418tpot

I believe the reason is, at the frequencies these CPUs are talking to RAM, the reflection coefficient[1] starts playing a big role. This means any change in impedance in the wire cause reflections of the signal.

This is also the reasoning why you can't just have a dumb female to female HDMI coupling and expect video to work. All of such devices are active and read the stream on the input and relay them on the output.

[1]: https://en.wikipedia.org/wiki/Reflection_coefficient

Have you tried anubis?

https://github.com/TecharoHQ/anubis

My house also came with a nest, and I also never connected it to my network, but for me nest was a terrible dumb thermostat.

It constantly tried to infer schedules and change the temperature on its own. I would set the temperature, come back an hour later to find that it changed itself back to what it thought it should be.

Also, there was no way to just activate the fan. I live in a very temperate climate and I generally like to keep a few windows open but run the fan to circulate air through the house.

I sold the nest and now a $15 dumb thermostat from the local hardware store now lets me set a temperature and it won't randomly change it when it feels like it. And it has a switch to turn on the fan.

I agree this is the ideal situation, but as it stands CAHSR is planned to terminate at union station in LA, quite far from LAX. Ideally LA metro or metrolink would build a direct connection between union station and LAX, but that hasn't begun to be planned and unfortunately it's very difficult to get transit built in LA. For instance the Sepulveda line— one of the most important lines for LA— is at risk of being killed because ticket master's ex-CEO doesn't want a train line running under his house.

Right, but that is still severely limited in my experience.

Like I can't bind these programs to run on keyboard shortcut (or I guess the mobile equivalent would be a button on the home/lock screen?)

I can't do basic UI-- even if I don't write a QT/GTK app sometimes I want to pipe to imv, mpv, present a list of options via dmenu/rofi, send a notification to dunst/mako via notify-send, copy strings to the system clipboard, write a script that calls wtype to emulate keystrokes, etc.

I don't have access to the whole filesystem too, right? Last time I tried writing a script in termux I couldn't access the photos my phone took.

One concrete example: I use music player daemon to play music throughout my home. On the phone the answer is to download an app that implements the protocol, but the app isn't great. Instead, I wish I could bind dmenu to open up when I press volume up for example that just shells out to mpc. These are the types of things that I like to set up on my desktop to get a really ergonomic experience tailored to my workflow, but on mobile I'm at the mercy of what apks are available.

I also haven't found any great solution for setting up a phone declaratively. On desktop I can use NixOS to codify my configuration, on mobile, flashing a new OS means pecking around settings/fdroid like a point and click adventure game for an hour to get everything to a somewhat usable state.

Perhaps this is all just user error and everyone else has figured out how to do these things, or they just suck it up and build their own android apps. But for me, this is really what I'm asking for when I say I want Linux on mobile.

> Plus, ART is open-source and works great for GUI apps.

This requires writing the app in java and building it in android studio, right? Is there an easy way to just compile an apk from a non-android project?

Also if I invest a lot of time in learning ART and building apps for android, I will have a much worse experience running these apps on desktop linux (for example under waydroid) which is where I spend a vast majority of my time.

I currently run LineageOS and am constantly frustrated with its limitations every day.

On desktop linux I can quickly write up a program to do most anything I want in pretty much any language, and in my text editor of choice. I don't know anything about android development and I don't really want to invest time in learning Google's proprietary GUI toolkit when QT/GTK, or even raw OpenGL is more portable. I once looked into it and gave up when it seemed like it was going to be very painful to write an app outside of android studio (why is there not just a CLI tool to compile these things?). On vanilla linux I can whip up most things in under an hour in C, Rust, or even Bash.

Interesting, are you saying that instead of reaching for `let foo = bar; in expr` you usually use something like `with { foo = bar; }; expr`?

> Since it uses attrsets, we can use their existing functionality, like `rec` and `inherit`; rather than duplicating it.

`let` supports `inherit`, and is always `rec`. Or is that your point, that it is needlessly duplicated functionality?

I agree the syntax isn't perfect, but in case you're actually confused there's really only 3 places where semicolons go, and I would argue that two of the places make a lot of sense— as a terminator for attribute sets, and a terminator for `let` declarations.

Unfortunately it is also used with the somewhat confusing `with` operator which I personally avoid using. For those of you who aren't familiar, it works similar to the now deprecated javascript `with` statement where `with foo; bar` will resolve to `bar` if it is in scope, otherwise it will resolve to `foo.bar`.

This is exactly what the tool bubblewrap[1] is built for. It is pretty easy to wrap binaries with it and it gives you control over exactly what permissions you want in the namespace.

[1]: https://github.com/containers/bubblewrap

You can do this with vanilla Firefox using policies.json[1]. Check out `DisableAppUpdate` attribute.

If you're using Firefox from nixpkgs this is already disabled by default[2].

[1]: https://support.mozilla.org/en-US/kb/customizing-firefox-usi...

[2]: https://github.com/NixOS/nixpkgs/blob/nixos-24.11/pkgs/appli...

I don't think it really addresses the issue because it still requires an account at one of the predetermined identity providers. With email I just need a domain and I can self host the rest if I really cared to.

It would be so much nicer if there was a federated way where I the user could specify any OAuth identity provider (even if it was e.g. a self hosted one) rather than the predetermined list dictated by the relying party.

Funnily enough someone recently asked me if I could comment on a Product Hunt post and I was unable to do so since they only allow sign in with Google, Twitter, Facebook, Apple or Linked in; I have none of these accounts and would rather not create any of them. Oh well.

Fair, although I know quite a few people that hold both of these opinions simultaneously because I've met them in person. It's only after I point out their hypocrisy do they even realize what a danger Cloudflare poses to the free and open internet.

I suspect it's because hating on Google is in vogue, and so is recommending Cloudflare.

[flagged]

The signature is the whole point of the QR code though, otherwise someone could just trivially create a QR code that has their name and "vaccinated = yes".

If the process you just described was actually secure then the computers could verify on its own. The problem is with an active mitm attack the attacker knows both sets of emojis and can modify the messages to both parties to look like they recieved the correct ones.

You can use linux namespaces or a tool like bubblewrap to sandbox the process which makes it reasonably secure. However if you're running a GUI app that rendres to an X11 server all your security gains go out the window.

Some of the largest and most important software is developed over email, e.g. Linux, QEMU, Firefox, etc... Don't make the mistake thinking that email doesn't scale. In fact, for most teams, the opposite is true.

Do not confuse Google's revenue with market rate of an impression on YouTube. More revenue for Google does not equal higher pay for content creators. Google pays them the minimum to keep them on the platform. And that minimum is tiny since their platform is essentially a monopoly.

Or you can do what I do and support the creators on patreon and continue to use adblock on YouTube. That way you can consume content without feeling guilty and not support Google's monopoly at the same time.

It's insane to me that virtual effects and backgrounds are a feature integrated into video conferencing to begin with. Why couple these things instead of having them live as a separate application that exposes a virtual camera to any software that needs it. This way you're choosing video conferencing software based on how good it is at being video conferencing, and camera effects software based on how good it is at doing camera effects (if you even want them).

Except it will never exist for discord because discord is a proprietary communication service instead of an open protocol. At best it can provide an API, but that can be broken or shut down on a whim. This is why it's a much better use of time for developers to make things like Matrix clients match feature parity to discord rather than attempt to give discord the client diversity of Matrix/IRC.

> Brief downtime really only affects the infrastructure surrounding the actual code. Workflows, issues, etc.

That's exactly the point. This infrastructure used to be supported by email which is also distributed and everyone has a complete copy of all of the data locally.

Github has been slowly trying to embrace, extend, and extinguish the distributed model.

I have no problem paying creators for content. If a creator I follow has a patreon or some other method of supporting them I pay for it without hesitation.

What I do have a problem with is supporting a company that is actively destroying the free internet. I think Google is a much bigger cause of the issues of the internet today than me attempting to maintain freedom in how I consume my carefully selected media.

For example: I want to watch videos in mpv, which tiles nicely in my WM, and doesn't have toxic social media features such as like buttons, comments, and related videos which serve no purpose other than to entice me into wasting time watching useless content.

If you encode auth token in the URL then a shared URL accidental or otherwise means being authenticated. There is a lot of existing infrastructure that assumes the URL is public knowledge while cookies are not.

If you do this through hidden forms then page navigation can no longer be done through hyperlinks and must now all be form submissions, which means a malfunctioning back button and logout when refreshing or opening a link in a new tab.

Please do not do this.

First party cookies are very useful and it's bad enough that people keep trying to replace them with javascript+localstorage despite the decades of security best practices that have been built into them.

I do agree that we can do away with third party cookies however.

Backblaze B2 also requires a verified mobile phone number in order to use it - even if you've already given them a credit card.

I would love there to be an option available at Backblaze B2 pricing, without a massive invasion of privacy. Right now I'm using Linode's Object storage, which is priced at $0.02/GB per month which is still reasonably priced for my needs.

So the general advice seems to be, stop using federated protocol and start using... signal?

I find it hard to believe that an app that runs in electron and falls for basic web security 101 XSS exploits[1] is a more secure solution than using an encryption layer on top of a federated protocol.

[1] https://news.ycombinator.com/item?id=17050754

> if in public life I am a well-known conservative Evangelical, but I donate to a cause (say abortion education) that I privately support, I might prefer avoiding any chance that the donee leak my information in an attempt to 'out' me.

This sentence really stood out to me as an example of why politics has become so polarized.

If you have political ideals {A, B, C} and there are others who have ideals {A, B, !C}, and you allow your shared beliefs of {A, B} to either sway your opinion on C, or be not willing to communicate openly about it, then you are exacerbating the problem.

This forces people to try to try to identify with the group that they have the largest intersection with, and usually assume the ideals that that group has. Which means that a majority may silently be in support of C, but are so set in an us-vs-them mindset, that they allow !C to become part of their ideology.

The path between two cities is privately owned and the owner charges people to walk through it. There is a side gate for bathroom access. This is akin to going up to the gate and telling the owner "I'm just here to use the bathroom" (sni:viasat) and then after going through the gate just continuing to the other city.

Sure it's illegal, but hardly worth 5 years and I doubt there's a judge who would give more than community service for a stunt like this. But who knows, people get a lot more sensitive when it happens with computers or if it involves air travel.