I waddled onto the beach and stole found a computer to use.

🍁⚕️ 💽

Note: I’m moderating a handful of communities in more of a caretaker role. If you want to take one on, send me a message and I’ll share more info :)

  • 284 Posts
  • 841 Comments
Joined 3 years ago
cake
Cake day: June 5th, 2023

help-circle







  • The discussion is full disclosure vs responsible disclosure. I think almost everyone who is familiar with the situation agrees that:

    • yogthos didn’t create the vulnerability
    • the vulnerability should be patched, and the public needed to be made aware of them

    I don’t see why full disclosure is still being suggested as having been the right call in this case. A patch would have come out just as fast with a responsible disclosure, and there was nothing that users of Lemmy or Piefed could do by becoming aware of it right away. Meanwhile the full disclosure harms regular users, instance operators, and developers alike. I think it would ALSO be bad if someone did this to the Lemmy developers, or any other project.

    Responsible disclosure would have meant

    • contact the developer and wait a reasonable time for a patch
    • contact instance operators to let them know that they may want to take steps before the patch is out

    Even if we assume that malicious entities are actively exploiting the vulnerability, which is an assumption and not confirmed, publicly promoting it only makes the problem worse and doesn’t speed up any resolution.

    I understand that there is also tension between Yogthos and Rimu. I think Yogthos would have come out of this looking a lot better if they went with responsible disclosure




  • I think the original title was more helpful because it shows that this is a recent development. Maybe you can add “new CEO”?

    Bitwarden scrubs ‘Always free’ and ‘Inclusion’ values from its website as longtime execs step down

    In February, longtime CEO Michael Crandell moved to an advisory role, according to LinkedIn, with no announcement from the company. His replacement, Michael Sullivan, former CEO of both Acquia and Insightsoftware, touts his experience with “all facets of mergers and acquisitions” on his own LinkedIn page, including experience working with leading private equity firms.

    CFO Stephen Morrison also left Bitwarden in April, replaced by former InVision CEO Michael Shenkman. Both Crandell and Morrison joined the company in 2019. Kyle Spearrin, who started Bitwarden as a fun hobby project in 2015, remains the company’s CTO.




  • I appreciate these news articles, but maybe you could share the ones that are very specific to a particular region in the south Asia community? Meanwhile you could keep sharing the globally relevant ones in the global news communities

    Since we don’t have the context for some of these, people outside of south Asia don’t get as much from the very specific articles. Meanwhile the south Asia communities have people subscribed who are interested in all of the news, and sharing the articles there would help it grow


  • This is helpful, and I hope these other platforms grow in popularity. However, my concern with kids is that they will desperately want to use the platforms that their friends are on and they will hold it against the parents (and alternative platforms) if they are forced to make do without the big tech ones.

    I think addressing that will be helpful. What I would add:

    • Talk about alternative front ends and teach kids about them. Its possible to access the big tech sites without the ads and tracking, and often its a much better experience. You could also explore other ways of using the platforms with limited permissions, such as by using the mobile browser instead of the app, and/or custom extensions that modify the platform (ex. uBlock origin removes ads). This way, kids can still see some of the content that their friends see (under parental supervision), and they can talk about it with them / participate in the group dynamic. They might even feel superior for knowing how to get around the problems that their friends complain about.
    • Work with other parents to transition on to these other platforms. If the kid and their close friends are on the better platform, then all of the stuff above is a moot point :)

    edit: by alternative front ends, I mean something like Redlib for Reddit: https://redlib.catsarch.com/r/aww/

    There is a list here: https://github.com/mendel5/alternative-front-ends


  • I didn’t catch the previous post and gave it a quick skim now. My thoughts are more to do with how LLM based moderation is viewed by users.

    It’s not a new thing, since sentiment analysis based moderation has been around for a long while. Where it becomes a problem is

    • The sentiment analysis makes mistakes and it gets tedious to deal with platforms that use it for automated moderation. This is a big problem with old social media platforms like Reddit, or comment sections in places like Instagram/Facebook.
    • It can be used as a flimsy excuse to take moderation actions when such actions aren’t necessary, which makes users trust that moderation team less

    I also don’t agree with the privacy angle since all content here is public by nature, but I do see value in discussing these other problems since that’s what this community is for?

    Also, while Rimu can defederate, letting people discuss it first is better. Best case scenario, the groups find some kind of compromise. Otherwise it lets people weigh in on the platform policies and federation status, instead of having admins make that call on their own