undefined

@undefined@links.hackliberty.org
1 Post – 90 Comments
Joined 3 weeks ago

I’ve configured 2FA with my bank using verification codes (can’t think of the proper name, it’s that Authy-/Google-style 2FA c. 2010) but then never utilizes it — it pretends that’s not set up and requests the SMS code. 🫠

I should be more clear: specifically I was rebuilding a Docker image based on Debian and needed Node.js for one build step, then Ruby for another as well as the final image.

In the Dockerfile there were a ton of weird commands for simply installing Node.js and Ruby whereas on Alpine Linux I could simply install the needed versions from apk. I understand it’s preferable to build these from scratch but in the case of Node.js I was looking to simply compile a bunch of assets then throw away the layer.

I could’ve spent a bunch of time figuring it out for Debian but I wanted a smaller image in the end anyway too.

It doesn’t help that most password managers kind of suck, you have to do a lot of manual work as a user sometimes.

I wish websites would start supporting Webauthn/FIDO2 sometime soon. I’m sick of SMS-based 2FA becoming more popular lately (like 10 years late).

1 more...

This is what I specifically hate about building Docker images based on Debian. Half your Dockerfile ends up mucking about with third-party repositories, verifying keys, etc.

I had to step away from it because packages are just too old.

3 more...

I suppose what I could do is download a supported image (like OpenWRT) then get the image layout details from that in order to build my own image.

I know I’m going about it the hard way but it’s something I don’t mind learning.

I get the optimization issue for sure. Crystal is a language that exists but it just hasn’t gained enough popularity; it’s a compiled language that’s very close to Ruby syntax.

I do! I am self-taught but now have a great career going in it. My only complaint is that once you start requiring very specific gems, you’ll find a bunch of unmaintained stuff. Ruby was hyped up a lot in the beginning, kind of declined during the Node.js fad but is becoming a lot more stable and continues to show a ton of progress.

These days if you want to get your foot in the door you can find work upgrading Rails versions as a lot of companies seemed to have released apps a long time ago then lost track of time.

Realizing most of this sounds pretty negative but it’s a beautiful language that I love working in every day. The language is so flexible/usable that outsiders complain that it can encourage bad habits simply by being so maleable — my recommendation is to really know the difference between plain Ruby and Ruby on Rails.

1 more...

It’s exactly that, I’m simply interested in running Alpine Linux on it.

I’m simply interested in running Alpine Linux on it.

I’m familiar with writing images, but I’d be crafting it myself since there’s no official one from Alpine Linux for the specific SoC.

Shit, I’m a web developer and I’m fed up with all the ads, tracking and stalking that goes on. It’s so ingrained like “why not use Google for analytics?” or “just host it on Amazon.” 90% of the services we use at work I refuse to use at home (and go as far as outright blocking them).

God this is a fantastic way to explain climate change

What gets me is people migrating from VMs treating it like an entire host machine.

There is a lack of knowledge among developers regarding precompiling assets and classes (if interpreted), and people are trying to do too much in startup scripts.

Another thing I hate is wrapping the entire process in a script because people want to kill the main process without restarting the container. Yikes!

Have you confirmed that with something like https://www.dnsleaktest.com? DNS leaks are common so it’s good to check.

I just built a DIY router on Alpine Linux. I don’t want to deal with an entire web UI and all that trash. I just want minimal Linux and some ip6tables.

I can’t fault you for that. I’m not trying argue they’re perfect devices by any means.

I really love what Ubiquiti is trying to do, but I understand where you’re coming from. I ditched the EdgeRouter X because I just couldn’t do anything really advanced with it.

1 more...

I use (paid) Apple News, and I really enjoy it. Are there no other “pay once” platforms out there?

My only complaint is that some articles still show ads despite being subscribed, but that’s taken care of with DNS-based ad blocking (though you have to also block a a hostname pointing to an Apple DoH server which I find funny).

Those websites (and tons of others) will tell you who your ISP appears to be. Whether or not a service considers it a datacenter isn’t set in stone, but usually it’s easy to tell based on what’s shown there.

Edit: If you’re getting the captchas it’s probably because you appear to be on a VPN.

I don’t have a Dream Machine nor a 192.168.0.0/16 network but my access point receives an IP via DHCP from a non-Ubiquiti router just fine. In fact, the controller running in Docker doesn’t even come up itself after a power failure so I’m really lost on what you’re talking about here.

1 more...

…isn’t it in a lot of countries? I read it was kind of a big deal when this started in the US.

I use Beeper because I can’t stand all these fucking apps. Preferably everyone would switch to Signal but that won’t happen.

What do you do if your hardware is housed at home with crappy residential upload speeds?

It’s a genuine question because I’ve settled for hosting on Storj, but because my friends and family can’t be bothered to connect via its client I’m running a WebDAV rclone proxy on a VPS over Tailscale. So not only am I paying for the storage itself, I’m also paying for transferring the data and on top of all that, it defeats the point of Storj being P2P from and end-user perspective.

How does anyone put up with using that OS? It’s 2024, it’s time to move on. Sheesh

17 more...

Oh wow, I didn’t notice.

As they should.

To me it sounds like they want to host a store on Tor or i2p considering it’s typically recommended to disable JavaScript while browsing those networks due to security concerns.

Are you familiar with web development by chance? Can you see anything in your browser’s developer tools like failed XHR/fetch requests? I’m kind of wondering if they’re doing something specific since you said traffic is flowing as expected on other websites.

If your VPN exits from a datacenter (common with VPN and cloud providers) it could be that while their website wasn’t smart enough to block you, the server the content streams from is and is refusing to stream the content. This would probably show up as a failure in the developer tools (HTTP 401 Unauthorized, some JSON with an error, etc).

1 more...

I mean, I get it that Fahrenheit is stupid, but this is an American publication.

16 more...

I prefer Ruby myself 🥰

Joking, of course. Ruby would be slow as hell.

3 more...

Have you never smelled your car after picking up food? Hell I rarely drive but I’ve done short trips where all I’m doing is picking up food and having it in my car 20 minutes max; even the next evening the smell lingers in my car.

In fact my wife had to put carbon-based air fresheners in her car because she’d reheat steamed vegetable then eat them in the car during her lunches at work.

How is this hard to figure out?

Agreed, I edited my comment for clarity.

Agreed, I updated my comment for clarity.

Completely agree here. If I do order delivery and it’s a third party delivering I always tip a fortune because I know otherwise they won’t care — and yet it still comes back nasty and cold.

It’s the fucking robotic phrasing that doesn’t mean anything. It’s like when you read an article about some crazy bad thing a company did and the company is asked to make a statement, it’s always “we follow all applicable laws” or some version of “we didn’t do it.”

I’m kind of the opposite. The only places that tend to have their own delivery drivers now are pizza joints.

I cannot stand DoorDash, the delivery always sucks but I really don’t blame the drivers. The restaurants that say “we deliver” but then offload that shit to DoorDash, take 50% of the tip piss me off the most. And now the food is nasty because some dude in his car is working up a sweat trying to deliver 16,000 other orders at the same time.

What does Wireshark or tcpdump show on any relevant interfaces?

3 more...

I’ve done this with Tailscale and a VPS running WireGuard on one interface and Tailscale on another on Alpine Linux. I just set up routing so that any Internet traffic coming from tailscale0 is masqueraded/NAT over the wg0 interface. It took me months of screwing around to figure it all out, but I can provide all the necessary commands here if anyone wishes.

It should be generic enough to use with any two interfaces given one is your “internal” VPN and another is some other VPN (probably from a commercial offering).

I barely want to use WiFi at home let alone send it to a tower far away. This reminds me of those stupid 5G home internet plans you can get — why on earth would I want to add so much latency to my internet connection?