Skip Navigation

Posts
16
Comments
1020
Joined
3 yr. ago

  • Yeah, that's my experience as well. In addition to being lazy with updating, so if some kind of supply chain attack happens, I usually sorts itself out before I get to updating :D

    But I did limit my browser extensions, after I a cause with Nano Defender taught me a lesson - it was a mildly popular anit-anti-adblock killer that worked where other adblocks were detected, but the developer sold the extension to a company that turned it into a info-stealer malware and pushed an update through chrome store, which got accepted and propagated, and some of my social network sessions got compromised. So, I just stick to more popular projects where something like this shouldn't happen, and don't use random extensions.

  • Yeah, that part about WhatsApp is annoying. I just have a spearate profile on Graphene that has only WhatsApp installed, and whenever it wants me to refresh a session I just switch to the profile and log in.

  • There is, but it requires you to log into the app every two weeks to maintain a session. You can setup a emulator to do it for you. I just have a separate profile on my Graphene with Only WhatsApp that I switch to and login whenever I get a warning.

  • I've been using it for almost a year by now, and so far I didn't have any problems. I've not considered that problem though, so it might be happening and I was just lucky.

  • WhenI was setting it up, it took me only like two hours tops. The ansible project is well documented, has a clear setup guide, and the process is really just getting server with ssh access, changing DNS, changing around 5 values in the ansible config and running it.

  • As far as I know the Discord bridge has some limitations, the major one being that IIRC it doesn't atually support calls. But just for chatting across servers it has worked well for me.

    There's also the fact that you have to either trust the project with your password (as in, the the bridfe adds a matrix bot that runs on your server, but needs your pssword), since I think it uses the web version in the background (but then you can also use it for DMs and any server), or set up a bot on the discord server you want to bridge, which obviously cant be done if you're not an admin. It's a foss project, but there's always a small risk of it gping rogue.

  • I'm hodsting my own Matrix server with WhatsApp, Telegram, Discord (you don't need a bot for that, you can just share your login with the bridge) and Messenger bridge. I have all my IMs in one app, don't have to install spyware on my phone, and I can make bots that troll annoying people that message me on any platform.

    Hosting it was super simple, thanks to the Ansible project that's extremely robust and well done, I literally just got a hosting, domain amd changed like 5 config values to enable the bridges I wanted, gave it an IP and ssh key, and ran it. And if I need to update, I literally "just update" (it's all wrapped up into "just" tool), and it eve handles cases where I didn't update for a while, failing graciously and telling me what I need to do maually, usually just rename some config values.

    I wholly recommend it. You probably wont convince your friends to switch from

    <insert app here>

    , and this is the best compromise.

    I'm using a small instance on Hetzner, for 6$ a month. You could in theory get a free oracle cloud instance for it, but I didn't manage to get one.

    And you can easily share it with anyone interrested, make them an account, so they can also consolidate their DMs. I'm sharing it with a few friends and colleagues.

  • Hak5 OMG cable does something similar, if I'm not mistaken. I don't have time to check, and I'm not sure if it's just a glorified rubber ducky, but a vaguely remember it did have wireless capabilities.

  • At press time, the pair had reportedly gotten into a blowout fight after Jasmine intercepted an anatomically impossible nude from one of Musk’s other girlfriend apps.

  • the quality of search results tends to be degraded [without JavaScript].

    Lol, how? That's such bullshit.

  • Wait what, I'd kind of assune that all surgeries have to be consensual?

  • I've seen this warning in a lot of apps, like Teams, Messenger or some authenticators, and some of the time I could simply ignore it and continue using the app. I think some of apps simply use it for push notifications that I can get by without.

    Not all, though. Sometimes it simply doesn't work.

  • Yeah, I knew about that and the imminent Gulf stream troubles, but I never saw the actuall numbers. Like, I knew it was bad, but seeing how unimaginably large the numbers are is terrifying.

  • Suno was what radicalized my stance on AI, and I refuse to use any of it.

    As a solo hobbyist game dev who struggles with art, I had a pretty reserved approach for AI for stuff like art, animation or most notably voice acting, which makes the game a lot better but is really hard to do if you're not a native speaker or don't have a budget. My plan was to start with AI filling in places I couldn't do, but then pledge that 100% of the first sales will go towards paying an actual artist/VA and replace the assets as soon as possible. That felt like a fair compromise.

    And then I tried Suno. You see, as a programmer, my line of work isn't really threatened by AI. Quite the contrary - it hinders the learning process of so many new programmer who will end up missing core skills, that it kind of increases my job security.

    And since stuff like VA is something I don't really understand, I mostly considered it as an asset that AI can temporally provide.

    After trying Suno, which makes something I am passionate about - I've tried and failed for the past few years to learn instruments, and starting a band and making music is one of my so far unattainable dreams, it was so, so devastating. To see something you've actively struggled with, dreamed about, and made an effort for to overcome the challenges, unsuccessfuly so far, be overtaken by a literal three word prompt, making a better song I probably ever will - it's so heartbreaking, demoralizing and awful. Which is something I haven't realized when thinking about art I was not invested into, but now, thanks to Sunk, I see how it must feel for every artist, and I refuse to support any of it. It gave me determination and motivation to make the effort towards meeting people who do VA or assets I need, and collaborating, even if it postpones everything by a long time.

    Fuck AI, and fuck this guy. The product may be useful and is pretty mindblowing, but it comes at a cost of making a lot of artists demotivated and miserable. Also, saying that "music is hard, people don't want to" just adds salt to the wound, insult to the injury, and is really fucked up thing to say, after the product you've made affected and demoralized artists at large so much. Seriously, fuck that guy.

  • Wait what?

    is losing an average of 30m tonnes of ice an hour

    That's a fact I'd like to forget.

  • I was working at a larger cybersec company, and eventually left for a smaller indie gamedev studio, especially because even though I really tried to change it, even getting to a pseudo Red-Team Lead position (as in, I was still officially barely-not-a-junior pentester, but had responsibilities of a RT lead because I was the only one who showed initiative in trying to actually do a good job), it was quickly apparent that our job is not to deliver a good product and make the world more secure, but only to.make as much money for our investors as we can. And I really refuse to do that, since I'm still naive and wanted to do cybersec because it felt right, and its something the world desperately needs.

    Even though I earn more than half of what I did, I'm way more happier because my job is a smaller startup made mostly of friends, including the CEOs, that also has amazing projects and a responsible business plan.

    But, I have one enormous advantage - I'm young, I don't have my own familly, I share pretty cheap rent with my partner, so even with the smaller pay, I still comfortably earn around 1/3 more than I need. I don't regret it, working for people I respect and trust, where everything I make goes back to improving the company instead of some random venture vultures that don't give a fuck about anything other than profits. It's amazing.

    But, a good alternative I've been considering is to get a cybersec job that pays well, no matter the morals, but work only 1/3 or less of days. (So, like a part time). I would still earn the same, but I won't be so bummed by the job since it's such a small time wasted, while also having 2/3 of time to do my own projects that actually fulfill me. I'd recommend this instead of working fulltime for a cause.

  • I usually just look into the docs, for most of the more basic things, search engine will find you the related function, and the docs usually have usage examples.

    Also, learning to work with and read a documentation will be one of the best skills you can acquire as a programmer. I was so glad I was used to docs, because when I started to work with libraries that are under NDA (porting games on consoles, most prominently PS5), where the only resource you have are docs and internal forums without any kind of tutorials, being able to figure out what you need from docs is really nice skill to have.

    I have tried using AI for non NDA programming questions, and usually I've ran into an issue that it simply just halucinates even on basic questions. For example, I was trying to figure out how to prevent Quest from sleeping, so we can run long-running automated tests, and all of the solutions were adb parameters that do not exist. Unless it's something super basic, AI will probably just send to you the wrong direction.