tetraodonpuffer

Agree on the GUI however opensnitch does seem to assume a single user with a single X server, I have not been able to figure out a way last time I tried to get it to work with say 2 X servers and a VNC session or two running concurrently (meaning I couldn’t figure out a way to get connection alerts anywhere but in one of them, as also described here https://github.com/evilsocket/opensnitch/issues/388 )

Little snitch does not have this issues and you can have multiple users logged in with fast user switching and all can operate their notifications no problem.

I often watch POV walking/biking videos when working out indoors (rambalac for Japan, prowalk tours for Italy/Europe, watched walker for London, …) and thanks to your site I’ve found a couple more channels I was not aware of: could you maybe have a page where you list all the channels you are using (with maybe the amount of videos from each)?

From a gaming standpoint maybe I would show the source button only after the user has made a guess, as well as having an auto play button that can be disabled in case the user just wants to play random POV videos as screensaver or keep watching for a while after guessing.

I would love to own a harpsichord but unlike pianos, which are available at all price points and easy to find, harpsichords seem to be very expensive (there is a builder in my town who charges 25k-35k for a new one, with years of lead time) not to mention very rare. Given this for now I just use VSTs with a normal midi keyboard, but that of course has a different touch and it’s not the same as having an “analog” instrument available.

Roland used to build some e-harpsichords years back (C30 etc) but from what I can find they weren’t incredibly well received and have been discontinued for some years now anyways.

In term of VSTs I enjoy most the physically modelled harpsichords in pianoteq, I do feel that Bach sounds a lot better on harpsichord than on piano, hence why I am hoping maybe some day I’ll find one for sale at a price I can justify given that after all I play (badly) just for fun.

If you have been vaccinated in Canada with AstraZeneca you are not considered vaccinated at all in the US (not approved) and you might or might not be considered vaccinated in Europe depending on the manufacturer/lot of your shots (UK, vaxzevria, yes, India, covishield, no, USA, just called AstraZeneca, cannot find any information about it) and the European country in question (not all countries accept all AZ manufacturers as valid).

It is a fairly ridiculous situation and if you need to travel it's definitely an issue given a lot of countries are moving towards "green pass" type actions where unless you are "fully vaccinated" (with the approved vaccine) life will be very difficult for you.

There really should be a better solution about at least the most common vaccines being cross recognized everywhere and not used to artificially block people from moving (why should AZ manufactured in the UK be treated any differently from AZ manufactured in India)

I don’t think that having an invalid c/c absolves you from debts accrued when using services that have traffic thresholds for switching between free and for pay.

This is definitely a limiter for me when signing up for these free sites: it usually is couched with language along the lines of you don’t want your business to be impacted by us turning off your service, but I am not joining as a business, I am joining as a “I am a developer investigating if this is worth it for my business”

I would prefer plans along the lines of “pay us $10 to activate, if you go over traffic we cut you off but guarantee no other charges, if you leave we refund your $10 no questions asked” or “no charge upfront, if you go over the free tier we charge up to $10 once only and then cut you off”

At a previous job I pushed hard for this in a project I was responsible for, despite initial buy-in as time went on there was a consistent level of pushback about relaxing this requirement and allowing just importing anything ( the architecture of this was basically a separate repo storing ALL the dependencies where only a couple of people had commit access and where new dependencies were allowed after vetting )

Fortunately there was a hard legal requirement to vet every dependency license, otherwise I am not sure I would have been able to keep this workflow. As other posts say you do need a very strong commitment at the management level for this to work, besides security (where it feels that often it matters only until it costs money or until it’s even slightly inconvenient) it might be helpful to make a legal case (what if we ship something with a nested dependency on AGPL ) to get some help to establish these procedures.

I have been writing and architecting security related software for pretty much all my career and I find it quite scary how these days so much software delegates so much control to unvetted external dependencies.

Sorry about submitting this, found this blog via googling so had no idea it did referrer shenanigans.

I thought the Druid and iced mentions and sample code were interesting (and from the conclusions they are what the blog author seems to recommend). Personally I am leaning towards iced for a project I am starting, was curious what others thought about the current alternatives outside QT/electron.

Sure you could see them, after all you can do a ps and see all processes, but shouldn’t the IPC between firejails be forbidden? How is firejail 2 talking to firejail 1?

Looks interesting but what I don’t understand is if it really is sandboxed, how would a Firefox know that there is another Firefox running and open a tab there (as per the FAQ) instead of a new Firefox in a different sandbox?

It would be nice if in these cases the “lock” allowed read only (as in, can still receive email, just not send it) gmail access so one could at least move whatever account they were using gmail as contact for. I think it should not be that hard for google to add this and would help with a lot of cases where losing gmail access means severe disruption to one’s life.

You could have the camera record the lidar also and crypto sign that too. Assuming it is all done in camera and the lidar is high resolution enough it should be possible to completely tamper proof a video recording at least at the “talking head” level.

I think Apple could possibly start providing this for iPhone videos if they decided to as the hardware is all there already both the lidar sensor as well as the Secure Enclave etc

not sure if you would classify it as a complex process, but I have a series of posts in my blog (link in my profile) that takes you from a bare metal box to a k8s cluster running on Xen on it: a lot of it is explaining how things work, so it is a bit verbose, but it hopefully should not be too hard to follow, given that it walks you through setting up Xen, then CoreOS, then etcd and finally Kubernetes it does take several posts...

watching the video of the presentation I was saddened by the fact that the CEO said that one of their most requested features is to create some sort of wheelchair replacement based on this tech, but it seems they aren't really working on it (around 16:30 in the video).

Given how hard it is for wheelchair users to navigate the world, it would have been amazing if this had been one of the first applications. I know friends of mine on wheelchairs would give a lot to be able to just go for a "walk" on a normal park trail or on the beach without having to worry about it being wheelchair accessible.

It is understandable that from several points of view the surveillance industry is a much easier target for this platform, not to mention that of course carrying a person-sized weight might be difficult also from a battery standpoint, however I wish that was more of a priority for the product.

no worries, who knows, maybe in a future revision it might

that's what I mean, having a pedal connector on the keyboard where I could plug a pedal in and use it to switch to a different ergodox layer (which as of now I assume you do just via another key). The kinesis does have a pedal input, but I don't think the ergodox ez has it, or does it? the website does not say anything about it...

I have been really tempted by the ergodox ez, but really wish it supported pedal input as that would make a "pedal layer" super easy access.

I do play the organ and drums and have been most of my life, so maybe that's why the idea of having additional keys available via pedals is right up my alley :)

I honestly think it is a good idea, no matter which distribution or OS you are on, to never ever depend on system python/pip (or perl for that matter), just install pyenv / pipenv / pipsi (or perlbrew) so you have complete control.

From a distribution perspective I sometimes wonder if it wouldn't be a better idea to call the system python/perl something like system-python/system-perl to make it more obvious they are not meant for use, and have a /usr/bin/python that tells you to install pyenv...

From my perspective the mindset with Debian is that distribution packages are never going to be the super latest, but are going to usually work well.

If I need something bleeding edge it's straightforward to just download the source from wherever and install it myself with stow in /usr/local, which makes it easy to remove/upgrade if needed. I anyways do pretty much everything in VMs, so package availability for my "base" system (which I mostly use only to run VMs) is not that big of a deal. If I need bleeding edge I can always spin up an arch linux VM...

same here: see my profile for how I set up from scratch debian for desktop and debian for xen+kubernetes. I personally like to have complete control of what gets installed in my system in terms of packages, have been running debian for years and it's been serving me very well.

I do think it's good to have Ubuntu to compete in the "turn key" / "new linux user" / "enterprise support" spaces, but it's good to be able to run plain debian without issues these days.

> JWT: Everyone tends to use these in a stateless manner which means once issued, somewhat impossible to revoke

you can still do an oauth-like session + refresh token even with your own JWT implementation, just have a "refresh my session" endpoint that you go to with your refresh token (which is blacklistable), and have all the other calls be authenticated with the short-expiry stateless session token instead.

do you think it's a better user experience to have to say out loud "windshield wipers faster" / "windshield wipers slower" every 30 seconds compared to subtly clicking the control on the stem? How well will it work with music on and while you're having a random conversation with your passengers? How well will it discriminate random voices on the radio telling your car things like "driver seat recline angle flat" or "driver seat position full back"?

Voice control is a good things for services but not for driving related controls, it's a QOL increase to be able to tell your car "set the a/c to 67 degrees", but let's leave the driving related functions (lights, wipers, cruise, ...) to hardware buttons/dials on the stem where they belong.

to, for example, having to change the autopilot cruise control follow distance apparently you have to

   - find and tap "vehicle settings"
   - find the "autopilot" text label and tap it
   - now find the "+" and "-" buttons and tap them to adjust

how many seconds are your eyes going to be away from the road while you do this? And if the sun is in the right place to make it hard to see, for how much longer will you be distracted while you do this?

When it's raining I usually adjust the speed of the windshield wipers very often depending on precipitation level and spray of the car in front of me, the last thing I want to do in a reduced visibility situation is to have to futz around with a touch tablet to do so: I want a rotating dial on the stalk so I can change things without having to look anywhere else. Apparently on the model-3 this setting is also part of the tablet interface.

I cannot believe that when you have tons of "distracted driving" laws to prevent people from texting while driving, manufacturers are allowed to produce cars where you more or less need to text to actually control the car.

I am all for technological advancement, but having a tablet-driven car makes as much sense as having a tablet as your desktop keyboard where you'd have to look down all the time to figure out where the keys are.

just like working out it gets easier as you train, for quite a few serious runners 10 miles a day is par for the course (100mi training weeks are not that uncommon).

My dad played for a living in the 60s and his band played TWO shows a day (afternoon and evening, so the schedule was get up around noon, breakfast, show, lunch, show, dinner, sleep) 6 days a week during the summer, it's just like any other type of physical labor and listening to him it definitely beat working 12 hour days in the fields which is what he did before...

if you eat cheese you might be surprised by how much sodium it has, and bread can easily be several hundreds of milligrams of sodium too. It's not hard to eat 5,000mg/sodium a day without intentionally adding a lot of salt to your meals just via "hidden" amounts.

it just takes time for your tastebuds to get used to lower salt, but afterwards food tastes just as good. Some years back after eating probably 8,000-10,000mg of sodium a day for most of my life I had to permanently switch to an extremely low sodium diet (<500mg/day) and taste has not been an issue after the first few weeks of acclimatization, tastebuds are very adaptable and interestingly nowadays some vegetables (potatoes for example) will taste slightly salty to me on their own for example.

The major issue has been of course that eating out or eating pretty much any packaged/premade food is impossible, due to everything having tons of sodium/salt added. For some n=1 blood pressure was not the reason why I had to get on this diet, but my bp went from 145/85 to 105/65 after not that long on it, which really surprised me of course.

How would you specify dependencies on a commit/tag in a particular branch (say, during development I always want to build with the HEAD of the development branch for this module)? I know I could clone what I want somewhere and use a replace directive inside the go.mod file, but I was wondering if there's any way to do this using only vgo.

I would add retool[1] to the list as it can be useful to vendor your tool dependencies as well

1] https://github.com/twitchtv/retool

I have used it a few years back when designing a customer facing integration API, it was definitely good to be able to tell customers "here's the JSON schema, you can use these libraries to work with it, and use it to validate your requests for correctness before sending them to us". This said I felt expressing non-trivial constraints was quite verbose (things like if field X is set to 123 then fields Y and Z are mandatory, otherwise Y is not allowed, if X is set to 456 then no other field is allowed, ...) and hard to extend once written, I definitely felt the need for a "JSON schema generator" at times where I could've created a table of some sort and have it output the schema.

In another much more generic customer facing API I instead used a custom schema, as I needed to do other things that would not have been possible in it like embedding the API documentation in the schema so the front-end could display help on-the-fly and use the schema to dynamically generate forms. The advantage was also that being fully in control of the syntax I could create ways to express constraints like field X is valid only in searches, field Y is valid only in PUT/PATCH but not POST, etc. etc.

This said especially for straightforward APIs I feel JSON schemas are quite useful, being able to have a single source of truth on what your messages look like that you can share with front-end, back-end and customers is quite powerful. One thing is though that validation errors are not very user-friendly unfortunately. This was all around draft-04 time IIRC.

as the two other sibling posters said, I use karabiner elements when on os/x and xcape+xmodmap on Linux with this in my .xsession

  xcape -e 'Control_L=Escape'

which is run after remapping caps lock to Control_L via xmodmap (just xmodmap -pke to create your xmodmap file, xev to figure out which keycode your caps is, and edit the file after to make that keycode Control_L.

For example my xmodmap file, which also sets up meta/super and other overrides is

  !
  ! Clear the modifiers
  !
  clear    lock
  clear    shift
  clear    control
  clear    mod1
  clear    mod2
  clear    mod3
  clear    mod4
  clear    mod5
  
  ! Remapping
  keycode  37 = F17 NoSymbol F17
  keycode  64 = Alt_L NoSymbol Alt_L
  keycode  66 = Control_L NoSymbol Control_L
  keycode  90 = Multi_key NoSymbol Multi_key
  keycode  91 = Mode_switch NoSymbol Mode_switch
  keycode 105 = Meta_R NoSymbol Meta_R
  keycode 107 = Menu Sys_Req Menu Sys_Req
  keycode 108 = Control_R NoSymbol Control_R
  keycode 127 = Redo Undo Redo Undo
  keycode 134 = Alt_R NoSymbol Alt_R
  keycode 135 = Control_R NoSymbol Control_R
  keycode 164 = Undo Redo Undo
  keycode 166 = Super_L NoSymbol Super_L
  keycode 167 = Control_L NoSymbol Control_L
  
  !
  ! Set the modifiers
  !
  add shift   = Shift_L Shift_R
  add control = Control_L Control_R
  add mod1    = Alt_L Alt_R
  add mod2    = Num_Lock
  add mod3    = Super_L
  add mod4    = Meta_R
  add mod5    = Mode_switch

or rebind it to ctrl if held, escape if tapped, making it even better for RSI purposes