gpanders

Many companies use proxies that do SSL interception.

This is not true, I was on a flight in economy just yesterday where passengers were allowed to purchase alcohol.

Oh, ok, so I guess it’s all good then?

I found the Ansible playbook [1] on GitHub extremely easy to use. As long as you know how to configure DNS records and firewalls, the rest is taken care of. This is what I use today to manage my Synapse server.

Also Oracle Cloud offers free ARM instances with 4 CPU cores and 24 GB of RAM, more than enough to run a very speedy Synapse server.

[1]: https://github.com/spantaleev/matrix-docker-ansible-deploy

The codespaces can have their own dotfiles.

> But also, in such setup, the security benefit of 2FA/OTP codes are negligible at best since there are no conditions under which only one factor could be compromised without also having the other factor leaked (assuming you're using unique passwords for each identity, which is the entire point of a password manager).

Phishing and good ole fashioned human error are two methods by which a password can be leaked without exposing the 2FA token.

The asterisk I was referring to is the fact that the E2EE keys are backed up to iCloud Backups along with your messages, and those backups are not E2EE. So the encryption of iMessages is fairly easy to get around if either the sender or the recipient uses iCloud backup.

It’s not just marketing fluff though, Apple actually is better from a privacy perspective on many fronts:

- iMessage is E2EE (with a big asterisk here of course)

- Maps data stays on device unless you explicitly enable anonymous aggregated crowd sharing data. “Significant locations” never leaves your device

- Apple Photos machine learning recognition all happens on device, not on Apple servers. This is one of my favorite features of my iPhone

- As of the next iOS update, Siri voice command processing happens on device

- The new Apple Private Relay (or whatever it’s called)

No they’re not perfect and they could (and should) do a lot more, but there are objective things that they do better from a privacy standpoint than most other tech companies.

This worked! Although I ran into another problem with pync itself, which led me to open my first PR with nixpkgs [1].

Thanks for convincing me to give it another shot!

[1]: https://github.com/NixOS/nixpkgs/pull/130402

Thanks. I am not sure how I missed that section in the manual that answers my exact question… I will give that a try!

> But you don’t want to install globally.

I do want to install globally, as outlined in my original comment. Unless you can tell me how to somehow modify the installation of Weechat to also include this one Python package.

I think Nix is a really cool concept and no doubt there are certain use cases that it solves really well. But my experience with it as a day to day package manager was that it just made simple things hard without a proportional benefit to make all the trouble worth it.

That works for a temporary development environment in e.g. shell.nix. But what about the global environment?

> 2. Ability to remember my CC details

Firefox can do this. It's under Settings > Privacy & Security > Forms and Autofill.

This exact thing is what trips me up about using Nix and I haven't been able to figure out how to get around it. Sometimes you want a global Python library. Here's one example from my own use case: I want to use a Weechat Python script that depends on a Python library called "pync". With e.g. MacPorts I can just run

    sudo port install py-pync

and now the Weechat Python script will be able to "import pync". But this doesn't work with Nix since every package is completely isolated from each other.

I spent quite a bit of time trying to figure this out and was unsuccessful. I'd love to know what Nix's answer to use cases like this is.

This book is absolutely incredible. I just read it recently. I didn’t expect to like it that much (the description doesn’t sound that interesting), but Kurson is such an excellent author that he totally hooked me. Highly recommended.

Ecobee works with HomeKit, which works without an internet connection. You don’t need an Apple device either, as HA has a HomeKit bridge.

I really wish Zig had followed Rust’s lead and made variables const by default :/

Even if you rewrite history, the data is not lost. The old commits are still in the reflog and can be recovered.

It’s extremely difficult to lose anything in Git once it’s been committed. You’d have to do something pathological or intentional.

I am in the US and I have always seen these kinds of trucks being used. Not sure where OP is that they don't use these.

Indeed, joining a Libera channel from Matrix is as simple as joining #channel:libera.chat. It’s much simpler and cleaner than the Freenode bridge.

> It may just be my cynical view of the world but it just seems like more and more people are demanding higher and higher levels of service for things that they don’t pay much if anything for.

I know it’s cliche on HN to blame everything on Google and Facebook, but I really do suspect that the “free to use” model pioneered by these companies (among others, of course, but these are the biggest) have got everyone used to expecting things for free.

> Because Matrix basically has one decent server implementation and one decent client, both provided by the same company, and even that client is some godawful Element thing

This is a fair criticism, but IRC is decades old while Matrix is what, 3-5 years old? Give it time and choice of clients and servers will only improve.

Your UI complaints apply only to Element (the flagship client) rather than to Matrix the protocol. As others have said, there are other, less-flashy clients available (and others under development).

Some examples:

Quaternion: https://github.com/quotient-im/Quaternion

Hydrogen: https://github.com/vector-im/hydrogen-web

Nheko: https://github.com/Nheko-Reborn/nheko

But that’s not what they’re doing. They’re simply limiting the hash rate. You can still run mining software, it just won’t be very good at it.

> Their intent is to limit what people can do with their hardware. That strikes me as almost morally wrong. I tell the computer what to do. It doesn't tell me what to do.

If you need to run millions of hashes per second then buy one of the non-LHR models. No one is forcing you to buy one of these chips and Nvidia is not taking anything away from you.

This is like saying that Intel limits what people can do with their hardware because they make both i3 and i9 chips. There is a spectrum of options to fit more people's needs.

What, why? It’s just HTML, which PHP and Ruby can generate just fine.

It might not be how humans write numbers but it is consistent with how we think about numbers in a base system.

123 = 3x10^0 + 2x10^1 + 1x10^2

So if you were to go and label each digit in 123 with the power of 10 it represents, you end up with little endian ordering (eg the 3 has index 0 and the 1 has index 2). This is why little endian has always made more sense to me, personally.

I have used a Roku, an Amazon Fire stick, and an Apple TV. The Apple TV is by far the best, in my experience. The only downside was their god awful remote, but even that has been fixed in the newest version.

I think you’ll be happy.

git reset --hard does not only modify the work tree though, it also updates where your current branch points to. In fact, that is the main purpose of ‘git reset’, the fact that it modified your work tree at all is only because of the ‘--hard’ flag. So it’s not correct to say that “reset --hard and checkout do basically the same thing”.

> Or rather AGPL forces you to distribute the software you run.

No it does not. Using AGPL software does not suddenly make your own software a derived work.