Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)C

chaospatterns

@ chaospatterns @lemmy.world

Posts
30
Comments
158
Joined
3 yr. ago

  • Peertube Now Has a MAU of 48.9k!

    Jump

  • Monthly active users. A metric to show the number of users who are considered active at least once per month.

  • Dear OAuth Providers

    Jump

  • The spec mandating its as a single string isn't that crazy. It's good to have a consistent response format so a basic deserializer can deserialize any error response object and get something out.

    If you have different providers. One that returns error: { code: string } and another does something else, you end up with the same problem this post talks about-- Inconsistency.

    As far as I can tell, the spec doesn't limit you to just the one field and you can add other optional fields to the top level to the response that the caller can optionally decide to handle. But if you know there's going to be a field called error that is a string. You always get at least something out of that to present.

  • Dear OAuth Providers

    Jump

  • It just goes to show the small parts of API design matter just as much as the big parts. I've worked with a lot of engineers who are so eager to draw big boxes and arrow architectural diagrams, but then just rush the details because that's not important.

  • How could digitial age verification be possibly implemented with privacy in mind?

    Jump

  • The hard part is browsers. Cookies and local storage are limited by the origin URL. You need it explicitly set on the domains you intend to visit, but those domains don't know your age. The one that knows the age is the identity provider, but it can't set it for all domains. There are other techniques that you could use, like a smart card combined with a browser extension to do local based user info attestation, but those are difficult to manage at a nation scale and I suspect people will struggle with them, though there are some countries that do have national smart cards (e.g. Estonia.)

  • How could digitial age verification be possibly implemented with privacy in mind?

    Jump

  • Its possible to implement something that hides your actual age from a website, but the tricky part is hiding what website you're visiting from an identity provider.

    Let's walk through a wrong solution to get some fundamentals. If you're familiar with SSO login, a website makes a request token to login the user and makes claims (these request pieces of user information.) One could simply request "is the user older than 18?" And that hides the actual age and user identity.

    The problem is how do you hide what website you're going to from the identity provider? In most SSO style logins, you need to know the web page to redirect back to the original site. Thus leaking information about websites you probably don't want to share.

    The problem with proposals that focus on the crypto is that they actually have to be implemented using today's browser and HTTP standards to get people to use them.

  • What happens if I use my freezer below -15C?

    Jump

  • I could connect a smart plug and disconnect it if below -15, if that would help

    If you didn't know already, many smart plugs are not rated for the amount of power that fridges and other compressor based appliances. They can overlosd the plugs and cause failures or fires. Also shutting off a compressor mid cycle increases the wear.

  • Absurd AI Slop About How Elon Musk Will Fix America Is Megaviral on Facebook

    Jump

  • These pictures remind me of YouTube thumbnails with fhe style of over emphasized visuals and it makes me wonder if people got accustomed to that style and that makes it easier to pass the BS test.

  • Deleted

    Permanently Deleted

    Jump

  • Just think of all the countries and companies that grab this data, group by email address, then start to identify preferences of people around the world. Its not just for identity theft. The possibilities are endless! And horrifying.

  • Deleted

    Permanently Deleted

    Jump

  • It's possible, but it costs money to design the hardware so it's accessible, it has to use a connector which has to be robust against vibrations (is m.2 robust?), then there needs to be a standardized protocol to communicate with the card. Does the car computer need to know how to authenticate against the cell network or does the card? Is it industry standardized or specific to the manufacturer? All kinds of things need to be designed and car manufacturers have no reason to invest in they.

  • Deleted

    Permanently Deleted

    Jump

  • The problem is the cell modem in the car, which is hard to replace. Cars last a lot longer than phones do. When whatever network that the car uses shuts down, then you can't remote start your car. That's a marginal cost that the car company has to pay for.

  • Two never-before-seen tools, from same group, infect air-gapped devices

    Jump

  • CDs have an advantage over USB drives in that they can't actually secretly be USB HID devices like a fake keyboard or mouse that runs a bunch of commands when it plugs in. It's only a storage device.

    A super secure environment might then lock down all USB devices to ones known by them and then epoxy all ports and devices.

  • TIL: FEMA has a Hurricane Rumor Response site

    Jump

  • Great if only my family would even believe this as opposed to just saying something about FEMA using DEW and HAARP and space lasers to actually create hurricanes to be able to extract lithium or something.

  • The Disappearance of an Internet Domain

    Jump

  • ICANN specifically set aside all two character TLDs to be for country specific codes. There's only a few cases where they kept ex countries TLDs around and phased them out over several years. It would be an entirely new precedent if they did keep it. So I wouldn't depend on it

  • Three Mile Island owner seeks $1.6 billion federal loan to restart nuclear plant for Microsoft AI facility

    Jump

  • I have my doubts that a company would be able to just abandon a live and operational nuclear power plant. I'm no nuclear or power engineer, but I am familiar with data center power consumption. There are companies in the region that would absolutely build more data centers, but are power constrained from the utility companies in the area, that are not just for AI, but for general compute. Even then, it's low carbon production energy. If you have a ton of excess power, just start forcing high carbon production facilities in the area to close and now you've greened the grid.

  • Three Mile Island owner seeks $1.6 billion federal loan to restart nuclear plant for Microsoft AI facility

    Jump

  • While I'm not a fan of the loan nor the massive waste of power most LLMs are, I actually think that's its a good thing because if Microsoft can break through some of the excessive red tape on nuclear plants then they'll bring this online and hopefully prove that nuclear power can be safe and a good source of large amounts of power, when the huge demand for AI dies down, then maybe they'll keep the plant around and provide power to the grid.

  • Tesla issues 5th recall for the new Cybertruck within a year, the latest due to rearview camera

    Jump

  • Kind of but it's not fair to put it all on the manager. Multiple people decided to hire the person. Somebody else approved that code review. People approved the technical design. Why didn't the tech lead raise concerns with the manager about someone's under-performance, etc. it's unfair to just put all blame on the manager.

    The idea of extreme ownership is about not saying "not my problem I won't do anything" or blaming your reports. It's about saying I can and should do anything and everything in my ability to fix problems.

  • Deleted

    DeArrow is an open source browser extension for crowdsourcing better titles and thumbnails on YouTube.

    Jump

  • This is my biggest challenge with this extension. What's clickbait to one person is not to another. Several times I've come across titles that get mangled when rewritten to lose key points. Or the image gets replaced with a random screen grab. There's a difference between somebody doing the YouTube face and a title with "the craziest stunt you've ever seen" and an artist photo with a title saying the "a crazy stunt jump through a burning hoop". I'm okay with the latter but dearrow will often remove crazy. The is just an contrived example

    One person could still say "crazy" makes it clickbait, but having some adjectives are fine

  • Port Fowarding minecraft server hardening question (gentoo)

    Jump

  • If you are port forwarding. I recommend not exposing it on the default port of 25565 and instead expose it as a random port. Then, assuming you have a domain name, create an SRV record that points to your IP and port. This will cut down on the drive by scanners who scan by ports, but won't totally eliminate it. If you do use the SRV record, your friends won't even notice there's a different port.