fudgefactorfive | 1 year ago | on: Show HN: A web debugger an ex-Cloudflare team has been working on for 4 years
fudgefactorfive's comments
fudgefactorfive | 2 years ago | on: Marijuana addiction: those struggling often face skepticism
But there is arguably a physical dependence at that routing usage. First thing every morning, every 1-2 hours another J. I wanted to quit almost every day. I'd have conversations with my partner about quitting every few days. But neither of us could. If we had none we wouldn't sleep for 48+ hours, just didn't happen. Anxiety sets in, stress about everything. You just want to sleep, so you smoke. You go broke you scour the house to find enough coins or bottle to return (EU here) to get .2g to roll once to just get to the next day. You leave the house to do anything and you're so anxious and paranoid you become misanthropic. Only way to deal with it is to go home and "relax" to manage the borderline panic. Just for reference, before I was maybe a bit awkward sometimes but had absolutely no issues with the outside world.
I also don't agree that afterwards you're in the clear. I used to be borderline photographic with my memory. I'd pull random statistics from papers I'd read years earlier in conversation with references that I could use to validate when challenged. I no longer can even remember what I decided to go to the grocery store for, even though it's a ~2 minute walk. I forget what I started a sentence to express while typing. I'm a systems engineer, when I change tabs in an IDE I lose nearly all the context I took with me to the new tab. Sure context switching breaks flow yadda yadda, but it's just different. I don't even remember there was something to remember, just... "why am I here again?"?
I do agree that the behaviour trigger is very strong, so I replaced the urge with League, an arguably far more self-destructive tendency.
fudgefactorfive | 2 years ago | on: Mullvad VPN was subject to a search warrant – customer data not compromised
fudgefactorfive | 3 years ago | on: HP have updated their printers to ban ‘non-HP’ cartridges
Increase tolerances to reduce cost at scale, sometimes doesn't fit perfectly or requires a little jiggling to line up right.
But now you can't do the jiggle or try to manually quickly realign it, instead you need to call a tech to do it for X bucks and a wait time of longer than a few seconds.
fudgefactorfive | 3 years ago | on: Z-Library Returns on the Clearnet in Full Hydra-Mode
fudgefactorfive | 3 years ago | on: Z-Library Returns on the Clearnet in Full Hydra-Mode
Suddenly someone shows up with address A and threats and then drowns trying to interpret that persons mappings. While that's happening I can find 5 other someones and suddenly I have 6 addresses all of which essentially ephemerally link to my system. Someone else does that for their mapping system and you get to Dijkstra levels of working out how to block connections.
After like 3 levels of middlemen even centralized authorities just struggle to do the actual work of blocking, outside of just issuing the order.
fudgefactorfive | 3 years ago | on: Z-Library Returns on the Clearnet in Full Hydra-Mode
NAT "fixed" the problem of address exhaustion, but it killed the old internet. You cannot run your own network anymore. In the "old" times, I gave you a phone number or IP address and that's it, direct connection. All anyone could do was show up and take the computer to stop that. Sure there's a phone company or ISP involved, but they just powered the pump, you completely controlled what went through it.
Now I can't do that. They ran out of addresses and I share an address with X unknown others. So I can't give you a home address, just to a bank of doors. I could give you an apartment number, but that's also shifting transparently, so num X to you is num Y to someone else.
IPv6 would have solved the problem of exhaustion while preserving the right to an address. I could be some number permanently and you could reliably find a connection to my system using it. In that world I could set up a private DNS service in my house no one can alter without physically plugging in. Then have that store records to other addresses. Every part of that chain requires someone finding you and showing up at your door to disrupt.
Instead now I have to pay digital ocean 5 bucks to keep an address for me so anything can find me via them. A bunch of servers in my home effectively an island without a coordinate until DO points me out on request. Like having all mail addresses be to the local town hall for them to forward to me. Sure maybe you trust your local town hall, but they are fundamentally beholden to someone else.
With IPv6 support and adoption a whole network could be set up independent of any other authority besides BGP. Which requires nation-state levels of mobilization just to block an address, with fallout affecting literally thousands of others. They'd have to nuke a block to suppress any site, only for that site to find another address and be back to normal within minutes. Instead they do a WHOIS, send a scary email and boom, you're unknown, unfindable and disconnected. Hoping that word of mouth brings people to your new "address" exactly like losing your phone (and SIM) while abroad.
I know it sucks as a protocol but v6 to me is a massive extremely important development that would change how the internet, and from that all communication, works.
fudgefactorfive | 3 years ago | on: Jetnet Acquires ADS-B Exchange, a community-fed ADSB aggregator
I'm genuinely curious but isn't Webtorrent just using WebRTC to join a Torrent Swarm? Torrents are fundamentally immutable, the identifier is a static hash of the content of the torrent. That would mean producing a new torrent for each new data point or chunk of data points only to then submit that hash to a WebRTC based connection to again fetch torrent content?
Genuinely curious, I'm interested in how torrent swarms can be used for novell applications.
fudgefactorfive | 3 years ago | on: Supreme Court allows Reddit mods to anonymously defend Section 230
fudgefactorfive | 3 years ago | on: Plant-based meat is turning out to be a flop
Couple that with some indications that in the western world both Vegans and Vegetarianisms seem to have more disposable income [0] and you get people with business backgrounds naturally pricing the products higher.
Also from a social perspective in the west, people will pay a premium to appear to be making "healthier" or "ethical" purchases.
0: A study on self-reported eating habits with some interesting citations https://www.ncbi.nlm.nih.gov/pmc/articles/PMC5622783/
fudgefactorfive | 3 years ago | on: Pwned or Bot
Same way some people just set up businesses with random names in tax-shelter territories and sell the company 10 years later to add a sense if legitimacy.
fudgefactorfive | 3 years ago | on: Source code for Dutch DigiD app released under Dutch Open Government Act
So you definitely can't use this unless you pull the strings from the compiled APK theyve published.
fudgefactorfive | 3 years ago | on: Alpine.js
One thing to note, on my mobile browser (Firefox Nightly) the site is a bit broken. The page has the wrong width so periods etc are off screen and for the code example blocks I can't scroll them to see the whole line.
fudgefactorfive | 3 years ago | on: Fetish tabooness vs. popularity
fudgefactorfive | 3 years ago | on: Saying “sup” with `net send`
The best we got up to was the year we found the admin password for the default image root user in some cached Skype logs. First we would SSH into random people's systems and use Applescript to type random things etc., bonus points if they currently were presenting something. We got bored of that pretty quick and resorted to just selling the ability to do stuff as an admin like installing things.
Earlier in middle school we figured out that the MacBooks the school issued had an IR receiver and the apple remote available at the time could trigger some Fullscreen tools by hitting a button on the remote and aiming at a victims computer, again mostly to disrupt teacher presentations.
Both bits of fun came to an end when some kid figured it out and ratted us out. When they figured out I was selling root access (installed CoD4 for a friend's little brother and changed the root password for them at extra cost, when they couldn't remember what they changed it to the went to the admin) all hell broke loose and they confiscated the laptops to re-image... no fun.
fudgefactorfive | 3 years ago | on: What’s in a PR statement: LastPass breach explained
The Mud-puddle test is to demonstrate that only you can access your services. If you can call and go "hey can I get back into my vault" so can anyone that convincingly can make the same call on your behalf.
fudgefactorfive | 3 years ago | on: John Carmack Leaves Meta
I think VR has the same issue that smartphones had at the start of their cycle, the UI/UX is not designed to intuitively mesh with how users actually want to use the system. Even things like keyboard inputs are just not quite there yet, resorting to clunky index-finger typing at best and type-by-laser at worst.
I think we are moving towards a usable version of AR eventually (with tech still needing to catch up on weight/latency/tracking) but full VR is almost only useful for games.
As much as I'm not an Apple-enthusiast, the one thing they (used to) get right is the sort of UX where you almost don't even need to explain how to do things, they just intuitively make sense and you can just let intent directly flow. Given their current trends though I'm not convinced their alternative AR/VR UI will be that though.
I'm essentially waiting for glasses that go full VR when they need to, and otherwise just allow me to overlay a GUI on reality with minimal effort.
E.g. a video player following me around while I do normal stuff. Helpful, and importantly, optional popups overlayed on real objects to enhance my interactions, not completely replace them with a crude 3D facsimile.
fudgefactorfive | 3 years ago | on: A Year-End Letter from our Executive Director
Google: Browser Maintainer that runs entire TLDs, doesn't need a third party, it could just decide to trust itself and 60+% of the market follows.
Amazon: Runs a massive chunk of the internet, it's already MitM'd itself and most other things, doesn't really need a third party for Certs but still uses DigiCert which predates LE and they clearly have a working relationship.
Netflix: See Amazon, HN.
You: Barely exist to the infrastructure of the web as people experience it. Maybe you have a static site you don't care to protect from MitM (could add some malicious scripts or whatever but who cares). Maybe you're a tiny service that offers some 50 users something, their plaintext auth probably shouldn't be readable to just anyone along the network path, but they're not paying you for services so you might not wanna spend much money on that service. Use LE.
Also, if you think LE as a company has the ability to take sites with it if it goes down, you don't really understand Web PKI. At most likely within a year to 3 months you'd need to find a new place if their signatures expire. At worst someone could pretend to be you, but still not read that traffic protected by the old cert.
Why so salty about LE? Especially from a "seasoned" SysEng? Didn't it just make your job easier and safer for those with slightly less experience?
fudgefactorfive | 3 years ago | on: Tailscale Funnel
Aside from that, it's definitely a problem that they could include themselves in any customer network, but the accountability still stands. If someone got in without your screw-up, at least you know who to point the finger at once the dust settles.
I'd argue it should be treated as a base to overlay your network on top of. Although admittedly I say that as someone that doesn't use their services for similar reasons.
fudgefactorfive | 3 years ago | on: Tailscale Funnel
NAT is a godsend for IPv4 exhaustion, but it's also fundamentally crippled the ability for people to host things or make things available directly from their homes.
Hole-punching is an inexact process due to the variety of different NAT types, some of which (e.g. Carrier-grade) simply do not allow that sort of connection. So there must be a middle man that accepts packets on their publicly available port and passes it on to another established connection. TURN/STUN (et. al.) exist but are archaic and do the same thing but with less accountability.
I hate it too but until we have IPv6 by default with user controlled firewalls hosting something in your garage without a business line is not feasible. Hell I have a 5$ a month VPS purely so it can act as the middle man to the servers in my home. At least then I only need to trust myself as the middle man.
Heads up, for the `Backend Tracing` screenshot there's a typo, it reads "enviroment" with the missing 'n' and on the AI debugger page on narrower screens the bubble for the "Learn more about JamGPT" text doesn't fit the text.