throwaway47292

Thanks!

The 300 decks arrived yesterday, and we were super excited with my daughter. Today we played multiple times and its super fun. Even though we played many times when I printed the game on normal a4 paper, having the real professional cards really make a difference.

I plan to also make lisp, c and javascript decks so we can explore more paradigms.

the logging part is obvious, but in their privacy policy they say the share it, which is something they should get consent on.

Beware the preachers. (Bukowski)

https://www.youtube.com/watch?v=0doGM_6izYg

I built a small raspberry pi zero "laptop"[1] with 4" screen and usb battery that does not have X and inits directly into openvt that starts vim (takes like 2 seconds to boot) and it has python and you can directly write pixels into /dev/fb0, there are also console games that are quite fun.

The best part was "no distraction environment" no internet, no messages, nothing, you have to be bored a bit to get creative.

Though my daughter doesnt use it much (she did in the beginning), it is super hard to compete with modern entertainment which is so reachable and so instant. All kids get what they want immediately after they want it. I want a football, order online, it arrives same day. I want to watch this movie, they start watching.

I am trying to create some time per day, in a safe space where she can be creative and bored.

[1]: https://github.com/jackdoe/programming-for-kids/blob/master/...

As the tools improve, the craft and skill decreases. More people get into a field that are less idealistic, just for the money, not that its a bad thing, but certainly changes it.

We can see that in code, food, design, construction, education, woodworking, even tanneries.

Photography is a good example, it used to take 15 years of studying and 20k camera to take a photo that now an average influencer takes with iphone 13 for 2 seconds. (extreme example, even though there is more nuance, but it illustrates the point)

There are few titans and romantics that keep using the old ways, and it is still viable for them, but it is already done, there is no going back.

Technique only moves forward.

yea, visibly it looks like its starting from the head, and probably the smell comes from there as well, and of course thats where insects can start eating first (eyes, mouth etc)

it is funny though, i have used this proverb hundreds of times, until today i decided to think a bit about it, and look up how bodies decompose.

i wonder if in those big companies actually the leadership takes all the fault, maybe like in 1984, the real power is in the proles, they can change everything if they want.. they just dont seem to want change.

i think the original proverb is actually the fish stinks from the head, which later became the fish rots from the head, but this is biologically incorrect.

https://australian.museum/learn/science/stages-of-decomposit...

for example you can see the decomposition of a pig, it looks like the head is first, but it is actually the bacteria in the gut.

> A fish rots from the head.

Are you sure about that? Doesn't it rot from the guts outwards?

create-react-app has thousands of transient dependencies, being worked on by maybe 40000 developers (possibly more), 1 in 100 people is a sociopath, and 1 in 100 is a psychopath, and looking at the general population around 1 in 100 is a criminal. There is selection bias in the open source community, but still, we can assume when you do `create-react-app` you are going to run the code of ~50 people that don't have your best intentions at heart.

Supply chain attacks are one of the best attack vectors.

So vet your dependencies and assume them malicious.

Hmm, this is hard to answer.

I have read Jung's CW 9, 11, 12 and 16 and bits and pieces from the rest, but I think when I read The Red Book things really changed for how I see his work.

It is extremely raw material, of an alienist on the verge of madness, and yet he managed to extract the deepest reason out of the experience.

I think it is really worth reading, but in compliment with the images he drew. Maybe you can still buy the reader's edition and look at the images online, as 200$ is a lot, but if you can afford it i would recommend to get the big book.

haha i imagine a simple console.log('${jndi:....}) on some website will trigger some java log processing thing on my TV to re-log it and my tv will be hacked just by visiting a website

or maybe someone's fridge?

the future is bright

next step, self hosted paper website on a pi zero :) send them the notebook and the pizero, make dyndns ipv6 only thing and let people selfhost

nice project!

> "Individual humans are the ones who choose to believe or not believe a thing. They are the ones who choose to share or not share a thing,"

This is just bullshit.

You can say the same thing about extracting confession under torture.. the individual "decided" to tell the truth, why shouldn't we admit it into evidence?

Those mega structures, controlled by billion parameter models, and then some human goes and does an interview and says 'ye no problem, its your choice', is most of all naive and arrogant, that anyone can even pretend to say they understand how the model is impacting the social structure.

As Jacques Ellul says, the strongest unit against propaganda is the family, or small groups of individuals, as they pull each other to the center of the group, but imagine now each individual is exposed to unique personalized propaganda, so the group constantly diverges. I imagine it like a group of friends holding hands in a pool, but then there is giant influx of water between them, so there is constant force to separate, so they have to keep their relationships stronger, and the force increases over time.

It is the people that seek propaganda, not the other way around. Now however the algorithm satisfies the search in most satisfactory way possible (within the limits of current technology)

If you are interested in Jung's metaphysics I strongly recommend ordering a copy of The Red Book (https://www.amazon.com/dp/0393065677) even though it costs 200$, it is worth every penny. It is amazing to read Jung's unfiltered mind.

I can make an argument that money will make it even worse, as people will full-time make even more useless features that just increase the attack surface.

This particular class of problems (same as the sqlite fts tokenizer exploit and most of openssl exploits, even lots of the sendmail exploits) are just obscure unused features. It happens even in CPUs themselves. (e.g. https://www.youtube.com/watch?v=lR0nh-TdpVg)

Removing code is twice harder than adding code, why do you think paid maintainers would improve anything? Just look at the code written in FAANG or any enterprise, and those maintainers are very well paid, imagine this code being public, we will have 1 new exploit per day per company... and that is assuming non malicious developers that can be shipping trojan code https://lwn.net/Articles/874951/ (it is also hard to assume all millions of developers are non malicious, even if we assume 1 in 100000, things look really bad)

Less code is the one solution. Regardless if open source or enterprise code.

We are stuck, and change is needed, but money is not a solution, and might even be the cause of the problem. (incentive to write more code)

How many developers have you seen to do that?

Removing code is twice harder than writing it. Sometimes even more than twice, not only technically, but politically.

This is the best game ever, I played it from 10pm to 6am.. non stop to reach the end.

It should be studied in addiction classes.

On every level there is some mystery and you have expectations, and somehow they are always blown away on the next level and the next..

There is no reason to believe that money would actually solve the issue, and maybe even exacerbate it.

The log4j issue is product debt, similar to the sqlite fts tokenizer exploit, and a lot of the openssl exploits, features that are rarely used, and are in the codebase for "no good reason" (from the majority of user's standpoint)

I think the way to make for those things to happen less, is in fact, to code less, and make more small things rather than one giant bloat of features. Paid or not paid, security becomes near impossible after certain amounts of interconnected components.

As I am writing this comment my 2017 macbook is spinning fans, as if it is doing protein folding.. and it has like 3 tabs open on chrome.

And for what? to edit a text box?

There are new capabilities around encryption and encoding, things like h265 and etc, which of course help with medical diagnostics and such.

I would take c64 software any time, look at this https://www.youtube.com/watch?v=ROr8JhilPhI its from 1983.

Imagine what kind of software would the people from 1980s write if they just had a raspberry pi 4 to work with..

I really dont know what happened, but borland c++ 3.1 was the very best IDE I have ever used, no amount of emacs can replace it in my heart.

Delphi was super good as well.

We have only gone backwards since those days..

haha all this scala hate as if huge javascript or c or whatever at scale are the best

the reality is, we are in this spaghetti together, so pick your noodle and move on

its just computers, dont take it so seriously :)

nono ssh is great medium, just most people have agent forwarding by default, and its annoying that it can be exploited by malicious ssh host[1]

[1]: https://book.hacktricks.xyz/linux-unix/privilege-escalation/...

Gentle reminder: when sshing into unknown places remember to check your forwarding and dont use your github/etc username.

Hmm, I think the fake number will bring more money, both short and long term.

If you are selling 10_000 items, with uniform demand (just toy example), you need like 3 million unique visitors per day in order to show 'one other person is looking at this item in the last 5 minutes, (24*7)

If I show 1 + random(5) are looking at each item, my competitor has to have enormous amount of visitors to compete.

Sadly, unless its illegal to lie, organizations are disincentivized to do the right thing.

yes, loyalty just reduces the cost per click, but the math is the same, so they buy 100 people instead of 10 people with one reservation, but the game is the same.

EDIT: also think about how many times people book per year, maybe 4-5 times in the upper quantiles? so if booking pays 3$ for you, it will take a couple of months until your next booking so they can reinvest your 15% commission to buy other people.

The way the pay-per-click machine works, is you pay like 3$ for 'hotels in amsterdam', their average (public info) commission is 15%. Looking at booking.com/amsterdam you can see vague idea about average price, lets say most bookings are 2 nights, then you can get ballpark average reservation of around 200$, 15% of that is 30$. So for each room they sell they can buy 10 clicks on 'hotels in amsterdam'.

This is super ballpark estimates, could be order of magnitude different, but the idea is that there is enormous incentive to push people to book, its the same as the example in the article, pushing people to buy. Purely because the pay-per-click is so expensive, you need ROI > 1 to survive.

Those companies are in survivor mode, and anything that is even remotely legal, or can be defended in court, is allowed and encouraged.

Thing like 70% off on pair of shoes, that just had their price increased by 90% for 1 minute, just so there was a record in the database that they actually had higher price, nobody cares that they never sold at the high price.

Companies constantly push the legal boundary.

whoa, horrible goodbye

i hate mysql as well, but it almost runs the world, and onboarded a whole generation of young coders.

postgres is not panacea (especially on RDS), i might even say we(my team) have more outages because of it than if we were using mysql (but thats just my gut feeling)

the comment about how the team was so oblivious to "genuinely believe in mysql" was in very poor taste.

I hope I misread the spirit of the message.

offtopic: Why are they making webpages like that?

What is wrong with few <h3> <p> and <img>, the page will be 10 times easier to read.

i dont think thats true

ip, tcp and udp are the same, rip ospf and bgp are pretty much the same linux's skbuffs or bsd's mbufs are the same as before, the linux dma api changed a bit, but the ideas are the same.

there are some changes on the disk layers with geom and such, but nothing super fundamental

there are a bunch of layers of indirection now with VMs and cgroups, but deep down things are the same.

> You can't win, you can't break even, and you can't get out of the game.

there is nothing to win :) its just computers, dont take it so seriously

i am working on putting a pizero2+solar panel as a hotspot in a tree deep in the nearby forest, you will be able to connect to it and get content

i will put all kinds of public domain data on it, from most of gutenberg books to all kinds lectures encoded with h265

will be so cool to have to go to the middle of the forest to download a book :)

the whole thing should cost no more than 30$ (biggest challenge is to make sure that the battery bursting in flames wont melt the case and set things on fire)