Someone would have to write an alternative to lemmy-ui which doesnt use js. This doesnt require any changes to Lemmy itself, and can be written in any language. lemmy-lite is such a project, but development is inactive.
this post was submitted on 03 Jan 2022
2 points (66.7% liked)
Asklemmy
44656 readers
909 users here now
A loosely moderated place to ask open-ended questions
Search asklemmy π
If your post meets the following criteria, it's welcome here!
- Open-ended question
- Not offensive: at this point, we do not have the bandwidth to moderate overtly political discussions. Assume best intent and be excellent to each other.
- Not regarding using or support for Lemmy: context, see the list of support communities and tools for finding communities below
- Not ad nauseam inducing: please make sure it is a question that would be new to most members
- An actual topic of discussion
Looking for support?
Looking for a community?
- Lemmyverse: community search
- sub.rehab: maps old subreddits to fediverse options, marks official as such
- [email protected]: a community for finding communities
~Icon~ ~by~ ~@Double_[email protected]~
founded 5 years ago
MODERATORS
"Lemmygrad is a honeypot." A honeypot for who? Set up why? And won't it remove features like voting and commenting if JavaScript is remove?
Also posting 3 times in different sublemmys doesn't make it more likely someone will respond. (But it is a common trait in spam bots.)
I'm not claiming it is. But it's a possibility. And I've shared it on other sublemmys to draw attention to something essential.
Many tools, programs and websites are placed on the internet to attract specific users and collect data. And it's possible to create a version without javascript with basic functionality, sites like Elude prove it.
While it is a possibility, it's much less likely to be a honeypot than Reddit itself is. Also an admin replied saying that it's possible for someone to rewrite the UI to not use JavaScript, the JavaScript is just here for convenience in development. This wasn't really made to be the safe haven for people who know multiple state secrets and have assassins after them, it's just a federated link aggregator.
This wasnβt really made to be the safe haven for people who know multiple state secrets and have assassins after them, itβs just a federated link aggregator.
Lmao, right? Well said. There are different tools for different jobs.
Running on tor is a very basic function
It does run on tor, you just have to enable javascript, losing some of the benefits of tor.
Either way, this isn't the place for putting state secrets that make you fear for your life. There are already better tools for that, and lemmy was never trying to be that.
If you want a lemmy instance that does, make your own.
You're clearly not a developer, so you don't understand that what you're asking is for the lemmy devs to start the frontend over from scratch. Additionally, for most normal users who don't have your specific needs, JavaScript powered webpages are likely preferable. In a perfect world, there would be both a JS-free and a JS version of the web page to cater to both categories.
We don't live in that perfect world, sorry. Feel free to dedicate thousands of hours to learning to program and then hundreds or thousands more to implement the feature you want. We'd all appreciate your contribution.
It's not about state secrets...it is about user rights which is paramount to the free software movement. If developers really feel JS is necessary (its not) they should at least limit themselves to libre-js (they don't).
If you want to tell us how to do our work, then you should pay us. Otherwise, the software is available as is.
I think you mis-understood my comment, I was only pointing out fsf philosophy which isn't solely to hide "state secrets", I have no problem using as is (since obviously, I am).
Sure, I'm in favor of user rights, too, but that's not what this OP was complaining about. I'm barely contributing anything to Dessalines' patreon, so I'm not about to make any demands about how they do anything. I'm very glad the devs have taken the time they have to do all this great work on lemmy.
If it's a possibility for an open source project to be a honeypot for "something", then everything is a honeypot for "something". At least with reddit no one can see if it's a honeypot or not.
Same like it possible that moon landing was hoax right, easy-peasy manipulating 400k people who worked on that project....
Come back to reality, friend.
Lemmy is no honeypot and no programming language is perfect + there are attacks that work without JavaScript, CSS exfiltration attacks for example.
Try harder.