[-] jeffhykin@lemm.ee 3 points 2 days ago

Why not both?

[-] jeffhykin@lemm.ee 32 points 6 days ago* (last edited 6 days ago)

Its a tough problem. You have to find something that you want to exist; like an app or a website or a game. For example, try making a GUI for managing SSH keys. You know, like the ones github makes you create in order to clone and push to a repo. Make a visual representation of those keys (stored in the .ssh folder), and tools to add/delete them.

Along the way you'll find tons of missing things, tools that should exist but don't. Those are the "real" projects that will really expand your capabilities as a developer.

For example, I was coding in python and wanted to make a function that caches the output because the code was inherently slow.

  • but to cache an output we need to know the inputs are the same
  • hashes are good for this but lists can't be hashed with the built-in python hash function
  • we can make our own hash, but hashing a list that contains itself is hard
  • there is a solution for lists, but then hashing a set that contains itself is a serious problem (MUCH harder than hashing a list)
  • turns out hashing a set is the same problem as the graph-coloring problem (graph isomorphism)
  • suddenly I have a really deep understanding of recursive data structures all because I wanted to a function that caches its output.
27
submitted 1 week ago* (last edited 1 week ago) by jeffhykin@lemm.ee to c/privacy@lemmy.ml

Fingerprinting isn't always possible to defeat, and its not always possible to avoid making accounts (work and school accounts)

However, it should be possible to fill up tracked data with meaningless garbage and reduce the signal-to-noise ratio. Ex: a bot that browses random products on amazon to reduce profiling accuracy.

Do you guys know of any tools that do this? Anything from browser extensions to command line scripts, to anonymous group-accounts.

[-] jeffhykin@lemm.ee 113 points 2 weeks ago

I didnt upvote the other python-beginer friendly meme cause it wasn't accurate. But this one is on point.

[-] jeffhykin@lemm.ee 63 points 1 month ago* (last edited 1 month ago)

Don't forget the fully fledged remote desktop thats built in, WebVR (which is being replaced with Web XR), Web Bluetooth, Web USB (aka Web Serial), the API's for notifications, ambient light sensors, an entire transactional database (indexed DB), the language translation API, the Gamepad API (videogame controllers), hardware passkeys (yubikey), speech to text, text-to-speech, webGL, webGPU, webworkers, service workers, an entire suite of cryptography tools, GPS location, battery, vibration, FileSystem API, picture-in-picture API, WebRTC, WebSensors, etc.

And then, on top of all that, building a miniture OS-kernel so that tasks can be sandboxed scheduled/executed and prevent 1 tab from crashing everything or hogging resources.

25
submitted 2 months ago* (last edited 2 months ago) by jeffhykin@lemm.ee to c/privacy@lemmy.ml

I'm asking for existing tools/systems that let me programmatically say: "here is my public key, BUT if each of these 5 other public keys all send a signed message saying that my public key has been compromised, then you should mark my public key as compromised, and use the new one they provide". (This is not for a particular task, I'm just curious if any existing auth systems are capable of this)

I call the idea "guardian keys" because it could be friends' public keys or or just more-securely-stored less-frequently-used keys that you control.

NOTE: I know this would not work for data encryption. Encrypted data is simply gone if a key is lost. But, for proving an identity, like a login, there could be a system like this but I don't know of any

[-] jeffhykin@lemm.ee 62 points 3 months ago* (last edited 3 months ago)

This could actually be a pretty big deal

  1. The Eclipse foundation has been making alternatives to VS Code's "killer apps" (Docker, Python, Go, C++, SSH, Live share, etc). AKA the closed source ones exclusive to VS Code offical that make all forks of VS Code a huge downgrade. The Eclipse foundation is also running the extension store that powers VS Codium.
  2. "why not just use VS Codium?" (With the killer extensions made by Eclipse)
    • VS Codium is great, but because of manpower limits, they always have to be "downstream" of VS Code. They can't rewrite any of the core systems.
    • As someone who contributes to VS Code, and loves VS Codium, many issues I have with VS Code have been open on github for +7 years, with hundreds of comments and thumbs-ups. We can't even sort the file explorer view by last-edited and folders-first (but we can do folders-first alphabetical). Thats been open since 2017.
    • Theia looks like it could finally be the hard fork I've been waiting for. A hackable editor, trying to be open source, where all my extensions work, and the community can actually make a PR, get it merged, and extensions are not excessively sandboxed.
    • Will it be that? Only time will tell, but the Eclipse foundation has a pretty good record. They're definitely prepared for long term support.
58
submitted 5 months ago* (last edited 5 months ago) by jeffhykin@lemm.ee to c/nostupidquestions@lemmy.world

Why doesn't every computer have 256 char domain name, along with a private key to prove it is the sole owner of the address?

Edits: For those technically inclined: Stuff like DHCP seems unnecessary if every device has a serial number based address that's known not to collide. It seems way more simple and faster than leasing dynamic addresses. On top of that with VOIP I can get phone calls even without cell service, even behind a NAT. Why is the network designed in such a way where that is possible, but I can't buy a static address that will persist across networks endpoint changes (e.g. laptop connecting to a new unconfigured wifi connection) such that I can initiate a connection to my laptop while it is behind a NAT.

  • Yes, it would be a privacy nightmare, I want to know why it didnt turn out that way
  • When I say phone number, I mean including area/country code
  • AFAIK IP addresses (even static public ones) are not equivlent to phone numbers. I don't get a new phone number every time I connect to a new cell tower. Even if a static IP is assigned to a device, my understanding is that connecting the device to a new uncontrolled WiFi, especially a router with a NAT, will make it so that people who try to connect to the static IP will simply fail.
  • No, MAC addresses are not equivalent phone numbers. 1. Phone numbers have one unique owner, MAC addresses can have many owners because they can be changed at any time to any thing on most laptops. 2. A message can't be sent directly to a MAC address in the same way as a phone number
  • Yes, IMEI is unique, but my laptop doesn't have one and even if it did its not the same as an eSim or sim card. We can send a message to an activated Sim, we can't send a message to an IMEI or serial number
65
submitted 5 months ago* (last edited 5 months ago) by jeffhykin@lemm.ee to c/privacy@lemmy.ml
  • I make websites
  • If someone is banned twice (two accounts) I want it to take them more than 5min and a VPN to make a 3rd account
  • I'm okay with extreme solutions, like requiring everyone to have a Yubikey-or-similar physical key
  • I really hate the trend of relying on a phone number or Google capcha as a not-a-bot detection. Both have tons of problems
  • but spam (automated account creation) is a real problem

What kind of auth should I use for my websites?

[-] jeffhykin@lemm.ee 61 points 7 months ago
[-] jeffhykin@lemm.ee 68 points 7 months ago* (last edited 7 months ago)

For context, Tea (the cli tool) was created by the author of homebrew. But for some reason he changed the name to pkgx and made tea into the crypto thing: From the creator of Homebrew, Tea raises $8.9M to build a protocol that helps open source developers get paid

He's probably interested in blocking these kinds of PR's.

[-] jeffhykin@lemm.ee 92 points 7 months ago* (last edited 7 months ago)

What really bothers me is the "measuring foot traffic". I already refuse to use vending-machines because of the pricing and unhealthyness, but you're telling me I need to make GDPR takedown requests just for walking to class?

[-] jeffhykin@lemm.ee 276 points 7 months ago* (last edited 7 months ago)

It gets worse :/

I looked up the brand (Invenda). Their PDF includes "using AI", "measuring foot traffic", and gathering "gender/age/etc" e.g. facial recognition to estimate a persons age and gender

And in terms of "stored locally" this is straight from their website

The machine comes with a “brain” – Invenda OS – and is connected to the Invenda Cloud, which allows you to manage it remotely and gather valuable environmental, consumer and transactional data. The device can be branded according to your requirements to further enhance your brand presence.

The marketing also so fricken backwards that it reads like satire:

For a consumer, there’s no greater comfort than shopping pressure-free. Invenda Wallet allows consumers to browse, select and pay for products leisurely and privately 🤦‍♂️

[-] jeffhykin@lemm.ee 92 points 7 months ago

16% said "should not" to a grocery store? What?

I feel like there should be a separate question for the "I don't want anything near me" rural choice, since those might be making the rest of the responses misleading.

31
submitted 8 months ago* (last edited 8 months ago) by jeffhykin@lemm.ee to c/programming@programming.dev

My friends and I did this a while ago and it was quite fun.

43
submitted 10 months ago* (last edited 10 months ago) by jeffhykin@lemm.ee to c/asklemmy@lemmy.world

This might be a limitation of Lemmy or voyager, but is there some option for me to "watch" or "subscribe" to a post and be notified of new comments?

Especially relevant to asklemmy since occasionally I see a post before there's any answers.

10
submitted 10 months ago* (last edited 10 months ago) by jeffhykin@lemm.ee to c/adhd@lemmy.world

I'd like a small group with strict/well-defined meeting times that has a coach/conversation-conductor to keep topics on track. I feel like it would work really well if advice was given/received by others with ADHD, while having a leader do stuff like

  • make sure 1 person doesn't dominate the conversation
  • keep meeting notes
  • call/text people who miss a meeting
  • follow up with people who said they were going to do something

But I've never really heard of such a system.

I've found at least two online services, but I don't really know if they're worth trying. I'm curious on your opinion and/or if any of you have tried something similar.

There's "Study Hall" which I'm not sure is what I'm really looking for https://adult-study-hall-by-adhd-rewired.mn.co/sign_up?plan_id=230880

Then this site seems to have good coaching https://news.ycombinator.com/item?id=37252231

25
submitted 10 months ago* (last edited 10 months ago) by jeffhykin@lemm.ee to c/fediverse@lemmy.world

If a human posted every 5 min, got 0 upvotes for 20 posts straight, we would ban them for spam. If bots would limit themselves to posting once a day, or once a week, and only post the top-voted non-duplicate post of that timeframe, it would be a dramatic improvement. For once, we might actually see real-lemmy posts along side bot posts, instead of the community being exclusively bots (or 99% bot posts) or exclusively Lemmy users.

I would tell the bot creators myself, except I don't know how to get in contact with them. Is there a consistent way to contact a bot creator?

[-] jeffhykin@lemm.ee 86 points 1 year ago* (last edited 1 year ago)

I dislike these kinds of articles (as someone who bikes to work everyday) because of how they treat an urban perspective as if its the only perspective. Some highway stoplights are in the middle of nowhere, have no crosswalk, can go a full year without a single pedestrian, and often have mimal cars. People who sit at those lights every day get mad from articles (like this one) that are completely tonedeaf to their situation.

Yes, in a busy city it makes no sense to allow turn on red, and the article has some great info but it also makes no sense to wait 2 minutes on red when there isn't a car or human within a 5 mile radius.

If we want people to be onboard with change we've got to include them. We can solve both; like getting rual lights to use a flashing red to indicate "allows for turning on red" and THEN get city lights to ban turning right on solid red. Solving one problem expense of another is a quick way to create enemies.

23
submitted 1 year ago* (last edited 1 year ago) by jeffhykin@lemm.ee to c/ergomechkeyboards@lemmy.world

I know, this isn't a keyboard post, but lets be real, if there's any communities that would know/care about programable foot pedals it would be this one.

I'm looking for a USB foot pedal, ideally something clicky-feeling, with decent-resistance, short travel distance. I only need 1 pedal but something with more than one is fine. I don't need anything premium; I'm just browsing amazon I can't really spot the difference between mushy garabage and decent-ish build quality.

Any recommendations?

(Non-USB recommendations are fine; hopefully this post will be useful to others considering a foot pedal)

8
submitted 1 year ago by jeffhykin@lemm.ee to c/typography@lemmy.ca

Its not much, as its a variation on Iosevka, exclusively for programming, and I made it a while ago, but I wanted to see what the community thinks. (I tried including a picture with the post but it failed to upload for some reason)

I'd love to see more open source self-made fonts. Any criticisims on functionality, or recommended changes are welcome.

80
submitted 1 year ago* (last edited 1 year ago) by jeffhykin@lemm.ee to c/privacy@lemmy.ml

I couldn't find a post in this community about cameras so I figured I'd make one. Requirements:

  • No "sign up" required to record video
  • Video is stored locally
  • Video is in a non-propriatary format
  • Can work offline

Optional/Discussion Points:

  • Can wireless connectivity be hardware disabled
  • Can auto-update be disabled
  • Does the device try to "phone home" if it is connected to wifi
  • Disk encryption would be nice but I doubt that'll be an option for anything other than self-hosted stuff

Does anyone know about Lorex (it seems more privacy centered)?

I'm highly technical, so feel free to mention self hosted raspberry pi soltuions as well.

7

I love a lot of the keyboards on here (especially ones with an integrated track ball) but I'm a poor grad student under deadlines; even most kit-boards are too much of a time sink for me to soldier together.

I know at least some of you like trying new boards all the time. And I'm guessing some of you have one or two daily drivers and then 3 older boards; maybe one that was a prototype build, or a novelty micro-board that was fun to just play with but not use, etc.

I would be happy to effectively fund a new kit/build for someone by buying one of those older (assembled) boards, but I don't know where to look.

Is there any kind of used market, or do you guys have any recommendations?

[-] jeffhykin@lemm.ee 54 points 1 year ago* (last edited 1 year ago)

I write a lot of bootstrapping scripts, and I have a solution thats probably something you and others in this thread have never seen before. You can write a single script in a full/normal language, no compilation step, and it works on systems that only have bash/sh. It doesn't compile to bash, or at least not in the way you might think/expect it to, but it should do what you want.

(guillotine because it's a universal executor) https://github.com/jeff-hykin/deno-guillotine

This^ one uses Deno/JavaScript, but in principle it might be possible to do with other languages. It definitely requires some explanation, so I'll try to give that here;

As another person said, shells are not nearly as standardized as we need them to be. Mac uses zsh, Ubuntu uses dash, neither store a posix bash exectuable in the same place, and both have ls and grep differences that are big enough to crash common scripts. Even if you're super strict on POSIX compliance, common things will still break if you write a big script (or trying to compile a big program to bash).

I hate JS as much as the next guy, but it is possible to write a single text file that is valid bash/dash/zsh/powershell and valid JavaScript all at the same time. It sounds impossible, but there is enough overlapping syntax that actually any javascript program can be converted into a valid bash script without mangling the JS code. It might be possible to do for python as well.

POSIX is good enough for making a small, carefully-crafted well-tested OS-detecting caveat-handling script. So that's exactly what we do; use a small shell script at the top to ensure that the JS runtime you want is installed (auto install if missing). Then the script executes itself again using the JS runtime. It wasn't easy but I a made a library that explains how it's possible and gives a cli tool that automates it for the Deno runtime (the link I posted above).

After that, I just recreated tools that feel like bash, but this time they are actually cross platform. Ex:

let argWithSpaces = "some thing"
run`echo hello ${argWithSpaces}`

I picked Deno because it auto installs libraries (imports directly from URL so users don't have to install anything)

view more: next ›

jeffhykin

joined 1 year ago