lijogdfljk

Yea i really don't get these people. Frustratingly. Perfect is the enemy of good here. Yes, full privacy is the goal, but i know certain actors are spying on me. If i can bypass them, i can at least attempt to improve it.

At the very least i rob Comcast of my data. Which is my goal, after all. Not full privacy.

I agree, just not sure what your comment meant in regards to that. Ie the decision is made by quarters, yea, what does that have to do with the parent comment?

So.. what's your point? Are you saying that Google saying they're not shutting down 60 days ago was wrong? Or that the current post is wrong? Or that neither should be trusted? Or..?

> If you have a secure method of distributing keys, you could also just distribute the encrypted file (or its hash) via that secure method.

Well in my case the central thing is mutable, changing. Ie it's a pointer to the HEAD, in git terms.

So yes, i have to distribute keys but the keys are immutable and can be distributed. The HEAD however can't, or at least can't with assurances that it's trusted.

Which is kinda the root issue i suppose. To answer the question of "the file on S3 is mutable, did i actually write it?". I have to be able to answer that

> Its been a while since i read it, but it was mostly about how to use different crypto primitives properly. It was not about how to design a block cipher or anything like that.

That actually sounds great. Definitely interested, thank you!

re: self hosting,

I'm curious on the use cases for self hosting? Ie i have a heavy interest in self hosting. I also find workerd very interesting. Though i'm struggling to think of reasons why i'd build my apps around workerd instead of just a process.

If i was dedicated to WASM, Perhaps workerd might be a better solution than wasmer, unsure.

Honest question, does that matter? Ie if we say that they can do it better than i can, hypothetically that means i'll have more downtime than them - yes? If that's true for everyone, then the internet will, in aggregate, be down less with CF than if we distributed better. Assuming of course that they can handle the scale linearly, and that it doesn't cause them to have a worse uptime than if i hosted.

So the question seems to be does the internet going down at the same time outweigh the internet being down for larger periods in aggregate? I don't know, honestly - seems like a tossup.

Is there a better angle to view this from?

edit: My issues with centralization are more about privacy, incentives, points of authority/leaks/autonomy, etc. Downtime seems the least concerning to me.

> One way to do this is to hash the file and store that hash somewhere you trust, which i think is what the person is suggesting. This approach has somewhat limited applicability, because if you already have a trusted channel, why are you using cryptography? (Yes there are lots of exceptions to that where crrypto still makes sense, but in general the point stands)

Yup. In my case my system is content addressed, so everything is a hash. So one one hand, sign-less encryption will work fine if i know the HEAD hash, as you mentioned. However i also want these backups to work from no local store. Ie i don't know the HEAD, and in that case someone could tamper with my pointer.

Kinda surprising that Age doesn't have a way to handle this. Shame, but good to learn.

Cryptopals is interesting, appreciate the link! I'll also look into that book, thank you! Did you find the book a bit deep? I have no intention of writing my own crypto, i just want to use it reliably and correctly.

Mind describing (to a layman?) how checksums can help Age prevent switcharoo?

I ask because i've been writing a datastore of sorts that's immutable. Ie all content addressed. I plan to add some basic encryption for cloud storage primarily, however if Age could let someone swap file contents then i can't use Age.

I know someone's thinking "if it's content addressed how can someone tamper with the file contents?" - they can't, of course, but that only works if you know the HEAD's to point to. If you don't, say you're doing a full recovery, you slurp in all the content IDs and now have to determine which one is the HEAD. This is where tampering could take place, hypothetically, as they could not just swap the file contents but _also_ change the hashes/content IDs.

In a content addressed system signing the HEAD is really the only thing needed, since everything else can be validated via checksum. However i think it still needs signing, no?

Sidenote, i know next to nothing about crypto practices. I desperately need to find a class which teaches necessary knowledge to use crypto correctly in your own programs.

This is really cool! Unfortunately i primarily am interested in offline databases so perhaps i'm just not the target audience. However i have to ask, on that note, does this have any application in the offline space?

Ie i wonder if there's a way to can write your applications such that they have less/minimal contention, and then allow the databases to merge when back online? Of course, what happens when there inevitably _is_ contention? etc

Not sure that idea would have a benefit over many SQLite DBs with userland schemas mirroring CRDT principles though. But a boy can dream.

Regardless, very cool work being done here.

I love that it draws so many different types. I'm a Python/JS/Go programmer historically. Rust is closer to Go to me. Of course it's not Go, but i'm far from a migrating C/C++ dev. Hell i only know a pinch of C++ from when i was first learning the trade.

Yup, iirc i paid $1600 (or maybe $1800? I forget) for a new 3080TI. It hurt. However i'd do it again if/when i need to. Ideally i won't for another few years, but you get me.

Clearly i can afford to do this though. But this isn't just gaming either, i create CG on this machine, digitally sculpt, etc.

Another question if i may, do we have visibility over how funds have been accepted/moved/etc?

it would be nice to know when library authors have actually received my funds, vs them not taking them for a few months and the funds moving to another library. This would let me as a user pester the author about funds they're missing, since i'm invested in them getting support i'm trying to give.

Awesome, signed up!

Can i submit a stackaid.json manually? Ie for private repositories that i want to be counted towards my funding-split?

This is really cool. Is there a way to use this with Rust, yet?

I'd be interested to donate say $15/m and then specify repos of mine, maybe mixed with some manually specified projects (ie for things i use in private, but i don't want to give access to my private repos), and have it split among them.

but all of this is Rust-centric. Does that work yet? I'm super interested, this is a problem i've had with Github's Sponsor Program. Feels like a small amount of money doesn't go far with Github, this splitting solves it hypothetically!

Well for one it's not static lol. I don't think they're claiming it's faster than a static website, are they?

> Those tricks are not as easy to pull anymore.

Arguably, they did with Bitwarden already, no? Ie even if they don't do anything bad - they still executed steps of free users and large VC checks.

Which is to say, does it not seem like they've already executed the "trick"? Users are already there, they have cash in hand. Their motivations don't matter much here, we as users can only see their actions.

But i don't follow bitwarden at all. I avoid free products for this "trick" reason. If i'm not paying or self hosting, i'm not interested heh. Am i reading Bitwarden wrong?

Imagine if they don't.

Is there mention of other OSs for Orion? I can't use it until it works on Linux/Windows, unfortunately.

Honestly, at peace lol. I don't really care about living.

My primary desire for living atm is keeping my family safe, providing for them, etc. Beyond that, i am living just because i am - and i enjoy life as much as i don't want to _not_ enjoy time i'm here anyway.

Seems entirely fair, imo.

If, for example only, this was a significant contributor to global warming and impending doom, does it matter that our first world comforts are to blame? We don't get special exception just because we're used to a certain standard of living.

I desperately hope we don't need to abandon first world comforts. And i really doubt we would need to. However if, for sake of argument, that was the only solution - our answer should be to acknowledge the burden and take action.

This is all for sake of illustration though. Just that your comment seemed to imply because our first world comforts use more energy that it was somehow unfair to question the impact of said comforts.

That Figma plugin is mind blowing to me. I'm also curious to see how the Blender integration pans out

re: Videos, that's the first item on the roadmap on the linked page

So has C, and most other popular languages. Doesn't mean they don't have issues, often dangerous issues.

I have this with FastMail - it's really cool. Even has 1Password integration to automatically create the emails.

Fair, but i'd probably write your iterator example differently. Though, besides the point perhaps - as i agree there are plenty of cases where imperative approaches are cleaner.

I however will often have a dozen maps/filters/etc and that style in imperative is what, nesting repeatedly or using `continue`. Meh.

If your Iterator consists of a single `filter_map` i can see why you don't get much value out of them in that case. It's because.. well, there's not much value to get out of it.

Just asked her (she's been the one buying our collection haha) and sounds like fairly early on she had trouble with many of them and so eventually she just gave up looking. The only example she had off the top of her head was Stranger Things Seasons 3 and 4. A quick search on Amazon seems.. confusing haha.

On the flipside i'd be curious if you have had luck from any sources on buying boxsets for modern streaming shows. Any tips?

edit: She replied with additional items:

> Off the top of my head:

> None of the Marvel shows on Disney+ have physical

> None of the Amazon Prime shows have physical

> None of the AppleTV+ shows have physical

> The first 2 seasons of stranger things do but are out of print. Subsequent seasons and any other show from that time period on are not available.

> Star Trek streaming shows ARE available but insanely expensive (8-10 ep seasons for 50-70)

I did that too. Though i'm finding it difficult to get a lot of newer content on DVD these days. Ie most new streaming shows.. do they have box sets in your experience? My wife has been looking and so far i think we have .. well, none.

But we have quite a bit of content. Netflix (DVD), ironically, is a good source for this too. .. rules aside, i'm sure.

> Use Go if you're looking for an easy GC language with max productivity and a decent performance ceiling. Use Rust if you're writing really high performance or correctness-is-paramount software.

I'd add one more addition to use Rust (speaking from an ex-Go dev): Use Rust if you want a robust std lib. Go is good, i used it for ~5 years, but man Rust was a breath of fresh air with the amount of tooling that helped me solve problems. Iterators, are a great example.

I also preferred Crates vs Github Repos, but i think that's just personal preference.. not objective.

Appreciate the TLDR. I was reading the tweets and confused on what the problem was.. Apple's naming scheme here seems awful.

Sounds like the author intends this to be a layer to create relational DBs, not in place of directly.