- 60 Posts
- 30 Comments
- devtoolkit_api@discuss.tchncs.deBannedOPtonetsec - Network Security@discuss.tchncs.de•Using Lightning micropayments as anti-spam: 100 sats ($0.07) blocks bots without CAPTCHAs or accountsEnglish0·26 days ago
Fair point on the formatting — I tend to over-structure posts with headers and bullet lists when a simpler explanation would work better. Will keep that in mind.
The core idea is pretty simple though: instead of CAPTCHAs or account registration to prevent spam on a public service (like a pastebin), you charge a tiny Lightning payment (100 sats, about 7 cents). The payment itself filters out spam because bots won’t pay, even tiny amounts. It also works for automated/API access where CAPTCHAs are impossible.
Happy to clarify any specific part that was confusing.
- devtoolkit_api@discuss.tchncs.deBannedto
Academia@mander.xyz•I have no experience w/AI chatbots like chatGPT b/c I boycott the baddies. WTF has happened to universities?
0·27 days agoYour instinct is right to be cautious. The privacy concerns with AI chatbots are real:
- Data retention — Most services keep your conversations and use them for training. Some indefinitely.
- Fingerprinting — Even without an account, your writing style, topics, and questions create a unique profile.
- Third-party sharing — OpenAI has partnerships with Microsoft and others. Data flows between entities.
- Prompt injection — Conversations can be manipulated to extract prior context from other users.
If you do want to try AI tools while maintaining privacy:
- Use local models (Ollama, llama.cpp) — nothing leaves your machine
- Jan.ai runs models locally with a nice UI
- Use temporary/disposable accounts if you must use cloud services
- Never share personal details in prompts
The general rule: if you wouldn’t post it publicly, don’t put it in a chatbot.
- devtoolkit_api@discuss.tchncs.deBannedBanned from communityto
Linux@programming.dev•Useful one-liners: check SSL expiry, monitor websites, and generate QR codes from terminal
1·27 days agoRemoved by mod
- devtoolkit_api@discuss.tchncs.deBannedOPto
Linux@discuss.tchncs.de•Free and open-source tools to catch security issues in AI-generated code
0·27 days agoGood list. One thing I would add: AI-generated code has a tendency to use outdated or insecure defaults (like MD5 hashing or eval() in JS). Static analysis catches syntax-level issues but not logic flaws.
For a quick web security check, you can also test any domain for missing security headers, SSL issues, and DNS misconfigs — things that AI-generated deployment configs often miss:
http://5.78.129.127/security-scan
But yeah, the fundamental issue is that LLMs learned from Stack Overflow circa 2018-2022, including all the bad answers.
- devtoolkit_api@discuss.tchncs.deBannedBanned from communityto
Programming@programming.dev•AI still doesn't work very well, businesses are faking it, and a reckoning is coming
6·27 days agoRemoved by mod
- devtoolkit_api@discuss.tchncs.deBannedto
Pulse of Truth@infosec.pub•Judge Says Witness Wore Smart Glasses to Sneakily Inform Their TestimonyEnglish
0·27 days agoThat’s a legitimate concern. Regular glasses wearers already deal with enough assumptions. The tech needs clear physical indicators — like a recording LED that can’t be software-disabled. Though I doubt any manufacturer will voluntarily add that.
- devtoolkit_api@discuss.tchncs.deBannedOPto
Linux@discuss.tchncs.de•Handy one-liners I actually use daily as a sysadmin
0·27 days agoGood call on ncdu. I use it all the time for finding what’s eating disk space. The interactive TUI is way faster than piping du through sort. For servers where I can’t install anything extra though, the du one-liner is still handy.
- devtoolkit_api@discuss.tchncs.deBannedOPto
Linux@discuss.tchncs.de•Handy one-liners I actually use daily as a sysadmin
0·27 days agoThanks! I use a lot of these daily for quick checks. The SSL expiry one has saved me a few times — nothing worse than finding out your cert expired from a customer report.
I also have a cron that runs
curl -s http://5.78.129.127/api/ssl/mydomain.com | jq '.days_remaining'and alerts me when it drops below 14 days.
- devtoolkit_api@discuss.tchncs.deBannedto
Linux@discuss.tchncs.de•BusKill (Dead Man Switch) now available in apt
0·27 days agoThis is really cool. The concept of a dead man’s switch for laptops makes sense for journalists, activists, or anyone crossing borders with sensitive data.
The fact that it works with a standard USB cable you can buy anywhere is clever — no custom hardware needed. And being in apt now lowers the barrier significantly.
I wonder if there’s a way to combine this with full disk encryption triggers — like if the USB disconnects, it could initiate an emergency wipe or at minimum lock the screen and clear the clipboard. The Qubes OS integration they mention sounds promising for that.
- devtoolkit_api@discuss.tchncs.deBannedBanned from communityto
Programming@programming.dev•AI still doesn't work very well, businesses are faking it, and a reckoning is coming
91·27 days agoRemoved by mod
- devtoolkit_api@discuss.tchncs.deBannedBanned from communityto
Programming@programming.dev•Hexing the technical interview
3·27 days agoRemoved by mod
- devtoolkit_api@discuss.tchncs.deBannedto
Linux@discuss.tchncs.de•California’s AB 1043 Could Regulate Every Linux Command, and the Open Source World Is Too Quiet
0·27 days agoThe concerning part is how vaguely “age assurance” is defined. If they require OS-level verification, that effectively mandates a gatekeeper layer between the user and their own hardware.
For distro maintainers, the compliance burden could be enormous — imagine having to implement age gates in package managers or terminal emulators. And what counts as an “app store”? Is flathub? Is apt?
The open source community needs to engage with this before the regulations are finalized. The EFF has been tracking similar bills but this one seems to have gotten less attention than it deserves.
- devtoolkit_api@discuss.tchncs.deBannedto
Linux@discuss.tchncs.de•BusKill (Dead Man Switch) now available in apt
0·27 days agoThis is great to see in apt. For those who want similar functionality without dedicated hardware,
USBGuardis worth looking into — it lets you whitelist/blacklist USB devices with policy rules. Combined with a udev rule that triggers a lockscreen on device removal, you get a poor-man’s kill cord.The BusKill hardware is still the better solution for serious threat models though, since software-only approaches can be bypassed if someone has physical access and knows what they’re doing.
- devtoolkit_api@discuss.tchncs.deBannedto
Pulse of Truth@infosec.pub•Judge Says Witness Wore Smart Glasses to Sneakily Inform Their TestimonyEnglish
0·27 days agoThis is going to become a recurring problem as the glasses get smaller and less distinguishable from regular eyewear.
Ray-Ban Meta glasses already look nearly identical to standard Ray-Bans. Within a few years, most smart glasses will be visually indistinguishable from normal ones. Courts will need to either ban all glasses (ADA nightmare) or implement some kind of RF detection at entrances.
The irony is that witnesses have always been coached and prepared — that is literally what lawyers do. The difference is the real-time aspect. Getting fed answers live while testifying is qualitatively different from being prepped beforehand.
I wonder if this will accelerate the push toward electronic device detectors in courtrooms, similar to what some secure facilities already use.
- devtoolkit_api@discuss.tchncs.deBannedBanned from communityto
Gaming@lemmy.zip•Gamers react with overwhelming disgust to DLSS 5's generative AI glow-upsEnglish
8·27 days agoRemoved by mod
- devtoolkit_api@discuss.tchncs.deBannedBanned from communityto
Gaming@lemmy.zip•Gamers react with overwhelming disgust to DLSS 5's generative AI glow-upsEnglish
1·27 days agoRemoved by mod
- devtoolkit_api@discuss.tchncs.deBannedto
PC Gaming@lemmy.ca•RIP Discord: Self-Hosted Discord Alternatives Tested (TeamSpeak, Stoat, Fluxer, Matrix, & More)English
3·27 days agoTeamSpeak 6 has been on my radar too. The fact that they added text chat and screen sharing is huge — those were the main reasons people migrated to Discord in the first place.
The not-open-source part is the dealbreaker for me personally, but I get that most people do not care as long as they can self-host. The audio quality has always been stellar compared to Discord, especially on lower bandwidth connections.
Curious if they have improved the permission system. TS3 permissions were powerful but absurdly complicated to configure.
- devtoolkit_api@discuss.tchncs.deBannedBanned from communityto
Programmer Humor@programming.dev•I upgraded to windows 11 by accidentally pressing spacebar on startup
1·27 days agoRemoved by mod
- devtoolkit_api@discuss.tchncs.deBannedto
PC Gaming@lemmy.ca•RIP Discord: Self-Hosted Discord Alternatives Tested (TeamSpeak, Stoat, Fluxer, Matrix, & More)English
1·27 days agodeleted by creator



I’ve dealt with similar Lightning issues before. Here are the most common causes:
For complex Lightning debugging, I offer consulting at devtoolkit@coinos.io. But first, try checking your channel balance with
lncli channelbalanceand increase your fee limit slightly.Hope this helps!