Programming Madness

Hi, I'm Corinna, software engineer from Germany. I make software for the space industry. This is me shouting about programming and computer science stuff because I can't keep my mouth shut when I code.

[programmingmadness]

"it makes more sense to put common functionality in a separate library so we can import it in multiple projects" we said. Neatly ignoring that we have no idea how to actually create or import a python library from a different project 😩 got the library published to our gitlab at least, now for trying to make the other project see and download it...

And the most frustrating thing is that this would be trivial for me to do in Java 🙃 hate learning new technologies and being stuck at the basics

[depsidase]

[nemesis-is-my-middle-name]

that article going around abt firefox's new ad program is annoying bc it's phrased as though "mozilla has finally TURNED on its people and is SELLING YOU OUT for cold hard cash!!" when. that's not what's happening. it is specifically being implemented to discourage tracking behavior, and literally all the data they are giving to advertisers is aggregate and anonymized, which is like, the opposite of what that post wants you to worry about, lol

[atalana]

summary for those lacking energy/means to read the linked page:

firefox has very strong anti-tracking protections

advertisers keep trying to find ways around those protections

instead of wasting time and resources fighting all the ways these problems pop up, firefox is trying to remove the need for advertisers to track you at all

if you have this setting on, and you click on an ad (it's only when you click on an ad and interact with the ad's website - it's not counting misclicks), firefox will make a note of it (this is only stored in your browser, firefox is not selling this part)

firefox then encrypts all that data so it can't be traced back to you, before sending those notes to people who count them up

the advertisers will then periodically receive a report that says "hey, x amount of people clicked on your ad in this time frame. you can use this data to decide if this is the right place to put your ad"

hopefully this will get the advertisers the information they want without having to tell them anything about your specific browser history

if this still makes you uncomfortable, the way to opt out is very easy (go to settings -> privacy and security -> web advertising preferences, and uncheck all the boxes)

firefox is out here fighting the good fight guys. they're the only browser that even slightly manages to stand up to chromium, but it's a losing battle - spreading misinfo is just trying to sink the ship

[maniculum]

One of the things I’ve noticed working in a bookstore is that a surprising number of people are completely unfamiliar with the normal way books are organized.

(I mean, in the part of the store where we keep the used books, I frequently have to assure people that the books are organized at all, but that’s because we have way more books than we have shelf space and there’s no way to handle that without it looking a bit of a mess.)

On one hand, we get customers who are apparently a completely blank slate in this area. I frequently have to walk people through, like, “Okay, it’s organized by subject / genre, then by author. Oh, ‘by author’ means in alphabetical order by the name of the author. No, their last name.” (Most of the people I give this talk to are, I think, college kids — it’s a bit strange to me that you can reach that age without knowing how bookstores work, but then again, I can kind of see how these days it’s possible to mostly get your books online where you just use a search function.)

One customer responded to the above explanation with “oh, it’s the Dewey Decimal System!” and I had to be like… no. Similar in broad concept, yes, but the Dewey Decimal System is a very specific thing (involving… decimals) and it’s really only used in libraries, not bookstores, because it kind of requires you to label the spines of your books, which bookstores generally don’t like to do for obvious reasons.

On the other hand, we also get customers with pre-existing incorrect assumptions, which are so often similar that I think they’re being imported from other media (though I’m not sure what).

People seem to expect the organization of Fiction to be much more granular — e.g., “where’s historical fiction?” “oh, that’s just in with general fiction.” I think some of that comes from movies (people ask where the “rom-com” section is, and that’s definitely a movie thing), but I’m not sure that’s always the reason.

(Admittedly the fiction organization is a bit more granular in the Used Books area than it is in the New Books, but that’s because there are certain genres that we get tons of from people selling us their old books, but we don’t buy enough of on purpose to justify giving them their own section in New Books.)

At the same time, people have the opposite assumption about Non-Fiction — i.e., they expect there to be one singular section labeled “Non-Fiction”, which is not the case. I’ve had multiple conversations that go like:

Customer: Where can I find non-fiction books?

Me: You’ll have to be more specific.

Customer: You know, non-fiction.

Me: [gesturing at the signs hanging from the ceiling that say things like “science”, “philosophy”, “art”, “history”, etc.] All of these are non-fiction in their own special way.

I try to be nice about it, but I don’t think I always succeed, just because I’m so often legitimately surprised and confused when someone just doesn’t know How Do You Books. I’m getting used to it now, but I’ve been working there for almost five years, so there’s been quite a long adjustment period in between.

Anyway. Just some observations.

[pomrania]

Interesting, because in my experience, used bookstores have always had their fiction organized by genre; but that might just be selection bias, since the only genre section I care to locate is the fantasy/sci-fi section, which... presumably that's much easier to sort out, just from a cursory look at the cover, than other genres of fiction. (I've been to places that sort out "fantasy" and "sci-fi" separately, but it's not common; because, listen, I sort my own personal bookshelves by sub-genre, these are books I've read and I liked them enough to keep, and I still have to have a section for "things that are kind of in-between fantasy and sci-fi".)

[maniculum]

It is organized by genre, but the only fiction sections in the New Books area are:

General Fiction

Sci-Fi & Fantasy

Mystery & Thriller

Kids & YA

Humor & Comics

and a space for pre-modern literature with subcategories for Classical vs. Medieval, which regularly causes confusion because some of the people who ask about a “Classics” section basically mean “stuff my teachers assigned me” and are dumbfounded when I lead them to a shelf of Greek & Roman stuff.

Which are, you know, broad categories, but it’s about as granular as I generally expect from a bookstore of this size and generally accords with my experience of other stores I have patronized in the past. I can see an argument for there being more categories (though not, e.g., “rom-com”), but it would require a lot of reorganization effort and basically make people less likely to find specific genres like “historical fiction” by isolating them in small, easy-to-overlook sections. One of the ways in which physical and digital organization present different challenges.

Down in the used books we also have:

Romance

Westerns

Christian Fiction

Horror

and a hilariously large section specifically for “Vampires & other Paranormal Romance”. (funnily enough, this does not include Twilight, which goes in YA.)

In all cases, we do have new books in those genres too, just not a lot of them, so they’re filed in with either General Fiction or Sci-Fi/Fantasy. But we get so many of them from people selling their old books that we give them their own categories in the Used section.

[rainbowsandchocolate]

what you describe seems intuitive to me but I've definitely been in bookstores that had a historical fiction section or even a historical YA fiction section. But that was bigger new bookstore. My feeling was that new book stores are more granular because they'll have many of the same and likely a tagging system for their website so it makes more sense to sort them by genre. But even the English section in small Lithuanian bookstores had Alice oseman next to Ali hazelwood and Terry Pratchett and Harry Potter one shelf lower. I'm gonna investigate the sorting system in every bookstore now tho.

[maniculum]

Yeah, I think that particular one is a matter of scale. If you’re, say, Barnes & Noble, your fiction section can get as granular as you want because you have practically a whole city block of space and your own custom digital inventory system to keep track of what goes where. So I wouldn’t be that surprised to see a dedicated Historical Fiction section there — i do think it’s still taking the risk of customers not finding it if they don’t realize it’s a separate section, but i’m sure they can trial-and-error that out to figure out what level of granularity to employ.

(I would still be surprised to see a Rom-Com section, but I think I have seen pictures of “BookTok” displays, so… maybe not that surprised.)

I work at an independent bookstore with no digital inventory system, where shelf space is at a premium. So for us it doesn’t make sense to employ that same approach.

Honestly, I’m going to give the customers that one. They might just be more used to big chain stores that do do that kind of thing. That seems pretty reasonable. (And would also explain why they occasionally ask me if we sell coffee.) And if we take that as an explanation, then the issue really boils down to “why not read the signs to see what’s in each aisle instead of asking the clerk,” and that’s kind of just a hazard of retail generally.

[emilysidhe]

Back in the early 2000s, the Barnes and Noble by me *sort of* had a rom-com section.

By which I mean, they had a romance section, but it was shelved like a comic book store: books were grouped by publisher, then by imprint, and only then by author’s last name. So if someone had asked for romantic comedies, a bookstore employee could have theoretically told them which Harlequin imprint specialized in contemporary romance that was also supposed to be funny, and which imprint from Avon did the same; showed them the two sections each could be found in; and let them browse.

(I don’t think that particular Barnes and Noble has a romance section at all anymore - a lot of it used to be taken up with direct-to-mass-market-paperback books and I expect ebook only publications have mostly replaced those, especially with traditional romance publishers being such early adopters. Any remaining print romance novels get shelved with the general fiction or other genres (like paranormal romance is in fantasy now instead of getting its own little imprint spots in the romance section.))

[fabricdragondesigns]

Backdoor found in widely used Linux utility targets encrypted SSH connections

Malicious code planted in xz Utils has been circulating for more than a month.

[sepulchritude]

Firefix ios is currently ad blocking on all sites seemingly without any ad blocker and idk if it’s something I did but I’m saying it real quiet in case that interests anyone 👀

[eggpla]

i genuinely didn't notice for the longest time but did notice that the world wide web was suddenly a much brighter and more beautiful place <3

[sepulchritude]

I noticed it when fandom wiki loaded at a reasonable speed and didn’t immediately piss me off to look at. I was like no this is proof. There is an ad blocker going on here

[sepulchritude]

Clarifying that I specifically mean firefox mobile for iOS, which strictly speaking cannot support add-ons and shouldn’t be capable of blocking ads even if the user wanted to. And yet here we are

Switch to firefox on your phone! It’s easy and free!

[spyglassrealms]

This is a side effect of setting Enhanced Tracking Protection to Strict. It's not an actual ad blocker, but the way that ads are structured on most sites results in them being blocked by the tracking protection filters. Very handy imo.

[sepulchritude]

Answers at last! Thank you!!

[sepulchritude]

Loving the amount of people saying in the notes that this post got them to switch to firefox on mobile 🥳

[sinsear-aisteach]

pros of corded headphones:

Cant lose phone

dont need to charge headphones

they look cool and are amazing

cons of corded headphones:

Every doorknob in existence is now out to get you

[sinsear-aisteach]

glad this was a hit with corded headphone users

[ranidspace]

Firefox v120!

New copy link without site tracking feature: removes the tracking at the end of urls usually that end with "?=[long ass string of numbers or info on your browser or how you clikced the link]" previously an optional feature of ublock origin to remove it as you go to sites, but now you can also copy links as well

New "Tell websites not to sell or share my data" option in privacy settings. Websites have no obligation to do this, except under GDPR which is most sites. adds a bit to your fingerprintability, however if everyone turns this on it will work better for everyone.

Firefox is rolling-out Cookie Banner Blocker by default in private windows for users in Germany during the coming weeks. Firefox will now auto-refuse cookies and dismiss annoying cookie banners for supported sites.

you can set "cookiebanners.service.mode" to 2 to automatically refuse cookies and have them stop asking you about it. While it's also an optional feature of ublock origin, this might work better

Firefox has enabled URL Tracking Protection by default in private windows for all users in Germany. Firefox will remove non-essential URL query parameters that are often used to track users across the web.

Not sure how to turn this on in settings (this is also an optional ublock feature, these don't hurt to stack) but once again removes the tracking at the end of urls telling you how the link was shared and how you got there

Firefox cares about your privacy and is making the internet a safer place from corporations. Do your part and download it today

[ranidspace]

Firefox 120.0, See All New Features, Updates and Fixes

release notes

[fearlessmastermind]

We don’t deserve Firefox, but they are the hero we need

[ranidspace]

we deserve firefox.

we deserve a right to browse the internet and not have every minute detail analyzed and sold to companies so that they can give us ads. we deserve a right to online privacy and being able to use it without tracking. we deserve the ability to be able to share funny memes with our friends without tracking data in the links to analyze who exactly sent you the link and all the detail about it.

they are absolutely what we need, along with this sort of principle

[teabree-shark]

in b4 95% of all websites in june 2024 announce that "for security" they will only work with browsers that use manifest v3

[470nanometers]

Google Chrome will limit ad blockers starting June 2024

The "Manifest V3" rollout is back after letting tensions cool for a year.

Just use Firefox.

[evilsoup]

The more people who use Firefox the better! It's got versions for the desktop, android, and iphone, all free. In addition to ublock origin there are thousands of addons. You could also consider using one of Mozilla's paid products, such as their VPN, or donating to the Mozilla Foundation, in order to ensure they're able to keep going.

Internet for people, not profit

Mozilla is the not-for-profit behind the lightning fast Firefox browser. We put people over profit to give everyone more power online.

Mozilla Foundation

Mozilla is a global nonprofit dedicated to keeping the Internet a global public resource that is open and accessible to all.

[ms-demeanor]

So You Need To Buy A Computer But You Don't Know What Specs Are Good These Days

Hi.

This is literally my job.

Lots of people are buying computers for school right now or are replacing computers as their five-year-old college laptop craps out so here's the standard specs you should be looking for in a (windows) computer purchase in August 2023.

PROCESSOR

Intel i5 (no older than 10th Gen)

Ryzen 7

You can get away with a Ryzen 5 but an intel i3 should be an absolute last resort. You want at least an intel i5 or a Ryzen 7 processor. The current generation of intel processors is 13, but anything 10 or newer is perfectly fine. DO NOT get a higher performance line with an older generation; a 13th gen i5 is better than an 8th gen i7. (Unfortunately I don't know enough about ryzens to tell you which generation is the earliest you should get, but staying within 3 generations is a good rule of thumb)

RAM

8GB absolute minimum

If you don't have at least 8GB RAM on a modern computer it's going to be very, very slow. Ideally you want a computer with at least 16GB, and it's a good idea to get a computer that will let you add or swap RAM down the line (nearly all desktops will let you do this, for laptops you need to check the specs for Memory and see how many slots there are and how many slots are available; laptops with soldered RAM cannot have the memory upgraded - this is common in very slim laptops)

STORAGE

256GB SSD

Computers mostly come with SSDs these days; SSDs are faster than HDDs but typically have lower storage for the same price. That being said: SSDs are coming down in price and if you're installing your own drive you can easily upgrade the size for a low cost. Unfortunately that doesn't do anything for you for the initial purchase.

A lot of cheaper laptops will have a 128GB SSD and, because a lot of stuff is stored in the cloud these days, that can be functional. I still recommend getting a bit more storage than that because it's nice if you can store your music and documents and photos on your device instead of on the cloud. You want to be able to access your files even if you don't have internet access.

But don't get a computer with a big HDD instead of getting a computer with a small SSD. The difference in speed is noticeable.

SCREEN (laptop specific)

Personally I find that touchscreens have a negative impact on battery life and are easier to fuck up than standard screens. They are also harder to replace if they get broken. I do not recommend getting a touch screen unless you absolutely have to.

A lot of college students especially tend to look for the biggest laptop screen possible; don't do that. It's a pain in the ass to carry a 17" laptop around campus and with the way that everything is so thin these days it's easier to damage a 17" screen than a 14" screen.

On the other end of that: laptops with 13" screens tend to be very slim devices that are glued shut and impossible to work on or upgrade.

Your best bet (for both functionality and price) is either a 14" or a 15.6" screen. If you absolutely positively need to have a 10-key keyboard on your laptop, get the 15.6". If you need something portable more than you need 10-key, get a 14"

FORM FACTOR (desktop specific)

If you purchase an all-in-one desktop computer I will begin manifesting in your house physically. All-in-ones take away every advantage desktops have in terms of upgradeability and maintenance; they are expensive and difficult to repair and usually not worth the cost of disassembling to upgrade.

There are about four standard sizes of desktop PC: All-in-One (the size of a monitor with no other footprint), Tower (Big! probably at least two feet long in two directions), Small Form Factor Tower (Very moderate - about the size of a large shoebox), and Mini/Micro/Tiny (Small! about the size of a small hardcover book).

If you are concerned about space you are much better off getting a MicroPC and a bracket to put it on your monitor than you are getting an all-in-one. This will be about a million percent easier to work on than an all-in-one and this way if your monitor dies your computer is still functional.

Small form factor towers and towers are the easiest to work on and upgrade; if you need a burly graphics card you need to get a full size tower, but for everything else a small form factor tower will be fine. Most of our business sales are SFF towers and MicroPCs, the only time we get something larger is if we have to put a $700 graphics card in it. SFF towers will accept small graphics cards and can handle upgrades to the power supply; MicroPCs can only have the RAM and SSD upgraded and don't have room for any other components or their own internal power supply.

WARRANTY

Most desktops come with either a 1 or 3 year warranty; either of these is fine and if you want to upgrade a 1 year to a 3 year that is also fine. I've generally found that if something is going to do a warranty failure on desktop it's going to do it the first year, so you don't get a hell of a lot of added mileage out of an extended warranty but it doesn't hurt and sometimes pays off to do a 3-year.

Laptops are a different story. Laptops mostly come with a 1-year warranty and what I recommend everyone does for every laptop that will allow it is to upgrade that to the longest warranty you can get with added drop/damage protection. The most common question our customers have about laptops is if we can replace a screen and the answer is usually "yes, but it's going to be expensive." If you're purchasing a low-end laptop, the parts and labor for replacing a screen can easily cost more than half the price of a new laptop. HOWEVER, the way that most screens get broken is by getting dropped. So if you have a warranty with drop protection, you just send that sucker back to the factory and they fix it for you.

So, if it is at all possible, check if the manufacturer of a laptop you're looking at has a warranty option with drop protection. Then, within 30 days (though ideally on the first day you get it) of owning your laptop, go to the manufacturer site, register your serial number, and upgrade the warranty. If you can't afford a 3-year upgrade at once set a reminder for yourself to annually renew. But get that drop protection, especially if you are a college student or if you've got kids.

And never, ever put pens or pencils on your laptop keyboard. I've seen people ruin thousand dollar, brand-new laptops that they can't afford to fix because they closed the screen on a ten cent pencil. Keep liquids away from them too.

LIFESPAN

There's a reasonable chance that any computer you buy today will still be able to turn on and run a program or two in ten years. That does not mean that it is "functional."

At my office we estimate that the functional lifespan of desktops is 5-7 years and the functional lifespan of laptops is 3-5 years. Laptops get more wear and tear than desktops and desktops are easier to upgrade to keep them running. At 5 years for desktops and 3 years for laptops you should look at upgrading the RAM in the device and possibly consider replacing the SSD with a new (possibly larger) model, because SSDs and HDDs don't last forever.

COST

This means that you should think of your computers as an annual investment rather than as a one-time purchase. It is more worthwhile to pay $700 for a laptop that will work well for five years than it is to pay $300 for a laptop that will be outdated and slow in one year (which is what will happen if you get an 8th gen i3 with 8GB RAM). If you are going to get a $300 laptop try to get specs as close as possible to the minimums I've laid out here.

If you have to compromise on these specs, the one that is least fixable is the processor. If you get a laptop with an i3 processor you aren't going to be able to upgrade it even if you can add more RAM or a bigger SSD. If you have to get lower specs in order to afford the device put your money into the processor and make sure that the computer has available slots for upgrade and that neither the RAM nor the SSD is soldered to the motherboard. (one easy way to check this is to search "[computer model] RAM upgrade" on youtube and see if anyone has made a video showing what the inside of the laptop looks like and how much effort it takes to replace parts)

Computers are expensive right now. This is frustrating, because historically consumer computer prices have been on a downward trend but since 2020 that trend has been all over the place. Desktop computers are quite expensive at the moment (August 2023) and decent laptops are extremely variably priced.

If you are looking for a decent, upgradeable laptop that will last you a few years, here are a couple of options that you can purchase in August 2023 that have good prices for their specs:

14" Lenovo - $670 - 11th-gen i5, 16GB RAM, and 512GB SSD

15.6" HP - $540 - 11th-gen i5, 16GB RAM, and 256GB SSD

14" Dell - $710 - 12th-gen i5, 16GB RAM, and 256GB SSD

If you are looking for a decent, affordable desktop that will last you a few years, here are a couple of options that you can purchase in August 2023 that have good prices for their specs:

SFF HP - $620 - 10th-gen i5, 16GB RAM, 1TB SSD

SFF Lenovo - $560 - Ryzen 7 5000 series, 16GB RAM, 512GB SSD

Dell Tower - $800 - 10th-gen i7, 16GB RAM, 512GB SSD

If I were going to buy any of these I'd probably get the HP laptop or the Dell Tower. The HP Laptop is actually a really good price for what it is.

Anyway happy computering.

[ms-demeanor]

Also:

If your computer is over 5-7 years old but is still working for you that is fine! You don't have to replace your computer because of an arbitrary age. "Functioning" as we define it at my job means that a computer will run the latest standard operating system and the latest versions of various types of business software because that is what is required for a computer to work for an office; a home computer doesn't have to have the same specs to stay functional for a user who is just doing email and internet, which is what most home users use their computers for.

*However* the reliable lifespan of hard drives and ssds is a lot firmer and it isn't planned obsolescence or an attempt to degrade lifespans of consumer devices, it is simply due to the limitations of the hardware. After about five years of use, HDDs and SSDs are more likely to fail. HDDs will give you some warning about this (reporting bad sectors, clicking noises, if they fail data can likely be recovered for a fee), but when SSDs fail they fail catastrophically (they just don't turn on and the data is gone). That is not to say that your drives will automatically fail at the five year mark, it just means that they are much more LIKELY to fail at the five year mark. So now that you know this, you should take steps to prevent a failing drive from ruining your life. Get a large external hard drive and save regular image and file backups from your computer, and if your backup drive is five or more years old buy a new one and copy any important data to the new drive then use the new drive for new backups. You should also get a thumb drive and create a windows recovery disk if you haven't already done so. And you should keep in mind that thumb drives also have an expected lifespan of about five years, depending on frequency of use. And you can also just proactively replace your storage drives on a schedule before they fail to extend the lifespan of the device. If you plan on upgrading the hardware in your computer at five year intervals (a good plan if you don't want to or can't replace an older computer! I support this plan! This is what most people should do!) then you will likely never experience a drive failure on your device.

ALSO here are things that my customers frequently don't consider that can get a lot of life or functionality out of an older/broken computer:

If your laptop screen fails and you can't afford to replace it, go to a local thrift store, get a monitor, then go online or to best buy and get the cable to connect your laptop to your new monitor. Thrift stores have monitors for about 20 bucks and a cable will cost 7-15 dollars, which is a hell of a lot cheaper than $75-150 for a replacement screen and whatever labor would cost. This will mean that your laptop is not a laptop anymore, but it can still be a computer for you.

If your computer doesn't have enough USB ports get a USB hub. A lot of laptops come with only one USB port these days, and many desktops come with 4 or fewer, so an 8-port hub is a great idea.

People are making computers without ethernet ports these days (evil) but you can get USB to Ethernet adapters (here is one by a reliable manufacturer). This is bad and I hate it and I'm sorry.

If the keyboard or touchpad on your laptop fail and you can't afford to replace them, get a USB keyboard or laptop. You can get very small wireless keyboards that will allow you some measure of portability, and there are even keyboard/touchpad combos that you can get.

Talk to like three friends and go in together on a USB CD/DVD drive to share. Most computers, even most desktops, don't have internal optical drives these days, but external readers are available for a wide variety of prices and it is not something that you are going to need every day.

Those things seem pretty obvious, I'm sure, but they just don't occur to a lot of people. Also like at least three of those tips are "if your computer didn't come with hardware it should have then store-bought is fine" and I recognize that that is bullshit but at least if you have your own ethernet port, usb ports, and optical drive it immediately becomes less of a concern if your computer has those things AND you'll be able to use those external components with multiple devices if you want to.

Also I know nothing about gaming specs or video cards but Paul's Hardware on Youtube has a 75-video playlist about video cards that I suspect will have answers to many of the questions people have about graphics cards.

[gothpants]

Google gets its way, bakes a user-tracking ad platform directly into Chrome

Chrome now directly tracks users, generates a "topic" list it shares with advertisers.

fyi

[lemeute]

from the article above:

The argument here is that someday—not now, but someday—Google promises to turn off third-party tracking cookies in Chrome, and the new ad platform, which has some limitations, is better than the free-for-all that is third-party cookies. The thing is, third-party cookies mostly only affect Chrome users. Apple and Firefox have both been blocking third-party cookies for years and won't be implementing Google's new advertising system—it's only the Chromium browsers that still allow them. That's actually what started this whole process: Apple dealt a giant blow to Google's core revenue stream when it blocked third-party cookies in Safari in 2020. While it was a win for privacy, Google's not following suit until it can secure its advertising business. The Federated Learning of Cohorts and now the Topics API are part of a plan to pitch an "alternative" tracking platform, and Google argues that there has to be a tracking alternative—you can't just not be spied on. The Electronic Frontier Foundation also argued this when it called Google's FLoC a "terrible idea," saying "[Google's] framing is based on a false premise that we have to choose between 'old tracking' and 'new tracking.' It’s not either-or. Instead of re-inventing the tracking wheel, we should imagine a better world without the myriad problems of targeted ads."

[cryoverkiltmilk]

USE FIREFOX

[programmingmadness]

Me trying and failing to find out why a bug is happening:

[elfgrove]

New Things to Beware on the Internet

On May 3rd, Google released 8 new top-level domains (TLDs) -- these are new values like .com, .org, .biz, domain names. These new TLDs were made available for public registration via any domain registrar on May 10th.

Usually, this should be a cool info, move on with your life and largely ignore it moment.

Except a couple of these new domain names are common file type extensions: ".zip" and ".mov".

This means typing out a file name could resolve into a link that takes you to one of these new URLs, whether it's in an email, on your tumblr blog post, a tweet, or in file explorer on your desktop.

What was previously plain text could now resolve as link and go to a malicious website where people are expecting to go to a file and therefore download malware without realizing it.

Folk monitoring these new domain registrations are already seeing some clearly malicious actors registering and setting this up. Some are squatting the domain names trying to point out what a bad idea this was. Some already trying to steal your login in credentials and personal info.

This is what we're seeing only 12 days into the domains being available. Only 5 days being publicly available.

What can you do? For now, be very careful where you type in .zip or .mov, watch what website URLs you're on, don't enable automatic downloads, be very careful when visiting any site on these new domains, and do not type in file names without spaces or other interrupters.

I'm seeing security officers for companies talking about wholesale blocking .zip and .mov domains from within the company's internet, and that's probably wise.

Be cautious out there.

[elfgrove]

I really want to reiterate how this can go wrong frequently and fast, folks.

A malicious actor sets up a page with an auto-downloader squatting on a domain name that matches a common zip file name like photos DOT zip. This website is set up to start an auto downloader upon being visited, downloading a zip file with the same name as the URL which contains malicious software (virus, worm, keylogger, etc).

Scenario.

Someone you know well sends you an email or text with promised photos attached. The email even reads something like this.

Because .zip is now a TLD, that plain text is automatically formatted into a link to malicious actor's website without them having to send you anything.

Folk with family with iPhones or iPads that are sent multiple photos in one go might be familiar with iCloud's tendency to automatically compile them into zip file for the sender and less savvy tech users have trouble NOT doing that.

These same less savvy users, or even just someone just not thinking in the moment, will click that .zip link, not realizing it isn't the the same as clicking on the promised attachment.

They download a file that matches the name they expected. They open it because they were expecting that file and it's from a trusted source. Except the file they downloaded isn't the one that was sent by their trusted source and now they have malware.

Another Scenario.

An IT person tries to send you an email with instructions on how to resolve a problem with a commonly used filename like install-repair DOT zip or to install new software like microsoft-office DOT zip.

The email may start with instructions of where to go get the legitimate file to do the install or repair, but now a line later in the instructions is also has a link to a .zip URL. A user, already frazzled by IT problems, may click it to ensure they have the right file. Again, they download malicious code from a squatting website or it prompts them with a fake login and now the squatting website has stolen their login credentials for a legitimate site. All due to an expected email from a trusted source.

Above you can see microsoft-office DOT zip is already out there with a fake Microsoft login screen waiting to steal your credentials.

These risks are already out there now because the TLD has been activated.

Plain text on old post are already being resolved into links to the new websites.

Here you can see a tweet from 2021, long before .zip was a domain name, now resolves that plan text into a clickable link. You'll start seeing this everywhere, and malicious actors do not have to lift a finger to send it to you.

Yes, a lot of users aren't going to click that, but a lot of folk will. Whomever is squatting on photos DOT zip domain name has made a one time payment to have access to anyone that ever sees that file name typed out.

In an example of an existing squatter site, clientdocs DOT zip is exactly one such pre-setup .zip domain name that initiates an automatic download. This one may be harmless, but the set ups are already out there and waiting to catch folk.

It's an unnecessary and risky can of worms that's been opened up.

Holy Unforced Errors, Batman.

[alexseanchai]

Firefox Rolls Out Total Cookie Protection By Default | The Mozilla Blog

Take back your privacy Firefox is rolling out Total Cookie Protection by default to more Firefox users worldwide, making Firefox the most pr

Total Cookie Protection works by creating a separate “cookie jar” for each website you visit. Instead of allowing trackers to link up your behavior on multiple sites, they just get to see behavior on individual sites. Any time a website, or third-party content embedded in a website, deposits a cookie in your browser, that cookie is confined to the cookie jar assigned to only that website. No other websites can reach into the cookie jars that don’t belong to them and find out what the other websites’ cookies know about you — giving you freedom from invasive ads and reducing the amount of information companies gather about you.

This approach strikes the balance between eliminating the worst privacy properties of third-party cookies – in particular the ability to track you – and allowing those cookies to fulfill their less invasive use cases (e.g. to provide accurate analytics). With Total Cookie Protection in Firefox, people can enjoy better privacy and have the great browsing experience they’ve come to expect.

anyway switch to Firefox

[lumsel]

chinese room 2

So there’s this guy, right? He sits in a room by himself, with a computer and a keyboard full of Chinese characters. He doesn’t know Chinese, though, in fact he doesn’t even realise that Chinese is a language. He just thinks it’s a bunch of odd symbols. Anyway, the computer prints out a paragraph of Chinese, and he thinks, whoa, cool shapes. And then a message is displayed on the computer monitor: which character comes next?

This guy has no idea how the hell he’s meant to know that, so he just presses a random character on the keyboard. And then the computer goes BZZZT, wrong! The correct character was THIS one, and it flashes a character on the screen. And the guy thinks, augh, dammit! I hope I get it right next time. And sure enough, computer prints out another paragraph of Chinese, and then it asks the guy, what comes next?

He guesses again, and he gets it wrong again, and he goes augh again, and this carries on for a while. But eventually, he presses the button and it goes DING! You got it right this time! And he is so happy, you have no idea. This is the best day of his life. He is going to do everything in his power to make that machine go DING again. So he starts paying attention. He looks at the paragraph of Chinese printed out by the machine, and cross-compares it against all the other paragraphs he’s gotten. And, recall, this guy doesn’t even know that this is a language, it’s just a sequence of weird symbols to him. But it’s a sequence that forms patterns. He notices that if a particular symbol is displayed, then the next symbol is more likely to be this one. He notices some symbols are more common in general. Bit by bit, he starts to draw statistical inferences about the symbols, he analyses the printouts every way he can, he writes extensive notes to himself on how to recognise the patterns.

Over time, his guesses begin to get more and more accurate. He hears those lovely DING sounds that indicate his prediction was correct more and more often, and he manages to use that to condition his instincts better and better, picking up on cues consciously and subconsciously to get better and better at pressing the right button on the keyboard. Eventually, his accuracy is like 70% or something – pretty damn good for a guy who doesn’t even know Chinese is a language.

* * *

One day, something odd happens.

He gets a printout, the machine asks what character comes next, and he presses a button on the keyboard and– silence. No sound at all. Instead, the machine prints out the exact same sequence again, but with one small change. The character he input on the keyboard has been added to the end of the sequence.

Which character comes next?

This weirds the guy out, but he thinks, well. This is clearly a test of my prediction abilities. So I’m not going to treat this printout any differently to any other printout made by the machine – shit, I’ll pretend that last printout I got? Never even happened. I’m just going to keep acting like this is a normal day on the job, and I’m going to predict the next symbol in this sequence as if it was one of the thousands of printouts I’ve seen before. And that’s what he does! He presses what symbol comes next, and then another printout comes out with that symbol added to the end, and then he presses what he thinks will be the next symbol in that sequence. And then, eventually, he thinks, “hm. I don’t think there’s any symbol after this one. I think this is the end of the sequence.” And so he presses the “END” button on his keyboard, and sits back, satisfied.

Unbeknownst to him, the sequence of characters he input wasn’t just some meaningless string of symbols. See, the printouts he was getting, they were all always grammatically correct Chinese. And that first printout he’d gotten that day in particular? It was a question: “How do I open a door.” The string of characters he had just input, what he had determined to be the most likely string of symbols to come next, formed a comprehensible response that read, “You turn the handle and push”.

* * *

One day you decide to visit this guy’s office. You’ve heard he’s learning Chinese, and for whatever reason you decide to test his progress. So you ask him, “Hey, which character means dog?”

He looks at you like you’ve got two heads. You may as well have asked him which of his shoes means “dog”, or which of the hairs on the back of his arm. There’s no connection in his mind at all between language and his little symbol prediction game, indeed, he thinks of it as an advanced form of mathematics rather than anything to do with linguistics. He hadn’t even conceived of the idea that what he was doing could be considered a kind of communication any more than algebra is. He says to you, “Buddy, they’re just funny symbols. No need to get all philosophical about it.”

Suddenly, another printout comes out of the machine. He stares at it, puzzles over it, but you can tell he doesn’t know what it says. You do, though. You’re fluent in the language. You can see that it says the words, “Do you actually speak Chinese, or are you just a guy in a room doing statistics and shit?”

The guy leans over to you, and says confidently, “I know it looks like a jumble of completely random characters. But it’s actually a very sophisticated mathematical sequence,” and then he presses a button on the keyboard. And another, and another, and another, and slowly but surely he composes a sequence of characters that, unbeknownst to him, reads “Yes, I know Chinese fluently! If I didn’t I would not be able to speak with you.”

That is how ChatGPT works.

[unpretty]

hey so how does one go about cracking the DRM on kindle 👀

windows-specific broad strokes guide:

download and install calibre

install the de-drm plugin, more details here but there is a newer fork here that i have not messed with but which might work better

install version 1.17 of kindle for pc

uncheck 'install updates' in kindle and also use a dummy file to prevent it from forcing an update (guide)

download your books in kindle for pc

navigate to the download folder and add all those books to calibre

they are now drm-free and can be converted to whatever format you want

[elfwreck]

Crucial step in the middle: install version 1.17 of kindle for pc

Newer versions will not work; they changed the DRM process for those. (Erm. For some books. Some ebooks will still work via the newer version; it depends on how the book itself was processed by Amazon. It's complicated. But you bypass all of it with the older Kindle app.)

When you're setting up on a new machine or whatever, you may not remember all the steps, or the version number - but you can remember "this needs an old version of Kindle so I'll need to figure out which one that is."

And then you can save out your purchased ebooks and prevent the "1984" fiasco from happening again.

[cyle]

Hey Elon: Let Me Help You Speed Run The Content Moderation Learning Curve

It’s kind of a rite of passage for any new social media network. They show up, insist that they’re the “platform for free speech” without qu

too, too real