GNU social JP
  • FAQ
  • Login
GNU social JPは日本のGNU socialサーバーです。
Usage/ToS/admin/test/Pleroma FE
  • Public

    • Public
    • Network
    • Groups
    • Featured
    • Popular
    • People

Notices by 🐈‍⬛David Sommerseth (dazo@infosec.exchange)

  1. Embed this notice
    🐈‍⬛David Sommerseth (dazo@infosec.exchange)'s status on Monday, 02-Mar-2026 19:21:17 JST 🐈‍⬛David Sommerseth 🐈‍⬛David Sommerseth

    This is a follow-up post on the sad state of Mozilla

    First, notice the date of the commit identified (as highlighted in a few posts below that toot referenced above).

    Secondly, Mozilla has done further changes to their Privacy policy since this initial change. I am not fully convinced about them - since the Privacy FAQ at the same time is not aligned. The reason for my continued mistrust to Mozilla is that they have gradually, over many years, moved in a direction I do find privacy unfriendly. And they have ties/agreements/contracts/partnerships to companies who does not have a good track record on privacy topics. I generally trust people and organisations actions more than their words of what they want to do.

    Thirdly, it should be fairly clear to most that AI/LLM is not preserving privacy well when data is sent to a remote server to be processed there. And even running parts of the LLM engines locally does not fully disentangle the privacy aspects fully - data is still being exchanged with a remote server (otherwise there would not need to be "AI service provider URLs" in about:cofig). Mozilla did force AI/LLM unto users, enabled by default with the only way to disable that in the beginning via about:config. And it took several releases before more user friendly approaches to disable it arrived. Due to this delay, I really wonder "does these new knobs really fully disable AI/LLM?". I have that doubt, because of how Mozilla has behaved over many years.

    On top of this, the Mozilla leadership is extremely well paid while they have reduced their engineering teams working on Firefox and other products. That is a too strong indication for me to ignore, that profit and leadership compensation seem to be way more important than the core mission of making Internet a better place.

    I have little trust in Mozilla for the time being. And I doubt I'm alone, due to the traction this toot thread triggered. Currently, I believe trust can be built up again. But it will take a lot of efforts now to repair what has been broken. For that to improve for me, I will need to see a lot of actions from Mozilla, where they clearly does changes in the whole organisation and communicates them clearly and that the communication is aligned across all aspects - including policy documents, FAQs, source code. Until that happens, I will use some of the Firefox forks. And leadership compensation need to be completely transparent and come down to a level which is not in an astronomic level comparable to large for-profit enterprise companies who generally cares little for anything than their own egoistic wealth.

    If a person taking a leadership role in an organisation claiming working for a better Internet and fighting for its users is getting uninteresting unless there is a million dollar yearly compensation when the people doing the grunt work, delivering code resulting in a real product, has a 5th or 10th of that compensation, then I do question the values this person holds. And I will especially highly question the leadership when they need to reduce cost and choses to cut among the engineers doing the grunt work while the leadership not considering their own compensation.

    So basically, I find the Mozilla organisation fairly rotten currently. It preaches the nice words but ends up doing something completely different.

    #mozilla #firefox #privacy #foss #opensource

    In conversation about 3 months ago from infosec.exchange permalink

    Attachments


  2. Embed this notice
    🐈‍⬛David Sommerseth (dazo@infosec.exchange)'s status on Thursday, 26-Feb-2026 16:22:35 JST 🐈‍⬛David Sommerseth 🐈‍⬛David Sommerseth
    • Zack Whittaker

    Just read @zackwhittaker's experience over a longer time span with how the government in #USA, through #FBI are attacking press freedom deliberately. It makes me angry how #Trump reverted protections the Biden administration put in place after the the first Trump administration.

    The press freedom must be fought for by all means everywhere. There are no chance to have an honest government without a free and independent press. And what happens in the #US now is just terrifying.

    #press #pressfreedom #politics #uspol

    https://this.weekinsecurity.com/fbi-agents-visited-my-home-about-an-article-i-wrote-and-now-i-cannot-go-to-mexico/

    In conversation about 3 months ago from infosec.exchange permalink

    Attachments

    1. Domain not in remote thumbnail source whitelist: this.weekinsecurity.com
      FBI agents visited my home about an article I wrote, and now I can't go to Mexico
      Mexico formally requested the FBI's help in seeking answers about one of my stories. Having federal agents on my doorstep sparked my own years-long effort to pry information out of the FBI to explain why it came to my house to begin with.
  3. Embed this notice
    🐈‍⬛David Sommerseth (dazo@infosec.exchange)'s status on Thursday, 26-Feb-2026 07:12:12 JST 🐈‍⬛David Sommerseth 🐈‍⬛David Sommerseth
    in reply to

    #Mozilla has lost their ground and is now in a free fall into a sinkhole. I doubt they'll ever get out if this again unless they do a 180-turn within the coming days. Mozilla has lost a lot of trust and credibility over the last couple of years. This accelerates that distrust even more.

    https://blog.mozilla.org/en/firefox/update-on-terms-of-use/

    It looks promising, until you hit the last paragraph (my highlight)

    In order to make Firefox commercially viable, there are a number of places where we collect and share some data with our partners, including our optional ads on New Tab and providing sponsored suggestions in the search bar. We set all of this out in our privacy notice. Whenever we share data with our partners, we put a lot of work into making sure that the data that we share is stripped of potentially identifying information, or shared only in the aggregate, or is put through our privacy preserving technologies (like OHTTP).

    In my book, that's indirectly selling data.

    Goodbye, #Firefox.

    #privacy #ads #foss #opensource #web

    In conversation about 3 months ago from infosec.exchange permalink
  4. Embed this notice
    🐈‍⬛David Sommerseth (dazo@infosec.exchange)'s status on Thursday, 26-Feb-2026 07:12:12 JST 🐈‍⬛David Sommerseth 🐈‍⬛David Sommerseth
    in reply to

    The discussions are heated ...

    https://connect.mozilla.org/t5/discussions/information-about-the-new-terms-of-use-and-updated-privacy/m-p/87735

    https://connect.mozilla.org/t5/discussions/an-update-on-our-terms-of-use/m-p/88320

    In conversation about 3 months ago from infosec.exchange permalink

    Attachments


  5. Embed this notice
    🐈‍⬛David Sommerseth (dazo@infosec.exchange)'s status on Thursday, 26-Feb-2026 07:12:12 JST 🐈‍⬛David Sommerseth 🐈‍⬛David Sommerseth

    This is sad 😢

    https://github.com/mozilla/bedrock/commit/d459addab846d8144b61939b7f4310eb80c5470e#diff-a24e74e4595fa85440a2f4e7e5dcfe68aba6e1e593aef05a2d35581a91423847

    #firefox #privacy #mozilla #foss #opensource #web

    In conversation about 3 months ago from infosec.exchange permalink

    Attachments


    1. https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/133/372/441/577/988/original/5005aed288333386.png
    2. Domain not in remote thumbnail source whitelist: opengraph.githubassets.com
      Tos copy updates (fix #16016) (#16018) · mozilla/bedrock@d459add
      * ToS copy updates (fix #16016) * Apply suggestions from code review - copy change Co-authored-by: maureenlholland --------- Co-authored-by: maureenlholland &lt...
  6. Embed this notice
    🐈‍⬛David Sommerseth (dazo@infosec.exchange)'s status on Tuesday, 16-Dec-2025 18:49:29 JST 🐈‍⬛David Sommerseth 🐈‍⬛David Sommerseth
    in reply to
    • kaia
    • daniel:// stenberg://

    @kaia @bagder

    Seen this one? Seems accurate ...

    https://infosec.exchange/@thomasareed/115707970885487725

    In conversation about 6 months ago from infosec.exchange permalink
  7. Embed this notice
    🐈‍⬛David Sommerseth (dazo@infosec.exchange)'s status on Thursday, 02-Oct-2025 22:51:26 JST 🐈‍⬛David Sommerseth 🐈‍⬛David Sommerseth
    in reply to
    • Dag

    @dagb

    *sukk* Ja.

    Norgespris er den klassiske X-Y problemløsningen. Vi har problem X og løser den med en annen løsning Y. Som til syvende og sist ikke løser noen ting. Bare skyver problem X foran seg.

    Norgespris vil bli dyrt for Norge. Og løser ikke utfordringen med kraftfordelingen som er for svak i Norge. Og den regninga som kommer etterhvert blir enda dyrere.

    Hadde politikerne med bidratt til å bedre strømfordeling i landet - ja, så vil også prisforskjellene også fordele seg. Baksiden er at man får høyere priser der de er lave i dag (fordi det er for mye kraft tilgjengelig i regionen) - og derfor blir dette en død plan for politikerne, spesielt i et valgår.

    Men samtidig vil prisen vil gå ned i regionene som får tilgang til mer kraft (fordi underskuddet av kraft blir bedre dekket opp fra regioner med overskudd).

    Hva får vi for denne "dyrere" strømmen ... Jevnere priser mellom regionene og et mer robust strømnett. Dette er åpenbart for dyrt for politikerne, som i stedet løser dette med å bruke penger på betale forbrukerne for den dyre strømmen de ellers må betale for. Og det er alt vi får igjen for den statlige pengebruken.

    Norgespris er mer som om politikerne roper ut ut: «Oj, SEEEE! En rosa elefant!"» når landet skriker etter bedre fordeling av kraften i landet.

    Man kaster penger ut av vinduet uten få noen ting igjen for det. Bokstavelig talt pisser i buksa for å holde seg varm en vinternatt.

    Det er så idiotisk.

    Men nå har vi Norgespris - og for mange så er det like greit å ta den avtalen og få litt penger igjen fra staten. De kaster jo bokstavelig talt de pengene mot oss forbrukere, så hvorfor ikke ta dem imot?

    In conversation about 8 months ago from infosec.exchange permalink
  8. Embed this notice
    🐈‍⬛David Sommerseth (dazo@infosec.exchange)'s status on Sunday, 28-Sep-2025 07:56:32 JST 🐈‍⬛David Sommerseth 🐈‍⬛David Sommerseth
    in reply to
    • kaia

    @kaia if you're lucky, you might still be able get an extended warranty on used/refurbished thinkpads ... And if really lucky, it won't be too expensive. But it depends a lot on the model. Worth checking out to see if it fits the budget.

    In conversation about 8 months ago from infosec.exchange permalink
  9. Embed this notice
    🐈‍⬛David Sommerseth (dazo@infosec.exchange)'s status on Sunday, 28-Sep-2025 03:29:36 JST 🐈‍⬛David Sommerseth 🐈‍⬛David Sommerseth
    in reply to
    • kaia

    @kaia ThinkPad Yoga are nice ones ... I set one up 6-7 years ago, and felt like a good one back then.

    But it might be Lenovo also has some non-ThinkPad Yoga models these days too ... The non-ThinkPad models are more for the mass-consumer market. It often feels like overall poorer quality compared to ThinkPad, with less warranty/service options. Beware of that.

    I generally can recommend upgrading to 4 year service/warranty if available and if the price is somewhat reasonable. The on-site technicians do a pretty good job and they usually come the 1-2 days after reporting an issue, depending on the severity and if the report was done late in the evening or early in the morning.

    In conversation about 8 months ago from infosec.exchange permalink
  10. Embed this notice
    🐈‍⬛David Sommerseth (dazo@infosec.exchange)'s status on Sunday, 28-Sep-2025 03:19:41 JST 🐈‍⬛David Sommerseth 🐈‍⬛David Sommerseth
    in reply to
    • kaia
    • grillchen
    • Joakim Fors

    @joakimfors @grillchen @kaia I contacted Lenovo during the warranty period and they sent a technician to me and replaced the motherboard free of charge. I've also replaced the screen on another TP machine like that. Keyboards as well.

    That said, I've had more services on the machines bought after 2023 than those before that. The overall quality seems to have degraded over the years. The X1C Gen11 (bought approx 14 months ago) is probably the one I've had longest without any service requirements. The X1C Gen8 had 3 services in 4 years - all keyboard/trackpoint related.

    In conversation about 8 months ago from infosec.exchange permalink
  11. Embed this notice
    🐈‍⬛David Sommerseth (dazo@infosec.exchange)'s status on Sunday, 28-Sep-2025 03:14:24 JST 🐈‍⬛David Sommerseth 🐈‍⬛David Sommerseth
    in reply to
    • kaia
    • Framework :fedora: :ubuntu:

    @kaia ThinkPad T series are quite good. Usually bigger screens (14-16”), keyboard key travel is a bit better. Weight is reasonable. Good materials.

    X series are smaller and lighter. E series are cheapest, IIRC, with mostly plastic and heavier. I believe L series is one level up from E. P series are more kinda portable workstations, with powerful CPUs and quite heavy.

    X1 is the flagship models, lighter and quite thinner than T series, but mostly same screen sizes. These have good specs, but keyboard key travel is short - gen 8 was cruel, gen 10 is worse.

    The best price is around from blackfriday times until January-ish on the Lenovo online shop - around the time new upgraded models hit the market. Last years models often get quite nice discounts.

    I only stay with ThinkPad because of the TrackPointer (the "red dot" in the middle of the keyboard). I find that being the best, most efficient and ergonomic mouse alternative available.

    If @frameworkcomputer would have trackpointer and deliver to my region, I'd give them a shot.

    In conversation about 8 months ago from infosec.exchange permalink
  12. Embed this notice
    🐈‍⬛David Sommerseth (dazo@infosec.exchange)'s status on Sunday, 28-Sep-2025 02:43:28 JST 🐈‍⬛David Sommerseth 🐈‍⬛David Sommerseth
    in reply to
    • kaia

    @kaia I've used APC both at home and at work. Mostly due to reasonable Linux support via apcupsd

    My UPSes are getting quite old now, so I would need to do a new evaluation next time. I can still get replacement batteries for the ones I have, so I'm not in a rush. Might use this list as a kind of guide ... https://networkupstools.org/stable-hcl.html

    In conversation about 8 months ago from infosec.exchange permalink

    Attachments

    1. Domain not in remote thumbnail source whitelist: networkupstools.org
      Network UPS Tools - Hardware compatibility list
      Power Devices support
  13. Embed this notice
    🐈‍⬛David Sommerseth (dazo@infosec.exchange)'s status on Friday, 12-Sep-2025 06:39:02 JST 🐈‍⬛David Sommerseth 🐈‍⬛David Sommerseth
    in reply to
    • Børge

    @forteller

    Ikke uenig i målet her. Det ville vært vakkert og flott. Og ja, vi ville ikke angret om 50 år. Tvert i mot.

    Men hvor skal vi ta de pengene som trengs fra? Joda, klart vi har masse penger i Norge - med "oljepengene". Men hva skjer med den norske makroøkonomien da? Slike grep har ofte en stor negativ konsekvens som dukker opp litt senere.

    Det er jo nettopp derfor økonomer er svært bekymret for "budsjettpulsen" i statsbudsjettene. Hvis vi bruker for mye penger i forhold til inntektene (skattene, i praksis), så påvirker dette alt fra inflasjon til kronekurs - og mere til.

    Det sies at "å være rik er en like stor forbannelse som å være fattig, om ikke større". Fordi bruken av midlene vi har gir store ringvirkninger - som oppleves senere.

    Siden ingen av oss besitter evner til å spå inn i fremtiden ... så blir slike store og kostbare grep ganske risikable - også i et 50 års perspektiv.

    In conversation about 9 months ago from infosec.exchange permalink
  14. Embed this notice
    🐈‍⬛David Sommerseth (dazo@infosec.exchange)'s status on Friday, 05-Sep-2025 18:03:53 JST 🐈‍⬛David Sommerseth 🐈‍⬛David Sommerseth
    in reply to
    • Miakoda

    @hellomiakoda I would suggest reaching out to the Akonadi community ... f.ex on IRC; then you'll hopefully have a better chance of success to succeed.

    irc://irc.libera.chat/#akonadi

    If you don't have an IRC client, you can try the web-based one here: https://web.libera.chat/ and use #akonadi as the channel name to join.

    In conversation about 9 months ago from infosec.exchange permalink

    Attachments

    1. No result found on File_thumbnail lookup.
      Kiwi IRC
  15. Embed this notice
    🐈‍⬛David Sommerseth (dazo@infosec.exchange)'s status on Friday, 05-Sep-2025 17:26:21 JST 🐈‍⬛David Sommerseth 🐈‍⬛David Sommerseth
    in reply to
    • Miakoda

    @hellomiakoda

    Akonadi Control: stopped
    Akonadi Server: running

    This is most likely the cause of this issue. I would try to do ps faxuw | grep akon and see if there are any akonadi like processes running. The use kill -TERM with their respective PID numbers.

    That said, I'm not an akonadi user ... This is just my normal way to debug odd issues like this.

    In conversation about 9 months ago from infosec.exchange permalink
  16. Embed this notice
    🐈‍⬛David Sommerseth (dazo@infosec.exchange)'s status on Friday, 05-Sep-2025 17:10:25 JST 🐈‍⬛David Sommerseth 🐈‍⬛David Sommerseth
    in reply to
    • Miakoda

    @hellomiakoda Does akonadictl status give more clues?

    Most likely, there's a stray akonadi process lingering behind - or a "lock file" somewhere which was not removed for some odd reasons. Which results in this "unknown middle state"

    In conversation about 9 months ago from infosec.exchange permalink
  17. Embed this notice
    🐈‍⬛David Sommerseth (dazo@infosec.exchange)'s status on Friday, 05-Sep-2025 17:04:00 JST 🐈‍⬛David Sommerseth 🐈‍⬛David Sommerseth
    in reply to
    • Miakoda

    @hellomiakoda

    Well, to be frank ... this is more a akonadi problem than a Linux problem 😉

    In conversation about 9 months ago from infosec.exchange permalink
  18. Embed this notice
    🐈‍⬛David Sommerseth (dazo@infosec.exchange)'s status on Monday, 18-Aug-2025 20:51:22 JST 🐈‍⬛David Sommerseth 🐈‍⬛David Sommerseth
    in reply to
    • Børge

    @forteller

    Ellers kan det kanskje være bedre om MDG snakket mer om politikk enn at de må komme seg over sperregrensa ... at det mer føles som at en stemme går til politikken og ikke å "redde" partiet.

    Skjønner veldig godt at sperregrensa er et stort og stygt monster MDG som parti vil holde seg unna ... men det er mindre motiverende for velgerne.

    https://www.nrk.no/ytring/stadig-mer-skamlos-velgerjakt-1.17531044

    In conversation about 10 months ago from infosec.exchange permalink

    Attachments


    1. https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/049/459/285/966/537/original/91125b9c843a6712.png
  19. Embed this notice
    🐈‍⬛David Sommerseth (dazo@infosec.exchange)'s status on Monday, 18-Aug-2025 20:51:20 JST 🐈‍⬛David Sommerseth 🐈‍⬛David Sommerseth
    in reply to
    • Børge
    • Végarðr

    @vegard_berget Det funker iallefall ikke for meg. Så da er jeg nok ikke i målgruppen til MDG.

    @forteller

    In conversation about 10 months ago from infosec.exchange permalink
  20. Embed this notice
    🐈‍⬛David Sommerseth (dazo@infosec.exchange)'s status on Tuesday, 01-Jul-2025 17:52:23 JST 🐈‍⬛David Sommerseth 🐈‍⬛David Sommerseth
    • Brodie Robertson

    @zyx @BrodieOnLinux ahh, sorry ... I missed the needle in the haystack of other self-promoting URLs.

    In conversation about a year ago from infosec.exchange permalink

    Attachments


    1. https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/777/070/434/381/347/original/5102d795fcbacec0.jpg
  • Before

User actions

    🐈‍⬛David Sommerseth

    🐈‍⬛David Sommerseth

    F/OSS hacker, mostly working on #OpenVPN- speaks only for himself.ex-Twitter account (now inaccessible): https://twitter.com/DavidSommerseth"Don't aim to be someone. DO something."#nobridge - because I believe in the real #fediverse, and I don't want my own views/data to be abused by yet another "closed-service which can do whatever it wants for profit".If you want to follow me, you now MUST have some content on your profile where we have some common ground on interests. I will no longer accept random profiles wanting to follow with no toots or no other follows or followers in the same interest sphere.

    Tags
    • (None)

    Following 0

      Followers 0

        Groups 0

          Statistics

          User ID
          210125
          Member since
          7 Nov 2023
          Notices
          55
          Daily average
          0

          Feeds

          • Atom
          • Help
          • About
          • FAQ
          • TOS
          • Privacy
          • Source
          • Version
          • Contact

          GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.

          Creative Commons Attribution 3.0 All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.