chay

cross-posted from: https://lemmy.ca/post/4273025

Someone made a tool to remove CSAM content automatically: https://github.com/db0/lemmy-safety

You can upload images to a Lemmy instance without anyone knowing that the image is there if the admins are not regularly checking their pictrs database.

To do this, you create a post on any Lemmy instance, upload an image, and never click the "Create" button. The post is never created but the image is uploaded. Because the post isn't created, nobody knows that the image is uploaded.

You can also go to any post, upload a picture in the comment, copy the URL and never post the comment. You can also upload an image as your avatar or banner and just close the tab. The image will still reside in the server.

You can (possibly) do the same with community icons and banners.

Why does this matter?

Because anyone can upload illegal images without the admin knowing and the admin will be liable for it. With everything that has been going on lately, I wanted to remind all of you about this. Don't think that disabling cache is enough. Bad actors can secretly stash illegal images on your Lemmy instance if you aren't checking!

These bad actors can then share these links around and you would never know! They can report it to the FBI and if you haven't taken it down (because you did not know) for a certain period, say goodbye to your instance and see you in court.

Only your backend admins who have access to the database (or object storage or whatever) can check this, meaning non-backend admins and moderators WILL NOT BE ABLE TO MONITOR THESE, and regular users WILL NOT BE ABLE TO REPORT THESE.

Aren't these images deleted if they aren't used for the post/comment/banner/avatar/icon?

NOPE! The image actually stays uploaded! Lemmy doesn't check if the images are used! Try it out yourself. Just make sure to copy the link by copying the link text or copying it by clicking the image then "copy image link".

How come this hasn't been addressed before?

I don't know. I am fairly certain that this has been brought up before. Nobody paid attention but I'm bringing it up again after all the shit that happened in the past week. I can't even find it on the GitHub issue tracker.

I'm an instance administrator, what the fuck do I do?

Check your pictrs images (good luck) or nuke it. Disable pictrs, restrict sign ups, or watch your database like a hawk. You can also delete your instance.

Good luck.

cross-posted from: https://jamie.moe/post/113631

I put this post in GenZedong so it reaches more people

cross-posted from: https://jamie.moe/post/113630

There have been users spamming CSAM content in [email protected] causing it to federate to other instances. If your instance is subscribed to this community, you should take action to rectify it immediately. I recommend performing a hard delete via command line on the server.

I deleted every image from the past 24 hours personally, using the following command: sudo find /srv/lemmy/example.com/volumes/pictrs/files -type f -ctime -1 -exec shred {} \;

Note: Your local jurisdiction may impose a duty to report or other obligations. Check with these, but always prioritize ensuring that the content does not continue to be served.

I upscaled the original cover and tried to make it wider. It's a little messed up in the left corner, though.

Hi comrades, how do you go about applying Dialectical Materialism in your daily life? What tasks have you successfully solved using it?

I'm trying to get a deeper understanding of it right now by reading literature on it, right now I'm at Anti-Duhring (excerpts of it). I find it sometimes hard to apply what I've learned in personal cases, such as a discussion with someone, and so on.

Hi comrades,

As the title suggests, how do you manage your time spent online? I personally don't use any social media aside from Lemmygrad, but I'm still struggling with being online too much, even if it's lurking here or on other websites. I try to focus on offline things, such as books mostly that I download. My biggest problem is the refresh feature, even smaller sites such as this one just become an issue because of refreshing for new posts or discussions.

As a Linux user, I can say I tried to make my desktop as offline-focused as possible. I don't use any "cloud" services etc., though I still find myself dealing with this. Perhaps it's the interface.

I do like the Small Web movement, especially protocols like Gemini or Gopher. From what I see, they're filled to the brim with conservatives and anarchists, sadly. I do lurk on YouTube via Invidious, which is probably the biggest time-waste, though there's much valuable niche content on there. Sometimes at least.

Speaking of this, I sometimes take breaks from politics to not get overwhelmed. To get updates, I usually use RSS and the Hexbear News Megathread. For the most part, it's enough. Though FOMO (fear of missing out) hits here too, as what if I'm not up to date with something important globally.

What's your experience with this, comrades?

Hi comrades

I want to start handling my nutrition and fitness better. I usually work out at home and can do pushups etc., I would say I'm quite underweight.

While I'm reading the guide by CriticalResist on Prolewiki, I decided to count my calories. I barely reach 1500 calories a day which at this point I'll go malnourished. I just feel full very quickly. I do not eat processed sugars and avoid sweets, and I'm basically vegan at this point.

I exercise too and can do push ups, squats etc with no problems whatsoever, though as expected I cannot build muscular mass, most likely because of my nutrition. I don't have the money to go to a gym so I want as much as possible to work out at home, I saw that calisthenics might be a good option? Though they seem unreliable for building muscle mass and strength. I want to put more weight but not fatty weight, which had happened to me in the past. I do eat healthy, but I eat way too less because I feel I just get full quickly. This might be due that in the past I was overweight and conditioned myself to not eat much, but now I'm basically starving myself.

How would I go about increasing my caloric intake while putting muscle mass (preferably at home)?

Cambridge University is teaching students that the Anglo-Saxons never existed as a distinct ethnic group, in an effort to “dismantle the… myths” of English nationalism, the Telegraph reported on Saturday. Liberal academics have long decried the term for its association with “whiteness.”

Cambridge’s Department of Anglo-Saxon, Norse and Celtic (ASNC) will seek “to dismantle the basis of myths of nationalism – that there ever was a ‘British’, ‘English’, ‘Scottish’, ‘Welsh’ or ‘Irish’ people with a coherent and ancient ethnic identity – by showing students just how constructed and contingent these identities are and always have been,” the British newspaper reported, citing information from the university.

By denigrating the idea of a distinct Anglo-Saxon identity, the university said that it aims to make its teaching more “anti-racist.”

The controversy over the term ‘Anglo-Saxon’ began in 2019, when Canadian academic Dr Mary Rambaran-Olm resigned from the International Society of Anglo-Saxonists over the “inherent whiteness” of the field. Rambaran-Olm, who is not white, went on to write that “the Anglo-Saxon myth perpetuates a false idea of what it means to be ‘native’ to Britain,” and that the term is “historically inaccurate.”

...

This is such IdPol but it's funny

Hello comrades!

I want to outline a few potential projects the Lemmygrad community could benefit from and expand its reach. I think they could foster real growth and be not only of help, but actively create counter-spaces to the Right in various domains.

FOSS in this case means free and open source. For more information, check out this.

Privacy Guide

I'm personally interested in tech privacy. The biggest places around are r/privacy, and PrivacyGuides, the de facto flagship website for privacy and security advice.

The sub-Reddit is known to be overtly against China and non-western FOSS communities. It's mostly a circlejerk of Westerners screaming "We don't want to be like 1984 China!" without any kind of material analysis. Besides, Reddit is Reddit and we know how that goes.

Now, PrivacyGuides. It is definitely a helpful resource, but there are a few issues with it. First off, the administrators frequently promote Apple products on their forum, one of them, Jonathan, even being an Apple fanboy. Apple products are non-FOSS and shouldn't be trusted, especially since they're in PRISM and collaborate with the NSA. This leaves out all the drama they've been through since they split with privacytools.io, the latter claiming PrivacyGuides stole thousands of euros from them.

What I'm saying is that I think there's a need for a more community-based approach, with a strong Marxist tendency to counter liberals and conservatives (and sometimes ancaps) in the privacy field. This has the potential to educate people, even radicalize perhaps. This is related to the second project.

edit: We could also add an Internet etiquette guide for Lemmygrad members. This could include safety procedures while posting, general privacy advice and more, in order to not get targeted by the US.

Hosted Services

Lemmygrad can expand itself and offer hosted services for its members. They can include a Git forge, e-mail (although this one is debatable if it's worth it because of security practices), PeerTube, and any other service that is deemed useful by the community. I think the format outlined below could be useful.

I'm tying up my idea here with the concept of public access unix systems, or short for "pubnixes". They've recently had a revival, the tradition dating back to the '80s. In a nutshell, someone provides a Linux/BSD server and gives user accounts to people who request them. It has a strong focus on using the shell, and anti-corporate service alternatives. Sadly, it's dominated by either conservatives or anarcho-capitalists, rarely seeing a ML on there. I think this can be improved a lot upon, because Marxists have missed this opportunity to radicalize people in the "Small Web" communities. We need a healthier and better overall version of the Web, and I think it can provide a useful outlet for not only radicalizing new comrades, but educating everyone on technology and how to use it safely and in a healthy manner. If you're interested in checking out the Small Web movement, check out this manifesto. Gopher and Gemini, being the two most popular non-WWW protocols, are completely dominated by conservatives and such. A ML presence there could help turn the tide in the small/sustainable computing sphere.

I'm also thinking of setting up a mechanism of democratically run services, trying to destroy the "benevolent dictator" mechanism the software administrators have. I'm only aware of one attempt so far at this, here.

Healthy Computing

Speaking of healthy, this could be a potential third project, a mental wellness guide for technology. Of course, with a strong focus on FOSS projects. I think we need better structured resources for people to access, more "polished", in order to garner attention as viable alternatives to what liberals and conservatives are pushing online. There is a lot of pseudo-science regarding mental health in general, and especially regarding computing, so it could be a fully featured guide to say the least.

This could tie in with other resources written from a ML standpoint for people, perhaps countering the whole "self improvement" movement with diverse explanations and such.

Zine

I think Lemmygrad could publish a Zine. ML-themed findings from the Web, personal essays, stories, and anything fitting. Then it can be easily printed. Monthly releases would be neat. Could also include the news of that month, and so on. Could make a fitting alternative for paid Leftist monthly newspapers and such.

Contributing

I want this to be up for public debate so everyone can contribute with ideas! I'm personally versed in hosting things, but additional help is very much needed. If you want to contribute with an idea, or are skilled in contributing directly to any of these projects, let's get in touch. Perhaps we could get the Revolutionary Technical Committee involved in this if they're willing to contribute to a Marxist technological "front".

What do you think of what I've outlined above? Let's discuss.

RARBG has shut down today. If you go to their website, you will be presented with the following message:

Hello guys, We would like to inform you that we have decided to shut down our site. The past 2 years have been very difficult for us - some of the people in our team died due to covid complications, others still suffer the side effects of it - not being able to work at all.

Some are also fighting the war in Europe - ON BOTH SIDES. Also, the power price increase in data centers in Europe hit us pretty hard. Inflation makes our daily expenses impossible to bare. Therefore we can no longer run this site without massive expenses that we can no longer cover out of pocket. After an unanimous vote we've decided that we can no longer do it.

We are sorry :( Bye

The NATO bloc will deploy 700 additional peacekeepers to Kosovo, where 30 troops were wounded during clashes with local Serb protesters. Another battalion will be placed on high alert in the event of further escalation.

NATO Secretary General Jens Stoltenberg announced the move during a Tuesday press briefing, saying the deployment was a response to recent “attacks” on the peacekeeping force, which he said were “unacceptable.”

Stoltenberg urged officials in Pristina and Belgrade to take “concrete steps” to de-escalate the situation, and said the two sides should participate in an EU-brokered dialogue.

Dialogue is when we force you to recognize your breakaway province

Violent clashes between local Serbs and NATO’s Kosovo Force (KFOR) erupted after peacekeepers attempted to disperse demonstrators protesting the inauguration of a an Albanian mayor in a Serb-majority area. The standoff resulted in dozens of injuries on both sides.

...