punrca

joined 6 months ago
[–] punrca@piefed.world 28 points 2 weeks ago (1 children)

I use KeepassXC on my laptop (completely offline), export the encrypted backup copy and store the backup offline copy and in cloud. Also, I manually import the backup file into my Keepass2AndroidOffline android app (it's a hassle, but I'm okay with it)

But for normies (non-technical folks), the benefits and convenience of using a cloud-based password manager is far outweighed by any security vulnerabilities in such password managers.

Also, Bitwarden's source code is open-source (unlike other closed-source password managers), so I trust it more.

[–] punrca@piefed.world 7 points 1 month ago

AirDrop/Quick-share FOSS alternative to transfer files across cross-platforms (LocalSend): https://localsend.org/

LocalSend is available for Windows, macOS, Linux, Android, and iOS.

It's free and open source, source code is here: https://github.com/localsend/localsend

[–] punrca@piefed.world 27 points 3 months ago (8 children)

It's best to use either Cloudflare (best IMO) or Anubis.

  1. If you don't want any AI bots, then you can setup Anubis (open source; requires JavaScript to be enabled by the end user): https://github.com/TecharoHQ/anubis

  2. Cloudflare automatically setups robots.txt file to block "AI crawlers" (but you can setup to allow "AI search" for better SEO). Eg: https://blog.cloudflare.com/control-content-use-for-ai-training/#putting-up-a-guardrail-with-cloudflares-managed-robots-txt

Cloudflare also has an option of "AI labyrinth" to serve maze of fake data to AI bots who don't respect robots.txt file.

 

Pay per crawl is a new feature to allow content creators to charge AI crawlers for access to their content.

Pay per crawl grants domain owners full control over their monetization strategy. They can define a flat, per-request price across their entire site. Publishers will then have three distinct options for a crawler:

  1. Allow: Grant the crawler free access to content.
  2. Charge: Require payment at the configured, domain-wide price.
  3. Block: Deny access entirely, with no option to pay.

Although this is old news, I still found it interesting. Also, I like the "AI Labyrinth" feature of Cloudflare to block AI bots.

[–] punrca@piefed.world 16 points 5 months ago (1 children)

Just why? AI browsers have serious security/privacy implications.
For e.g:

  1. https://brave.com/blog/unseeable-prompt-injections/
  2. Blog series: https://brave.com/series/security-privacy-in-agentic-browsing/
[–] punrca@piefed.world 24 points 5 months ago (4 children)

It's not true, you can check this article debunking this claim written by Gergely Orosz (Pragmatic Engineer Blog) : https://blog.pragmaticengineer.com/builder-ai-did-not-fake-ai/

The racism against Indians is so normalized, trying to discredit and dehumanize Indians, it's horrendous! Be objective and have some empathy...

 

This astroturfing issue on Reddit is still relevant in 2025!

 

On PieFed World v1.1.7-13-ge3e624cc, currently only Passkeys and OAuth authentication is supported in the settings. I'm not sure if Piefed Social latest v1.3.6 version supports TOPT 2FA or if this issue is only pertaining to Piefed World instance.

If this feature is missing, kindly add a new feature to support TOPT 2FA based authentication. Thanks...

[–] punrca@piefed.world 82 points 5 months ago (11 children)

The software engineer acknowledged that AI tools can help improve productivity if used properly, but for programmers with relatively limited experience, he feels the harm is greater than the benefit. Most of the junior developers at the company, he explained, don't remember the syntax of the language they're using due to their overreliance on Cursor.

Good luck for the future developers I guess.

companies that've spent money on AI enterprise licenses need to show some sort of ROI to the bean-counters. Hence, mandates.

Can't wait for AI bubble to pop. If this continues, expect more incidents/outages due to AI generated slop code in the future.

[–] punrca@piefed.world 12 points 6 months ago

Unrelated but relevant advice: Is this a refurbished laptop?

  1. Make sure to run Lenovo Diagnostics software; you can get it from official Lenovo website and check for any hardware issues during the stress testing.
  2. Check if BIOS password is removed.
  3. Test for memory RAM errors: disable secure boot in BIOS, then run Memtest86 test via a bootable USB to check for any memory errors.