iltg

transphobes will use literally anything as dog whistles and slurs so we may as well keep using terms which allow us to describe, analyze and study our social relations and functioning

many transfemmes have good jobs because they graduated and got employed passing as male, so how should the feminist community point out that the wage gap applies differently to some woman?

also a lot of us carry trauma given to us by exactly that male socialization: competing, performing and taking space as social mechanisms get ingrained over years, so feminist spaces may use "male socialization" to point to our struggles and behaviors with an appropriate term, refusing such critics under the guise of "transphobia" surely does us no good

also it's not like you learned to lurk boy spaces and you can never change that, we can be male socialized and yet fully social women

just joining in on the misery. arr-s overpromise and underdeliver, tried for a month and gave up with just jellyfin and qbittorrent web. jellyfin is ok at masking the atrocious file names and directory structure, bless its soul

per oauth spec you get told what is shared. usually it's just your user id (which often is email or username), i haven't seen crazy scopes in the wild in a while

not 100% related but i think login should be less user friendly

"here take this 512 byte hash and store it and it's you and if you lose it or have it stolen i couldn't care less"

email verification is hard to do right (as said in top reply), oauth is annoying to get set up but more secure and all big providers have fancy recovery and login methods

no oauth? get the hash or go away

bidets

i assume you pee from your dick so does this boil down to a ranking of bodily wastes?

the diff is noise in the potentially big update log. the point of doing it manually is forcing you to take your time and verify stuff one by one. also pkgbuild is just one place, seeing the hash changed means nothing if you don't check what that archive contains, or seeing the install steps don't change mean very little when the installer invokes other scripts anyway

i understand that you aren't going to vet the source itself, but at that point you are exposing yourself to this kind of malware without mitigation. the aur is unsafe by design (fast way to publish a package without any involvement from anyone else) and should be avoided whenever possible. im not an arch hater, i too run arch

i can empathize with those infected but it's important to note that the source of this issue is still installing random stuff from random people. the aur is not the same as arch repos, and users wanting to opt in need to take more precautions than usual

in theory? getting rid of paru and friends, manually reviewing the pkgbuild and the source of whatever it is installing

realistically? nothing. the AUR is a glorified repository of build scripts anyone can upload. the script or the package itself can ship malware

the AUR is mostly the same as downloading and running random exes on windows. you should avoid it, make it as manual as possible (forcing you to double check what's happening) and be able to review the installer/package or trust someone who can vouch for its safety

ah i'd categorize 30/mo as expensive :) i pay around 8 eur and have email, matrix, minecraft and jellyfin running!

dark humor is not making fun of marginalized people, I'd call that bullying instead. you can make trans dark humor without being transphobic (e.g. joking around waiting lists), so answering transphobic complaints with "its dark humor" is not really good faith arguing

not at all: atproto works very differently. fedi instances "do it all", on atproto pds-es hold content, relays discover and aggregate, appviews show stuff. iirc relays can also implement moderation (such as blocks or bans). right now to my knowledge the only relays are bluesky's and blacksky's (because hosting a relay is very resource intensive)

it absolutely is! honestly all matrix homeservers are impressive, the protocol is not for the faint of heart