On occasion, I feel some trepidation about no longer putting Cloudflare in front of most of my services for protection. Then today happens and it all just goes away.
I guess the internet needs another Cloudflare so Cloudflare has somewhere to host its status page.
Re Last Boost: from @miki: Its good to hear perspective from the other side of the coin. We all ingest, and a lot of us do (myself included) the complaining, but perspective also should include all angles of a situation, and he covered the less exposed and talked about side quite well. While I am not a CF user myself, unfortunately for the reasons of downtime being magnified, and my not wishing to be swept up in that, it does no less validate the points he made and touched on. The DDOS problem is so very very real, and my 40Gbps DDOS protection on a relatively low-traffic server I operate has actually not been enough on ocasion.
I am thrilled to share the news that I joined @Mastodon's leadership team as Community Director alongside @mellifluousbox, our new Executive Director, and @renchap, our Technical Director.
Cloudflare seems to be having some kind of oopsie (it's probably DNS. It's always DNS) right now.
When you click on the link on their error page, it takes you to a page that says “Do you have a website? Anybody that runs a website should be on the Cloudflare network.”
Uh, read the room, #cloudflare. When people are trying to find out why your product has shit the bed, that's not really the time to make with the marketing copy about how they really really should be using it.
Adwaita apps are calm, focused, consistent. Tasks can often be done offline. Even badges for unread notifications are tinted blue and not red.
Non core apps are maintained by indie developers scratching their own itch. With GNOME Circle, a community of more experienced people help review and polish them.
GNOME is the village of Gauls peacefully resisting the Big Tech Empire with its sole existence.
I went to check if cloudflare was down so I went to downdetector.com, but that site uses a clooudflare-based CAPTCHA that wouldn't load, answering my question
I can't believe I have to say this once again, but not using AWS or Cloudflare doesn't mean your service won't go down as often.
It's just that nobody cares if the website of some little shoe manufacturer in Wyoming goes down, but everybody cares if all the websites go down *at once*. This is true even if, statistically speaking, CF / AWS go down less often than some little server located in a basement.
The old internet wasn't more resilient, your downtime on the old internet was just less corelated with everybody else's downtime, which made it less visible, and hence psychologically less of a problem.
Without CF (or somebody like them), there's no freedom of speech on the internet. If you say the wrong thing, your critics can just DeDoS you until you go away, and there's very little you can do about it. If you aren't rich enough to afford DeDoS protection, you have to be very careful when working against people who have more money than you do. This was a somewhat common occurrence back in the day, and the emergence of big social on one hand and CF on the other eliminated that problem entirely.
We should be really thankful for everything CF has done for the internet. Not every private company is as evil as people want you to think.
true and not true. CF will often allow websites to refuse access if they detect you're on a VPN, as its uniquely aware of many VPN commercial endpoints. So ironically if you're trying to escape sensorship through the use of a VPN CLoudflare may prevent access for that same reason. Its not as clear cut as you make it out to be
90+% of people who need their traffic to be anonymous are... exactly who you eexpect them to be. It's a shame that this affects everybody else in the way it does, but there's not much we can do about it.
Unless we want the internet to drown in ransom demands and Viagra ads (remember those?), that is.
well I'm in a jurisdiction where the web is getting more restricted and geoblocked, at the moment due to online safety act. so frankly no, bring back the early 2000s at this point.
Thank you. There are some people right now who clearly cannot see this from any other angle but, "oh yeah using Cloudflare is the issue," "using AWS is the issue," "using it sucks," etc.
Besides that, CF gives our server a certain level of protection. Sure, if someone is really determined, a free Cloudflare plan won’t stop them, but it will stop plenty of script kiddies — and in most cases that’s honestly enough. In my monthly CF report I see information about more than half a thousand attacks they managed to block. Combined with regular backups, it makes me much less worried that I’ll suddenly have to bring a broken server back to life, especially since server administration isn’t my day-to-day job. Setting everything up on your own teaches you a lot and can be fun, but only if you actually have the time for it.
@midzi Which is honestly why most people are much better off with a SaaS, even if they're technically competent and perfectly capable of managing their own server.
I know why this isn't the right approach for you (storage space, a different point on the time vs. money tradeoff than most commercial organizations), but that's an exception that proves the rule.
When I read downdetector and Cloudflare's own status page went down due to the CF outage my mind immediately went to this youtube.com/watch?v=1KEHSOPSvh…
Parts of the Réseau express métropolitain (REM) network are down on Tuesday morning after a truck struck a viaduct near the Bois-Franc station in Montreal.
It's been a while since I've used my Mastodon instance's web interface for posting. Cloudflare is busted, which seems to also mess up my preferred Windows client, but, go figure, all the stuff it connects to is still working fine.
Does Tweesecake just casually lock you out of your client if it can't phone home? I know it has an account system, but I didn't think it tried to get a token every single time it's run.
@simon If it's still running at the time, I think it will continue to. Mine wasn't running.
On two PC's, I get two different versions of broken. On one PC, all sessions are "unknown user". On the other PC, it just kind of sits there and hangs for a while, then eventually closes.
Still works on mine, I guess I'll find out whether it's borked if I restart in time. This seems like a good reminder to try out whatever the latest incarnation of that web interface is.
Yeah, if you're refering to Tweesecake, then yeah, that's bad design, as to be able to access Mastodon servers, the client should not need to connect to some other service, and if that service is not working it renders the client useless, that's bad Tweesecake, bad bad bad bad bad!
Mine is still in a crashing mood. I just tried a minute ago. This whole cloudflare thing is insane though. It would be like all the major ISP's going out in the 2000s. Yet more proof that the wild west internet was better than the echo chamber bee hive.
Why would anyone, at this point, use Firefox over Chrome?
Diehards like me are absolutely disgusted with the AI BS Mozilla is pushing down everyone's throats, to just mention one thing. We will find a fork, or eventually hopefully a new independent browser.
Anybody else doesn't give a fsck so why would they use a cheap Chrome knock-off Mozilla made Firefox into, if they can get the real deal for free?
Lol downdetector is down how ironic how will we know what's actually up or down now, oh no, guess the internet is moving into the Upside down then instead. It'll become good friends with demogorgon there.
Cloudflare outage under investigation as widespread internet outages spread — Twitter, Downdetector go down, company confirms Global Network issue: tomshardware.com/news/live/clo…
Cloud Flare goes down! But it goes up again! Brought Downdetector to the ground! So we go down! But we go up again! We're giving you the run-around Let's just stay down! #tubthumberButForRear-endedWebsitesEverywhere
@matt @jackf723 ahaha loved this. Also that it's not AI but true Karaoke, well done :D. what's funny is that for me, the mention of yours came through before Jack's original post. So like, it sent it backwards through the API, how odd.
Und mal wieder möchte ich zur schulischen Barrierefreiheit sagen: Das Problem ist meiner Meinung nach nicht, dass wir keine Hilfsmittel oder Optionen zur Verfügung hätten. Ich beobachte meinen Unterricht und kenne inzwischen selbst Produkte, die so eine tolle Ergänzung wären, und es enttäuscht mich, dass ich diese nie verwenden konnte. Es setzt einfach nur ein bisschen Willenskraft, Planung, Kommunikation und Kompetenz voraus. Alles Dinge, die deutsche Schulen nicht haben. Schade. \#Barrierefreiheit \#Schule
audiovault.net | 500: Internal server error. Whoops. Watch on the official streaming service if you can folks. Of course with AD that's sometimes a crapshoot, especially on international content.
@luiscarlosgonzalez oh weird Suno does work here. Udio nope. Suno I know uses AWS for their storage and EC2 hosting, not sure on Udio though. Wow I wonder what other sites are weirdly down then, hmm. Already starting out well as a day :D
Friends, we're all here on fedi, so many of us have no fondness for AI and its nonsense, nor for the very rich who are using the bubble to get richer, nor for the buffoons who are devoted to it. I understand that.
But please remember, when the bubble bursts, it won't be those billionaires who suffer. It won't really be the buffoons. It'll be ordinary working class folk who happen to be employed by an organisation that will be hit. Doesn't even have to be an employer that works directly with AI. Could be a caterer whose biggest client is involved with the business. Could be a cleaning company that cleans offices for a business that supplies components that are used in data centres that host AI stuff. And so on.
Remember 2008, 2009. We all know whose fault that crash was, and we all know who suffered most as a result, and those two groups were quite separate.
While #cloudflare US-east1 is busy fixing a good part of the Internet, parts of Matrix/Element, X etc down, good old decentralized #chatmail continues unimpeded and without degradation :)
In other news, there is a new #freebsd community maintained ❤️ #deltachat desktop install:
Generative AI is literally changing the whole process of online search and discovery, curating a new experience that experts are calling generative search. In
Half the internet is down. Many Lemmy instances are down, and many FOSS services. I guess that is an awakening that internet is as not decentralized as people thought.
Imagine running a trillion dollar company that bundles various open source components into your products, making billions of dollars of profit annually.
Systemd today finally merged support for building against and using the musl libc library. This is a win for Linux distributions like postmarketOS, Alpine Linux, and others that use musl by default as their standard C library or offer it as an option... phoronix.com/news/systemd-musl…
A win, because generally speaking, better interoperability is good, and making software more portable is good, and if it can improve systemd, the world will be better for it.
A win, because getting to that point proves that musl is finally, at last, being taken seriously by one of the most reluctant players in the ecosystem, so it's a sign that musl is a real, believable alternative now, and it will push more people and projects to try it out.
But also a danger, because it now means that systemd actually sees musl systems as targets. Systems that opted for musl were safe from systemd so far; maintainers were not tempted to switch to it because it was not a technically sound proposition. Now that systemd officially supports musl, no distribution is safe, and the survival of the non-systemd ecosystem now only depends on the technical judgment of distribution maintainers. Which has been subverted before, as Debian has painfully and dishonorably shown.
I would like to say I am cautiously optimistic. But I am actually terrified.
systemd is not a disease, i never understood why people act like it is.
if you own your computer, you're still super flexible on what you use as a system manager, and it just gives people the *option* to use systemd on musl systems if they want to.
nobody ever wants to force people to use systemd, but we (and I) want people to accept that it is a viable option.
@fossdd I don't think people realize that 1. distributions have the last say over any dependency, including whether they should package something or not, which completely disqualifies any accusations of attempts to force people to use systemd; and 2. systemd isn't some project managed by a single company: it's comprised of individuals from different organizations.
@TheEvilSkeleton @fossdd Oh, distributions have a choice. They make policy decisions all the time. They choose what to include, and what not to include, all the time, and it's a perfectly conscious choice. Not always an easy one, but a choice nonetheless.
Distributions are not powerless. As the entities actually providing software to the majority of users, they hold a pretty good amount of power. And if Red Hat, at the time, was not pushing systemd with all their might, I don't know how you would call what they were doing.
The fact that systemd is developed by a group of individuals from different organizations does not change the end output. I did not describe intent, but practical behaviour, and when faced with that behaviour, intent really does not matter.
Any Iphone users know what's up with Voiceover restarting itself every thirty seconds or so while my phone's locked? Doesn't matter if I turn speech off or what, I still keep getting "Screen curtain on. Screen curtain on. Screen curtain on." First it only started doing that during updates. Now it's doing it all the time.
Yep, that is Apple. Great feature, isn't it? Experiencing this here on my iPhone 13 whenever I update. Usually it stops at some point, I assume it happens because stuff is working in the background, indexing and such after updating. At some point it'll return to normal. But until then, its probably best to silence it and leave it be.
@adam thinks it could be battery being below 80% health. Mine is 77% and only started happening very recently. The phone is nearly 6 years old - I had been intending to upgrade it this year but then changes to my finances put that one on the back burner for a while.
Recommends AI alternatives rather than putting an “X” (or something similar) to indicate that you don't support it, OR not having that column in the list at all.
Attached: 1 image
Just finished the icon design for my new Subreddit aimed at helping people get rid of META products in their home: https://www.reddit.
(Though I agree that Mozilla is taking a dark turn, so maybe Thunderbird is also on the endangered list and might be better swapped with something else.)
I admit, I never even heard of CryptPad, and don't recognize the icon. I've been using LO for years, very happily, and regularly recommend it. What's better about CryptPad?
Back when I tried to choose a (paid) #Nextcloud service, I got completely lost. What I need is a few hundred GBs of cloud storage, for photos and videos mostly, and any other stuff (documents, owned music backup, etc.). But it's so hard to figure out which host to trust. Any tips? (Anyone is free to answer)
Should you wonder about the number of apps available in the #IzzyOnDroid repo slightly decreasing with the next sync: your gardeners were quite active again. Find details at codeberg.org/IzzyOnDroid/Every… – and be welcome to join the Cinderella, there are still many items left on the list!
Some other good news: after 6 years, Metrodroid (the app to read public transport NFC smartcards) finally received another update, which will go live here with the next sync around 7 pm UTC.
This is a spin-off from #10 where I'd like some input from the team, concerning how to handle the following unmaintained apps:
* [x] [`ahmaabdo.readify.rss`](https://apt.izzysoft.de/packages/ahmaabdo.readify.
@voks Apart from the linked issue (and its 3 companions), not YET. We hope to have our metadata ready in a new git repo within the coming weeks (i.e. "this year"), then you can see it clearly in the commit history (assuming committers make proper commit messages, which I hope will be the case).
That would be better, but still not a solution for Otto-Normal-Verbraucher. I need someone to program an app checking the list of installed apps for abandonments, e.g. by testing for missing store/repo entries or your/f-droids list of removed apps. 🤔
@voks Be welcome to write one then 😉 You could diff the indexes for that. Hint: both, IzzyOnDroid as well as F-Droid use a binary transparency log such an app could parse for this.
You could of course also open issues at the fdroid clients' repos, to include such a functionality. Clients know what apps you've installed from which repo, and could watch for such removals when pulling index updates. That would be the best place to address this.
@ecosystems is there a definition somewhere for the terms you use? 1.9 million maintainers it says. What exactly is a maintainer according to ecosyste.ms?
maintainers are the accounts listed on package manager registries that have publish access, it’s not the best word for it but that’s the name of the table in packages.ecosyste.ms
Following our experimental releases, this is our first non-experimental release based on Android 16 QPR1, the first quarterly release of Android 16. Android 16 QPR1 was pushed to the Android Open Source Project on November 11 rather than September 3 as expected. This is a very large quarterly release with more prominent user-facing improvements than Android 16 provided compared to Android 15 QPR2.
Terminal (virtual machine management app): re-enable GUI support now that the surfaceflinger crashes are resolved upstream by Android 16 QPR1
adevtool: massive overhaul entirely replacing the small remnants of the Pixel device trees to fix several regressions introduced since Android 16 such as charging mode booting into the regular OS and to prepare for adding 10th gen Pixel devices via automated device support without any need for device trees to use as a reference
adevtool: switch to obtaining Android 16 QPR1 backports from the latest November releases for relevant Pixels (there are no security patches listed for the Android or Pixel bulletins and not all Pixels received the tiny release)
kernel (6.12): update to latest GKI LTS branch revision
raise declared patch level to 2025-11-05 which has already been provided in GrapheneOS since our regular 2025090200 release (not a security preview) since the patches were included in the September security preview and were then pushed to AOSP despite not being listed in the bulletin along with there being no Pixel Update Bulletin patches for November 2025
Creating a security preview release on top of the new Android 16 QPR1 release is still in progress and will be available soon. For detailed information on security preview releases, see our post about it.
So... @fedora has made a policy explicitly allowing AI code. So I have to change my home distro.
@gentoo and @netbsd both have specific policies against it, but I ain't about doing a Gentoo install (sorry, guys, I love you for this, but I need a binary first distro), and NetBSD ain't great for gaming AFAIK.
Just a public statement that says "No, we don't want that crap" would be plenty --- I understand the difficulty of enforcing the policy, but setting it as a community/commit standard would go a long way towards making a lot of us feel better.
GNOME
in reply to hannah aubry • • •