Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)M

MajorHavoc

@ MajorHavoc @programming.dev

Posts
6
Comments
1083
Joined
3 yr. ago

  • Ensign Bean, reporting for duty

    Jump

  • "Why does the navigator of the Enterprise have to watch his step?"

    "Because the Captain does his doody on the bridge!"

  • Playing "Minecraft" Without Minecraft

    Jump

  • This recipe is cool, but needlessly complicated.

    As the top Hacker News comment points out, just grab Luanti and Mineclonia and start playing.

    On your SteamDeck, boot to Desktop, search for Luanti in the app store. Install. "Add to Steam". Reboot. Grab a community controller mapping. Enjoy.

    Or on Windows, Mac, Android, Linux or FreeBSD: Luanti Downloads, and enjoy.

    Yes, you can play cross platform between all of these. Any running copy includes an optional server for your friends.

    No, the system requirements aren't the same as Minecraft - you can get away with way cheaper hardware.

    Edit: And check out Lemmy's Luanti community athttps://lemmy.ml/c/minetest

  • Deleted

    Mark Zuckerberg Humiliated as AI Glasses Debut Fails in Front of Huge Crowd

    Jump

  • Yep. And since they're made by "Meta", any promise that those glasses aren't constantly recording and over sharing - well, I won't believe it.

  • I do indeed

    Jump

  • "If you don't want to carry it home, that's okay. I can bring the smell home for us with a quick roll in it."

  • Do you think anyone will be able to remember who any of us are in 600 years?

    Jump

  • Yes. Or, they'll get the thread with the awkward dog meme about a microwave. It's beautiful to contemplate.

  • What does the social power heirarchy in the United States look like? What are the different classes?

    Jump

  • As someone "ordinary rich", it is acceptable to also call me "useful idiot who turns over power and influence to the real rich in exchange for an empty promise of joining them".

  • How can we sandbox our development machines?

    Jump

  • Three thoughts for you:

    1. If you're not confident, and the stakes are high, just use a separate computer, on a different network. I've had my ass saved more times by my humility, than by my cleverness.
    2. Podman/Docker/Rancher does provide some security advantage, but these are not security tools. Malicious code has a history of breaking out of containers. Do not run code you expect malice from with only a container as protection. The container layer is not enough.
    3. When I'm nervous that non-root processes on my device might acccess my most valuable secrets, I take a hard look at my secret management: Does each secret serve a limited purpose? Is each secret easy and cheap to replace? Does unlocking each secret require prompting the human user? Are secrets encrypted at rest and in transit? Does unlocking secrets invoke multifactor auth? Etc.

  • The vibecoders are becoming sentient

    Jump

  • If it’s all dumped into a single commit, I will whip your computer into the nearest body of water and tell you to go fish it out.

    I'm going to steal this for an update to an internal guidance document for my dev team. Thank you.

  • The right way, the wrong way...

    Jump

  • People are too hard on Janeway. She didn't have great options here. I'm sure if she could have, she would have sacrificed Ensign Kim - for not refilling the coffee replicator.

  • An AI bubble threatens Silicon Valley, and all of us

    Jump

  • AI is propping up the blockchain bubble that already popped.

    Both have been primarily interesting solutions looking for problems to solve without any hard work, rather than having any worthwhile investment strategy, in most cases.

    There's people doing hard work with block chain and AI to solve real problems. But there aren't "the vast majority of venture funds" number of people doing that.

    I am constantly amazed at how long it takes folks to realize their money is being pissed away.

    An alternative less generous assumption is that they're mostly just laundering crime money, and so don't mind the high rates of loss.

  • Why do programmers want to quit programming and start a homestead?

    Jump

  • Heh. Good point.

  • Deleted

    Permanently Deleted

    Jump

  • Oh, gee. A Microsoft product that worked perfectly locally is about to require a subscription. Who could have possibly guessed that would happen, yet again? (This is sarcasm.)

    I really like OneNote, but I decided to learn something else when I realized which way the wind was blowing.

  • Why do programmers want to quit programming and start a homestead?

    Jump

  • I've longed to work the fields with my hands and simple tools because the fields don't fucking spit out meaningless gibberish when I'm just trying to get them to process a simple text field, and my hands don't have documentation apparently written by a distracted seven year old.

    And while the living off the land will certainly kill me due to my own incompetence, nature will have the decency to just eat my corpse and not gloat over my failure repeatedly in a hung CI/CD process for the rest of eternity.

  • Why do programmers want to quit programming and start a homestead?

    Jump

  • Why do programmers want to quit programming and start a homestead?

    Jump

  • Holy wall of text, Batman.

  • Job Interview Question for Team Lead Position

    Jump

  • Usually the asshole.

  • isInHell = 'true'

    Jump

  • It’s you can modify the settings file you sure as hell can put the malware anywhere you want

    True. (But in case it amuses you or others reading along:) But a code settings file still carries it's own special risk, as an executable file, in a predictable place, that gets run regularly.

    An executable settings file is particularly nice for the attacker, as it's a great place to ensure that any injected code gets executed without much effort.

    In particular, if an attacker can force a reboot, they know the settings file will get read reasonably early during the start-up process.

    So a settings file that's written in code can be useful for an attacker who can write to the disk (like through a poorly secured upload prompt), but doesn't have full shell access yet.

    They will typically upload a reverse shell, and use a line added to settings to ensure the reverse shell gets executed and starts listening for connections.

    Edit (because it may also amuse anyone reading along): The same attack can be accomplished with a JSON or YAML settings file, but it relies on the JSON or YAML interpreter having a known critical security flaw. Thankfully most of them don't usually have one, most of the time, if they're kept up to date.

  • Trek actors keep trying to kill Dr. Jones!

    Jump

  • Then every question afterwards is just "who couldn't get promoted even a single time during a years long mission in the Delta quadrant?"

  • This is outrageous it's unfair!

    Jump

  • Yeah. The "this got dumped on us and we're doing the minimum until we can replace it" is a genuinely solid use case for vibe coding.

    And honestly, that's all I usually did with those before AI came along anyway. So I welcome better tools for it.