Monthly Archive:: July 2023

Introduction to federated social media

The “enshittification” of social media started around 2016, but it reached new highs in 2023. All chronological feeds and hashtag importance have given way to narrow-AI algorithms and recommendation engines. The result was that reach has become impossible for the common user, and many art creatives lost their livelihoods. Enter the Fediverse. From Wikipedia: “The fediverse is an ensemble of federated (i.e. interconnected) servers that are used for web publishing (i.e. social networking, microblogging, blogging, or websites) and file hosting, which, while independently hosted, can communicate with each other.“ This system has some advantages: It is almost impossible for governments to shut down in its entirety. User load can be shared among different servers (“instances”). Different instances have different rules, so you join the one you agree best with. Generally no spam and fewer bots. A non-aggressive environment as users get along better. No telemetry or ads. Everything is chronological so there are equal chances to be seen, no weird recommendation engines here. As for the disadvantages: Some instance admins are too twitchy, and can block other servers on a dime (my main gripe with the system). Some users are too sensitive for some topics, and require you to self-censor. The system probably can’t sustain more than 10-20 million active users, because not many people have the expertise to run their own instance and pay for the financial costs before donations start rolling in. If your instance goes down, you’ll have to migrate and re-acquire all your followers from scratch. Your family and friends aren’t on it, and probably never will be. Here are the Fediverse alternatives to the classic options: Alternative to Twitter: Mastodon The biggest federated environment with over 2 million active users. Great for “toots”, and small-sized blogging. Very actively developed. While there’s an official app for it and a third party one called… Shitter, and FediLab, the best way to view it remains the web browser. Alternatives to Mastodon: Pleroma, Diaspora, Misskey/Calckey (they mostly interoperate anyway). Alternative to Reddit: Lemmy Since the latest Reddit shenanigans Lemmy has jumped to become the second most used fediverse service. Still under active development, but it works great and it has all major Reddit features. People there are much nicer too! Alternative to Lemmy: Kbin (they interoperate, so Kbin content is available on Lemmy, and vice versa). Apps: Jerboa, Lemming, LiftOff, Summit, Connect. Alternative to Instagram: Pixelfed A bit slow compared to the other fedi services, but it’s unique in getting the original Instagram experience. As an artist, I love it. PixelDroid is the mobile app for it. Alternative to Youtube: PeerTube Well, there’s TilVids, and then there’s everyone else. TilVids doesn’t want to federate with everyone else, but it does have the most interesting videos (particularly of Linux interest). Spectra.Video and Diode.Zone are also great options to move your videos at. Just note that bandwidth is limited in these free services, so it’s best to upload in 1080p instead of 4k. There are 3-4 mobile apps for it. Alternative to Medium/Wordpress/SubStack: WriteFreely Not much to say here, a very modern editor that acts as blogging and article publishing service. Secure Messaging and IRC/Discord alternatives: Matrix Matrix is secure messaging end-to-end with Element.io being the main provider. It can also act as a community messaging server. Nostr and Jami are the newest such services on the block, but they’re a little bit weird to get into, I still prefer Matrix. Alternative to TikTok: none Thank the Olympian gods! Finally, the best way to deal with some smaller instances going down and losing your account is to get 1-3 different accounts on different instances. I personally have 3 Mastodon accounts, 3 PeerTube ones, and 2 Lemmy/1 Kbin ones. I used an older $70 phone (Moto G5 Plus) where I have installed the free, and very private Murena /e/ OS. It’s a totally de-googled Android OS (more so than LineageOS) that uses the iOS UI paradigm. In it, I use three app stores that only carry open source apps: F-Droid, IzzyOnDroid, and Obtainium. I avoid as much as possible from installing from the Aurora or the included App Lounge app stores that use the Google Play Store. The OS uses the open source microG service to replace the Google Play Services. So, I have almost completely left behind the normal social media and moved on to the Fediverse (apart from FB messenger with my mom, and a couple of special-interest subreddits via my laptop). You see, after leaving OSNews 15+ years ago, I became an artist. And social media was the way to get sales back then. I started with Tumblr, and later Instagram and FB. Overall, I had amassed about 340,000 followers across all social media. Sales were good for a while. Then, the enshittification started. The biggest blow was Instagram removing the chronological feed and hashtag importance, and little by little only superstar accounts were pushed by the recommendation engines. By 2020, it was near-impossible to survive online selling your art. Now, I don’t have any illusions that the Fediverse can replace the golden era of social media (2010-2020). I have calculated that you need a minimum of 100 million active users for various niche business to survive under a fair social media system. And currently, the whole Fediverse only has about 14.5 million accounts, with only about 2.2 million being active. In fact, I don’t expect the fediverse to ever achieve more than 10 million active users… And yet, I prefer to stay on it. It’s simply a more fair system. It’s not a corporation that changes its policies at a whim, or sells your data. I rather use a “lesser” system in terms of reach and maintain my mental health, than battling Instagram’s algorithms all day long (“no, I don’t want to shoot useless vertical short videos”). So, come on and join us on the fediverse. The more the merrier! Note: OSNews is very active on the Fediverse. We have the main OSNews account which posts our stories,

Google’s nightmare “Web Integrity API” wants a DRM gatekeeper for the web

Google’s plan is that, during a webpage transaction, the web server could require you to pass an “environment attestation” test before you get any data. At this point your browser would contact a “third-party” attestation server, and you would need to pass some kind of test. If you passed, you would get a signed “IntegrityToken” that verifies your environment is unmodified and points to the content you wanted unlocked. You bring this back to the web server, and if the server trusts the attestation company, you get the content unlocked and finally get a response with the data you wanted. The web mercilessly mocked this idiotic proposal over the weekend, and rightfully so. This is an unadulterated, transparent attempt at locking down the web with DRM-like nonsense just to serve more targeted ads that you can’t block. This must not make its way into any browser or onto any server in any way, shape, or form. The less attention we give to this drivel, the better.

The IBM mainframe: how it runs and why it survives

Ars Technica has a great article about the IBM mainframe. Mainframe computers are often seen as ancient machines—practically dinosaurs. But mainframes, which are purpose-built to process enormous amounts of data, are still extremely relevant today. If they’re dinosaurs, they’re T-Rexes, and desktops and server computers are puny mammals to be trodden underfoot. It’s estimated that there are 10,000 mainframes in use today. They’re used almost exclusively by the largest companies in the world, including two-thirds of Fortune 500 companies, 45 of the world’s top 50 banks, eight of the top 10 insurers, seven of the top 10 global retailers, and eight of the top 10 telecommunications companies. And most of those mainframes come from IBM. In this explainer, we’ll look at the IBM mainframe computer—what it is, how it works, and why it’s still going strong after over 50 years. Whenever I see anything about mainframes, I think of that one time an 18 year old decided to buy a mainframe off eBay to run at home, and did an amazing presentation about the experience.

Riscv64 becomes official Debian architecture

After many years of effort, I am happy to announce that Debian riscv64 is now an official architecture! This milestone is not the end of the journey but rather the beginning of a new one: the port will need to be rebootstrapped in the official archive, build daemons will have to be reinstalled and handed over to DSA, many bugs will need to be fixed. If everything goes well, the architecture will eventually be released with Trixie. Please note that this process will be long and will span several months. An important step in any architecture’s life cycle is becoming an officially supported Debian architecture.

TV typewriter remembered

A lot of the cost of a video terminal was the screen. Yet nearly everyone had a TV, and used TVs have always been fairly cheap, too. That’s where Don Lancaster came in. His TV Typewriter Cookbook was the bible for homebrew video displays. The design influenced the Apple 1 computer and spawned a successful kit for a company known as Southwest Technical Products. For around $300 or so, you could have a terminal that uses your TV for output. The wild West days of home computing must’ve been an absolutely fascinating time to live through. I know we have quite a few old-timers in the audience here, so there’s bound to be folks here who used this. Amazing

Apple’s Interactive Television Box: hacking the set Top box System 7.1 in ROM

One of the coolest things to come along in the 68K Mac homebrew community is the ROM Boot Disk concept. Classic Macs have an unusually large ROM that contains a fair bit of the Mac OS, which was true even in the G3 New World Mac era (it was just on disk), so it’s somewhat surprising that only one Mac officially could boot the Mac OS entirely from ROM, namely the Macintosh Classic (hold down Cmd-Option-X-O to boot from a hidden HFS volume with System 6.0.3). For many Macs that can take a ROM SIMM, you can embed a ROM volume in the Mac ROM that can even be mirrored to a RAM disk. You can even buy them pre-populated. How’s that for immutability?Well, it turns out Apple themselves were the first ones to implement a flashable Mac OS ROM volume in 1994, but hardly anyone noticed — because it was only ever used publicly in a minority subset of one of the most unusual of the Macintosh-derived systems, the Apple Interactive Television Box (a/k/a AITB or the Apple Set Top Box/STB). And that’s what we’re going to dig into — and reprogram! — today. I had never heard of this obscure Apple product, so I was like a kid in a candy store reading this. Great weekend material.

I have written a JVM in Rust

Lately I’ve been spending quite a bit of time learning Rust, and as any sane person would do, after writing a few 100 lines programs I’ve decided to take on something a little bit more ambitious: I have written a Java Virtual Machine in Rust. With a lot of originality, I have called it rjvm. The code is available on GitHub. I want to stress that this is a toy JVM, built for learning purposes and not a serious implementation. Toy or not, this is ambitious and impressive.

What happened to Dolphin on Steam?

The Dolphin project has broken the silence regarding their legal tussle with Nintendo and Valve, giving a far more detailed elaboration of what, exactly happened. First things first – Nintendo did not send Valve or Dolphin a Digital Millenium Copyright Act (DMCA) section 512(c) notice (commonly known as a DMCA Takedown Notice) against our Steam page. Nintendo has not taken any legal action against Dolphin Emulator or Valve. What actually happened was that Valve’s legal department contacted Nintendo to inquire about the announced release of Dolphin Emulator on Steam. In reply to this, a lawyer representing Nintendo of America requested Valve prevent Dolphin from releasing on the Steam store, citing the DMCA as justification. Valve then forwarded us the statement from Nintendo’s lawyers, and told us that we had to come to an agreement with Nintendo in order to release on Steam. Considering the strong legal wording at the start of the document and the citation of DMCA law, we took the letter very seriously. We wanted to take some time and formulate a response, however after being flooded with questions, we wrote a fairly frantic statement on the situation as we understood it at the time, which turned out to only fuel the fires of speculation. So, after a long stay of silence, we have a difficult announcement to make. We are abandoning our efforts to release Dolphin on Steam. Valve ultimately runs the store and can set any condition they wish for software to appear on it. But given Nintendo’s long-held stance on emulation, we find Valve’s requirement for us to get approval from Nintendo for a Steam release to be impossible. Unfortunately, that’s that. The post also goes into greater detail about the Wii Common Key that’s been part of Dolphin’s codebase for 15 years. This key was originally extracted from the GameCube hardware itself, and a lot of people online claimed that Dolphin should just remove this key and all would be well. After consulting with their lawyers, Dolphin has come to the conclusion that including the key poses no legal risk for the project, and even if it somehow did, the various other parts of the Dolphin codebase that make emulation of original games possible would pose a much bigger legal threat anyway. So, the team will keep on including the key, and the only outcome here is that Dolphin will not be available on Steam.

Watermarks coming to AI content as Big Tech vows to prevent fraud, deception

Seven companies—including OpenAI, Microsoft, Google, Meta, Amazon, Anthropic, and Inflection—have committed to developing tech to clearly watermark AI-generated content. That will help make it safer to share AI-generated text, video, audio, and images without misleading others about the authenticity of that content, the Biden administration hopes. It’s currently unclear how the watermark will work, but it will likely be embedded in the content so that users can trace its origins to the AI tools used to generate it. And how easy will it be for bad actors to just remove the watermark? If we live in a world where these tools can create new content out of stealing everybody else’s content, what’s stopping anyone from developing a tool to remove these watermarks? This feels more like lip service than a real solution.

Updating FreeBSD on armv6 board (RPI-B)

One of my old home automation boards running ebusd is still using Raspberry PI 2 B SoC. FreeBSD is still perfectly supporting this hardware, however, due to being a Tier-2 platform, binary updates freebsd-update are not supported. Of course, one can download the new image, but this will mean re-installing and reconfiguring all the software, which is time-consuming and painful. Also, the traditional “build from source” way will probably take forever on this tiny board and also could potentially destroy the SD card. So the obvious alternative was cross-compilation. If you’re in this very specific niche – you’re very happy this guide exists.

Google’s Google Maps app for Palm OS from 2008 still works today

I’ve been going through my collection of PDAs over the last few weeks for, among other OSNews things, my Pixelfed account, and while playing around with various old applications, I came across the Google Maps application for Palm OS. As it turns out – this official Google application, last updated in 2008, still fully and completely works today, in 2023! I shot a quick video using the application, and uploaded it to the new (and not fully set-up yet, so forgive the lack of avatars, descriptions, banner images, and so on – it’s late in my time zone) OSNews PeerTube account, embedded below for your convenience. Navigation still works. You can pan around in both map and satellite view. And, as the video shows, you can zoom in quite far and get some incredible detail on that old Palm TX display (you can zoom in further). That’s some impressive API backwards compatibility.

Here’s why the best IMAX movies still need a Palm Pilot to work

About a small town’s worth of people pointed me to this on Mastodon, so here it goes: In an IMAX theater, the m130’s job is to control the quick turn reel unit, or QTRU for short. (For many years, it appears, a non-emulated m130 sat holstered in most theaters.) The QTRU’s job is to control the platters, which are those large horizontal shelves where all of a film’s many reels are stitched together, stored, and then quickly spun out to and from the projector. The IMAX 1570 projector moves film at a little under six feet per second, so it’s all happening really fast. The m130 is apparently crucial to keeping the thing humming — “PALM PILOT MUST BE ON ALL THE TIME,” reads a notice above an image of a different m130 that has since been passed around the internet — but doesn’t often need to be used. “I’ve never had to interact with the Palm Pilot,” says one person familiar with the technology. “It’s really just a status screen.” Its job is to keep the QTRU moving at a consistent speed and to help keep the film’s video in sync with its audio. This doesn’t surprise me one bit. In environments like these, if something works, and has been working reliably for decades, there’s really no reason to change any of it. This application is probably quite simple, but since there’s only a very small number of theaters out there even capable of showing 70mm film, and it doesn’t look like it’s a format on the up and up.

How did region-locking on the SNES work?

USA readers may wonder why I was waiting for the release of a game already published. While Street Fighter II made it to the Super Famicom on June 10, 1992 in Japan and July 15, 1992 in North America, France had to wait until December 17, 1992 to get a PAL version. As I waited, I saw ads in French magazines offering imported cartridges of my Holy Graal. To make them work on a European Super Nintendo, one had to buy an adapter. The combo cost almost as much as the console (595F + 199F vs 1290F). Needless to say I couldn’t afford it. But I always wondered how Nintendo seemingly controlled the regions and how tinkerers had managed to circumvent that protection. A detailed look at how the 10NES sysyem worked.

Apple slams UK surveillance-bill proposals

Apple says it will remove services such as FaceTime and iMessage from the UK rather than weaken security if new proposals are made law and acted upon. The government is seeking to update the Investigatory Powers Act (IPA) 2016. It wants messaging services to clear security features with the Home Office before releasing them to customers. The act lets the Home Office demand security features are disabled, without telling the public. Under the update, this would have to be immediate. I wonder if Apple would actually follow through with something like this, or if they’re only looking for a token concession so they can claim they’re still in the clear and do nothing. Interesting, though, that when the Chinese government comes calling, Tim Cook drops his “privacy is a fundamental human right” shtick real quick, but when the government of a western country comes calling, it’s a lot of rah-rah. A spine is clearly not very expensive.

‘No way out’: how video games use tricks from gambling to attract big spenders

Perhaps unsurprisingly, the techniques described in Let’s Go Whaling bear comparison to some of those that bookmakers and casinos have long deployed, capitalising on deep understanding of psychology. The big difference, of course, is that the gamer can never win money, only prestige or progress in a virtual game. The very uncomfortable truth for Apple and Google: much – 70-75% – of App Store and Play Store revenue comes from exploitative casino games, mostly expertly designed to target the most vulnerable among us, like gambling addicts, children, people with mental issues like depression, and so on. It’s seedy, disgusting, predatory, and should be deeply, deeply illegal. Left or right, can’t we all agree we should ban these practices?

FTC rewrites rules on Big Tech mergers with aim to ease monopoly-busting

Ars Technica: Antitrust enforcers released a draft update outlining new rules today that officials say will make it easier to crack down on mergers and acquisitions that could substantially lessen competition in the US. Now the public has 60 days to review the draft guidelines and submit comments to the Federal Trade Commission (FTC) and the Department of Justice (DOJ) before the agencies’ September 18 deadline. A fierce debate has already started between those in support and those who oppose the draft guidelines. Any corporation should be serving the democratically elected government of a country – not the other way around. If a merger or acquisition is deemed harmful to the competitive landscape, and thus to consumers, a government should be able to just stop it. The same applies to corporations who grow too large, too rich, too powerful – if a company’s actions start to dictate significant parts of the market or even economy, they are a threat to the stability and functioning of the society it’s claiming to be a part of, and as such, they should be able to be split up or their actions otherwise remedied to protect society. In other words, any steps the Us FTC and DOJ take to take control over runaway corporations are positive.

Windows 11 tries out unsafe password copy and paste warnings

Starting in Windows 11, version 22H2, Enhanced Phishing Protection in Microsoft Defender SmartScreen helps protect Microsoft school or work passwords against phishing and unsafe usage on sites and apps. We are trying out a change starting with this build where users who have enabled warning options for Windows Security under App & browser control > Reputation-based protection > Phishing protection will see a UI warning on unsafe password copy and paste, just as they currently see when they type in their password. This actually seems like a cool and useful feature. The basic gist – which is a bit unclear from the short blurb above – seems to be that if, e.g., a child using a school account copies and pastes that school account password to use somewhere else, this feature will warn them about it. Usefulness of warning dialogs aside, I can see this being quite useful in large organisations.