Boof

  • 2 Posts
  • 55 Comments
Joined 1Y ago
cake
Cake day: Jun 16, 2023

help-circle
rss

Personally I suggest you straight up install Librewolf instead.

That said, most extensions aside from ublock are pointless these days.


Issues with Swag + Authentik
So I've been trying to get Swag to handle auth requests with Authentik, because I want to have some level of security for the homelab services. But all I can get is Error 500 when Nginx tries to communicate with Authentik. For the most part, it's all default configs. Nothing should be impeding the two from cooperating. This is Podman running on Windows 11.
fedilink

Give piped.video a try. Basically a youtube frontend that isn’t ass.


Try Windscribe, they offer residential and datacenter IP’s. I don’t get the point, but it’s your money.

I erroneously said the IP’s are less shared, but that’s not the case per the page.

But still, they get past more ip-blocking.

https://windscribe.com/staticips

After reading where I’m even posting: Renting a cheap VPS and using Wireguard to tunnel to it is also an option.

Then it really is only used by you.

  • Man, I’m really not reading today.

See: Anything that can open ports. NAT of any kind tends to not allow opening ports.


You can get Let’s Encrypt certificates for DuckDNS, so you don’t even need to own anything.


Works with anything that can open ports. DuckDNS works by pinging their service from anywhere to update the target IP for the subdomain.


You do realize all this is easily done with a reverse proxy + DuckDNS?


Imo this is why big projects that are borderline like this should use github alternatives, preferably self hosted solutions. This was always going to happen.


Protip: “It gets better later” isn’t a good way to promote a game.

It has to be good from the start.

If it isn’t and it can’t hook a player, you’ve just lost a customer, who likely just refunded the game as well.

Now personally: I like terraria from start to end. It got a bit boring in the middle. I used to not be able to play it at all because /something/ about the game really triggered my migraines. It doesn’t anymore, and I can play it.


The good ol fashioned, <center><div>hecc</div></center> div {display: inline-box; text-align: initial}


Hashing on client side is both more private, and secure. All the user ever submits is a combined hash (auth/pubkey) of their username + password.

If the server has that hash? Check the DB if it requires 2FA, and if the user sent a challenge response. If not, fail the login.

Registering is pretty much the same. User submits hash, server checks DB against it, fail if exists.

Edit: If data is also encrypted properly in the DB, it doesn’t even matter if the entire DB is completely public, leaked, or secured on their own servers.


Argon2 is the best (secure) crypto currently.

That said, adoption is slow, Bitwarden only recently implemented it for example.

That said, due to Argon2 being security-oriented, the recommended settings for it are pretty heavy.


Well to be fair, if they’re hashing serverside, they were doomed to begin with.

But yeah, there’s a lot of ways to DDoS, and so many tools that just make it a 1 button click.


Your password could also just be a long, unique sentence, without any excessive special characters. Maybe even a poem.

Like "Lorem ipsum dolor sit amet, consectetur adipiscing elit. Vestibulum eu leo eu nibh efficitur viverra. Integer lacinia tortor est, quis aliquet tortor varius sed. Sed dapibus vel turpis at suscipit. Nulla consequat orci in nibh dapibus sodales. Phasellus at arcu ac dolor suscipit pretium. Curabitur sit amet justo sit amet ipsum scelerisque accumsan ac ac nulla. Nullam accumsan lorem sagittis iaculis varius. Nullam convallis nisi ante, id congue diam tincidunt vel. Aliquam sed iaculis mauris. Nam leo nisi, consequat sed sodales non, tempor vel ante. Nunc eleifend vulputate turpis bibendum bibendum. Morbi nec massa in mi sagittis lacinia id ut metus. Maecenas gravida mi vitae lorem laoreet sagittis. "

That’s alot of common characters and words; yet, it’ll take centuries to crack.


That’s a misunderstanding of DDoS. 0 byte packets are actually worse than large packets.

Which is why most DDoS (at least was) is extremely slow 0 byte requests until the server throttles/crashes under the number of requests.

E: Consider this. Are you more likely to throttle a bandwidth of terabytes/petabytes with couple million 1gb requests; or break it entirely by sending >4294967295 0 byte requests that effectively never stop being requested from the server?


Old Steam calling.

Website and Client used different password rules, what worked for the other didn’t in the other.


You can care about people as a proxy of doing PR over the thing you like to do.

Not saying he’s an asshole or anything; people just need to stop having these weird as fuck personal relationships with online personalities whom they don’t even actually know.

But yeah, Linus used to care more, but it was years ago when he started saying he’ll stop being CEO soon. Started piling up from back then to where it is now.

Tl;dr: frustrations, inability to do the thing he wanted, high commercial pressure, family, impulsiveness (New houses, new cars, new projects while there were multiple still in progress or not even started), etc. Lost sight of what he was doing, and what he wanted.

Maybe that’ll slowly improve with new CEO, and the projects he started finishing.


Well to be fair, he’ll probably agree over a longer contact period, albeit it doesn’t seem he has a lot of free time.


Fairly sure they just use IDE’s.

Or chatgpt.


Do Rust, Nim, etc use semicolons? I don’t remember


Mate, you should never think an online influencer/store is on your side. They’re not.

Not even Steve from Gamer’s Nexus is your friend.

Can you still practice safe exchange with them? Yes, just be informed of your rights.

Edit/addition: Didn’t check the link. Thought this was about the last drama.

This addresses new issues, and it’s important to solve those issues.

I feel like when Linus was still CEO, he made too many choices too fast, and that’s caused the situation LMG is in now.

They have to rush content to get bills paid in time.

An extremely impulsive CEO is never good.


I have two states.

0 equals “I have no idea what I’m doing”. 1 equals “I have no idea why this works”.

Binary ops withstanding.



Oh nooo! Anyway, make the best game you can.

AAA studios, you can stop crying, you’re like a master car mechanic crying because you can’t bolt down a single goddamn nut with pre-existing tooling.



I’d assume this only works with non-normalized stereo audio. Just flip mono audio on and normalize, then you can’t really tell which key is pressed, or if you’re talking at the PC or from the living room.



Isn’t there an archive site for scientific papers that are freely distributed? I forgot what it was called, should bookmark it.



  1. Content that you cannot acquire by any “lawful” means.
  2. Content that you already own a copy of (Yes, this includes “only” having a “license” to it; you own what you own).
  3. Content that is outrageously priced, and/or from large companies where the people who worked on the product will receive nothing from sold copies. (EA, Activision, Ubisoft, Microsoft, Apple, Adobe, etc)

Browser extensions only configure proxies to the main application (in best case). Worst case they config proxies directly to the provider (via socks5).


Mods themselves aren’t piracy, but circumventing paywalls that are meant to gatekeep content is.


Yes and no. It’s just ass to read the “source” code because everything’s split into 10000 files.

And that’s obviously to try obfuscate how collections work.


I don’t know if that guy is even involved anymore. Pretty sure they just hired him to try to stop MO development.


Yeah, just gotta RE vortex. It’s open-source but written like a piece of shit, so it’s ass to read.


No, doesn’t handle new API.

MO2 already handles invidual downloads, and parallel downloads.


Yeah, the old NMM got shelved because it made downloading too easy.


Yes, Vortex is awful. Wanna download a 100 mod collection without shilling money to Nexus, which they sure as fuck won’t give to mod creators?

Lmao you better like clicking 300 times to finish those downloads, oh and the fucking buttons keep moving to combat “automation software”.


Nexusmods Collections API
Since this would be considered piracy these days, has anyone bothered to reverse-engineer how Vortex handles collections, so they can just be imported straight to Mod Organizer? Every single fucking other application has bend the knee to Nexus, and forces you to fucking download files one by one, manually clicking each and every download. There's gotta be a better way.
fedilink

I’d say no. While yes for example in game development we’ve had new tech come up that wasn’t there 10-30 years ago, the “how” to do it was on paper decades earlier. It just wasn’t feasible to implement with current technology.

Due to IDE’s etc, it’s significantly easier to just create stuff these days, which for indie etc is extremely good.

It does however also mean that the implementation of tech X will be sub-optimal in most situations, because people don’t really understand the underlying tech.

That can be solved in non-corporate situations by asking for help/advice online, or looking it up; but in corporate that’d likely get you branded “overqualified”, and they’d fire your ass for focusing development time on improving/fixing something instead of just pushing, pushing, and pushing.

'course there are also programming fields specifically targeting to improve gaps left by IDE’s etc, to make them even easier and efficient to use.

So basically: Fuck big corpo, fuck “education” that prepares you for corporate rather than teaches you the fundamentals.


Yes, software is getting worse, as education and corporate are getting worse.

Where employees needed to know what they actually were doing in the past, now is mostly auto-filled by IDE’s and languages that target other languages, so employees need to know less and less fundamentals.

Which in turn means when a low-level error occurs, either no one knows how to fix it, or the corporate refuses to hire someone who knows how to fix it because they’re “over-qualified”, and therefore would “cost them too much”.