toad.social is one of the many independent Mastodon servers you can use to participate in the fediverse.
Mastodon server operated by David Troy, a tech pioneer and investigative journalist addressing threats to democracy. Thoughtful participation and discussion welcome.

Administered by:

Server stats:

258
active users

#fossilscm

0 posts0 participants0 posts today
Giacomo Tesio<span class="h-card"><a href="https://social.treehouse.systems/users/ariadne" class="u-url mention" rel="nofollow noopener" target="_blank">@ariadne@treehouse.systems</a></span><br><br>what about <a href="https://snac.tesio.it?t=fossilscm" class="mention hashtag" rel="nofollow noopener" target="_blank">#FossilSCM</a>?<br><a href="https://fossil-scm.org/home/doc/trunk/www/index.wiki" rel="nofollow noopener" target="_blank">https://fossil-scm.org/home/doc/trunk/www/index.wiki</a><br><br>It's the easiest forge to self-host but if you don't have an online server or a small vps, a cheap web hosting with <a href="https://snac.tesio.it?t=cgi" class="mention hashtag" rel="nofollow noopener" target="_blank">#cgi</a> support (the ones that often comes for free when you but a domain name) is enough!<br>
Y⃒̸̷̝̜̙ͥͥͥngmar<p><span class="h-card" translate="no"><a href="https://writing.exchange/@davepolaschek" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>davepolaschek</span></a></span> Fossil. For the weirdos like me who actually evaluate their options before choosing one and don't give a toss what the mainstream uses (and perhaps scoff at it).</p><p><a href="https://fossil-scm.org/" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://</span><span class="">fossil-scm.org/</span><span class="invisible"></span></a></p><p>The name appears suited for "unfrozen caveman" people too, although that's probably not intended.</p><p>In case you're wondering who uses this, the SQLite guy (D. Richard Hipp) wrote it for himself. So you're in good hands. Been keeping my personal stuff in it for years.</p><p><a href="https://social.tchncs.de/tags/Fossil" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Fossil</span></a> <a href="https://social.tchncs.de/tags/FossilSCM" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>FossilSCM</span></a> <a href="https://social.tchncs.de/tags/VCS" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>VCS</span></a></p>
nathan<p>I'm used to and rely way too heavily on `git add -p` and rebase and/in Fork as a GUI, but I consider <a href="https://chaos.social/tags/fossilscm" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>fossilscm</span></a> a beautiful tool and am intrigued to give it a try. But I want to know and learn from you why you decided to use it and how you use it in your daily business. I even might write a little piece or record a podcast.</p><p>(please don't mastosplain. I know how to read the docs and how to use Google.)</p>
nathan<p>Is someone other than <a href="https://chaos.social/tags/fossilscm" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>fossilscm</span></a> and <a href="https://chaos.social/tags/sqlite" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>sqlite</span></a> using <a href="https://chaos.social/tags/fossilscm" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>fossilscm</span></a> to develop (commercial) software as a team or company? I'd love to talk to you!</p>
Wizards Anonymous<p>Anyone migrate from <a href="https://mastodon.social/tags/GitHub" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>GitHub</span></a> or <a href="https://mastodon.social/tags/GitLab" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>GitLab</span></a> to <a href="https://mastodon.social/tags/Codeberg" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Codeberg</span></a> or other options? Curious what your experience might have been like. The 3 features I have a lot of interest in are Public <a href="https://mastodon.social/tags/Repositories" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Repositories</span></a>, Private Repositories, and <a href="https://mastodon.social/tags/GitHubPages" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>GitHubPages</span></a>. GitHub offering all 3 of these for "<a href="https://mastodon.social/tags/free" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>free</span></a>" is a huge advantage for "users". <a href="https://mastodon.social/tags/Forge" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Forge</span></a> <a href="https://mastodon.social/tags/Foregejo" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Foregejo</span></a> <a href="https://mastodon.social/tags/FossilSCM" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>FossilSCM</span></a></p>
Shamar<p><span class="h-card"><a href="https://fosstodon.org/@pemensik" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>pemensik</span></a></span></p><p>That what I did understood by reading the doc.</p><p><a href="https://qoto.org/tags/PowerDNS" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>PowerDNS</span></a>'s <a href="https://qoto.org/tags/DNSDist" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>DNSDist</span></a> seems a superb project, just maybe a bit overhelm for what it should do in this specific case. Yet seems likely the only option, actually.</p><p>It's a bit of a shame no other <a href="https://qoto.org/tags/DoH" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>DoH</span></a> <a href="https://qoto.org/tags/CGI" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>CGI</span></a> have been written in compiled languages so far... which is likely why few resolver support such forwarding.</p><p>When I first read about DNS-over-HTTP, I saw it as a further centralization attempt by <a href="https://qoto.org/tags/Google" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Google</span></a> &amp; friends (which sadly includes <span class="h-card"><a href="https://mozilla.social/@mozilla" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>mozilla</span></a></span> these days), since to get a working DoH service you need good sysadmin skills and a stable public IP: not something a kid with a cheap shared hosting can set up.</p><p>And ə PHP implementation would be too slow.</p><p><a href="https://qoto.org/tags/FossilSCM" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>FossilSCM</span></a> made me realize that a simple CGI in C could have good performances and be widely distributed, so I wrote one (still early alpha).</p><p>Now I can use it in most (non enterprise managed¹) browser, but I'd like to try it system wide.</p><p>Anyway... thanks for your help guys!</p><p><span class="h-card"><a href="https://social.sdf.org/@draeath" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>draeath</span></a></span></p>
Todd A. Jacobs | Pragmatic Cybersecurity<p>I deeply respect <span class="h-card" translate="no"><a href="https://infosec.exchange/@briankrebs" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>briankrebs</span></a></span>, but in this case I think the data he's presenting is fundamentally invalid. A little-known fact about <a href="https://infosec.exchange/tags/Git" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Git</span></a> history is that <a href="https://infosec.exchange/tags/timestamps" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>timestamps</span></a> are both definable and mutable. While you might be able to make statements about when a Git commit was pushed to a server using the server-side SSH or HTTP logs, the fact that you can set GIT_AUTHOR_DATE and GIT_COMMITTER_DATE as environment variables means you can't rely on commit timestamps alone for this type of analysis.</p><p>This is a <em>feature</em> of Git since the ability to squash or rewrite its mutable history is a key differentiator compared to <a href="https://infosec.exchange/tags/FossilSCM" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>FossilSCM</span></a> or other <a href="https://infosec.exchange/tags/SCMs" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SCMs</span></a> that treat history as immutable(ish). For example, allowing one to do things like report a commit as the time a patch or source document was originally written rather than just noting when it was committed or merged can be very useful in accurately representing the real-world evolution of data created outside the repository.</p><p>This is <em>not</em> a flaw in Git. Anyone savvy enough to craft the <a href="https://infosec.exchange/tags/xz" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>xz</span></a> attack could just as easily have adjusted their system clocks instead, leading to fraudulent timestamps in the commit history anyway.</p><p>Forensically, you'd need to look at the timestamps from NTP-backed server or router logs, not just the Git history. All Git clients are technically "offline" until they push one or more commits to a remote, so there's really no way to validate client-side SCM timestamps. This is also true of email headers, filesystem attributes, and any other data that relies on real system clocks or user-defined timestamps, so you'd need more points of correlation than are provided here.</p><p><a href="https://www.linkedin.com/posts/bkrebs_one-of-the-more-interesting-graphics-ive-activity-7181358250112471040-fzeG" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://www.</span><span class="ellipsis">linkedin.com/posts/bkrebs_one-</span><span class="invisible">of-the-more-interesting-graphics-ive-activity-7181358250112471040-fzeG</span></a></p>
Ryan Makes, Dreamscaper<p>Fossil SCM users here? <a href="https://fosstodon.org/tags/fossil" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>fossil</span></a> <a href="https://fosstodon.org/tags/fossilscm" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>fossilscm</span></a> </p><p>I'm considering using it for my notebase. Any experiences or links to share?</p>
Kristoffer Lawson<p><span class="h-card"><a href="https://indieweb.social/@maphew" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>maphew</span></a></span> <span class="h-card"><a href="https://2c.taoetc.org/@beto" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>beto</span></a></span> <span class="h-card"><a href="https://hachyderm.io/@sara" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>sara</span></a></span> <a href="https://attractive.space/tags/FossilSCM" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>FossilSCM</span></a> is absolutely wonderful. For many people the use would be much simpler with Fossil. The default is to sync, and everything contained in an easily compilable binary, with the repository being one file. Plus, as you mention, distributed tickets, wiki etc. </p><p>For my personal projects I don’t use git anymore.</p>
matt<p><span class="h-card"><a href="https://2c.taoetc.org/@beto" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>beto</span></a></span> <span class="h-card"><a href="https://hachyderm.io/@sara" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>sara</span></a></span> <a href="https://indieweb.social/tags/FossilSCM" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>FossilSCM</span></a> is the better designed product. Distributed version control &amp; tickets &amp; comments &amp; web UI &amp; syncing across servers in a single executable &amp; database file &amp; cross platform. It's brilliant, full stop.</p><p>But, it's not interested in appealing to masses. It either works for you or doesn't. Not a fit for me. Still, I wish many people to see &amp; experience it so they know what is possible, and build another one. It shouldn't be the only project in its class!<br><a href="https://fossil-scm.org/" rel="nofollow noopener" target="_blank"><span class="invisible">https://</span><span class="">fossil-scm.org/</span><span class="invisible"></span></a></p>
LisPi<p><span class="h-card"><a href="https://infosec.exchange/@karl" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>karl</span></a></span> <span class="h-card"><a href="https://social.treehouse.systems/@marcan" class="u-url mention" rel="nofollow noopener" target="_blank">@<span>marcan</span></a></span> A large part of that is entirely <a href="https://mastodon.top/tags/git" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>git</span></a>'s fault, because <a href="https://mastodon.top/tags/FossilSCM" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>FossilSCM</span></a> has no such problem (it has different ones instead mostly from its focus on cathedral development...).</p><p>Git's design insistence on carrying none of the other project metadata and tooling required for its use is a problem.</p>