maybe more privacy features, like offering an invidious link when someone posts youtube, nitter for twitter, stuff like that
this post was submitted on 12 Dec 2021
32 points (100.0% liked)
Lemmy
12524 readers
9 users here now
Everything about Lemmy; bugs, gripes, praises, and advocacy.
For discussion about the lemmy.ml instance, go to !meta@lemmy.ml.
founded 4 years ago
MODERATORS
We could add helpers in the ui, like the one we have on the create post page for using an archive link. But overall I'd like a link aggregator to remain mostly agnostic about the links being posted ( we also do remove some tracking / utm params tho ).
The other thing is there are many of these 3rd party viewers, and they go down quite often and leave dead links. We'd use it if someone made a rust or js library for it tho.
For the case of Invidious, a redirector exists at https://redirect.invidious.io/ which could be used as intermediate point in this case.
mostly agnostic about the links being posted
I would like if people wanting to get content without executing nonfree stuff or privacy/security aware could have it easy and not just be the second-class citizens everywhere.
Other way to address this could be redirecting the people who post to these software and services to provide these links instead of being solely done by Lemmy. In this way, the person who post is the one who must solve the problem.
Oh wow, I would love this. I agree, it would be mighty convenient.
I’ll make a issue later but front page sort options should be cached in local storage so that if I click comments on a thread and comeback I don’t have to reset my filters.
The ability to tag posts (what are called "flairs" on reddit)
It's not that big of a deal, but I'd love to see a redesign on the main page's community related sidebars. Both of them feel really clunky the way they are now, having them come one after the other instead of in a vertical list, and with no way to order the ones you are subscribed into alphabetical order instead of popularity order.
The way Reddit does the trending communities in its redesign look pretty good, and the way old Reddit orders the subreddits you joined in the top bar is also nice, something at least inspired on that would be really good.
Also a redesign on the top bar (when the page is taking less than half of the screen) should be at least in the priority list, it's the one aspect of the site that looks REALLY bad.
user defined lists of communities for viewing as a feed
I just would want the option to view pages as lightweight, static html with low or no JavaScript, even if it means pages are not interactable.
I also think it would be nice if there were additional themes, and that the things fundamentally rethought how much white space was put all over the place. There's so much potential with the things, but I genuinely just don't think they are reaching their potential right now.
I see what you mean with theming. Making it easier to change themes easily makes the experience better for those of use who want it just right in a different way. But as to defaults, I don't dislike Lemmy's design at all. Though I get the desire for flexibility.
Lemmy UI works with javascript disabled, but you can only read things, everything else doesn't work.
I'd really love to see an option that's closer to old reddit or Tildes.net or something, I always feel a little alienated by the design as it is now.
Client Oauth2/OIDC login and account creation ("federated auth") would be nice for people self-hosting Lemmy and trying to integrate with other services.
Server side OIDC (like Mastodon has) or app auth tokens would be nice in for using 3rd party clients.
load more comments
(1 replies)
Human readable URLs! The URL is a very important part of a site's user interface, and lemmy's URLs currently just have a post number - there is no title, or even the name of the sub-community. Compare this to reddit: when I paste a friend a reddit URL in chat they get two hints about what it is about: the subreddit name, and the post's title, both embedded in the URL itself. This lets them decide if they want to click it now, or later, or never, or to recognize if they've already seen it. Lemmy links should be like that.
load more comments
(1 replies)
Include a Replies Collection via Page json, so that Mastodon & other #ActivityPub software can know about all the replies each Lemmy post has
Could you open up a github issue for this one.
Improvements on federation with Mastodon, etc. Right now posts on Mastodon have as author the user post, nor the community (but you are following lemmy communities, not users, because it is not possible follow users). So, when any Mastodon user want to follow these "new source" and follow the user of the tooth, nothing happens. And he is unable to follow the community! A furst workarround should be add a bottom line on the tooth like "follow this community at community_name@lemmy_instance.tdl "
The option to set a global default theme for the ui
- OTP-based 2FA
- Choose pronoun (which could be based on https://pronoun.is project)
For the second one, why don't just make a profile description? It gives you way more space to talk about you.
PD: We REALLY need otp2f2
load more comments
(2 replies)
- Community specific flyers for accounts (for now we have only mod)
- Community specific flyers for posts determined by mods of community (like question , discussion, news etc)
I kind of wish that when I respond to a comment in my inbox, that it doesn't just disappear after I submit it. I usually want to click the context button after I respond. It's just a little pet peeve and not really much of an issue, but I digress.
In the raw install docs I would like:
- OpenRC or SysVInit service examples
- Apache HTTPD configuration example
- Adapt the Certbot script as it is being ran as a general distribution when the fact is that Debian-based distros already provide Nginx and Apache HTTPD plugins (which makes it easy to configure through the TUI) and it is being ran as a cronjob by default at
/etc/cron.d/certbot
I'd like to block/hide certain communities from the "all" view. That way I can browse posts that I'm not subscribed to, but skip stuff I know I'll never care about.
We added this a few months ago. Go to your profile settings, and the blocks tab.
load more comments
(4 replies)
There is an option in lemmur to block community that I assume is inherited from Lemmy. Just go to the menu on a post and select it.
Merging posts. When there are two posts about the same topic it would be nice to allow the mods to merge them to have all answers in the same place. It makes it easier to find something, rather than having to visit multiple different posts.
Or instead of merging them into one, they could be linked somehow. But it would still be nice to see all the answers in both posts in that case. Instead of having to visit the links to see other answers.
Notifications through matrix.
I would like to see more federation if possible. Would it be possible to add seeing Plemora/Mastadon posts on Lemmy? Also it would be cool to federate with pixelfed if possible.
Sorting/scoring of posts and comments based on votes from users that I trust or users with similar voting pattern to mine.
I would be happy to see client-side password hashing implemented.
I understand that responsibility of using unique passwords falls on the user, and maybe a truly malicious instance would be able to remove the hashing (although I think that it would be possible to check if non-hashed passwords leave the client). However, the reality is that many people still re-use their password for many websites and do not use 2FA when not required. Password hashing would reduce the level of trust required of the instance makers.
On a similar vein, it would be nice to anonymize the ip addresses that are printed to the docker logs if possible, similar to the nginx logs. I think that this would be easier to undo for a malicious instance, but at least they would need to have a bit more technical knowledge to get to this information.
Client-side hashing doesn't really do much. It just makes your hashed password the effective password. The only advantage it provides is some defense against password reuse because the "source" password is hard to discover. However you shouldn't be reusing passwords anyways so that shouldn't matter.
An actual improvement would be using something a PAKE like SRP or OPAQUE. This way the server never learns enough information to authenticate as you.
A major downside of these systems is that because they aren't natively supported by browsers they require javascript. But that probably isn't a major issue because IIUC all interactivity on the webui requires JS anyways.
The back-end already does password hashing using bcrypt.
This protects the database from a breach, but someone can set up an instance and collect the passwords from the logs:
As far as I can tell with my very limited experience, back-end encryption is the standard. One trusts the host not to steal their passwords from the logs, so protecting the data in the case of a breach is good enough. I think that it would make sense for the standard in the Fediverse to be different. Passwords should be encrypted by the client by default, and then re-hashed back-end.
It is also possible that what I am saying does not make sense in practical grounds - this is just something that surprised me while looking through the logs. I was under the wrong impression that plain text passwords were never accessible before looking into this topic.
We've recently removed that logging line, which logged all websocket requests. But yes most importantly, the database stores no plaintext passwords.
You don't want to client side hash passwords before sending, because different clients might not do it the same way. But also we have to add oauth at some point, so 3rd party clients don't even have to know your pass. This is less important with open source apps imo, which are the only ones we're gonna link to anyway, but it'd be nice to have.
-
Custom multi-communities akin to multireddits, and also, cross-instance multi-communities.
-
If you log into your account on a post, I'd prefer to be taken back to the post, instead of the front page, as it is now.
-
MoAr federation (for example, the ability to follow mastodon accounts from Lemmy.
I would like to have a local users administration page.
The ability to follow users
i 2nd this. As well as making lemmy instances federate togther better/faster
also seconding this
- open posts in new tab
- ability to make profile private
- allow posters to have some level of control over their posts - sticky a comment, set the sort etc.
load more comments
(2 replies)
It would be nice if the RSS feeds were advertised. For example if I browse https://lemmy.ml/c/lemmy I wouldn't know there was an RSS feed until I find and click the little RSS icon.
If a <link> to the RSS feed was provided my browser extension would light up and I can subscript just by putting the community URL into my reader instead of having to spot the RSS button on the page.
load more comments
(4 replies)
view more: next ›