everyone is following it. If you can use a passkey you can use your password manager to manage that passkey.

  • source
  • parent
  • context
  • [–] 2 points 4 months ago

    These were exactly the things that drew me to Svelte as well. And yes, the author is right. If they had claimed that you should use Svelte for everything I would have immediately stopped trusting them.

    Svelte is very nice for backend engineers to use for a frontend framework. It makes way more sense from a mental model, and it's incredibly lightweight, at least from what I've seen in other frameworks.

    It's the exact same way I feel about Ruby. You definitely shouldn't be using it for everything, even most things, but the stuff it's good at it beats Python by a mile. And it's so much more pleasant to use.

  • source
  • [–] 3 points 5 months ago (1 child)

    I’ve only partially read over you wrote and am heading into the mountains on vacation, but I will try to read over what you’ve written here sometime this weekend.

  • source
  •  

    Hi all,

    First off, I want to apologize for all the server instability. We long ago outgrew our instance size, but I was unable to afford a larger node on our provider, Vultr. We were maxing out every part of the server whenever any even slightly significant number of users were on the fediverse.

    I've finally found the time to migrate us to a new provider, which allows us to step up to a much more powerful configuration. That migration has now been completed. I actually intended to post about the downtime on this community this morning before beginning, but when I went to do so, the server was already down and struggling to come back up. So I went ahead with the migration.

    Server before 4cpu/16GB/400GB NVMe Server after 8cpu/64GB/1Tb NVMe

    Please update this thread if you are seeing any issues around any part of the site. This means duplicate threads, things that aren't federating, inability to load profiles, etc.

    There is still database tuning that needs to occur, so you should expect some downtime here and there, but otherwise the instance should be much more stable from now on.

    During this process I also improved several other aspects of operating the server, so any 'actual' downtime should be accompanied by proper maintenance pages (that hopefully don't get wiped by ansible anymore), so that will also be a good indicator of legitimate maintenance.

    Once again, I really apologize for all of the downtime. It's very frustrating to use a server that operates like this, I understand.

    snowe

     

    I will no longer be able to assist with development nor debugging actual issues with the software... Quite juvenile behavior from the devs. It stemmed from this issue where the devs continuously argued in public by opening and closing an issue. Anyway, thought I would keep y'all apprised of the situation, since these are the people maintaining the software you are currently using.

    Outage - Oct 14/15 (programming.dev)
     

    Over the weekend we had a large intermittent outage, followed up by unplanned maintenance that I had put off for way too long.

    Lemmy runs with several different services.

    • lemmy-ui (the reactesque frontend)
    • lemmy (the rust backend)
    • postgres (the data store for operations, comments, posts, etc)
    • pictrs (the image data store)

    The outage concerns itself with the last one. We always knew we'd eventually need to migrate to an object based store, but Lemmy defaults to file based picture storage and that's what we stuck with up until now. This eventually caused the VPS that programming.dev is running on to seize up, and resulted in the outage over the weekend.

    Saturday night I spent several hours testing out the object migration on the beta.programming.dev site in order to validate that it worked. During this time I struggled with some very obtuse ansible errors that I hadn't encountered before and so I was not able to start the migration that night. I delayed until the next morning (thank goodness).

    I began work Sunday morning at 10:00 America/Denver time. Initially the migration started off quite well, but was moving incredibly slowly. Looking back on it now, the migration would have taken over 144 hours if I left it to do its thing. I let this run for about an hour before messaging the pictrs dev to understand why logs weren't showing up for the migration (even though objects were showing up in the store). Apparently lemmy-ansible is set to use 0.4.0 of pictrs, which not only is quite old, but doesn't have the ability to run migrations concurrently. There was the issue. I asked the dev is it was possible to stop a migration in the middle of the running, upgrade, and continue. They told me what changes I'd need to make, I made them, did the upgrade, and restarted the migration. It immediately failed. This was the start of my issues.

    The server was now too full of data to do anything, including running apt update or apt install to install tools to assist me. I was able to attach more block storage, but I'm not enough of a linux guru to figure out how to mount it where the current pictrs filesystem would be able to take advantage of it. I had to result to copying the entire pictrs filesystem to a fresh ~500gb mount, fixing permissions, and then rerunning the migration from there. By the time I got to this point, it was about 12:30PM. The migration from then on took several hours.

    After the migration completed, I needed to deploy the new stack with the correct settings. The ansible script needed to run apt though, and, well, that wouldn't work when the server was still full. At this point I was not confident in the migration and I also hadn't realized that you could do the migration while the site was running (big oversight from me). I therefore wanted to maintain the entire pictrs file store until I proved the object store was working. I created another block storage, copied the entire pictrs directory over to it again (another 20 minutes or so) and then deleted the original directory. I was now able to run the ansible script and deploy the new settings for pictrs, confident that I had a backup available in case something went wrong (this is not the main backup method, the server is backed up externally as well, but I didn't want to have to resort to those during the migration).

    That completed the migration, some 5 hours after it originally started.

    There were several things that exacerbated the issue that made it take several hours longer than I wanted.

    1. I let it go so long before doing the migration to object storage that the server was too full to even perform an apt update. This resulted in me not being able to install tools I needed, along with a host of other issues as mentioned
    2. pict-rs was at a very suboptimal version. If it had just been two minor versions newer it would have migrated perfectly fine, in a few hours.
    3. my limited knowledge around ansible led me on wild goose chases several times

    Things I would change if I had to do it again:

    1. Dig in a bit deeper on the concurrency flag in the pictrs docs. It was not present in the original guide I followed (from a lemmy post on another instance), and thus I didn't realize that it wouldn't run with concurrency at all.
    2. Don't wait so long so that the server is full
    3. Migrate while the server is running. That would have been dumb in this case, since the server wouldn't stay up anyway, and could have caused other issues. But there was no reason to take the server down if it had been stable, and other instances have done so with no problems.
    Threads and the Fediverse (programming.dev)
     

    Start by reading these two articles:

    Ok, now that you've done that (hopefully in the order I posted them), I can begin.

    I have always been a strong supporter of Open Source Software (OSS), so much so that all of my projects (yes all) are OSS and fully open for anyone to use. And with that, I knew that things could be used for good... and bad. I took that risk. But I also made sure to build stuff that wasn't, in itself, inherently bad. I didn't build anything unethical to my eyes (I understand the nuance here).

    But I've seen what unethical devs can do.

    Just take a look at those implementing the ModFascismBot for Reddit (that's not its name, but that's what it is). That is an incredibly unethical thing to build. Not because it's a private company controlling what they want their site to do, no, that's fine by me. Reddit can do whatever they want. But because it's an attempt to lie about reality, to force users to do something through manipulation not through honesty. Even subreddits that voted overwhelmingly to shut down still got messaged by the bot telling them that the users (that voted for it) didn't want it and they had to open back up or they would be removed from mod position. This is not ethical. This is not right. This is not what the internet is about.

    Or the unethical devs at Twitter, who:

    It's one thing for an organization to have political lean...that is just a part of life, and that will never end. It's another to actually sow disinformation in order to accomplish nefarious things to further your profits. It is what has caused massive addiction to tobacco, the continuation of climate change, death and disfiguration from forever chemicals, ovarian cancer and mesothelioma from undisclosed exposure to asbestos, or selling 'health products' that claim to cure everything under the sun, but can "interfere with clinical lab tests, such as those used to diagnose heart attacks".

    Please do not confuse this for saying that companies shouldn't be able to sell things and make a profit. If you want to sell someone something that kills them if they misuse it and you market it as such, you go for it. That's literally how every product in the cleaning aisle of your grocery store works. That's how guns work, that's how fertilizers work, that's why we have labels. But manipulation for profit is unethical, and that's why companies hide it. It hurts their bottom line. They know that their products will not be used if they reveal the truth. Instead of doing something good for humanity, they choose the subterfuge. Profits over people. Profits over Earth honestly. Profits over continuing the human race. Absolutely nothing matters to companies like this. And unethical developers enable this.


    Facebook (ok, fine, Meta, still going to refer to them as FB though) is trying to join the Fediverse. We as a community, but honestly each of you as individuals, have a decision to make. Do they stay or do they go? Let's put some information on the table.

    Facebook...

    • lies about the amount of misinformation it removes ^1
    • increased censorship of 'anti-state' posts ^1 ^2 ^3
    • lied to Congress about social networks polarizing people, while FB's own researchers found that they do ^2
    • attempted to attract preteens to the platform (huh, wonder where all that "you must be 13" stuff went) ^4
    • rewards outrage and discord ^3

    Facebook also...

    • Allows for checking on friends and family in disasters ^6
    • Created and maintained some of the most popular open source software on the planet (including the software that runs the interface you're looking at right now) [^7][^8]

    From my perspective... There's not much good about FB. It has single handedly caused the deaths of tens of thousands of people across the planet, if not hundreds of thousands. It continually makes people angrier and angrier. It's a launching pad for scammers, thieves, malevolent malefactors, manipulators, dictators, to push their conquests onto the world through manipulation, lies, tricks, and deceit. Its algorithms foster an echo chamber effect, exacerbating division and animosity, making civil discourse and mutual understanding all but impossible. Instead of being a platform for connection, it often serves as a catalyst for discord and misinformation. FB's propensity for prioritizing user engagement over factual accuracy has resulted in a global maelstrom of confusion and mistrust. Innocent minds are drawn into this vortex, manipulated by fear and falsehoods, consequently promoting harmful actions and beliefs. Despite its potential to be a tool for good, it is more frequently wielded as a weapon, sharpened by unscrupulous entities exploiting its vast reach and influence. The promise of a globally connected community seems to be overshadowed by its darker realities.


    As a person, I believe that we need to choose things as a community. I do not believe in the 'BDFL'...the Benevolent Dictator For Life. Graydon Hoare, creator of Rust, wrote an article just recently about how things would have been different if they had stayed BDFL of Rust. From my position the BDFLs we currently have on this planet really suck. Not just politically, but even in tech. I don't think that path is good for society. It might work in specific circumstances, but it usually fails, and when it does, people get hurt. Badly.

    So, with that in mind, I've been working on a polling feature for Lemmy. I seriously doubt I'll be done with it soon, but hopefully FB takes a while longer to implement federation. I understand there's a desire for me, or the other admins to just make a decision, but I really don't like doing that. If it comes down to it, I will implement defederation to start with, but I will still be holding a vote as soon as I can get this damn feature done.


    [^8]: the website actually uses Inferno, but from what I can tell it was forked directly from React, judging from the actually documentation and references in the repo.

    view more: next ›