Mikina @ Mikina @programming.dev

Posts

5

Comments

482

Joined

2 yr. ago

From time to time I watch some scam-hunting youtubers for fun, because some of them have really perfected their game and listening to scammers raging is fun, but it's also super unsettling when you realize they also talk like that to real victims. It's unhinged.

There's a piece of code in our hobby game project that I've written after attending classes in college about how to write clean and SOLID code. It's the most overengineered piece of shit I've ever written. I'm not saying it's the fault of the lectures, of course it's on me being a little bit over zealous, but it does check all the boxes - It's a simple "show selectable list of stuff", follows MVC, it's extensible without rewriting to adittional data-types and formats, extensible view that can show any part of data you need, generic, and in general it could be used anywhere we need, for any kind of data.

There's only one place where we need and use such list in our game.

I needed to rewrite a part of it, since the UI changed drastically, to not need this kind of list, while also adding events into the process. I haven't seen the code for almost 4 years, and it's attrocious. Super hard to understand what's going on, since it's too generic, interfaces and classes all over the place, and while it probably would be possible to rewrite the views for the new features we need, it's just so complex that I don't have the mental capacity to again figure out how it was supposed to work and properly wire it up again.

I'm not saying it's fault of the classes, or SOLID. It's entirely my fault, because the classes inspired and hyped me with ideas about what a clean code should look like, that I didn't stop and think whether it's really needed here, and went over-the-top and overengineered the solution. That's what I'd say is the danger of such Clean Code books and classes - it's easy to feel clever for making something that passes SOLID to the letter, but extensibility usually comes at a complexity, and it's super important to stop and think - do I really need it?

One night when returning from a party at work, I've decided to stay a while longer in the tram to escort my co-workers to the tram central hub (which was like half an hour of tram ride), instead of getting out at my home, which was only 5 minutes from our workplace.

When I got into the tram back home, there was an older guy with a carboard robot costume, who was talking to someone about his work in the theater. Because I find people like that interesting, I decided to move closer and sit next to them, so I can listen to their pretty interesting conversation. I've tripped and basically literally fell into their conversation, and the other guy left, so we started talking. It turned out he does a prop-guy on movies and for theater, and we hit it off pretty well. He also lived literally 3 minutes from my place, and we have decided to go have a few more beers at his home, which was basically a storage lot full of random stuff without much furniture - just random props, one bed, and a lot of beer.

I've messaged my GF that I'll be late, since I'm drinking with this pretty cool old guy, and send her a picture of the place. Her reponse was "Wait, isn't that

<name>

This is the first time ive heard about microg. How is the app support with it? Can you run every app that needs play service? I have Google Sandbox installed only on a second Graphene profile, and use it for bare minimum of apps that dont work without it, Bolt app, mostly weird MFA for work or package tracking apps i use once per month, while disabling most of their permissions. Will microg improve my situation in this case to be worth switching over? Does it work without root?

A good reminder to always set your password manager to auto-lock (with PIN for convenience) after 3-5 minutes. The PIN makes it easy to re-log, while not being bruteforceable (AFAIK after few failed attempts it reverts to password), and if someone would get to your PC, either physically or remotely, they won't be able to get all your passwords.

One of the best jackpots I've ever found during Red Teaming engagements was when I RDPd to a server through pass-the-hash, only to find an unlocked password manager with passwords for most of the other servers, service and admin accounts.

I can't decide whether this sentence is a joke or not. It has the same tone that triggers my PTSD from my CS degree classes and I also do recognize some of the terms, but it also sounds like it's just throwing random science terms around as if you asked a LLM to talk about math.

I love it.

Also, it's apparently also real and correct.

You are right, calling it a contradiction was not exactly accurate. Or rather - it did contradict some of the narrative that is pushed by Delta, about CS not providing any support in the first few days, which it sounds like isn't exactly true. But most of the case will indeed still need more receipts, that's true.

A Delta spokesperson said the airline "will decline to comment further." ®

Huh, did they really register that sentence? :D

Also, the CS response to the accusations should have been at the beginning, not near the end of the article, because it does provide some pretty important context, including links to LinkedIn posts from Delta board members that directly contradict most of the article:

When asked about this August 8 letter from Delta, a CrowdStrike spokesperson told The Register:

Delta continues to push a misleading narrative. CrowdStrike CEO George Kurtz called Delta board member David DeWalt within four hours of the incident on July 19th. CrowdStrike's Chief Security Officer was in direct contact with Delta's CISO within hours of the incident, providing information and offering support.

CrowdStrike's and Delta's teams worked closely together within hours of the incident, with CrowdStrike providing technical support beyond what was available on the website.

This level of customer support led Delta board member David DeWalt to publicly state on LinkedIn: "George and his team have done an incredible job, working through the night in difficult circumstances to deliver a fix. It is a huge credit to the Crowdstrike team and their leadership that many woke up to a fix already available."

I'm all for CS having consequences for what happened, but Delta so obviously lying here with literal Linkedin posts from their board members that directly contradict what they are claiming, that's just scummy.

I've been mostly using Mullvad, and so far it worked pretty well out of the box. Few sites break, and for that I have LibreWolf, but other than that, I'm enjoying Mullvad more.

One thing I forgot to mention - last time I recommended cloudflared, I was told that the TOS for cloudflared forbid use for high-volume streaming of data, such as movie/audio streaming, or sharing of large files for download.

I never had an issue with it, but I didn't use it for streaming, only to share/download a small to medium sized file once per few weeks. I suppose that if you were to publicly post a link to a few Gb large file, and had hundreds of people download it through the cloudflared, they may take an issue with it. Maybe even if you were regurally watching streamed movies from your server through it. So just a heads up, make sure to check the ToS first.

I'm using GrapheneOS, and suprising amount of apps (including my bank app) works without Google Services. And if there's something I need for work that doesn't work without them, I have another profile with sandboxed Google play (which isn't enabled on my main profile), and use the app there, where it's separated from all of my data. No need to root my phone, and so far it worked great.

As for sharing your Nextcloud stuff, what I did was for services that need to be public, I just got a cheap (like, few dollars per year) domain and use Cloudflare Tunnel (Cloudflared). It handles all port forwarding for you, and you don't have to make anything public on your router - just install cloudflared on the server and have it forward the port you want to your domain. You can also set up geoblocking and ACL pretty easily, so it's perfect for that.

I've however recently moved to using ZeroTier, because it has a nice mobile VPN app, so I just run zerotier (it's literally two commands to install and join a network) on my server, and if I need to access something there I just launch it on my phone and connect through ZeroTier. This, however, won't help if you want to share stuff from your server with others, since they'd have to install a ZeroTier client and also join your network. For Jellyfin, Nextcloud and Sunshine, though, it's amazing.

And if that still feels like too much hassle for you, I'd recommend looking into Proton Drive. I'd consider that one of the best hassle-free alternatives to GDrive, which launched recently.

I see. So, you having shares basically means you own part of the company assets, and if it were to for example shut down or get into huge trouble (so no one sensible would want to buy their shares), you'll still get kind of compensated from the value of their remaining assets being sold? That kind of makes sense, and is the difference I was looking for.

It's still weird, but a little bit more understandable than crypto, which is only literally stealing and scamming money from others (who will eventually in the end end up left with all the literally valueless crypto, and whose money basically paid for all your profit from it)

I see, stonks are way more bullshit than I thought. Is there anything else you can do with your stock, other than sell it to someone else? I always thought that crypto is such a scam especially because in the end, it has no value in itself, and the only thing you can do with it is sell it to someone else. If noone wants to buy it, well, you are fucked. Does it mean that stocks are exactly the same concept? I always thought it has something to do with the vaule of the company and the profits it earns, but if there is no way how to cash them out other than selling your piece of paper to someone, then it's really the same? I suppose that unlike crypto, the stock price increases if the company is turning profit, but you still have to find someone to sell it to, right, so the price is increasing only because the demand from people willing to buy it is increasing due to it turning profit, but it's not really tied to the actual value of the company, so it's exactly like crypto? Or is the price set by some different mechanism than crypto is - pure demand from people willing to buy?

I've always thought that stocks have to pay dividents, like that's the whole point of having it? I.e you get paid by the company regularly some of their profit, based on how much stock you have.

Does this mean that the only way how to make money from their stock now is to sell them to someone else? But then, it has nothing to do with the actual company and money they make, but you are paid by someone totally unrelated - the guy who buys the stock from you. I don't get it, I suppose I'm missing something.

I call the goth scene/genre 80s goth mostly because in the last decade, saying you listen to goth music would for most people mean Nightwish and gothic metal, which has exactly zero things in common with the 80s goth bands like The Cure or Sisters of Mercy. Calling it a trad goth may have been less confusing, though.

I though that MC means magnetic cassete, every time I shopped for them on our local version of ebay, they had MC in the name. Might be local thing, though.

I'm 27 and regularly atttlend concerts in the 80s goth/postpunk/arkwave/synthpop scene. Every band has a CD and I always get one, though if they have MCs, which they sometimes have, I preffer those. As a profesional poser, listening to MCs on a walkman just has this unique feel CDs can't replicate, while also helping with my attnention span since I can't just easily skip songs midway and stick to the few ones I like, instead forcing me to enjoy the whole album which eventually grows on me.

However, I'm probably not a good reference, since I also regularly host parties, DJ and help the local scene promoter with events, so music is pretty big part of my life.

Also, I don't really listen to them much. I have my own NAS with music, and instead of paying for spotify I download what I need from a private torrent tracker (which I need mostly for DJing, which I never get paid for and always volunteer, just like we do the events with free entry, yo no income from that). That's why I make sure to buy the CDs, while also having a budget that's in the same range as I'd spend on Spotify, that I make sure to use every month to buy an album I liked on Bandcamp, slowly replacing everything I've pirated with either CDs or bought digital albums. I feel like that way a lot more of my money end up at the hands of the artists, than if I just payed for a streaming service I don't want to support, while also not limiting me just to the few albums I can afford (and also giving me offline backup if they ever pull the songs from spotify). Pirating is not ideal and I generaly don't endorse it, but I feel like my approach is kind of morally ok-ish in the long run. Still not excusable, but I'd say better than just paying for Spotify.

O(fuck)

One place where I found AI usefull is in generating search queries in JIRA. Not having to deal with their query language every time I have to change a search filter, but being able to just use the built in AI to query in natural language has already saved me like two or three minutes in total in the last two months.

I really hope that CS will come up with recipes and emails where the board specificly "strongly recommended" that they reduce operation costs or denied internal investments. It probably won't happen, because such pressure from investors is usually pretty vague, i.e they don't literally tell you to cut corners, but they strongly suggest that if you won't somehow increase revenue, you (the management) will have problems. Of course, it's up to you how you do it, but to meet their often unrealistic demands, just doing a better job while also investing into internal failsafes is often simply not possible. It's a loss-loss situation for CS, but I really hope they won't loose this legal battle.