Admiral Patrick

I’m surprisingly level-headed for being a walking knot of anxiety.

Ask me anything.

Special skills include: Knowing all the “na na na nah nah nah na” parts of the Three’s Company theme.

I also develop Tesseract UI for Lemmy/Sublinks

  • 27 Posts
  • 327 Comments
Joined 3 years ago
cake
Cake day: June 6th, 2023

help-circle


  • Technically, yes. But colloquially, when we’re talking about “analytics” we mean embedded 3rd party trackers that feed to Google or another outside entity. Those are embedded much deeper in the application and track things much more invasively such as how long you hover over certain links, how you move your cursor around the screen, your viewport size, browser fingerprinting, and more.

    The analytics I’m utilizing and referring to here are passive in that they’re collected anyway as part of the standard logging that happens when you access the webserver which is also part of our basic security posture. They’re not as granular or invasive but can still give you useful information about what parts of your site people use the most, how many clicks it takes a visitor to get from the homepage to where they want to be (by following the IP, URI, and seeing where that ends), how many visitors the site gets per day/week/month/etc, and such.


  • Logging is standard practice if you give even the slightest damn about security (read: you should), so I don’t see it as a problem. It’s what you use those logs for, how long they’re retained, and whether you sell them off.

    So as long as you’re only using them for security auditing and website analytics and don’t keep them forever and don’t plan to sell them to data brokers, there’s really nothing to fret over. A good place to disclose how you use the logs, how long you retain them, and what is logged is in the site’s privacy policy.


  • I do the occasional website for local businesses, and I never add any analytics code/trackers. One: they rarely ever ask. And two: the one time someone did ask for it, they never once logged into it or asked for trends. Three: I’d prefer not to unless they demand it.

    However, since I’m actually hosting the website for them, I can get decent heat maps from the access logs since they have the IP (which can be roughly geo-located), which URI’s are accessed (and those map to pages, and pages map to products/services), how often those are accessed, which page linked them to it or if they came directly to it (by checking the referrer header), which are most accessed (by count of the URI in the logs), and whether they’re accessing the site from desktop or mobile (via the user agent header). That can also be combined with any data from their “Contact us” form.

    One reason they’ve probably never asked for it is because I provide a quarterly report for them using that passive data, and they seem happy with it.




  • Admiral Patrick@dubvee.orgtoFediverse@lemmy.worldQuestions about Matrix Chat
    link
    fedilink
    English
    arrow-up
    18
    arrow-down
    1
    ·
    edit-2
    8 days ago

    Is there a community about Matrix on Lemmy?

    !matrix@programming.dev

    Is Matrix technically part of the fediverse?

    I would say no. It doesn’t use ActivityPub and is its own thing. It’s federated in that indepedent Matrix servers can talk to each other (like email or Nextcloud). So while email would be considered a federated service, it’s not considered part of the fediverse. At most, it’s like a 2nd cousin.

    Who is the developer/team and do they have an active presence on the fediverse?

    Matrix.org foundation (https://matrix.org/) and not sure. Maybe some of the individual contributors do, but I don’t know any off the top of my head











  • An optional field was added to the userdb to allow storing birthdate. That’s it.

    The systemd project merged a pull request adding a new birthDate field to the JSON user records managed by userdb in response to the age verification laws of California, Colorado, and Brazil.

    This is the same record that already holds basic user metadata like realName, emailAddress, and location. The field stores a full date in YYYY-MM-DD format and can only be set by administrators, not by users themselves.

    An optional field in the userdb JSON object. It’s not a policy engine, not an API for apps. We just define the field, so that it’s standardized iff [sic] people want to store the date there, but it’s entirely optional.

    –Lennart Poettering

    https://itsfoss.com/news/systemd-age-verification/



  • Speaking from recent experience, the smaller thing can, and often does, turn into a larger thing all on its own and always at the worst time.

    For the last 3 years, I knew my water heater was on its last legs. I kept putting it off until two Saturdays ago I had a wet basement and no hot water. The kick in the ass was that it wasn’t that hard to replace the unit: 2 hours of labor to install and 2 hours to drain, remove, and clean around the old one. Cost me just under $650 including same day delivery which was awesome because I would have had to rent a truck and drafted someone to help me load/unload it otherwise.

    So my advice is when you allocate time to address the small problem, give yourself double that in case it turns into a bigger project. It’s always easier to deal with big stuff when it’s not a surprise.