wolo

@wolo@lemmy.blahaj.zone
12 Post – 55 Comments
Joined 12 months ago

my website's backend is made with bash, it calls make for every request and it probably has hundreds of remote arbitrary code execution bugs that will get me pwned someday, it's great

edit: to clarify, it uses a rust program i made to expose the bash scripts as http endpoints, i'm not crazy enough to implement http in bash

it behaves like a static file server, but if a file has the others-execute permission bit set it executes the file instead of reading it

it's surprisingly nice for prototyping since you can just write a cli program and it's automatically available over http too

17 more...

"We successfully competed against piracy and drove it to near-extinction, but now that we're enshittified we can't compete with piracy while continuing to make the obscene amounts of money that we want to make"

1 more...

Good, if someone is selling their labor they should be protected as an employee.

breaking news: if you spend thousands of hours building a house of cards on top of a rug controlled by a company whose best interests do not align with yours, don't be surprised when they hold your work for ransom and threaten to pull it out from under you

if they sold DVDs of Netflix's shows that would actually be pretty nice, but I doubt they would be OK with allowing anyone to actually own their media.

I think you missed a letter...

2 more...

How is this better than a normal messaging protocol like Matrix? What does blockchain add to the solution?

Why did you photoshop the image to make his face bigger?

1 more...

I can't be cis, I like Gex!

Sometimes when I get a call from an unfamiliar number with my area code (I don't live there anymore so it's always a scam spoofing a nearby number) I roleplay as a 911 operator and don't drop the act until they hang up, threaten them with penalties for wasting public resources and such. It's probably not strictly legal but they're calling me illegally too so i think it pretty much evens out :)

i thought it was neat how php lets you write your website's logic with the same directory tree pattern that clients consume it from, but i didn't want to learn php so i made my own, worse version

Godot's 3D is perfectly usable in my experience, it's been a while since I've used Unity though so I can't tell you how they compare.

There's a concept I call "rule zero of cybersecurity": "the user can and will exploit trust you place in them or anything they can touch."

You can make it more difficult to exploit the trust you put in the user by hiding it behind obfuscation, but ultimately the user can desolder your secure enclave, reverse engineer your anti-tampering measures, and falsify any check your program wants to do, if it happens on their computer.

Client-side anticheat on Windows doesn't "work" in the pure sense either, it's just enough of a pain to bypass that most people don't because you can't recompile the kernel to change how it behaves. On Linux, it's easier to take advantage of the fact that perfect client-side anticheat is fundamentally impossible.

Same with device attestation, DRM, and other client-side verification measures: they're doomed to be in an endless back-and-forth because what they're trying to do is fundamentally incompatible with reality.

The correct choice for anti-cheat is to detect cheaters like humans do: watch a player's actions as they are received by the server, and use your knowledge of typical player patterns to detect if the player is cheating. Your server's knowledge of the network messages coming from the user's computer is the only thing you can trust (because it exists on hardware you control), so you should make your decision by analyzing that.

3 more...

If you put zoom in a flatpak and tighten its permissions, it won't be able to touch the rest of your system

5 more...

Every sale to every individual buyer requires separate handwritten notice, each individually attached to a copy of the privacy policy and the data sold, notarized and sent by certified mail in triplicate, with postage paid by the sender. Make it cost so much that the entire industry becomes obsolete.

Would be an excellent change if they replaced it with a chronological timeline, but we all know they won't do that even though their backend already generates RSS feeds and it would barely take any effort to integrate with the frontend

the only good part of the last one was the mac-'n-cheese-induced divorce flashback, somehow that doesn't give me hope for the future of the series

Vattenhaj

Windows doesn't like to acknowledge that other operating systems exist, so (at least from my experience) it will overwrite your Linux bootloader whenever it updates, or sometimes it'll just do it because it feels like it...

3 more...

Maybe I'll finally move it into a VM so I can send a link to it here without tempting people :P

Personally I would rather they had to make phones a little thicker again to include a properly sealed battery compartment, the new ones look very nice but it's too hard to get a decent grip without accidentally bumping the edge of the screen.

Maybe the whole back side of the phone is the battery, and the two sides are independently watertight? The charger port and usb controller could be on the battery too, that way you can replace it if it breaks or you want to be compatible with a new fast charging specification, and you could charge it independently if you have more than one.

the PineTime can run for over a week in my experience, but it runs at 64 MHz and has 64kb of RAM, so telling time is pretty much its limit

1 more...

#!/bin/bash doesn't work on NixOS since bash is in the nix store somewhere, #!/usr/bin/env bash resolves the correct location regardless of where bash is

5 more...

I still haven't gotten any popups at all on Firefox with uBlock, not sure what's different about my setup

Waluigi

I've taken some precautions, it's running in a container as an unprivileged user and the only writable mount is the directory where make writes rendered pages, but i probably should move it into a vm if i want to be completely safe lol

1 more...

Got rid of all of my centralized social media accounts apart from YouTube, moved from Proton to Migadu on my own domain (unlimited aliases! when signing up for a service I can just make up a new username and it gets organized into a folder in my inbox!), and moved my homelab and laptop to NixOS

Flatpak and AppImage are trying to make that easier, since they both work the same on pretty much any distro, but not everything is packaged that way yet.

Flatpak is closer to the typical package manager model, where you install things from a graphical store or the command line, while AppImages are self-contained binaries that you download from the developer and run as-is without installing.

Snaps also exist, but they don't work well outside of Ubuntu and its descendants...

1 more...

Building code violations (Minecraft)

That's not how you should mix tabs and spaces for alignment. You use the same number of tabs as the previous line, and then fill the remaining width with spaces. That way, when you change tab width, the alignment spaces will always start in the same column as the line they're aligning to, regardless of the tab width.

1 more...

My big killer feature for Linux phones is running Wayland/X11 apps mostly unmodified, if AOSP added support for that I wouldn't be too disappointed about sticking with it. I've tried to make android apps before, but doing things the Android Way™ basically requires you to use java and their bespoke UI primitives, and it always makes me wish I could just use the tools I'm already used to.

Being able to have intricate control over my phone is nice, but I'd rather do it with a KDE-like settings maze than a terminal because of how tiny the screen is, and if I'm doing something serious that would require a terminal I would rather do it at my desk.

I definitely think the Android ecosystem has some serious problems, but I already run a custom ROM without Google Play Services installed so I'm fairly well-insulated from that. I do plan on installing a mobile Linux system on my old phone to experiment, but I doubt it will become my system of choice.

For 2:

  • Yes, and it doesn't cheat by bundling some huge scripting runtime like some other languages do. It produces real, native code which will run almost as fast as an equivalent program in C (sometimes a little faster!)
  • It gets as crazy as you make it, but the design of the language tries to help you keep things manageable.
  • When you run cargo new or cargo init it should initialize a local git repo for you, just add a remote and push. If you're setting it up on your own, add the target directory to .gitignore.

Also, for point 1.2: As long as you don't delete your settings or change them in another program, they should stay where they are even if the DE using them is gone. However, if you aren't short on disk space, there's no need to get rid of a DE you aren't using, since you can pick from all of the installed desktops in your display manager (the screen where you log in for the first time after booting).

Animal Crossing City Folk bricked my Wii U, it was probably unrelated but I like to think Resetti just had enough of my shit

the last game I played was Duskers, so I'm probably either immediately dying in the vacuum of space or trapped in a derelict space station without any power.

Every good result they serve you could have been an ad, so they're incentivised to replace as many with ads as possible.

You don't need to abandon your distro's package manager to use Nix, so you can adopt it as much or as little as you like.

I know that Calckey and its descendants support it since I verified my account on a Calckey instance, and Akkoma mentions it in this blog post.

I know about the CGI standard, but mine does things a little differently (executable files don't just render pages but also handle logging, access control, etc. when put in special positions within a directory), so I still think it was worth the afternoon i spent making it.

1 more...

Oh yeah definitely, Apache is way better for anything remotely serious.

These days, being an open-source browser that isn't part of the Chromium monopoly is pretty much the only good thing they have left...