@makeworld.space Same but I only see the ones that also followed the AP bridge first 🤪
Useful writeup on the NPM worm that's been spreading today. tl;dr 2FA should help reduce your risks if you're careful, it might steal your AWS/Azure/GCP secrets though. Windows users are fine. 🤪
https://krebsonsecurity.com/2025/09/self-replicating-worm-hits-180-software-packages/
Brb making a compute cluster built on scavanged vapes :P
Look, Jeff Atwood, it is difficult to take you seriously when you write authoritatively on a subject you clearly don’t understand.
GDPR doesn’t mandate cookie notices.
Cookie notices are *malicious compliance* by the surveillance-driven adtech industry.
If you’re not tracking people, you do not need a cookie notice, period.
If you’re only using first-party cookies for functional reasons, you do not need a cookie notice, period.
If you’re using third-party cookies to track people – i.e., if you’re sharing their data with others – then *you must have their consent to do so*. Because, otherwise, you are violating their privacy. Even then, the law doesn’t mandate a cookie notice.
How would you conform to EU law without a cookie notice if your aim wasn’t malicious compliance?
You would not track people by default and you would make it so they have to go your site’s settings to turn on third-party tracking if, for some inexplicable reason, they wanted that “feature”.
Boom!
No cookie notice necessary.
What’s that?
But that would destroy your business because your business is founded on the fundamental mechanic of violating people’s privacy?
Good.
Your business doesn’t deserve to exist.
Because the real bullshit here isn’t EU legislation that protects the human right to privacy, it’s the toxic Silicon Valley/Big Tech business model of farming people for data that violates everyone’s privacy and opens the door to technofascism.
@travisfw @jeremy_list @fleeky "scaling up can mean blowing your budget if you don't configure limits" is the thing that goes away when you stop using centralized DBs and infra and move data / logic to peers. If data gets popular it has more peers resharing it to the network instead of costing individuals more. As a dev you pay nothing (but can offer backup services), as a user the devs can't take your info/community/utility from you so long as the p2p network lives.
@travisfw @jeremy_list @fleeky Another direction is using p2p to bridge to self hosting where you host servers (or worker runners) on community or personal infra that you trust, and the p2p connections (like veilid) skip the need for setting up SSL/public IPs to talk to compute from client apps.
In the case of AWS who is paying to keep the infra running? If it's not the clients themselves then you end up with crypoto coin economics like holochain which is less appealing than stuff being free
@travisfw @jeremy_list @fleeky I think that's the direction the IPVM foks were going. https://github.com/ipvm-wg/homestar/
In P2P apps what you can do is move that "server code" onto the client directly. Then you focus on local first DBs and sync engines for getting clients on the same page.
The big question with "serverless functions" is how you can manage authority and trust. Apps that require secrets to access a DB need trusted servers. At that point you either need creds per client or skip central DBs
Eyyy, fixed the weird issue I had where dark mode wasn't working for me in @agregore Next I'm gonna add a keyboard shortcut for "go up one directory level" since I use that a lot in file browsers
Mastodon terminology question
@tty That's aligned with my understanding too.
Occult Enby that's making local-first software with peer to peer protocols, mesh networks, and the web.
Yap with me and send me cool links relating to my interests. 👍