wereallterrrist

I swear to God I'm taking crazy pills in this thread. The second that the government can arbitrate access to my Google account is the day I nuke my Google account from freaking orbit.

I've been using a yubikey on my Google account for 5+ years and this thread makes me want to scream.

This makes absolutely beyond zero sense given how Google accounts work on Android, or just in general.

This came up two months ago and I posted screenshots of a new 2FA setup and it very clearly allowed registering a TOTP or Yubikey without SMS. You just had to actually spend 10 seconds looking at the page and seeing there was a link for it.

I've still yet to see a single bit of proof of this outside of claims from people who couldn't bother to do the things you're supposed to do when setting up 2FA. I remain skeptical.

All these claims and not a single screenshot of this scenario. Meanwhile I've been in 4 countries in 8 weeks and Google hasn't bothered me once beyond the normal "tap my yubikey on my keychain".

1. why don't you have any recovery codes? This topic comes up bi-monthly... (To everyone else reading this, no, you're not immune, go save the backup codes)

2. If it says it's sending a code to a device, that's not SMS, that's Google's own side-channel for trusted, authed devices.

In theory, you should have backup codes and/or the ability to text a number you've confirmed. Maybe you're not seeing the link for "Try Another Way/Method" ?

> If anyone has contacts at google and can tell them, yea, verily, Doreen Michele Traylor is a real person who is real poor and we all know her and please let her keep her phone number and her (my full name) google account and get me out of this fucking nightmare, that would be coolios.

Man, I just don't know what to say here. I really don't want to be mean, but I _really_ don't want someone compromising my HN account and then going "oh yeah, plz remove 2FA from [my Google] account, it's really me for sure". :/ :/

You could just use Helix instead. `hx --tutor`. It enables the functionality of a 12-hour tuned Vim, out of the box, except faster and with less crashes / weird plugin interactions.

OP mentions they're open to comments about Helix... but you do you yall. The comment isn't hyperbole, I used vim for 15 years, but again, whatever.

Oh YEAH! If you're on a plane, with a bunch of music downloaded. All the sudden you realize the Treble sounds dreadful. Oh right, Spotify changed the quality for downloads again. I'll just go ahead and update that for next time it's online.

Nope, purged all my downloaded music. That was a fun 10 hour flight. Completely thoughtless.

I'm leaving Spotify because their Android client is hot dogshit (sorry, not sorry).

They put the unfavorite button right next to the cast button AND in the drop-down shade. Why would I ever be trying to unfavorite a song from there? There's no confirmation to unlike a song. If you are so unfortunate to hit it, you will instantly lose that song, have no idea what it was or how to get it back. And even if you do, you will never be able to reorder your Liked songs.

This is beyond the INSANE REFRESHING behavior it has where it regularly shows you stuff for 5+ seconds only to yank everything and refresh the page with basically all new data as soon as you go to click something.

Truly, what the hell is wrong with these app developers and designers? I would love to watch one of them actually have to use the app. How is this the standard?

Did you maybe comment on the wrong post? I'm so confused what you could be referring to.

Maybe this is helpful, I was just saved by Google/Android's implementation of this recently and wanted to offer a couple notes for folks that haven't had this misfortune yet...

1. Find My Phone is great, you can remote lock, wipe, and mostly importantly, add a custom message. The message I wrote for the cab driver in Mexico is /very/ different than what my default message would've been.

2. Don't get over-zealous about revoking Device Admin permissions. If you remove that privilege for Find My Phone, then it can't *really* lock down the phone the way you'd like (and probably can't initiate the full remote wipe). It's odd, it definitely puts the phone into a state where it looks and feels locked, but you can swipe down, access settings, get into the Google Account area and unlock it.

Bonus thought for nomady/travely types:

3. Having your wallet stolen is damn near a living nightmare, especially if you're traveling or... 12 hours out from boarding a flight out of the country. Tips: Some credit card apps will let you access a "virtual number", and in lieu of that, a friend with a debit card can WesternUnion/MoneyGram you money nearly instantly (assuming you have some way of contacting them - without a phone / whatsapp contact, etc, that can be challenging - thank god I know my parent's cell phone numbers by heart)

Last random thought -- I carry a bag/purse/fannypack on me basically always. From now on my new wallet has a keychain loop and is wallet-chained into my purse so I can't set it down accidentally. Maybe even something similar with a soon-to-be Pixel 7 Mini hopefully. The hassle is one thing, the inner shame and self-annoyance is another.

When I mentioned de-duping and append-only logs, I had this in mind. It's hard to imagine implementing a backup system with those two properties that don't include snapshotting nearly by design-necessity.

(Beyond even the fact that ~/code is also on a ZFS volume that is snapshotted and replicated off-site, which I argue can be used in all of the same important ways any other "backup" is used.)

Hence the comment! After all this blockchain hoopla and everyone's understanding of how "cool" Git is, we really, really deserve better in our backup tools.

inotify has pretty paltry limits. My ~/code is only 40-50GB but there's no way inotify can watch it all.

Thus, syncthing basically constantly has to rescan. It's not great.

And yes, rebasing linux+nixpkgs on even an hourly basis is absolutely devastating. lol

No, I distinctly don't want borg. It doesn't help or solve anything that Syncthing doesn't do. The obsession with borg and bup are pretty baffling to me. We deserve better in this space. (see: Asuran and another who's name I forget...)

Critically, I'm specifically referring to code sync that needs to operate at a git-level to get the huge efficiencies I'm thinking of.

Syncthing, or borg, scanning 8 copies of the Linux kernel is pretty horrific compared to something doing a "git commit && git push" and "git pull --rebase" in the background (over-simplifying the shadow-branch process here for brevity.)

re: 'we deserve better' -- case in point, see Asuran - there's no real reason that sync and backup have to be distinctly different tools. Given chunking and dedupe and append-logs, we really, really deserve better in this tooling space.

Um, it's just an example? Does this somehow help?

1. (term1) `ssh remote pulsemixer`

2. (term2) `ssh remote "pacat </dev/urandom"`

Observe that (1) you can see a new client appear on the remote, and (2) audio will play from the default playback device on the remote (and you can trivially change that device with `pulsemixer`)

EDIT: for your speakers/ears-sake, I recommend turning down the default playback device before doing this.

Man, how much are distros + bad user config hurting user "Linux" reports.

Thank god for NixOS where (1) we do a decent job of base config and (2) user config errors are basically trivially identifiable.

1. Open `pulsemixer` to monitor pulse clients

2. `ssh localhost "pacat < /dev/urandom"`

Observe that pacat is showing as a pulse client. This stuff is really easy and should absolutely just work.

I find it very, very hard to go wrong with Syncthing (for stuff I truly need replicated, code/photos/text-records) and ZFS + znapzend + rsync.net (automatic snapshots of `/home` and `/var/lib` on servers).

The only thing missing is -> I'd like to stop syncing code with Syncthing and instead build some smarter daemon. The daemon would take a manifest of repositories, each with a mapping of worktrees->branches to be actualized and fsmonitored. The daemon would auto-commit changes on those worktrees into a shadow branch and push/pull it. Ideally this could leverage (the very amazing, you must try it) `jj` for continous committing of the working copy and (in the future, with native jj formart) even handle the likely-never-to-happen conflict scenario. (I'd happily collaborate on a Rust impl and/or donate funds to one.)

Given the number of worktrees I have of some huge repos (nixpkgs, linux, etc) it would likely mark a significant reduction in CPU/disk usage given what Syncthing is having to do now to monitor/rescan as much as I'm asking it to (given it has to dumb-sync .git, syncs gitignored content, etc, etc).

I got hit by a scooter (on a sidewalk) while boarding a public bus. I had my wallet in my hand to tap on. In my daze, i set it down next to me instead of placing it in my purses.

30 seconds later, the guy who had to have seen me hit grabs it and hops off the bus.

This is about 12 hours before im meant to catch a plane to Mexico.

My bank cant do shit. My cc company cant do shit. But phew thank lord Western Union can undercut bank professionals and be open in my grocery store so my parent send me cash. I shove their CC on to my Uber since of course one of the biggest cities in the US DOESNT RUN TRANSIT AT THE TIME.

I get to Mexico, my parents lose one bank card and get another eaten by an atm.

This is fun! At least they have a CC that charges a horrid rate! Good luck to me when they leave and I'm here for another week. Really, so great.

Meanwhile... with crypto and moneygram, i can get cash sent straight to the state bank here. Im open to other suggestions, but... LOL.

Idgaf im holding (and have been more than partially for over a decade). Though I really need to get off my butt and move more into Monero.

Youre just missing the feigned shock that will be expressed when the inevitable happens. Im no RMS fan, but man if my privacy-first, open-first approach to things hasnt borne fruit year after year after year. It seems peoole often cant be arsed to care until theyre invested and the blast radius is wider. But those stickers yall.

`dua`, discussed elsewhere in this thread also works on windows, just for another option.

`docker system prune -af` ?

Diistinctly not true. `nix run github:nixos/nixpkgs/nixos-unstable#dua`

And if the original had said more instead of the hyperbolic take alluding to "its wokeness thats the problem" about it and acting like there arent constantly discussions about it, then i wouldnt have commented.

Lets be heckin' real here too. Because we both know, the same people ignoring racism are the ones usually bootlicking and supporting or denying creeping fascism so...

And yes i can cherry pick articles going back decades warning of surveillance and how tech is driving us towards dystopia. It was my god damn policy debate case 20 yrs ago and its not receded for anyone actually at the table.

But hey, unexamined biases could be an alt name for this site.

Seriously, if you take discussions of surveillance and then derail the conversation to discuss folks discussing race and tech, how do you not realize youre literally self-actualizing what youre whining about? Da fuq was the point of this derailement other than yet another place for certain folks to yet again subtley whine about woke-ism? Eh?

> The surveillance dystopia we are racing towards is only criticized if the facial recognition cameras spying on our every move work slightly worse on black people.

Constructing fairly absurd strawmen like this really hurts your ability to convince others.

Lenovo has the absolute worst bioses of any laptops I've ever bought. None have LVFS/fwupdmgr support. My most recent one, bought from newegg, appears to be a limited mainline-china-only release that hasnt received A SINGLE BIOS UPDATE despite there being numerous high-sev platform updates for every other device in my arsenal.

Neither would let me re-enable S3.

Again, unlike my other devices, the Lenovos become almost useless if the internal display breaks. They require intervention on boot (internal disp only) if you use an unofficial power supply.

This isnt even counting battery life, the M1 performance, trackpad quality, trackpad click mechanism, trackpad size, on and on, etc. Keyboard deck flex. The list goes on. Complete stockholm syndrome vibes.

Yeah, I'll send $250 to the Red Cross if that statement doesn't turn out to be false.

What does it take to get folks to do their own research. How about you go watch the clip of the Sheriff saying they cleared her after talking to and praying with her and then get back to me.

Thats not an investigation.

Btw Ill bump that donation to $500, Alex: https://twitter.com/JimLaPorta/status/1599527421405171712

> it just seems like it would be the dumbest way to try to make this dumb point.

I mean, you understand the types of people being discussed here, right? (that posted openly about this on fb, mind you).

The known widely open anti-lgbt jan 6th rioted who posted within hours of the outtage that she knew the source of the outage? And a picture of the drag venue with "god will not be mocked". Whatever you gotta tell yourself!

Gee, maybe google the word or news story before writing 3 paragraphs about it? Yes, it was to shut down an 18+ drag show.

For the average folks with horrid (or biased) memories, do you really no remember post-911? We screamed "terrorists" over and over and how American interests would not be scared off by terror tactics.

Theyre suppressing expression. They have openly fascist intents. Theyre successfully shutting down other shows due to fears of violence.

In what world do you think this increasingly frequent type of targetted violence should not be talked about? Or just when its barely related to a social issue you have opinions about...?