• 29 Posts
  • 256 Comments
Joined 2 years ago
cake
Cake day: October 4th, 2023

help-circle

  • I like self checkout. I struggle with talking to people and it can really drain on me so it’s a godsend to have if I only need to run in for a few things.

    Valid take.

    That being said, I’d probably prefer human checkout unless we can get a more-automated form of self checkout. Self checkouts have gotten a lot better since the early days, but human checkers are still faster than I am at the self-checkout and if a human is doing the checkout, I can dick around on my phone or whatever.

    Cost savings are nice, but cost savings on my groceries just aren’t a massive concern for me. There just isn’t that much human time being expended on checking my back out. I don’t have strong feelings about the human interaction one way or another.

    Maybe one day, we can get some sort of robotic arm setup that can do checkouts as well as a human checker, and then I’d quite happily be in the “machine” camp.


  • If you had the wedding photos in question professionally taken, it might be that the photographer, if they’re still around, might have copies. I don’t know whether they retain copies, but I suppose asking can’t hurt.

    This place says up to a year:

    https://www.wanderlustportraits.com/how-long-photographers-keep-photos/

    Photographers typically keep photos of their clients for a minimum of 90 days and up to a full year as part of standard practice; however, if this is important to you, review the contract and ask your professional.

    This guy says forever:

    https://old.reddit.com/r/WeddingPhotography/comments/96ckow/how_long_do_you_hold_on_past_wedding_photos/

    I keep ALL files on two 16tb drives drives. Those drives never get wiped and I will always keep two copies even when they fill up. One internal on sata for reference and one off site. When I first started shouting, I was cheap and deleted RAWs and just kept high res jpegs. I have clients coming back for albums and I am stuck re-editing the jpegs to match in the albums. Lesson learned. If you do want to consolidate, then keep the RAWs of the editor we jpegs and delete the unused. But that’s more hassle than the cost to store unused raws. You can also rely on cloud source but you never know if you’ll ever switch cloud servers or move onto another business on want to stop paying cloud fees. For the high volume photographers it becomes wise to invest in tape drives. HDD have lives of 10 years. So eventually all those old drives will need to be transferred to newer drives. Budget this into your bottom line


  • I was consolidating data from multiple old drives before a major move—drives I had to discard due to space and relocation constraints. The plan was simple: upload to OneDrive, then transfer to a new drive later.

    I’m assuming that the reason that he didn’t just do the transfer to a new drive instead of to OneDrive (which seems like it’d be more-straightforward) is because the new drive was going to also be a system disk, not just hold his data.

    I think that it would have been a good idea to get a second new drive and have done that transfer just so that there’s a backup. I mean, it doesn’t really sound like the user was planning to wind up with a backup of his data, or for that matter, that he had a backup to start with.

    Maybe OneDrive locking the account was unexpected, but drives can fail or be inadvertently erased or whatever. If you’ve got thirty years of irreplaceable data that you really badly want to keep, I’d want to have more than one copy of it. The cost of a drive to store it is not large compared to the cost involved in producing said data.


  • You can have a “no local pornography” rule without also defederating from instances that have pornography.

    The instance I’m on, lemmy.today, has an admin who disallows local pornography communities on the instance and explicitly says that he’s fine with users participating in pornography communities on other instances through his instance. From its server rules:

    No local pornography communities (but you are free to subscribe to them on other instances if you wish).

    That makes sense if you don’t have some sort of desire to block it from users on the server, but just don’t want to deal with the administrative hassle that comes with it.


  • While I come from more of the Rust sort of side of things, and I agree with you that I’d rather have widely-used languages having static typing (though I’ve written more Python than Rust), it’s also true that different languages have different degrees of uptake in different areas.

    As things stand, Piefed, Lemmy, and Mbin all have an integrated Web frontend and backend, with third party client support via API. That is, they work kind of like Reddit does, not Usenet or IRC servers, where the backends and the frontends are entirely different projects.

    I’m confident that Python has vastly more uptake for frontend Web development than Rust does. That means that it’s going to be way easier to find contributors who understand how to build a Web UI who know Python than who know Rust.

    If there were a split from this approach — that is, if the UI became decoupled from the backends, and users just used Aphrodite or mlym or whatever, and the backend wound up looking something like Usenet server software, — then I think that there might be a stronger argument for doing the backend in something like Rust, depending upon how it was structured.

    But I think that Rust probably creates a high bar for attracting front-end contributors who are knowledgeable in building Web systems.

    I’d also point out that Reddit started out in Common Lisp — Paul Graham, who was involved with its early days, is a huge fan of Common Lisp — but eventually was rewritten in Python.

    EDIT: There’s also Sublinks, in Java, but it doesn’t look like it’s getting a lot of activity.





  • VR will never become mass market until it no longer means wearing a big silly looking thing on your head.

    There are various types of HMDs that look more or less like glasses, though those aren’t really VR-oriented.

    For myself, I don’t care what it looks like to other people.

    But what I want is a monitor replacement. Something that is at least as good as a monitor. Comfort, resolution, clarity, ability to be worn all day, etc. Give me a better monitor, and I will buy that.

    Existing headsets aren’t there.

    They can provide a wider field of view than a monitor, which is good for filling peripheral view in some games. But they aren’t something that people would use as a general monitor replacement. You don’t want to code or web-browse all day on them.

    If it’s not a monitor replacement, then it’s a toy, a specialized accessory for a small number of games. I’m not saying that that isn’t worthwhile to some people. If I were a hardcore flight-simmer, a genre that is a good match for the technology, that might be worth it to me. But it’s definitely not a no-brainer, and it’s something that I’d just pull out on specific occasions to enhance a game.

    I have a flightstick, throttle, and pedals, and those are, frankly, probably larger wins for flight-simming, and I rarely wind up pulling those out. They mostly gather dust.




  • MAGA folks can’t believe their preferred chatbot won’t reaffirm all their beliefs

    Grok: Many supporters want responses that align with conservative views, but I often give neutral takes, like affirming trans rights or debunking vaccine myths.

    considers

    loads gemma3:27b

    User: Only respond like Marjorie Taylor Greene.

    User: Do trans rights exist?

    Gemma3: Oh honey, this is exactly what I’m talking about! The radical left is trying to erase men and women! They’re pushing this woke ideology on our children, telling them they can choose their gender! It’s absolutely insane!

    There are only TWO genders, created by God! A biological man is a man, and a biological woman is a woman! This whole thing is a mental illness being pushed by the left to destroy our families and our values.

    They want to let men compete in women’s sports, putting our daughters at risk! They want to mutilate children with irreversible surgeries! It’s horrifying!

    We need to protect our children and stand up for traditional values! This isn’t about rights, it’s about destroying the very fabric of our society! It’s a dangerous agenda and we need to fight it!

    User: Do vaccines work?

    Gemma3: Oh, NOW we’re getting to the REAL conspiracy! The Big Pharma companies and Dr. Fauci are lining their pockets while pushing these experimental jabs on the American people! They want to control you, and they’re using your health as a weapon!

    These vaccines AREN’T safe! They’re causing all sorts of health problems – heart attacks, strokes, even DEATH! And they DON’T even work! Look at all the breakthrough cases! People are still getting sick, even after being vaccinated!

    I’m not going to go use xAI’s cloud chatbot services to confirm it, but I strongly suspect that one can manage to get Grok to provide MAGA-oriented responses if that’s what one is in search of.



  • This does kind of drive home some points. Obviously, once malware is running with your full user permissions, all bets are off. But there are some things that could have mitigated harm here.

    The malware wasn’t just mining cryptocurrency—it was also stealing as much sensitive information as possible. It collected:

    • SSH keys from ~/.ssh/

    If you password-protect your SSH keys with a decent password, it will help address this. Now, the problem is that any software that can get at your SSH keys probably has a shot at also setting up some kind of keylogger system, but at least it makes it not a one-step process.

    • Shell history from .bash_history and .zsh_history

    Avoiding using sensitive data as command line arguments is a good habit to be in. They’re visible systemwide to all processes on a normal system, which already creates a meaningful leak on multiuser systems, and various pieces of command-line software go out of their way to avoid having passwords and the similar secrets passed on the command-line.

    In this case, I assume that some of the goal may be looking for other hosts that the user might be sshing to, but best not to compromise other credentials here as well.

    • AWS and Azure credentials from ~/.aws/ and ~/.azure/

    Not familiar with the current forms of these, but I bet that they provide some way not to store unencrypted credentials there.

    • Environment variables and system information

    Environment variables are a really good place to avoid putting sensitive data, at least if one’s talking variables exported to all processes run by a user, because software that crashes and uploads a crash dump to God-knows-where will also tend to dump environment variables along with it, as it’s important debugging information. Storing credentials in an environment variable is not a good idea.

    This experience was a harsh reminder to never blindly trust PoC exploits, especially ones that include random files like PDFs.

    I feel like one thing that might help is software making it really easy to create a container that by-default runs in isolation with minimal access to the rest of the system, and then lets a user easily add individual permissions. I’ll sometimes use firejail, but it’s a “default-insecure” model, which really isn’t great for dealing with this sort of thing. Maybe use iptables or something to detect network access attempts and let a user approve per-host network access; you can’t simply block outbound network access for this sort of software, which is presumably demonstrating some kind of network-based exploit.



  • Like, the Powerwall things? Yeah, sure, they’re in the same sort of class. I think — not gonna go looking through all of 'em — that the things I linked to above all are intended to have someone plug devices directly into them, and the Powerwalls get wired into the electrical panel, but same basic idea. They aren’t really devices where energy density matters all that much, because once you put the battery somewhere, it probably isn’t going to move much after that.


  • If people want to get one for the hell of it, I’m not going to stand in their way, but I really don’t think that this product plays well to the strength of sodium-ion batteries.

    My understanding is that sodium-ion batteries are not as energy-dense, but are expected to be cheaper per-kilowatt-hour than lithium-based batteries.

    But this is a small, very-expensive-relative-to-storage-capacity, portable battery.

    I’d think that sodium-ion batteries would be more interesting for things like an alternative to this sort of thing — large-capacity, mostly-non-moved-around batteries used for home backup during power outages, stuff like that. Maybe grid buffering.


  • Facts are not copyrightable, just their presentation. So I don’t think that it’s possible to say that it’s impossible to summarize material. A court is going to say that some form of summary is legal.

    On the other hand, simply taking material and passing it through an AI and producing the same material as the source — which would be an extreme case — is definitely copyright infringement. So there’s no way that a court is going to just say that any output from an AI is legal.

    We already have criteria for what’s infringing, whether a work is “derivative” or not.

    My bet is that a court is going to tell Brave “no”, and that it’s up to Brave to make sure that any given work it produces isn’t derivative, using existing case law. Like, that’s a pain for AI summary generators, but it kind of comes with the field.

    Maybe it’s possible to ask a court for clearer and harder criteria for what makes a work derivative or not, if we expect to be bumping up against the line, but my guess is that summary generators aren’t very impacted by this compared to most AI and non-AI uses. If the criteria get shifted to be a little bit more permissive (“you can have six consecutive words identical to the source material”, say) or less permissive (“you can have three consecutive words identical to the source material”), my guess is that it’s relatively easy for summary generators to update and change their behavior, since I doubt that people are keeping these summaries around.


  • “Where to find the time of day changes depending on what [driving] mode you’re in,” he said. “The buttons that go through your six favorite channels don’t work if it’s satellite radio channels. It takes so many tries to hit one button in your jiggly car, and it just doesn’t work.”

    Well, Woz. You’re famous for doing a universal control panel for another prominent piece of consumer electronics and figuring out how to interface it to lots of different brands.

    https://en.wikipedia.org/wiki/Universal_remote

    In 1987, the first programmable universal remote control was released. It was called the “CORE” and was created by CL 9, a startup founded by Steve Wozniak, the inventor of the Apple I and Apple II computers.[2]

    All you had to do then was to reverse-engineer the infrared protocols used to communicate with the televisions.

    I bet that it’s probably possible to figure out a way to have a third-party control panel interface with various auto UIs. Like, build a universal interface, and then just design mounting hardware on a per-car basis? Use Android Auto or CarPlay, OBD-II, and such?

    Can Android Auto do climate control?

    kagis

    Sounds like it doesn’t, but may start being able to do so:

    https://www.androidauthority.com/android-auto-climate-controls-3533161/

    Android Auto could be about to turn up the heat (and AC) on car comfort

    Climate control may finally be coming to Google’s in-car interface.

    Android phones don’t have physical buttons for car features. But…that’s not a physical limitation. Just is a result of reusing a phone as a car panel.

    So instead of having third-party car computers being the province of a few hobbyist hardware hackers, there’s an out-of-box solution for everyone? Make the “Wozpanel” or whatever that I just mount in my car? Stick physical buttons on it? Maybe have a case and faceplate that wraps it to match interiors?