Notices by jaseg (jaseg@chaos.social)

@filmroellchen @domi @BleepingComputer As far as I can tell, this article is just bullshit. This is not a backdoor. HCI is not spoken over the air, instead it’s the local interface between the Bluetooth chipset and the application proscessor. It’s a trusted interface.

This doesn’t look like anyone’s “fault” to me, it just looks like a completely harmless debugging feature someone who either doesn’t know what they are doing or who is chasing clout is trying to blow up into a scandal.

@obrhoff yeah, the SSD prices are crazy. If you don’t need to access all your storage on the go, a NAS could allow both laptop and desktop to access arbitrary amounts of storage at least while you are at home. I wouldn’t want to care around a portable SSD because I feel they’re easy to loose or get stolen.

For the broken laptop while traveling scenario, with appple devices at least you can get a new one within a day or so in most developed countries.

@obrhoff if you plan on commuting or traveling with the laptop, I think the light laptop plus beefy desktop option is best. I remember upgrading my main laptop from a 10 year old, 2.5kg chonker to a modern 1kg ultralight and how much nicer that thing is to carry in my backpack now.

A secondary plus is that in the age of thunderbolt, docking solutions all suck, especially on apple devices (poor display output support), and with the desktop you might not have to dock the laptop.

@nafmo uwsgi has a minimal example in their docs. Uwsgi is the thing that runs python, imports your script, and calls a function in it once per request. You only need to provide that function.

Have a look here: https://uwsgi-docs.readthedocs.io/en/latest/WSGIquickstart.html

@nafmo wsgi is pretty much the standard these days. If you just want to handle raw requests yourself, cgi style, you can just use a bare python script with a wsgi runner like uwsgi, which requires no python code beyond a single function definition.

@lauren I found that funny too, both on yt and here on the fediverse. Reading that press release, I saw a company that was badly scared of one of their products burning down someone’s home, and that clumsily tried to prevent that.

Then on the other side I saw a bunch of people who were traumatized to hell by hardware manufacturers from HP to cricut and as a result had absolutely zero chill. A shitstorm ensues.

@azonenberg @jpm I think the feeder setup time is a big issue for one-off prototypes. If you have some odd component like a 9k1 resistor on the board once, placing it by hand is faster than setting up a feeder. At the cost of even the Lumen’s feeders, having a couple decades of E24 already on feeders is very expensive.

@monk @fluepke passports contain an anglicized variant of the name, but only in the machine-readable data area , that’s the big block of characters at the bottom. That data is hard to understand for some people.

@soatok @risottobias @dalias @khm @ambiguous_yelp @sammi @joelanman

Also note that all these protocol messages are never sent in the plain. They get tunneled over TLS, so on top of breaking all of signals DH-key exchanges, you'd first need to break a bunch of TLS connections too.

@soatok @risottobias @dalias @khm @ambiguous_yelp @sammi @joelanman Maybe it's worth noting at this point that signal is currently in the process of implementing a hybrid protocol for key agreement [1].

[1] https://signal.org/docs/specifications/pqxdh/

@soatok @risottobias @dalias @khm @ambiguous_yelp @sammi @joelanman

Another point worth noting is that the way they implemented PFS in signal's ratchet, it's not like you could compromise a session by breaking a single key exchange. Instead, in a hypothetical store-now-decrypt-later attack you would have to have a (gapless!) history of all traffic in either direction between two devices since they established contact, and you'd have to crack thousands of key exchanges.

I’ve just finished watching Pantheon, a US-made animated sci-fi series, and it was great. I’d highly recommend it if you’re into sci-fi. The writing was very good, it builds intelligently and respectfully on previous works in the genre and the animation’s visuals are great with some highlights that would not look out of place in a work by Satoshi Kon.

#scifi #series #anime

TIL that you can just watch cosmic rays hit the Superkamiokande experiment's giant (30m diameter) water tank 1000m below the Japanese alps in real time online:

https://www-sk.icrr.u-tokyo.ac.jp/realtimemonitor/

#science #physics

@0xabad1dea Tge only reason I could imagine for this waste of engineering effort was that they have a massive engineering headcount, and those teams full of people were basically making up stuff to do so they don't get fired.

@0xabad1dea This is actually one of the reasons I switched away from Spotify. Out of nowhere, they would twiddle with the UI of their (android) app every few weeks. They would constantly change little things, continuously re-inventing what winamp did good enough in like 2007. They would never improve things by a lot, but sometimes-very annoyingly-make things slightly worse.

@slothrop @quixoticgeek While they are rare in the west, some state of the art rice cookers for the asian market are pressure cookers (sometimes even with induction heating!). They usually have a bunch of non-rice cooking programs. At least in the western country where I live, I think you tend to not see these mostly because they're too upmarket for most people to stomach the cost.

@nflux IIRC the reason that fans usually have an odd number of blades is that you want the number of blades and the number of struts fixing the fan hub to the casing to be coprime to each other, because that spreads out the acoustic emergy of the fan blades passing the struts the widest and avoids concentrating it into a single noisy tone.

For a freestanding wind turbine that should not matter.

"Optical side-channel attacks on bus stop signs" was certainly not on my academic bingo card today 🤣

Link to the paper:
https://dl.acm.org/doi/pdf/10.1145/3411764.3445054

On that #firefox feature that a lot of people are getting very upset about at the moment. Without even getting into the whole differentially private aggregation thing,

this is only going to affect someone in the first place if they (1) don't have adblock on and (2) click on the ad? like, in the case when their privacy is fucked already and AFAICT all #mozilla does is to make it slightly less fucked?

This weekend, I built a little portable soldering kit out of my old soldering station, powered from a Makita tool battery. I made this thing to help with maintenance of our bicycles' electrical systems, so I can solder right on our bicycles without running cables.

You can download STLs and OpenSCAD models on Printables, link below.

https://www.printables.com/model/943997-portable-soldering-station-powered-by-makita-tool

#electronics #soldering