Skip Navigation
InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)SI
sinnerdotbin @lemmy.ca
Posts 3
Comments 70
Feel stuck in an unideal position
  • No idea on the current market myself. You should absolutely start looking at the rate you are being paid right now though. Just don't get discouraged about the resume gap, it's a rare field where you can make your own backfill for those gaps.

  • Connect 1.0.46 Released
  • Are you planning to open source it at all?

    I am also wondering this myself. I don't fault anyone for not, but may have an impact on my long term commitment with where my interest in this space is.

    Also latest updates seemed to fix the issue with fold type phones.

  • Feel stuck in an unideal position
  • I’ve done a lot of low rate or entirely volunteer work for small, often non-profit organizations in the past, and don’t fall into the trap. It can be thankless and it can be soul sucking.

    However, obviously if you want to eat and if this is your only income right now you’ll have to stick it out a bit. So I hope we are talking like you are virtually working no hours for that rate, leaving you time to expand your resume on your own.

    I have often been asked in the past by friends or acquaintances how you get a good career in programming, and the answer typically is either luck, or a lot of your own hard work.

    I don’t know what the job market is like these days, but historically your papers mean very little to getting a job. A link to your Github goes a long way to demonstrate your abilities and provides a much higher degree of confidence you know what you are doing because they can actually look at your work, and if you are contributing to other projects, that you are a team player. As one speaker said at a Google Q&A I watched when asked if a PhD would increase their chance of getting hired: “well, we won’t hold having a PhD against you”.

    There is also a lot of free course material out there to various degrees of difficulty.

    Programming is becoming more and more competitive, and the ones that succeed have made it their passion, which does mean a lot of unpaid work. So either find projects you are happy to provide your time to to sharpen your skill, or start your own project that you can get satisfaction in building. Actually programming something is always the fastest way to improve your skill.

  • Lemmy (the wider community) privacy *does* stink (and how to change that)
  • It isn't that the fediverse doesn't care, it is that the primary focus here is to prevent you from being tracked. How public you are is your responsibility, as it is everywhere, but there is a degree that you have to be more cautious here.

    There are discussions on how to mitigate this, but it can't be entirely solved because it conflicts with other goals such as censorship resistence and community safety.

    The comment about EU is the other component. Many instances do not have privacy policies, Lemmy doesn't provide a default framework, so some admins are temporarily blocking EU if it applies to them. The ones hosted in EU will get rekt if they aren't or don't get into compliance. I offer a template to start this process of compliancy.

  • Lemmy (the wider community) privacy *does* stink (and how to change that)
  • Everyone can see them if they use kbin and I think Mastodon. Sign up to kbin if you want to see yourself.

    All admins have access, and a rouge admin could very easily mine it.

    I can see an argument for it, but does make you take pause on how you will use that feature doesn't it?

  • Lemmy (the wider community) privacy *does* stink (and how to change that)
  • Hey folks, guy in the cross post. Thanks for doing that @[email protected] , I feel it is an important discussion for people to be a part of across the Lemmiverse.

    Seems there is some positive engagement on here, and maybe a couple that are a bit confused. I'm going to assume they aren't just curmudgeons because why would you waste time commenting if you weren't making an expression of interest in good faith, but maybe not ready to fully invest yet?

    To expand on the TLDR; many new users are coming from monolith platforms (such as reddit; Meta; etc) into the brave new world of federated platforms (like Lemmy) without fully understanding the difference in privacy principles between these two models. Many, more experienced, users do not understand it fully themselves and they make potentially dangerous assertions, or at least ones that could mislead less experienced users into believing Lemmy behaves in a way that it doesn't.

    It's all fine and good to say "Everything posted on the internet stays. Never post anything you don't want public", but in practice, and especially people coming from monolith platforms, they may make mistakes if they are not highly cognizant of some distinctions between the two models of public, social engagement.

    If you are certain you'll never, ever have any risk of making such a mistake, the subtle distinction won't matter to you. If you aren't sure (it is very easy to trip up here) you are going to want to be educated on where some of the potential hazards are, and you will want to be very, very, very careful. Like you never have been before.

    Even some of the most confident, let's call them, "perfectly private posters", often get a little shook when I inform them their votes are entirely public, when they had previously made an assumption they were not due to familiarity with a monolith platform where votes are private. It seems intuitive that they should be private here, but that is not the case. This is a very prevalent misunderstanding right now, and very eye opening to some.

    I much prefer the model of federated because it really gives the user the full control of their privacy to engage to the level they are comfortable with. But it can be very dangerous if not managed appropriately.

    I also feel the wider community is not doing a very good job of communicating this, which is validated by the chord it seems to have struck over on Beehaw. But I come with solutions: a haywire, but comprehensive essay on some of the things a user should be aware of. I have also started a project that provides templates for privacy policies so that admins can add accountability to their instances while also protecting themselves.

    Anyway, a very complex subject many are still learning to navigate, and not something easily reduced to a tldr; As it is, this version is half the length of the original, and you would have been half way through it by now if you just went to the source.

    If you have any questions, I'm here to answer them.

  • YSK: You can view upvote and downvote information through kbin
  • I kind of agree with you. There argument against showing it to maintain a certain atmosphere on the platform. However given it is freely available to view on kbin and I believe Mastodon (ie. it is entirely public), it surprises many users when they find out because most assumptions will be validated by not seeing it themselves here at first. Perhaps a warning of some sort before you are allowed to cast your first vote.

  • YSK: You can view upvote and downvote information through kbin
  • I have had concerns about this since I joined. Personally I don't mind that the votes are public and can see a case for it, however the wider community is doing a very poor job of informing the users how this all works, and that will result in very bad outcomes.

    Lemmy (the wider community) privacy does stink (and how to change that)

  • Privacy / data retention policy
  • I found your draft a bit long and a bit, I dunno, overfamiliar?

    I created a "lite" version. Tried getting GPT to summarize it and it failed horribly. Don't know if that says something good or bad about my writing or good or bad about the complicated nature of federation.

    https://github.com/BanzooIO/federated_policies_and_tos/blob/main/optional-privacy-policy-intro-lite.md

    Language still might not be for everyone, but hopefully gives admins a place to start in really making a clear distinction between their and the user's responsibility.

  • inconsistent comments between instances?
  • Lemmy isn't even at a point 2 minor version yet so it will be awhile before it is stable and these kind of kinks worked out, but this kind of thing is going to somewhat the norm I think, by design.

    Beehaw defederated Lemmy.world, and they are both have large communities. Although we federate with them both, depending on who/where it was posted the source of truth may result in not always getting consistent updates from both.

    I believe the reality in federated space is you will always want to have an account on all the more active instances, using one local as your primary and monitoring things you want to follow on multiple. Luckily the official app makes it pretty easy to do, and maybe there is another app, or one in the works, that will do a client side merge across accounts.

  • inconsistent comments between instances?
  • I think that part is still up to the instance to announce. In the case here at lemmy.ca the admin has made a call to block those on a list another admin has made of problematic instances (seem to be primarily instances that have seen a recent, unexplained spike). Note this is not the issue with Lemmy.world which is not blocked, the issue with them just seems to be either overloaded or general issues with Lemmy or .world right now.

    https://lemmy.ca/post/919062

    Difference in signup policy creating moderation overhead the reason for the high profile case:

    https://beehaw.org/post/567170

  • Lemmy Administration @lemmy.ml sinnerdotbin @lemmy.ca

    Privacy Policy

    cross-posted from: https://lemmy.ca/post/821266

    > So it seems that no instance has published a privacy policy, many users are asking about such a thing (as they should), and much confusion on how federation happens among users AND some admins. I feel this is pretty important to the survival of Lemmy to work out a privacy policy framework. > > Yes, the argument that "everything on the internet stays forever" is true, but there is a big distinction between captured copies, and some of the unique data distribution / management issues that come up with a federated service. It is important to inform the user of this distinction. It is also important to inform them how early the development is. > > It is going to scare the pants off some users. I'd argue an educated user on an totally public platform is far more safe than an uneducated one on a closed platform, but let the user decide that for themselves. I'd much rather scare the pants off them then have them coming for me once they get caught with their pants down and feel I didn't do enough to warn them. Can you imagine hundreds of thousands of pantless lemmings with pitchforks coming for you? Not a pretty image. > > I AM NOT A LAWYER, but I have created a template based on the Mastodon privacy policy if anyone wants a basic framework to start from: > > https://github.com/BanzooIO/federated_policies_and_tos/blob/main/lemmy-privacy-policy.md > > I am not overly experienced with instance management yet, but I have done my best to cover all aspects of how data is federated. Please contribute in correcting any errors. > > I also feel it is important for admins to disclose the current lack of SSL support in connecting to PostgreSQL and what the local admin has done to mitigate the risk. > > Issues on open on the topic of privacy policies here: > https://github.com/LemmyNet/lemmy/issues/721 and https://github.com/LemmyNet/lemmy-ui/issues/1347

    5

    Privacy Policy

    So it seems that no instance has published a privacy policy, many users are asking about such a thing (as they should), and much confusion on how federation happens among users AND some admins. I feel this is pretty important to the survival of Lemmy to work out a privacy policy framework.

    Yes, the argument that "everything on the internet stays forever" is true, but there is a big distinction between captured copies, and some of the unique data distribution / management issues that come up with a federated service. It is important to inform the user of this distinction. It is also important to inform them how early the development is.

    It is going to scare the pants off some users. I'd argue an educated user on an totally public platform is far more safe than an uneducated one on a closed platform, but let the user decide that for themselves. I'd much rather scare the pants off them then have them coming for me once they get caught with their pants down and feel I didn't do enough to warn them. Can you imagine hundreds of thousands of pantless lemmings with pitchforks coming for you? Not a pretty image.

    I AM NOT A LAWYER, but I have created a template based on the Mastodon privacy policy if anyone wants a basic framework to start from:

    https://github.com/BanzooIO/federated_policies_and_tos/blob/main/lemmy-privacy-policy.md

    I am not overly experienced with instance management yet, but I have done my best to cover all aspects of how data is federated. Please contribute in correcting any errors.

    I also feel it is important for admins to disclose the current lack of SSL support in connecting to PostgreSQL and what the local admin has done to mitigate the risk.

    Issues on open on the topic of privacy policies here: https://github.com/LemmyNet/lemmy/issues/721 and https://github.com/LemmyNet/lemmy-ui/issues/1347

    2
    Lemmy.ca Support / Questions @lemmy.ca sinnerdotbin @lemmy.ca

    Signup Hanging

    This seems to be more a problem with Lemmy as I have experienced it on other instances and probably better suited for the Github issue tracker. But I wanted to make a test post anyway so figure I'd start here and see if anyone else has experienced the problem or can direct me to active discussion already started on it.

    Signup almost always hangs and just pinwheels. Tried multiple times today, FF in mobile/desktop. Chrome. Same result. Console just keeps dumping messages like 'CreatePostLike', 'RemovePost', etc., which seem to be global activity being pushed to the client (I haven't dug too deep, but I'm not actively doing anything so I can only assume it is some kind of global push updates). Likely unrelated to the signup hanging, and it happens on all pages; I realize this is all very early release stuff, but seems a bit poor form to just have console.log endlessly dumping on production to me, even in early release.

    Also hangs when trying to login and the account isn't activated (attempted when I thought maybe it went through despite the hang). Never received a response such as "invalid account" or "waiting for validation"

    Eventually an attempt did go through. But a second attempt has resulted in the same behaviour.

    Again probably better for the issue tracker, but curious if anyone else local here has found the same issue with signup/login.

    0