Skip to main content


@silverwizard Literally all the words you said sound bad to me.

@Hypolite Petovan I am a ginger lover, it's not popular, but it's mine

Seamus (my son) will eat candied ginger because it has the word candy in it (and I love it) then put on a giant fake smile, say "I love it", while spitting it out



The problem with my current employer isn't the lack of technical sophistication, it's that everyone outside of the dev org thinks my skillset is fungible with every other person inside the dev org.

Despite me being hired explicitly outside the dev org's purview because it *isn't*

@Alex P. 👹 I was hired by someone who knew what they were doing and given Infrastructure and Security as purview, and now everyone says "this person does DevOps" which... hurts every time
@Alex P. 👹 the real problem is when people
1) tell the dev lead about like, DNS changes or whatever, and then they don't tell me "but it's all engineering"
2) asking me to deal with frontend JS or python code that just... I don't know


After the giant DDoS on DynDNS I started multi-hosting my domains and almost everything else. But no one will pay for multi-cloud. And I don't get why we never learned this lesson?


Google breaking NewPipe forcing me to properly setup my flows for watching video on Nebula


Honestly, the amount of time I spend flummoxing security vendors by saying things like "Oh, we're not using office 365" is very upsetting

It's not that I don't understand that 99% of their clients are using O365, it's how many products and support team fall apart

Meghan reshared this.



Remember
This is the fault of Crowdstike's C level execs

This is not the fault of the scapegoats they will blame this on

This is a failure of time, budget, expertise, and process.

They cut costs by cutting quality

https://www.reuters.com/technology/crowdstrike-holdings-warning-sparks-selloff-cybersecurity-stocks-2022-11-30/

Honestly, looks like CrowdStrike said some shit would go down because they were contracting. Which uh - good call.

Every hacker in the world is posting this right now

I am assume it was Ed Zitron's post



the booze is on strike

what a fuckin' weekend for the booze to be on strike



Banks are screwing my wife around. Her mom put some money in an account years ago for her, and she's pulling it out to put it somewhere more reliable, but the cheque was listed in both names, and so banks are refusing to deposit it because it's in the name of two people. So she tried to go into the bank with both of them and endorse the cheque in front of bank employees, which even then they are being a pain in the ass about. This is stupid.

But she went in this morning.

CROWDSTRUCK

@silverwizard *sick electric guitar riff*

I was caught in the middle of an OS update (Windows)
I looked 'round and I knew there was no turning back (Windows)
My mind raced and I thought, what could I do? (Windows)
And I knew there was no help, no help from you (Windows)
Sound of the drums beating in my heart
The thunder of BSOD tore me apart

You've been - crowdstruck

silverwizard reshared this.

@Hypolite Petovan crowdstruck is the verb form of "ruined by a vendor"

"CrowdStrike was worse, but SolarWinds was another vendor that crowdstruck everyone"



Ug, I should have paid @404 Media long ago, they are the best reporting I've seen.

But at least I paid them Wednesday and I assume that my subscription will be spent on the spirits needed to get through their next few calls to CrowdStrike.

aacur8 reshared this.



The best part of owning a VR headset is that I can put on the headset, use it for an hour, remember why it sucks, and then move on


using the Serverless Framework to update some lambdas

And all I can think of "Didn't I use a framework so I didn't have to type the same thing a billion times?"



Google fucking hates file folder and file organization.

And holy fuck I hate it, and I worry it's bad for people exploring systems.

@Hypolite Petovan More seriously - it's all fallout from the mindset that made Google Desktop


I hate when people talk about hobby tools as like "if you value your time"

1) fixing is a skill you should hone
2) fixing can be fun
3) hobbies are not something to optimize

Discussing valuing someone's time spent on hobbies in dollars is the worst grindset babble imaginable

I sell products ready-assembled, and do-it-yourself kits for building the same products. Some of my customers buy the kits because they really like building kits, and that's great.

But others buy the kits because they think they're entitled to the finished product at a lower price, and they begrudge every second of effort they must put into building the kit. Those people really exist and they are the market for tools that purport to save "the value of your time."

@Matthew Skala Yeah, that's valid. If you're doing it to save money - that's fine.

But this is a criticism of the *argument*, not the sale. People can and should sell preassembled things, kits, and more! Not everyone wants to build! But if someone is building on purpose, don't tell them to value their time.



My wife just found out I grew my hair out as a joke

21 years ago



When you see me holding a Macbook at BSDCan, you need to understand, it's running FreeBSD

Any #FreeBSD wifi people have some time? I'm using an ancient bwn card and this threahd (last post) is making me think there's a reversion to something because it's the only mention I can find using 14.0 https://forums.ghostbsd.org/viewtopic.php?t=2469

I've already built a kernel accepting the GPL so I'm not super afraid of getting my hands dirty

(I can provide better info in a bit, but the linked forum thread is my exact steps, which, once it was crashing the same way, lead me to that thread)

reshared this

Ok - so it looks like 2012 MacBook Airs hard crash when you put network on their Broadcom chip....

It's fine - but damn that sucks

I've got it working with OpenBSD and a wifi dongle



My wife is excited about a Fantasy Ball and now I'm looking for resources for customizing N95/p100 masks? Any good cosplay tips?

#cosplay #larp #covidisnotover

reshared this

I can highly recommend magnets and lacey fabrics as good ways to decorate or customize respirators, specifically the disposables.

The Dräger 1950 N95 is arguably the best on the US market right now, and it has the most robust structure to handle added decoration without collapsing. The plastic anchors for the headband on each side also allow for hanging/mounting decorations.

For magnets, there are lapel pins and needle minders, but to customize/add on to, look at hijab magnets.

PS: the Dräger 1950 is what I'm wearing in my profile photo - along with a magnetic lapel pin.

Also, the small size of the 1950 fits the most people

This entry was edited (1 week ago)


We paid a vendor for implementation

Now I'm considering blocking their emails



People really bad need to stop recommending Ubuntu as a valid Linux. It's just so... unpleasant.

GNU Too reshared this.

@GNU Too I just want them to stop suggesting snaps and GNOME


Anyone else had AWS suddenly start emailing them in Chinese out of nowhere?
I checked lambdaguard and komiser and cloudwatch and cloudtrail - I see no suspicious logins, no resources in strange places, our IDS didn't pick up anything, and all the APAC regions are disabled, and there's nothing in them. So it's not like we were suddenly hacked as far as I can tell.
@silverwizard Sorry about the anxiety attack ☹️

@Hypolite Petovan It's just fucking weird.

Why are they doing this?! my rep wont tell me!

once, years ago. I think they sent an email out a few days later saying sorry it was a bug. That obviously doesn't stop the panic.

Can it be translated and tied to a legitimate communication that got hit by a similar bug?

@j_angliss So they've done three in simplified Chinese so far, all with an English translation. They're about changes to Lambda in various APAC regions.

I don't know why as we have those regions disabled and nothing in use in them - but I definitely freaked the hell out.


I've played with people who were pretty chill about the rules, and with people who were downright tyrannical about them.

The overlap between people who played D&D for the story and character development vs people who played it like a video game was almost a perfect overlay.

As a DM, I've frequently ignored the results of dice rolls because the outcome would have made for a far shittier story.

@The Psychotic Network Ferret I am far from a D&D player - but I tend to be very into the story and how we tell stories, and very into game rules. I think good games tell good stories with good rules. But yeah - I agree about the Say Yes Or Roll The Dice thing.


I am constantly shocked at how much we've normalized constant attacks and ransoms instead of just... letting people do security.
@silverwizard Got it, I was more asking about the normalization you also mentioned, but this is good stuff nonetheless.

@Hypolite Petovan The normalization is mostly a matter of fighting the process of seeing security as a cost center and underfunding it.

So - the core thing is complexities around risk and access. Part of corporate culture is risk appetite. Corporate culture loves accepting risk, and so security teams kinda don't have a lot of leverage. And that's where the problem is, ya know. I don't know how to fix that.




Google Docs has been randomly deciding to not let me copy/paste. I use Ctrl+C/Ctrl+V and it pops up the popup that tells me I have to use Ctrl+C and Ctrl+V to copy and paste.

This feels like another anti-competitive thing against firefox.

knightly reshared this.

> Google Docs has been [...] not letting me copy/paste. I use Ctrl+C/Ctrl+V and it [...] tells me I have to use Ctrl+C and Ctrl+V

I've been getting that for months. My solution is to switch to @nextcloud with @collabora as soon as this organization acquires another #SelfHosted server.

Been there. But #SpreadsheetAsDatabase isn't Google's fault, and won't get fixed with @nextcloud

Ctrl+C/Ctrl+V ≠ Ctrl+C/Ctrl+V *is* Google's fault, and can be fixed by eliminating Google.

@collabora

> Google docs spreadsheet

Google docs spreads shit

there, fixed it for you :-)




You can't scale a single-threaded process by adding more logical CPUs.

Why is this something that confuses people?

@Jonathan Lamothe it doesn't matter if the execution is out of order - the problem is that when you've got a CPU pegged, the second idle CPU doesn't help.

out of order operation isn't just about changing the order of the operations. It lets you (sometimes) pre-compute the result of future instructions as long as they're not based on the output of the previous ones enabling you to parallelize what would otherwise be a single execution thread. I imagine there's a point of diminishing returns though.
https://www.youtube.com/watch?v=jNC9LPc3BI0

Perhaps I'm misunderstanding what you're saying?

@Jonathan Lamothe Yes, it's theoretically possible for there to be value. But it's not going to affect on the scale of "our system is constantly pegged"

all the out-of-order execution occurs inside a single CPU
adding more CPUs won't help speed up a single-threaded program

picture a call center
an attendant is like a CPU
the attendant can pay attention to one customer at a time. the customer may issue multiple requests/instructions, and an attendant with out-of-order operation may be able to look into and satisfy some of the requests before other earlier ones
however, adding more attendants wouldn't help this one customer get faster service, unless the customer started multiple calls (threads or processes), or the attendants could pass customer requests and context on to each other (that's not permitted by the call center design; they can only transfer entire calls)



The problem with the Eulogy for DevOps is that the last 20 years has been a series of ways of defining sysadmins away and then having them re-emerge from the muck.

We'll never have DevOps disappear because it'll just be yet another beast.

Sysadmin, DevOps, SRE, Infrastructure Engineer, it's all the same thing, it's just that people need to try to put us in new boxes to try to get around the fact that *making your systems reliable* is a hard and different job.

I've been at the same place for the past 4 years. My title has changed 3x. I'm still doing essentially the same thing, just on a different level of abstraction.

What makes it even funnier is that you haven't even listed my current job title: Platform Engineer. What will it be in two years? Who knows, it's all based on vibes.

@Aleksandar Todorović I usually look for SRE or Infrastructure these days, but it's a total crapshoot and half the time they offer me "devops" as my job title


If you're pentesting someone and you send them a report. Do your best to not have your report elicit a response of "Wut"


The hardest part of security work is when you have 15 urgent tasks and no one willing to prioritize them. And then you end up telling someone "I can't help on the outage, I need to reformat this document"

reshared this

my friend wrote a really good article about this

https://grimoire.ca/code/incident-response/

@Alex P. 👹 Ooooof I felt that blogpost hard.

Today it was literally "the entire devteam is down, but the CEO doesn't like how a document that's gone through three approvals and been in use for two years looks, so that's higher priority".

So kinda the opposite



Forever Knight (1992) was a better show than Moonlight (2008)

But seriously, they are very similar.

I think I like Moonlight better, but I want a LaCroix show rather than a Nick Knight show.

You'd think the show that wanted to be a Noir wouldn't be abjected copaganda. At least Forever Knight was boring and obvious about it.


Got my Stadia to connect to my Mirage Solo VR

Give me a few more days and I'll be able to run my entire computing life off "things google made, abandoned, and tried to turn into ewaste and I bought for $10"

Anban Govender reshared this.




Remember kids - to keep your certs you go to conference

This means that conferences can cost a thousand dollars!




So inspired by the Hat Dropping With AI dude's movement to drop goods on people from windows, I'm thinking of selling eggs


The two protocols I need better tools for are RSS and IRC

I hate irssi and I don't want a webapp for RSS

the thing about these protocols is they're both protocols I use over netcat a lot so all the tools feel limiting and weird

@hotsoup RSS to an IRC room would be great, if I had a good rss

IRC over RSS sounds like a bad enough idea for me to take it seriously



I have invented a drink I call the St Lawrence Crossing

It's absinthe with maple syrup instead of sugar. (See - it's a Canadian Ferry and absinthe is the Green Fairy)

It's tasty

@AN/CRM-114 https://www.lcbo.com/en/dillon-s-absinthe-493098 I buy this because the LCBO sells it, and getting non-LCBO absinthe is a huge amount of work, So I'm not really the person to give recommendations
ironically that particular absinthe is also uniquely easy to get not through the LCBO due to the distillery being in southern ontario


Anyone else getting the "You are using a pihole" constant cloudflare "security reviews" suddenly?
@08956495 More seriously - it feels like it's yet another way we're going to get blocked out of the open web


My brain just thought the words "Etsy but ActivityPub"

Basically just - do ActivityPub, add a shopping cart, and try to manage the bots - so you can have art and craft and so on focused instances with sales inside them. I... have no idea how to make this work non-evilly.

But ok - if you want to *scale* activitypub with commerce - this means that the question is one of community.

Building a community with a store is really fucking hard. You have all the problems of Ebay, Etsy, and Twitter. This means building spaces like systems for Art, Writing, or whatever. And that means supporting those people. This means figuring out how to discourage advertising and brands, while supporting people who create.

I don't think this is a needle I can personally thread. I should not try.

But someone should. We should try to figure out how to do capitalism without as many siphons in the middle, at least until we can get rid of capitalism.

This brought to you by me thinking about Etsy and its problems - and how I want to find *creators* first, and then wares, rather than wares first and then creators (at least most of the time)

Fuck

I just realized that this is literally OnlyFans in a lot of ways. A social network for following creators who can sell things to you easily.

And course that - that immediately got moved toward Sex Work because that's the most tech savvy and mobile group, but I think there's something valuable here.

Isn’t the hardest part going to be the payment system integration, and accounting? And shipping costs across dozens of possible shipping options? All the little quirks like charge-backs creating credits/debits? Or is your system going to attempt to not middleman dozens of payment systems? In which case you still need to API integrate to lots of different options and still do accounting for every worst case scenario?
I’d guess creators/wares is the “easy” part?

@Jay Hannah So in this case we're looking at small vendors - so this means that you're probably looking at:
Shipping is going to be integration with the local postal service
API integration with Stripe/PayPal/whatever is pretty simple
If you want to directly take payments that's PCI DSS and also other stuff

But that's all technical detail. I'm not saying it's nothing, but it's all mostly solved problems with very common answers. But the "build a community based on selling without being a hellhole" is not even slightly solved.



Any #KitchenerWaterloo folk aware of a place I can rent a 10 disk CD ripper? Or similar device? I just want to digitize a bunch of CDs and don't wanna think too hard. And don't wanna pay $100 to get someone else to do it.


It doesn't matter if Firefox's AI is good, it doesn't matter. Firefox is doing this to advertise, and the people thinking of switching wont switch to firefox if it's touting AI.

reshared this

@Jonathan Lamothe I actually used Pocket pretty heavily *before* it was integrated into Pocket
@silverwizard It's one thing if you choose to use it. I haven't been able to figure out how to turn it off though. Actually, I did by switching browsers (LibreWolf).