• 0 Posts
  • 18 Comments
Joined 2 years ago
cake
Cake day: July 20th, 2023

help-circle


  • ambitiousslab@lemmy.mltoSelfhosted@lemmy.worldTesting vs Prod
    link
    fedilink
    English
    arrow-up
    2
    ·
    edit-2
    3 months ago

    For services only I depend on, I have production-only. Since I can only inflict damage on myself, and can often work around problems.

    For the XMPP server my friends and family also depend on, I have a dedicated nonprod VPS. My services are driven by ansible playbooks, so I’ll tweak the playbook with whatever change I want to make works in nonprod, before running the same playbook against prod.

    Whenever there’s a new Debian Stable release, I’ll rebuild the servers completely, to try and prevent “drift” between the nonprod and prod versions (not that I change things often enough for this to become a big problem). This is also the big test of my backups, which so far haven’t been needed in a “real” emergency 🤞


  • Distributions handle this for you. Installing your software through a distro, instead of getting it from each individual software authour, means that you trust one organisation instead of hundreds of individuals.

    For instance, Debian has a strict set of guidelines for Debian developers (who have the right to upload packages). They will be familiar with the software they are packaging, are often independent from the upstream authours, and are expected to check the package for various issues, including licensing, security, version incompatibilities etc. In addition, every upload is signed, so you can see who is responsible for everything.

    And when something slips through, as almost happened with xz, the analysis and recovery all happens completely in the open. There may not have been enough eyes on xz to prevent the vulnerability in the first place, but once it was discovered, there were at at least hundreds of people dealing with the aftermath, all in the open.

    Compare this with proprietary software, where you’d be lucky if such a vulnerability was even disclosed, vs just silently patched.







  • How much money do you donate?

    I am very privileged to have some money left over after fulfilling essential needs. So, I set a fixed amount a while ago, and then whenever I am able to make a saving (e.g. switching to a cheaper phone plan) or get a pay rise (if it ever comes), I’ll put some of the gains into donations.

    When do you donate?

    I remember reading somewhere that many organisations prefer regular donations to one-off donations, even if the regular amount is smaller, since it helps them plan better. So I always give regular donations, even if the amount is smaller to compensate.

    I have everything set up as automatic donations in liberapay and OpenCollective. So, it’s pretty seamless!

    If anyone ever wants to gift me anything, I’ll ask for them to consider a donation to a project instead.

    Do you have a minimum donation amount?

    I try to avoid payments under £5. Below that point, way too much of the money goes to fees. For some projects where I donate a small amount, I donate yearly instead of monthly instead.

    How do you decide what projects to support? Do you forego donations if you’ve contributed in other ways?

    I don’t donate to every project I benefit from, but I care a lot about XMPP and Linux on Mobile, so I donate mainly to projects in these areas. I’ve also contributed code to some of these projects, but I keep donating as I want to support the ongoing maintenance as well as just individual features.

    Do you donate to all equally or do you have some sort of ranking? Is it by amount of use, subjective preference, something else?

    I care about XMPP as a whole succeeding, so I donate to many projects I don’t even use myself. I wanted to donate to clients and servers for each major platform, so I split the clients like this:

    • iOS clients: 1 project
    • Android clients: 1 project
    • Linux clients: 4 projects
    • Server software: 1 project

    Then, I donated an equal amount to each platform (so, for example all the Linux clients combined would get the same as the single Android client).

    However, since I was donating so little to each Linux client, I decided to gradually increase the amount I donate to those over time.

    I’ve also recently started donating to libraries / ancillary projects in the same space. But I don’t have much money left to play with for them, so the amount is smaller :(

    Linux on Mobile is simpler as I only donate to two projects, so I just donate equally to both.

    So, long story short, it started with some kind of structure, but has become more subjective since then :)

    What platforms do you prefer using? Liberapay, Opencollective, Patreon, ko-fi, Paypal, Monero, actual post?

    I really like liberapay, especially as it mostly works without Javascript. But Opencollective is pretty nice too. If the developer themselves gives a preference, I’ll normally use that platform.

    One thing I’m interesting in knowing is - do people generally prefer donating to fewer projects, but with bigger amounts, or vice versa? One criticism of my approach is that, because I am spread quite thin, I risk not really helping any project that much, whereas if I focused on one or two projects, at least those could benefit a bit more.


  • It’s not perfect yet, but it’s much, much better than the old days.

    OMEMO is supported by every major client, and they interoperate successfully. Unfortunately, most clients are stuck with an older version of the OMEMO spec. It’s not ideal, but it doesn’t cause any practical issue, unless you use Kaidan or UWPX, which only support the latest version.

    All popular clients and servers support retrieving chat history now too.

    In practice, I’ve been using it for several months to chat with friends and family, and haven’t had any issues.