colemickens

Such great advice, had never thought of that. Thanks!

I mean, "my card information being stolen" is literally only an issue because credit card companies won't force US retailers to accept proper chip and pin. It just is not an issue everywhere I've been in Europe because it is categorically impossible for them to steal my card information with contactless payments.

As for the magnitude of privacy invasion regarding financial transactions, I feel very safe in saying the data Google has about/from me is far more revealing than relatively opaque transaction logs.

What the hell? I get downvoted for linking an authoritative answer to the question I was asked? I'm so god damn sick of participating here in good faith and getting wordlessly crapped on for it. The answer supports exactly what I said, and I provided a link.

Pretty obvious someone didn't like one of my other comments and then proceeded to downvote the others they could since I commented in multiple threads at the same time. Why is this nonsense allowed? It would be easy to detect.

It's almost like my own comment said I wasn't making excuses and pointed out it was a preview release. I don't know why I bother.

Also, I don't understand what Google being in trouble for anti-trust has to do with a bunch of third-party apps and third-party SDKs accessing and selling my information.

How does this argument come up every time? If I can't have absolute privacy, I should just give up? The same way I'd love to give up every last bit of dependence on Google, I'd love to get decentralized fintech. But the popular one is a bad word that starts with B and I fear has spoiled the well. (Though it's been interesting traveling through Europe and seeing Bitcoin signs all over Prague, the ticket machine offering bitcoin top up at the Bern train station, and a tradesman/construction worker wearing a Bitcoin advocacy shirt while walking to the beach in Bern today. And don't get me started on how much time I've spent triple-re-verifying my identity with Mastercard or waiting 5+ days for critical ACH transactions.)

"Currently the owner of the project must be online in order to receive any proposed RSM updates from a contributor. Once received and processed, these updates will be written to IPFS by the project owner, and made available to all users who follow that project." -- http://radicle.xyz/docs/#faq

Please understand I'm not excusing anything, it's horrendous it took this long to have user controls. That having been said, in the Android Q preview, Android occasionally lets me know that an app has access to my location at all times and makes it easy for me to immediately revoke that access, or limit it to ONLY when the application is open.

For example, this is what I can see by searching "Location" in settings and choosing one of the first results: https://i.imgur.com/jDF9vq6.png. It was shocking what this list looked like when I first upgraded to Q.

I thought Radicle was cool too, but as I understand it (in its current state), it has a much "larger" SPOF in that changes can only be submitted when the single authoritative repo is online.

`nix-env` can be coerced into pinning a package at a specific revision, effectively ignoring channel updates. However, yes, I do all of my nixos package management in my system configuration and try to avoid `nix-env` at all costs as it leads to drift. However, in at least one case, this is largely un-avoidable (in the case of OBS Plugins, there's no NixOS infra to make sure that 'wlrobs' is available at a well-known spot for OBS to pick-up. We'd need to make a plugin-aware wrapper, or `programs.obs` module probably. This is because nix-env does some additional symlinking that isn't done for system-installed packages).

Fortunately, `builtins.fetchTarball` makes this easier. I do this in my `nixcfg` repo so that I can build my entire machine config (patches and enabling Iris in Mesa, and all) on a stupidly-cheap Packet.net VM: https://github.com/colemickens/nixcfg/blob/master/default.ni....

If you follow the rabbit-hole: `default.nix` -> `lib.nix`, etc, you can see that I pin nixpkgs, have an update script that updates the nixpkgs revs I build against, it supports building against a custom, local `~/code/nixpkgs` if it exists, and I have my machine config abstracted out to where I can build a "GNOME instance of my machine" or by default, my machine with Sway and sway related packages installed. Much of this should be easier with flakes, as I understand it.

It's not the cleanest config, the README needs love, but maybe it can be inspiration in the meantime. :) My latest trick was figuring out how to get the new Mesa Intel Iris Gallium driver enabled without rebuilding the world, and I extracted it to what I call a "mixin" that anyone can copy and just use: https://github.com/colemickens/nixcfg/blob/master/modules/mi...

(And technically I still use mozilla/nixpkgs-mozilla to pull the latest Firefox Nightly which is impure and thus not always perfectly, perfectly reproducable. I do however pin the overlays themselves also - like my nixpkgs-wayland overlay that packages HEAD versions of Sway and other Wayland related tools!)

And yet, I would (will?) likely be derided if I complained about every forced show of heterosexuality, in virtually every piece of media produced in the last many decades. I immediately think of the scene in the second Matrix movie, but that stuff is absolutely everywhere.

I'm curious to understand what you're describing. Can you give an example of a Netflix show, the season and political trope, and how it detracted from the show's quality? And I'm definitely curious what you're imagining as you write out "repulsive".

There was a time where every login was followed by auto-playing trailers for a show about suicide, during a time that I really just didn't need to be seeing that. With no way to prevent it... other than canceling and ceasing usage.

I don't understand the dark patterns and general user hostility. I don't need to watch Netflix 20 hours a day to feel like I'm getting my money's worth. Do they somehow benefit from me utilizing more of their bandwidth, if I'm already paying?

See also: SAP's Gardener. Their website reminds me of a spam landing page more than a valuable, robust project, so I'll link an official Kubernetes blog post about it: https://kubernetes.io/blog/2018/05/17/gardener/

EDIT: per the replies, it does look like a fairly different focus, my apologies, just got excited when I saw the virtualized control plane. (To save you reading the blog, Gardener launches a control plane in an existing cluster to manage workloads on a different, dedicated set of worker nodes.) It will be fun to think about k3v and multi-tenancy.

My understanding is that bad/poor gateways are penalized. In my own experience, I've only ever needed to change circuits manually once (but I'm primarily using Tor to NAT punch to hidden services, not sure if that matters ).

While I said less than 30 seconds, it really was about 10 seconds but I didn't want to sound like I was exaggerating. And that was of course including switching apps, the initial Tor connection, switching apps back, waiting for my feed to load, clicking a video.

I just tried again, it took 6 seconds to open Orbot and completely connect to Tor. The rest was business as usual. Maybe a 1, 1.5 second delay getting to YouTube and for the video to start playback. For what Tor offers, that is impressive, and I don't know what could possibly be convincing beyond that point. Not to mention that one can just leave Orbot running as well. And since I'm on Android, I can opt to have specific app traffic sent through Tor, or Orbot can act as a system-wide VPN.

I'd make a video showing how painless it is, but setting it up, recording and uploading would take a hundredfold more time than just trying it out.

edit: I know that it's purely anecdotal, but I just enabled Orbot VPN mode and fired up "Speedtest". It is reporting 7Mbps and 3.65Mbps up. It's not great, but to me that is usable if your privacy needs outweigh need for speed. And a screenshot if it's of interest, you can see that it's in VPN mode and Orbot is running: https://i.imgur.com/UZu4aJs.png

edit2: yikes, I actually just backed up 29 full-resolution screenshots to my Google Photos account without even realizing Orbot was still connected. Convinces me!

Why is this downvoted? It took less than 30 seconds to fire up Orbot, connect, open YouTube and start streaming a video without any issue or fuss.

Sometimes when people talk about Tor, it reminds me of how people talked about Linux up until a couple years ago - often touting very out-dated impressions as if they were current observations. Tor bandwidth is very different than it was 5-10 years ago.

How does a company pandering to a consumer group have anything to do with the civil rights struggle of that group?

How am I, as a gay man, responsible for the fact that companies see Pride as a valuable advertising angle? I don't know a single LGBT person that is happy about it, other than it means that society doesn't ACTIVELY, VIOLENTLY HATE US ANYMORE.

I have actually had many people from different walks of life mention this in the last month, people are taking note.

Ah yeah, Uber made the route a rainbow color, so fuck the people who would like to have basic civil protections from being fired for who they love. I love the absolutely non-existent logic of anti-gay idiots.

How does the percentage of LGBT folks change whether I should have equal rights? How does the percentage of LGBT folks change whether I could be fired because my boss hates gay people?

"more relaxed"? What does that even mean? What is uptight exactly?

I don't understand what imgur has to do with Twitter deciding to stop serving content to browsers with JS disabled?

I was just trying to explain why some of us were confused -- until I tweaked NoScript, the first tweet is shown by itself and is sort of perplexing without the rest of the thread as context.

Love clicking on twitter links and being completely confused. They've just stopped showing threads and replies on the non-JS page anymore. This is what we see, and this does appear to be a recent change: https://imgur.com/94u95no there's nothing below this, this is the full page.

Have you tried hitting Ctrl+Shift+N to restore the previously closed windows?

These will behave differently: (1) "Quitting" Firefox will multiple windows open. (2) Using your WM to close both Firefox windows. The latter will cause only the last-closed window to be restored, but you can pop the others off the stack too with Ctrl+Shift+N.

That's exactly my point. I knew enough to be "destructive" in middle school with the school computers, but I chose not to, because of how I was raised. It wasn't that the school group policy was effective, but rather that I understood running "fdisk" on the school PC would have more serious consequences than if I just showed people how to use OLE and Sound Recorder to unmute the computer speakers.

Technology makes a lot of things easier. I think the most effective thing is raising kids so that they want to do the right thing. But I also sort of think this all bottoms out on active, involved, caring parenting.

I get that this is HN, and "tech" is the solution to everything, but an android app or consumer router setting are not going to protect your kids from: predatory YouTube content (we all remember the epidemic of Spiderman humping Elsa, right?) or excessive advertising on YouTube that their brains aren't even capable of recognizing/processing (we all know about Logan Paul content that is basically a 20 minute ad being targetted at pre-teen kids, at-one-time available on YT Kids app, right?).

It's not going to protect them from being pressured for nudes. It's not going to stop them from committing felonies and producing and transmitting underage pornography. It's not going to stop rumors and gossip and drama from spreading across Facebook even if your router is off for the night.

My brother is a middle school math teacher. Find the nearest middle school teacher you know and ask them how pervasive these issues are. Just from their small middle school, they had dozens and dozens of students disciplined, just for nudes. One was supposedly going to be charged after the 6th+ time of soliciting nudes from a fellow student and then sharing them. The quiet nerdy kid built a categorized Dropbox collection from the entire school and was quietly sharing it. It means so little to them.

I'm actually sort of getting worked up here thinking about this. If you've sat on your hands until your kid is 12, you have no trust or dialog with them, god bless your hearts for thinking a firewall or Android app is going to help a single ounce. All you've done is setup a tiny puzzle. Most of us likely know the workarounds, they will figure it out, just like I did 15 years ago.

Of course, I think "tech" is probably an invaluable tool for setting time limits and helping with screen addiction, but it's not going to fix any of the other psychologically damaging aspects of youth+tech.

EDIT: I really appreciate and would like to echo jedberg and ziddoap's comments here as well.

Thanks for the constructive feedback as always.

Of course they are. Google is better at cloud and better at Linux, and Steam/Proton are already turning the tide for big games being available on Linux. If Stadia forces all triple-A titles to be Vulkan compatible, and more likely, Linux-compatible, Windows's strangehold on desktop gaming further weakens.

As a Linux user, cloud gaming excites me even though I have no intentions of ever using it.

I'm sorry, I tend not to view replies on HN.

Here's my repo: https://github.com/colemickens/nixcfg/

Start in {configurations,machines}/chimera.nix and explore outward from there ;).

EDIT: I forgot, I decommissioned 'chimera' because computers are terrible. `xeep` is probably a better example of what you're looking for. `azera` is an Azure VM that runs the services `chimera` used to host.

Sorry if the repos a bit messy. I don't practice good git hygiene there. Feel free to ping me on the nix IRC rooms or email me. I love NixOS and enjoy evangelizing cool tech.

Thank you for writing this up Raph. I've been following CRDT usage in Xray/Xi and am curious to see where collaborative editing goes. I appreciate you thinking about it upfront.

Just for context to the GP, Nix channels work basically the exact same way. Or, you can do as I do, and not use channels and always specify the exact nixpkgs revision as part of your Nix file. Anyone can `nix-build chimera.nix` and get a (nearly) bit-for-bit identical build of my laptop, which is great - we don't have to have a conversation about which channel I'm on, or which rev of which channel I'm on, etc.

I can then independently rev the nixpkgs revision and either commit that, or not.

I'm trying to learn more about IPFS for long term file storage. Do you know if these services are using "IPFS Cluster" or something like it to manage pins?