• 186 Posts
  • 581 Comments
Joined 2 years ago
cake
Cake day: July 30th, 2023

help-circle


  • It’s an old story. I don’t recall exactly what happened after I pushed back. I certainly was not fined and IIRC the city got off my back because they had no case.

    I eventually landscaped by choice. I don’t recall the motivation but I think it was to exploit a rebate offered by the government.

    Then years later weeds (ugly plants) emerged again because the weed blocker that was under the landscape was compromised. Neighbor was on it and I got cited. I then noticed one of the plants actually was a weed (or resembled one), legally. So I had to pull them. I acted within the deadline so there was no fine. I was bummed because I really wanted to give the neighbor the middle finger.



  • If someone is offering a public wifi, there is a reasonable expectation that other people sitting in the same cafe for example can’t listen in on what you are doing on your device. As older wifi encyption standards are easily compromised, this requires enforcing a semi-recent wifi-standard. You can of course make your own judgement in your own home, but in a public space it is different.

    I think WEP is pretty much dead. Even my first Android (2.2) supported WPA. WPA can still be snooped on with some effort when the attacker has the PW. Apart from that, you’re still trusting whoever supplies the uplink. I do not think people have an expectation of privacy on public networks. There are far too many compromises, the most trivial being an imposter AP. I always tunnel in some way over public wifi by using either Tor or a VPN. So even WEP or fully open is still secure enough for my use.

    I would not want user nannying to get in the way of someone who knows how to secure themself. I’m also not quick to support the idea of dumbing down the community so people don’t develop self-defense skills and take personal responsibility. If someone cannot be bothered to tunnel, then hopefully they would buy a device that is configured to insist on WPA3. But in the end this is the user’s responsibility one way or another while nannying is a kind of tyranny.

    As for SSL certificates… this isn’t only a captive portal issue. If your device has such outdated root certificates that you run into issues already at the captive portal, you will have also issues with each and every website that uses https.

    They are completely independent. I can do what I need so long as the captive portal doesn’t fuck with me. Captive portals can be broken in more ways than the web generally is. And when a captive portal is shit, it’s a disaster across the board… It breaks all apps that need the net.

    Root certificates are only cycled out of use for good reasons, such as them becoming compromised, so by using an super old root certificate on your device you are wide open to MITM attacks on supposedly secure connections.

    I don’t recall if the sparse cert errors I had were due to root certs or normal certs, but I should indeed pay close attention. My only persistent problem was getting OSMand maps, which I solved by side-loading the maps from a PC.


  • But enforcing certain security standards on public wifi so that random people can not see everything you are doing online is good.

    There is a blind “for security reasons” excuse the industry likes to use to force people to chronically upgrade their hardware… to boost sales. I try to stay immune to that bait.

    The access point needs to protect itself – full stop. An access point that oversteps their authority and becomes a nanny that dictates security practices on others without knowing their security posture and threat model to protect people from themselves can bounce. We don’t want their “help”.

    In any case, the DB I am proposing is factual. Whether a fact in the DB is “good” or “bad” is for the users of the DB to decide. And either way, it’s useful.

    And I would advise against going online with a device so old and unmaintained that it has issues with its SSL root certificate.

    Can you give more details? If the certs have not expired, the device is able and willing to make a connection. If the certs fail due to age, the app makes the user aware of the problem (and in the case of OSMand it refuses to use the connection regardless of the user’s wishes). So what’s the issue?

    Note the context is with captive portals. If someone thinks it’s a good idea to force a captive portal on a public LAN to get a simple “I agree” signal, why might that be sensible? AFAICT, it’s down to a clumbsy admin who did not think through the consequences of SSL on a captive portal. The captive portal is not in itself a useful resource for the user. It’s just an obsticle with the sole purpose of getting a signal that someone agrees to the text of a policy that is public anyway. Once the obsticle is out of the way, it’s the independent job of every resource to implement appropriate security for the task at hand, which in come cases may not involve SSL at all (e.g. accessing an onion server). But when the captive portal blocks someone due to (what I regard as clumbsyness), the apps the user would use are blocked regardless of how well they are secured.

    (edit) Some captive portals collect personal info, where you must submit an email or phone number. SSL is probably unavoidable in those cases, but ideally the app would collect that info as well. We would want the DB to indicate that sharing personal data is a precondition to access.




  • I vaguely recall that there are good and bad ways to dump it in a landfill. You can bury it well, but the rot creates methane gas pockets just below the surface which escape into the atmosphere when dug up. When it’s rotting on the surface, it gradually leaks methane as it’s produced. Though I think it’s less rot when aired out. Mulch likely has ~½ the surface area against the soil and rotting there, so I would expect notable methane in that case.

    Anyway, I’ve read nothing specific on it but conjecture that it should be studied. All that work capturing the carbon into tree wood only to cause the emission of a much worse GHG.


  • I see no mention of GHG. Tree services often cannot find a use for the trees they cut down (which is strange because you would think they could mill it and sell the lumber). In the end, they dump trees they were paid to remove into landfills. When trees rot they release methane gas, which is 10× worse than CO₂.

    I bring this up because wouldn’t wood mulch have the same problem?







  • First of all, you didn’t answer the questions.

    But I will answer yours:

    Why do people fear downvotes so much?

    This is irrelevant and already addressed in Lemmy. Lemmy already has a disable downvotes config option. Beehaw is an example of where that is used. Anyone who outright opposes¹ downvotes can use beehaw.

    Silent downvotes are a different matter entirely. There is good reason to oppose silent downvotes. They are a suppressive act that lacks justification, heavily manipulated, and adds negative value and toxicity.

    Re: toxicity – silent downvotes are also an assault on dignity as they regard the OP as unworthy of explanation. Then there is the further side-effect of the OP being denied the viewpoint of a (cowardly) opposition and ultimately being denied understanding of the community they are in, which is not conducive to future positive content.

    It’s ultimately shitty communication. Like when a bank’s way of communicating to you that your ID card expired on file is to freeze your account. Or when in Office Space they communicate to Marvin he is fired by fixing a payroll glitch. It’s that kind of communication that’s shitty. Bizarre how people actually think this is a sensible way to communicate in a civilised society.

    If you don’t like the downvotes, you can use a sorting algorithm that ignores them.

    There is no sorting algo that disregards silent downvotes while counting reasoned downvotes.

    Also, the power of defaults is a thing. The suppression has effect because of default algos used by the unmeticulous masses. One’s own custom sorting algo could not make a dent in that even if it were magically feasible from the user’s view to associate upvotes to downvotes.

    ¹ I don’t outright oppose downvotes, but when our blunt options are the default shit-show we have by default or no downvotes, no downvotes is better which is why I use beehaw.










  • This is extremely reductive and oblivious to the actual realities of banking in various countries.

    I think you will be hard-pressed to find a country that does not have a single bank that can serve those w/out smartphones. If you find such a country, plz post about it in !smartphone_required@lemmy.sdf.org and send me the link. Then we may be able to make a case for ppl in that specific country not being boot-lickers, if at the same time being unbanked is illegal.

    If you think it’s easy to be “unbanked” then I would suggest that you try it yourself first.

    I have been simulating an unbanked life for years now. 5 creditors are threatening lawsuits for non-payment after refusing my cash. One took me to court and it was an easy win for me. I just appeared without a lawyer and pointed to the law.

    It’s also worth noting that unbanked is more extreme that simply choosing a bank that does not require a smartphone.