Migrated account from @CosmicTurtle@lemmy.world

  • 0 Posts
  • 15 Comments
Joined 5 months ago
cake
Cake day: April 9th, 2024

help-circle






  • If you simply want to allow people to view your code, you can just upload it to GitHub or something similar.

    By default, your work is copyright and you hold all rights, excluding those you give up to GitHub.

    Open-Sourcing your project is all about choosing the license that you want your users to use.

    Please, for the love of God, choose an existing license. Don't go out and try to make one yourself or mix and match. Not only do you open yourself up to liability but it just makes it harder for you to keep track of it.

    Choosing a license is all about your personal preference and what your goals are. The two ends of the spectrum:

    • MIT License: do whatever you want, so long as you attribute me. Most libraries use this license.
    • GPL/AGPL: if you use my code, you must also release using GPL/AGPL or similarly appropriate license. Linux Kernel famously uses version 2. Linus Torvalds has issues with some of the terms in V3.

    There is a lot of middle ground between these two philosophies. Most of the major licenses have seen some level of court cases. I personally use AGPL, which is often seen as one of the strongest, most restrictive, licenses.

    I do not recommend releasing code to public domain. This often is a point of contention between OSS purists and OSS "spirit". I personally believe we're entering a new world of AI-driven content and I don't want more code feeding that beast.

    The license is then copied and pasted to a LICENSE file at the root of your repo and, boom. You've open sourced your code.

    Keep in mind: that commit (and all future commits) will be available under that license until your copyright expires, so long as that license exists in your repo. You cannot claw it back.

    One word of advice: you aren't likely going to see a bunch of people downloading your stuff. So don't get your hopes up that you'll have people submitting bug reports or making PRs, etc. All of my projects are just for me to use with one or two people reviewing it for fun. All but one, anyway.




  • Your passkey is an encrypted message that authenticates you, the service you're trying to reach, and your computer.

    If you go to a phishing site, the passkey won't even come up because the browser doesn't recognize the site. Granted a dumb user could still use their user/pass but ideally the user has MFA set up so they can't get far.

    The goal of a passkey is to replace username and passwords entirely so that phishing becomes less common.

    The main issue with passkeys is that unless you have something like a YubiKey or an authenticator (like bitwarden), the passkey is tied to the browser which means if the device gets lost you can't log in anymore.



  • If you're entering a u/p along with a passkey, then it's MFA.

    There are only a few sites I know of that do passkey correctly. CVS works wonderfully on my phone. Requires a username and then the passkey on my browser.

    My company is working on a passkey only for login and it's really really slick.

    You basically click "login" and then authenticate your passkey and you're in.



  • I actually really liked the book over the movie. I felt like the book did a much better job of describing the dystopian world and how the MC (can't remember his name and too lazy to look it up) and the world at large more or less dealt with it.

    Iirc the movie doesn't even go into the history of the digital world and why the MC was obsessed with it. I get that movies and books are different but it seemed like the movie was "inspired" by the book and not based on it.