looperhacks

Maybe carefully read TFA - the age verification came from a Californian law

I'm German and have never heard of this book before. Was born quite a bit after it was released, though

I know it's fiction - but in reality, Karen is likely just as annoyed by this as the author. The spam should go to the person in charge, not the person who is forced to deal with this every day

> but it requires knowing what class and value to pass

Unless you use a text editor without any coding capabilities, your IDE should show you which values you can pass. The alternative is to have more methods, I guess?

> why can't I just pass 20 or 20_000 or something

20 what? Milliseconds? Seconds? Minutes? While I wouldn't write the full Duration.ofSeconds(20) (you can save the "Duration."), I don't understand how one could prefer a version that makes you guess the unit.

> proxy(ProxySelector.of(new InetSocketAddress("proxy.example.com", 80))), geez that's complex

Yes it is, can't add anything here. There's a tradeoff between "do the simple thing" and "make all things possible", and Java chooses the second here.

> .authenticator(Authenticator.getDefault()), why not just pass bearer token or something?

Because this Authenticator is meant for prompting a user interactively. I concur that this is very confusing, but if you want a Bearer token, just set the header.

This is already a crazy take on its own, why would a fork have to describe their relation to the parent project front and center? Both the Readme and the comparison page link to the origin blog post [1] that describes the lineage clearly.

But even if there were some "ethical reason" to do this, I don't think Gitea is the right project to play up as a victim. Their homepage [2] doesn't mention that Gitea itself is a fork either. Their Readme does, but is this so much better?

[1]: https://forgejo.org/2022-12-15-hello-forgejo/ [2]: https://about.gitea.com/

You "need a plugin" in the sense that every component of maven is a "plugin". The core plugins give you everything you need to build a self-contained jar - if you wanted to, you don't even have to configure the plugins, if you want to write a long cli command instead.

You can create a native executable with GraalVM. Alternatively, if you want to keep the JVM: With the ongoing project Leyden, you can already "pre-train" some parts of the JVM warm-up, with full AoT code compilation coming some time in the future.

I can use Wero just fine in my banking app. Can't try the app that's called Wero in the Play store because it just directs me to my banking app. But I can open it at least ...

Kerbal Space Program?

Hack-backs are a topic that comes up every few months from government representatives here. There are two big problems I have with this:

- you don't know "who" you hit. The case in TFA is still rather simple (just send the "hack" as the response), but you will still most likely hit some residential proxy and nuke some random person instead of the responsible actor - (this is not too related to TFA but a point in discussions about hack-backs on a state-actor level) unless you're doing a very simple "attack", you need to have some sort of vuln ready to perform any kind of hack-back. Which leaves the ethical dilemma that actors are now motivated to keep vulnerabilities available, thus making the world more unsafe. And once you have used your vulnerability, your "enemy" probably knows it as well.

> Legitimate use cases, including security research, web archiving, and search engine crawling, can be distinguished from credential scanning by scope and target: no valid automated process needs to probe arbitrary third-party servers for .env or .git files.

What about security researchers scanning for their research? What about scanners that notify you?

Besides the fact that 99% of the general population won't be able to understand this, a $5€ wrench says that you show me proof of the correct private key (either by you showing me the letter you received, me being present when you set it up, or however it is set up)

Don't worry, our minister for economic affairs and energy will make sure that we will stop this solar madness and return to good old clean and green gas /s

(she worked and lobbied for the gas sector before joining the current government)

How do you know that the videos are AI or not? For many of them it's pretty clear, but I imagine not every user is labelling their AI uploads properly

In the end, the supreme court case decided that the re-implementation fell under fair use, it did not answer the copyright question.

There is compensation for delayed DB trains, but it might not be what you hope for :D

60 min delay: 25% (or 100% if you abort your travel) 120 min delay: 50% Furthermore, your ticket is usually unlocked for all trains in case of delay, not just the one you booked. So you can find alternatives and maybe even upgrade (you won't have a seat reservation though).

There's also up to 120€ for overnight-stay or other forms of transportation in select cases (when you won't be able to reach your destination before some time)

This is a reference to the weird situation that Schleswig Holstein was really the only state that allowed gambling until 2021 (there were exceptions). Every (legal) online gambling platform officially required you to be from Schleswig Holstein, otherwise, you were not permitted to join.

Of course, this went exactly as you'd think. However, since 2021, you can get a gambling license in all of Germany.

Fun fact: Since it's illegal to gamble with a non-licensed provider, using international platforms like polymarket can get you in trouble.

The Pentagon is pretty high on my list of "institutions that are probably very interested in weapons and surveillance". I think it's more expected than a bad look

I just checked, Champignoncremesuppe is not in my dictionary ;)

It has some compound words. But including too many of them would quickly get out of hand

Cash has the protection that I don't get my wallet cleared because some JavaScript library got supply-chained.

Or less snarky: it's simply harder to steal something or defraud someone in meatspace than in the Internet, so less protection should be necessary.

How is OCI terrible for reproducibility and security? They are certainly more reproducible than what we had before. I haven't heard "Works on my machine for a long time". If you're talking about reproducible builds, there aren't any hard issues either that are directly caused by OCI images - except setting the clock correctly.

> Boot images should be Dm-verity protected EROFS images

Maybe I'm misunderstanding you - I gather that you think the boot images are distributed as OCI images? That's not the case, bootc is more about building the image, updating it and the overall structure. Booting an image built with bootc does not involve any container infrastructure (unless you start services that depend on containers, I guess - but that's deep in userspace). There's technically nothing preventing this from using verified read-only images.

> This experience fits a pattern I keep running into with European business-facing APIs and services. Something is always a little bit broken. Documentation is incomplete, or packaged as a nasty PDF, edge cases are unhandled, error messages are misleading, and when you report issues, the support team doesn't have the technical depth to understand what you're telling them.

I can definitely confirm that this is a common thing. But I think this is a "small org"-problem more than a "European business"-problem. Apparently, the company has somewhere between 500 and 1000 employees (I couldn't find good data, sadly). With a size like this, the "support" is probably outsourced (meaning they don't know anything), there are maybe 100 engineers (probably less) and the mailing is either done via a third-party or set up by an Admin that left three years ago.

Without any basis, I will speculate that you will notice this more in Europe because there is simply no company at the size of Stripe or similar.

If I were to test an email delivery system, I would test Gmail. I probably wouldn't test Google Workspaces, because I'd (wrongly) assume that they work the same.

I have never paid anything via bank transfer, where are you buying?

The procureur is part of the executive, and thus represents, and is directed by, the government. The other is independent from the executive, as part of the judicary branch.

With the difference that cars can steer and stop to avoid collisions and aren't necessarily in your field of view every time you look at the night sky ;)

I have no idea if the number is actually a lot shrug but it's surely different than cars on a planet's surface

It's not THAT bad for me, but I really can't take vacation days for "nothing". I struggle if I don't have plans and work really forces one to have some structure. If you need the structure and don't have any plans post lay-off, I can believe the struggle to "let go" and do something better.

Cool post!

The capture process sounds much more complicated than necessary. There are emulators that can capture the output as APNG/GIF/... If you really want to make sure that you have every frame, a good emulator also supports manual frame stepping without having to use the debugger.

Assembly events like [2] are not recorded because they are largely self-organized and barely moderated (if at all).

I live in Europe, never encountered a problem.