Kalcifer @sh.itjust.works All of this user's content is licensed under CC BY 4.0.
Factorio's art style may draw its inspiration from older games that had technological limitations that forced specific art techniques, but I'd only be guessing — I haven't found any official source that states where Factorio drew its artistic inspiration.
Yeah, that was poor wording on my part — what I mean to say is that there would be unvetted data flowing into my local network and being processed on a local machine. It may be overparanoia, but that feels like a privacy risk.
You're referring to using only fedi-safety instead of pictrs-safety, as was mentioned in §"For other fediverse software admins", here, right?
There is already a PR about fixing the low contrast: https://github.com/openstreetmap/openstreetmap-website/pull/5325
That's great news! The dimmed tiles do feel like a bit of a cop-out 😜
No. The artist is named in the title of the post and the source of the artwork is cited in the description; I am not the cited artist.
By Tiny Machinery
References
"Tiny Machinery" (tinymachinery). Instagram. Published: 2023-02-17T15:38:08.000Z. Accessed: 2024-11-13T23:21Z. .https://www.instagram.com/p/CoxNDm5NnO_/.
I don't think that this is the correct usage of this meme format given that Frank Grimes (in the case of the meme, I presume he's representing the Democrat voters) was making a point that Homer (in the case of the meme, the "protest non-voters) is able to live a cushy and easy life despite, being lazy, constantly making stupid and careless mistakes, and being inconsiderate of others (in the case of the meme, that would be the "protest non-voters", well, not voting and having a good life despite it). Frank goes crazy and ends up electrocuting himself, in the exact scene that the meme is showing, when he has a meltdown and starts impersonating homer, but the message that the meme is trying to convey, that the "protest non-voters" will "get what's coming to them" doesn't fit, as it shows the people that voted Democrat getting shafted, by the project 2025 logo being on the cables where Frank gets electrocuted, rather than the people that didn't vote. The meme just twists the intended message around, imo.
One thing you’ll learn quickly is that Lemmy is version 0 for a reason.
Fair warning 😆
One problem with a big list is that different instances have different ideas over what is acceptable.
Yeah, that would be where being able to choose from any number of lists, or to freely create one comes in handy.
create from it each day or so yo run on the images since it was last destroyed.
Unfortunately, for this usecase, the GPU needs to be accessible in real time; there is a 10 second window when an image is posted for it to be processed [1].
References
- "I just developed and deployed the first real-time protection for lemmy against CSAM!". @[email protected]. [email protected]. Divisions by zero. Published: 2023-09-20T08:38:09Z. Accessed: 2024-11-12T01:28Z. https://lemmy.dbzer0.com/post/4500908.
- §"For lemmy admins:"
[...]
- fedi-safety must run on a system with GPU. The reason for this is that lemmy provides just a 10-seconds grace period for each upload before it times out the upload regardless of the results. [1]
[...]
- §"For lemmy admins:"
Probably the best option would be to have a snapshot
Could you point me towards some documentation so that I can look into exactly what you mean by this? I'm not sure I understand the exact procedure that you are describing.
[...] if you’re going to run an instance and aren’t already on Matrix, make an account. It’s how instance admins tend to keep in contact with each other.
This is good advice.
Fediseer provides a web of trust. An instance receives a guarantee from another instance. That instance then guarantees another instance. It creates a web of trust starting from some known good instances. Then if you wish you can choose to have your lemmy instance only federate with instances that have been guaranteed by another instance. Spam instances can’t guarantee each other, because they need an instance that is already part of the web to guarantee them, and instances won’t do that because they risk their own place in the web if they falsely guarantee another instances (say, if one instance keeps guaranteeing new instances that turn out to be spam, they will quickly lose their own guarantee).
How would one get a new instance approved by Fediseer?
There is a chat room where instance admins share details of spam accounts, and it’s about the best we have for Lemmy at the moment (it works quite well, really, because everyone can be instantly notified but also make their own decisions about who to ban or if something is spam or allowed on their instance - because it’s pretty common that things are not black and white).
Yeah I think I'm more on the side of this, now. The chat is a decent, and workable solution. It's definitely a lot more hands-on/manual, but I think it's a solid middle ground solution, for the time being.
If you ban a user [...], then if you are automating this you end up with the issue of if anyone screws up then how do you get someone’s account unbanned on all those instances?
The idea would be that if they are automatically banned, then the removal of the user from the list would then cause them to be automatically unbanned. That being said, you did also state:
If you ban a user and opt to remove all their content (which you should, with spam)
How do you get all their content restored
To which I say that I hadn't considered that the content would be deleted 😜. I was assuming that the user would only be blocked, but their content would still be physically on the server — it would just be effectively invisible.
how do you trust all these people to never, ever, ever get it wrong?
The naively simple idea was that the banned user could open an appeal to get their name removed from the blocklist. Also, keep in mind that the community's trust in the blocklist is predicated on the blocklist being accurate.
The first one is who controls it?
Ideally, nobody. Anyone could make their own blocklist, and one could choose to pull from any of them.
Sure, but (in the USA) an investigation precedes a criminal case [2], and a court order is part of that. I directly cite, for example, 18 U.S. Code § 1509 - Obstruction of court orders [1]:
Whoever, by threats or force, willfully prevents, obstructs, impedes, or interferes with, or willfully attempts to prevent, obstruct, impede, or interfere with, the due exercise of rights or the performance of duties under any order, judgment, or decree of a court of the United States, shall be fined under this title or imprisoned not more than one year, or both.
References
- "18 U.S. Code § 1509 - Obstruction of court orders". Legal Information Institute. Cornell Law School. Accessed: 2024-11-12T00:42Z. https://www.law.cornell.edu/uscode/text/18/1509.
- "A Brief Description of the Federal Criminal Justice Process". FBI. Accessed: 2024-11-12T00:46Z. https://www.fbi.gov/how-we-can-help-you/victim-services/a-brief-description-of-the-federal-criminal-justice-process.
- §"I. The Pretrial Stage". §"Investigations, Grand Juries, and Arrests". ¶1.
If a crime is brought to the attention of federal authorities, whether by a victim of the crime or a witness to it (e.g., a bank robbery), a federal law enforcement agency will undertake an investigation to determine whether a federal offense was committed and, if so, who committed it. [...]
- §"I. The Pretrial Stage". §"Investigations, Grand Juries, and Arrests". ¶1.
NY Times vs Njalla
Do you have an official record of them not complying with an official court-ordered subpoena? I looked into "NYT vs Njalla", and it seems like it was the NYT making a private request to Njalla under threats of legal action, but no legal action followed [1][2].
References
- "About those threats". Blog. Njalla. Published: 2018-01-25. Accessed: 2024-11-12T00:33Z. https://njal.la/blog/about-those-threats/.
- "Njalla gives New York Times The Pirate Bay treatment". Staff Writer. Mybroadband. Published: 2018-01-26. Accessed: 2024-11-12T00:36Z. https://mybroadband.co.za/news/internet/246265-njalla-gives-new-york-times-the-pirate-bay-treatment.html.
- ¶10
TorrentFreak reported that Njalla did not hear back from the New York Times after sending the response.
- ¶10
It also setup in such a way as to not cause a downtime if the checker goes down.
Oh? Would the fallback be that it simply doesn't do a check? Or perhaps it could disable image uploads if the checker is down? Something else? Presumably, this would be configurable.
Do you have any advice, recommendations, and/or tips for someone wanting to host a public/non-personal Lemmy instance?
If you think this post would be better suited in a different community, please let me know.
---
Topics could include (this list is not intending to be exhaustive — if you think something is relevant, then please don't hesitate to share it):
- Moderation
- Handling of illegal content
- Server structure (system requirements, configs, layouts, etc.)
- Community transparency/communication
- Server maintenance (updates, scaling, etc.)
---
Cross-posts
- https://sh.itjust.works/post/27913098
Do you have any advice, recommendations, and/or tips for someone wanting to host a public/non-personal Lemmy instance?
I'm not sure if this post should instead be put in [email protected], rather than here; please let me know if this would be better suited there, and/or if it is out of the scope of this community. Also, please let me know if there is a different community, other than where it has already been posted, in which this post would be better suited.
---
Topics could include (this list is not intending to be exhaustive — if you think something is relevant, then please don't hesitate to share it):
- Moderation
- Handling of illegal content
- Server structure (system requirements, configs, layouts, etc.)
- Community transparency/communication
- Server maintenance (updates, scaling, etc.)
---
Cross-posts
- https://sh.itjust.works/post/27913099
Vultr doesn't let you pay with crypto until you've already set up payment using a credit card or PayPal
Gotta get that KYC!
CMM: One should be allowed to put their own king into check, and one should be allowed to make moves that leave their king in check
It would function simply: If a player puts their king into check on their own move, if the opponent sees it, they can capture the king on their turn either by physically taking out the king or announcing checkmate on their turn. If the opponent doesn’t see it, the game continues as normal. Likewise, if the opponent puts the king into check, both players can respond on their turn if they notice it, or it's simply a blundered opportunity.
The classical checkmate ending can be seen as an honorable ending, wherein the player effectively resigns/surrenders, or the player can be dishonorable by drawing out the game by making one more move. I understand the redundancy of this type of ending, but it would add more personable nuance to the game.
This idea can also be extended to stalemates: The only true stalemate would be one where a capturing of the king will not occur in a finite number of moves, e.g. move repetitions, or two sole kings on the board. A stalemate by trapping the king, ie the king has no alternative moves that wouldn’t put it into checkmate, should be a victory rather than a draw — the king would be forced to make a move into check, then the opponent would capture the king on their move if they notice the possibility.
Can a Unified Push push server see/read notifications?
By "push server" I mean something like Ntfy.sh.
---
Cross-posts
- https://sh.itjust.works/post/27577324
Can a Unified Push push server see/read notifications?
By "push server" I mean something like Ntfy.sh.
---
Cross-posts
- https://sh.itjust.works/post/27577380
Whack lookin growth
References
- Star History Chart. Star History. Accessed: 2024-10-31T08:51Z. https://star-history.com/#Nutomic%2FIbis=&Date=.
TIL that recipes are not protected by copyright law in the USA (and likely Canada)
References
- "Are Recipes Protected by Copyright Law?". Kiera Boyd. Fasken. The Angle. Lexology. Published: 2021-07-07. Accessed: 2024-10-31T04:50Z. https://www.lexology.com/library/detail.aspx?g=bc2cc721-99bc-47f0-be4f-727f25421201.
- > In [Publications International, Ltd. v. Meredith Corp. 88 F.3d 473 (7th Cir. 1996) ], the court stated that a functional list of ingredients cannot be considered original within the meaning of the Copyright Act.
- > In Lambing v. Godiva Chocolatier, 142 F. 3d 434 (6th Cir. 1998) [Lambing], the court stated plainly that recipes are not protected by copyright, completely ignoring the possibility that a recipe could contain enough expressive elements to make it copyrightable.
- > Canadian courts have not yet addressed the issue of copyright in recipes [...]. Under Canadian copyright law, facts, formulas, and ideas are not protected by copyright. This means that just like in the U.S., recipes which only list ingredients (facts) and the steps that one takes to complete the recipe (formulas) are likely not protected by copyright in Canada.
- > Based on current Canadian copyright law and the leading caselaw on the subject in the U.S., a list of ingredients or matter-of-fact instructions regarding the process of creating a recipe is unlikely to be protected by copyright law.
- keepitquickk. "Is it unethical to use online recipes for my restaurant? Am I stealing someone’s work?". r/NoStupidQuestions. Reddit. Published: 2021-11-16T16:00:59.196Z. Accessed: 2024-10-31T04:58Z. https://www.reddit.com/r/NoStupidQuestions/comments/qvb0gy/comment/hkv7xg6/.
- > [...] you can't copyright a recipe [...]
What is your skincare routine?
I would like to know what your routine is in general, but I'm also specifically curious about what products you use, if you use them, and what the rationale is behind each product.
My routine:
Morning
- Rinse face with warm water.
- Scrub face and neck with warm, wet washcloth.
- Apply facial moisturizer with SPF (I use CeraVe AM Facial Moisturizing Lotion SPF 30) to face, neck, and hands.
Evening
- Shower.
- While in shower, scrub entire body with an exfoliating mitt (ie this one).
- Apply a retinol (I use Retin-A (tretinoin 0.05%)) to face, neck, and hands.
- Apply facial moisturizer (I use CeraVe PM Facial Moisturizing Lotion) to face, neck, and hands
- Apply body lotion (I use CeraVe Moisturizing Cream) to whole body, excluding hands, and face.
I have used, and considered continuing using a BHA (also AHA?) liquid exfoliant (I have read that it shouldn't be used at the same time as retinol due to PH requirements, ie use it in the morning and retinol in the evening) (I previously used Paula's Choice 2% BHA Liquid Exfoliant, but I no longer because I have lost trust in Paula's Choice overall due to their borderline false advertising regarding their retinol product [1]), but I am unsure of what a good product would be, and the rationale behind it. I have also heard about Vitamin E, though I've never used it.
References
- "[Research] Study: The Ordinary and Paula's Choice retinols are unstable". toa20. r/SkincareAddiction. Reddit. Published: 2023-01-26T17:49:01.223Z. Accessed: 2024-10-29T05:16Z. https://www.reddit.com/r/SkincareAddiction/comments/10lxshy/research_study_the_ordinary_and_paulas_choice/.
The Factorio developers are confident that they can keep to their planned release date of October 21st, 2024 for Factorio: Space Age and Factorio 2.0
> there is no worry about keeping to our release date of October 21st [for Factorio: Space Age and Factorio 2.0] [1].
References
- "Friday Facts #428 — Reactor & Logistics circuit control". Klonan. Factorio Blog. Published: 2024-09-13. Accessed: 2024-09-13T21:47Z. https://www.factorio.com/blog/post/fff-428.
- § "LAN Party Result" ¶ 3
Do you have any advice for digitizing VHS tapes?
I have a bunch of old VHS tapes that I want to digitize. I have never digitized VHS tapes before. I picked up a generic HDMI capture card, and a generic composite to HDMI converter. Using both of those, I was planning on hooking a VCR up to a computer running OBS. Overall, I'm rather ignorant of the process. The main questions that I currently have are as follows:
- What are the best practices for reducing the risk of damaging the tapes?
- Are there any good steps to take to maximize video quality?
- Is a TBC required (can it be done in software after digitization)?
- Should I clean the VCR after every tape?
- Should I clean every tape before digitization?
- Should I have a separate VCR for the specific purpose of cleaning tapes?
Please let me know if you have any extra advice or recommendations at all beyond what I have mentioned. Any information at all is a big help.
Have you ever experienced stuttering in a game if you receive a message in a desktop messaging app during gameplay?
Solution
This is a bug in KDE Plasma [1.1][2]. It appears that it might be fixed in KDE Plasma v6.2 [1.2][3].
Original Post
I have noticed this behavior with Element and Signal while playing Deadlock. The game will have a pretty severe stutter, ie the frame-rate will substantially dip, for half a second or so at the exact moment that a message is received. It seems to happen with every message. Do note that these are only messages that would result in a system notification. All other messages that are silent, ie they have no pop-up notification, do not result in any stutter.
- OS: Arch Linux, Kernel: v6.6.49-1-lts
- DE: KDE Plasma v6.1.4
- WM: Wayland
- CPU: Intel Core i5-4690k
- GPU: AMD Radeon RX 6600
Updates
- I have tried disabling this setting in Deadlock: !
- I have tried windowed-borderless
- I have noticed that the moment that the stutter occurs, my CPU spikes maybe 20% and my GPU drops to 0%.
References
- @[email protected]. "Have you ever experienced stuttering in a game if you receive a message in a desktop messaging app during gameplay?". sh.itjust.works. Lemmy. Published: 2024-09-09T23:12:24Z. Accessed: 2024-09-10T00:03Z. https://sh.itjust.works/comment/13818926. https://lemm.ee/comment/14674507.
- > it’s a bug in KDE Plasma
- > [the bug] might be fixed [in KDE Plasma] 6.2
- "Bug 487780: Fullscreen game stutter when Plasma receives notifications.". Robert. bugs.kde.org. Published: 2024-05-30T03:58Z. Accessed: 2024-09-10T00:06Z. https://bugs.kde.org/show_bug.cgi?id=487780.
- Zamundaaa. "Bug 487780: Fullscreen game stutter when Plasma receives notifications.". bugs.kde.org. Published: 2024-08-19T12:01:08Z. Accessed: 2024-09-10T00:13Z. https://bugs.kde.org/show_bug.cgi?id=487780#c13. > There are some remaining code paths that can block direct scanout - namely effects that haven't been fixed, or that may need to block direct scanout in some situations. There's a new API in 6.2 that effects can use though, https://invent.kde.org/plasma/kwin/-/merge_requests/6203, which blocks direct scanout only when really necessary. It's implemented for all built in effects, and external javascript effects automatically make use of this API too.
Theseus' Axe
References
- "Grandfathers Axe in Oblivion". danz. YouTube. Published: 2024-09-06. Accessed: 2024-09-09T19:48Z. https://youtube.com/watch?v=nSveAO61g5g.
"You Sexy Devil – The Story of the Genie du Maal". Theophanes Avery. Adventures in Gender Fuckery.
Fondly remembering the days when Lucifer was the most beautiful (and possibly most androgynous) of all the angels. A tongue-in-cheek lesson in art history.
References
- "You Sexy Devil – The Story of the Genie du Maal". Theophanes Avery. Adventures in Gender Fuckery. Published: 2019-05-17. Accessed: 2024-09-09T18:20Z. https://theophanesavery.com/adventures-in-gender-fuckery/2019/05/17/you-sexy-devil-the-story-of-the-genie-du-maal/.
Do Creative Commons licenses require one to reference the license when citing a licensed work if one is quoting content from that work?
Solution
It turns out that quotes fall under "fair-use" [4][5], so technically one isn't required to even give attribution to the source of the quote; however, in practical purposes, this means that there are simply no restrictions on how one cites a quote.
Original Post
Creative Commons licenses require that credit be given to creator of a work [1]. This is stated as: > Attribution — You must give appropriate credit , provide a link to the license, and indicate if changes were made . You may do so in any reasonable manner, but not in any way that suggests the licensor endorses you or your use. [2]
"Appropriate credit" is defined as: > appropriate credit — If supplied, you must provide the name of the creator and attribution parties, a copyright notice, a license notice, a disclaimer notice, and a link to the material. CC licenses prior to Version 4.0 also require you to provide the title of the material if supplied, and may have other slight differences. [2]
This seems to be stating that if you, say, quote content from a CC licensed work, when you cite it, say, with MLA or APA, you'll have to also include a copyright notice, a license notice, and a disclaimer notice. This seems like way too much for a simple citation. MLA claims that you don't need to include the license [3], so I'm not entirely sure what is legally expected.
References
- "About CC Licenses". Creative Commons. Accessed: 2024-09-07T05:29Z. https://creativecommons.org/share-your-work/cclicenses/
- "Attribution 4.0 International". Creative Commons. Accessed: 2024-09-07T05:28Z. https://creativecommons.org/licenses/by/4.0/
- "If I cite art, music, or other material that has a Creative Commons license, should I refer to the license in my works-cited-list entry?". MLA. Published: 2017-11-07. Accessed: 2024-09-07T05:26Z. https://style.mla.org/citing-works-with-a-cc-license/
- FAQ. "Can I Use Someone Else's Work? Can Someone Else Use Mine?". "How much of someone else's work can I use without getting permission?". Copyright.gov. Accessed: 2024-09-09T17:34Z. https://www.copyright.gov/help/faq/faq-fairuse.html. > Under the fair use doctrine of the U.S. copyright statute, it is permissible to use limited portions of a work including quotes, for purposes such as commentary, criticism, news reporting, and scholarly reports. There are no legal rules permitting the use of a specific number of words, a certain number of musical notes, or percentage of a work.
- "17 U.S. Code § 107 - Limitations on exclusive rights: Fair use". Legal Information Institute. Cornell Law School. Accessed: 2024-09-09T17:46Z. https://www.law.cornell.edu/uscode/text/17/107. > Notwithstanding the provisions of sections 106 and 106A, the fair use of a copyrighted work, including such use by reproduction in copies or phonorecords or by any other means specified by that section, for purposes such as criticism, comment, news reporting, teaching (including multiple copies for classroom use), scholarship, or research, is not an infringement of copyright. In determining whether the use made of a work in any particular case is a fair use the factors to be considered shall include— > > (1) the purpose and character of the use, including whether such use is of a commercial nature or is for nonprofit educational purposes; > > (2) the nature of the copyrighted work; > > (3) the amount and substantiality of the portion used in relation to the copyrighted work as a whole; and > > (4) the effect of the use upon the potential market for or value of the copyrighted work. > > The fact that a work is unpublished shall not itself bar a finding of fair use if such finding is made upon consideration of all the above factors.
"stranger illegally moved in, so i made her life a living hell"
There's currently 2 follow up videos:
- https://www.youtube.com/watch?v=t63zjRnJ9iI
- https://www.youtube.com/watch?v=WbGFnIhf-6Y
References
- "stranger illegally moved in, so i made her life a living hell". Asian Andy. YouTube. Published: 2024-08-11. Accessed: 2024-09-04T04:27Z. https://www.youtube.com/watch?v=WbGFnIhf-6Y.
PSA: Git exposes timezone metadata
Git records the local timezone when a commit is made [1]. Knowledge of the timezone in which a commit was made could be used as a bit of identifying information to de-anonymize the committer.
Setting one's timezone to UTC can help mitigate this issue [2][3] (though, ofc, one must still be wary of time-of-day commit patterns being used to deduce a timezone).
References
- Git documentation. git-commit. "Date Formats: Git internal format". Accessed: 2024-08-31T07:52Z. https://git-scm.com/docs/git-commit#Documentation/git-commit.txt-Gitinternalformat.
> It is
<unix-timestamp> <time-zone-offset>, where<unix-timestamp>is the number of seconds since the UNIX epoch.<time-zone-offset>is a positive or negative offset from UTC. For example CET (which is 1 hour ahead of UTC) is+0100. - jthill. "How can I ignore committing timezone information in my commit?". Stack Overflow. Published: 2014-05-26T16:57:37Z. (Accessed: 2024-08-31T08:27Z). https://stackoverflow.com/questions/23874208/how-can-i-ignore-committing-timezone-information-in-my-commit#comment36750060_23874208.
> to set the timezone for a specific command, say e.g.
TZ=UTC git commit - Oliver. "How can I ignore committing timezone information in my commit?". Stack Overflow. Published: 2022-05-22T08:56:38Z (Accessed: 2024-08-31T08:30Z). https://stackoverflow.com/a/72336094/7934600 > each commit Git stores a author date and a commit date. So you have to omit the timezone for both dates. > > I solved this for my self with the help of the following Git alias: > > ``` > [alias] > co = "!f() { \ > export GIT_AUTHOR_DATE=\"$(date -u +%Y-%m-%dT%H:%M:%S%z)\"; \ > export GIT_COMMITTER_DATE=\"$(date -u +%Y-%m-%dT%H:%M:%S%z)\"; \ > git commit $@; \ > git log -n 1 --pretty=\"Autor: %an <%ae> (%ai)\"; \ > git log -n 1 --pretty=\"Committer: %cn <%ce> (%ci)\"; \ > }; f"
---
Cross-posts:
- https://sh.itjust.works/post/24495692
- https://sh.itjust.works/post/24495744
PSA: Git exposes timezone metadata
Git records the local timezone when a commit is made [1]. Knowledge of the timezone in which a commit was made could be used as a bit of identifying information to de-anonymize the committer.
Setting one's timezone to UTC can help mitigate this issue [2][3] (though, ofc, one must still be wary of time-of-day commit patterns being used to deduce a timezone).
References
- Git documentation. git-commit. "Date Formats: Git internal format". Accessed: 2024-08-31T07:52Z. https://git-scm.com/docs/git-commit#Documentation/git-commit.txt-Gitinternalformat.
> It is
<unix-timestamp> <time-zone-offset>, where<unix-timestamp>is the number of seconds since the UNIX epoch.<time-zone-offset>is a positive or negative offset from UTC. For example CET (which is 1 hour ahead of UTC) is+0100. - jthill. "How can I ignore committing timezone information in my commit?". Stack Overflow. Published: 2014-05-26T16:57:37Z. (Accessed: 2024-08-31T08:27Z). https://stackoverflow.com/questions/23874208/how-can-i-ignore-committing-timezone-information-in-my-commit#comment36750060_23874208.
> to set the timezone for a specific command, say e.g.
TZ=UTC git commit - Oliver. "How can I ignore committing timezone information in my commit?". Stack Overflow. Published: 2022-05-22T08:56:38Z (Accessed: 2024-08-31T08:30Z). https://stackoverflow.com/a/72336094/7934600 > each commit Git stores a author date and a commit date. So you have to omit the timezone for both dates. > > I solved this for my self with the help of the following Git alias: > > ``` > [alias] > co = "!f() { \ > export GIT_AUTHOR_DATE=\"$(date -u +%Y-%m-%dT%H:%M:%S%z)\"; \ > export GIT_COMMITTER_DATE=\"$(date -u +%Y-%m-%dT%H:%M:%S%z)\"; \ > git commit $@; \ > git log -n 1 --pretty=\"Autor: %an <%ae> (%ai)\"; \ > git log -n 1 --pretty=\"Committer: %cn <%ce> (%ci)\"; \ > }; f"
---
Cross-posts:
- https://sh.itjust.works/post/24495692
- https://sh.itjust.works/post/24495795
PSA: Git exposes timezone metadata
Git records the local timezone when a commit is made [1]. Knowledge of the timezone in which a commit was made could be used as a bit of identifying information to de-anonymize the committer.
Setting one's timezone to UTC can help mitigate this issue [2][3] (though, ofc, one must still be wary of time-of-day commit patterns being used to deduce a timezone).
References
- Git documentation. git-commit. "Date Formats: Git internal format". Accessed: 2024-08-31T07:52Z. https://git-scm.com/docs/git-commit#Documentation/git-commit.txt-Gitinternalformat.
> It is
<unix-timestamp> <time-zone-offset>, where<unix-timestamp>is the number of seconds since the UNIX epoch.<time-zone-offset>is a positive or negative offset from UTC. For example CET (which is 1 hour ahead of UTC) is+0100. - jthill. "How can I ignore committing timezone information in my commit?". Stack Overflow. Published: 2014-05-26T16:57:37Z. (Accessed: 2024-08-31T08:27Z). https://stackoverflow.com/questions/23874208/how-can-i-ignore-committing-timezone-information-in-my-commit#comment36750060_23874208.
> to set the timezone for a specific command, say e.g.
TZ=UTC git commit - Oliver. "How can I ignore committing timezone information in my commit?". Stack Overflow. Published: 2022-05-22T08:56:38Z (Accessed: 2024-08-31T08:30Z). https://stackoverflow.com/a/72336094/7934600 > each commit Git stores a author date and a commit date. So you have to omit the timezone for both dates. > > I solved this for my self with the help of the following Git alias: > > ``` > [alias] > co = "!f() { \ > export GIT_AUTHOR_DATE=\"$(date -u +%Y-%m-%dT%H:%M:%S%z)\"; \ > export GIT_COMMITTER_DATE=\"$(date -u +%Y-%m-%dT%H:%M:%S%z)\"; \ > git commit $@; \ > git log -n 1 --pretty=\"Autor: %an <%ae> (%ai)\"; \ > git log -n 1 --pretty=\"Committer: %cn <%ce> (%ci)\"; \ > }; f"
---
Cross-posts:
- https://sh.itjust.works/post/24495744
- https://sh.itjust.works/post/24495795