lazerl0rd

THAT WAS MY PROBLEM?

Snipping Tool used to have this "feature" whereby any drawing performed on a screenshot would be animated as an overlay (this was only visible in the UWP Photos app at the time). Funnily enough, that's the first thing that came to mind when I heard of Acropalypse.

Still waiting for FIDO2 support on macOS, unfortunately.

Funnily enough, I actually had issues with Coinbase today as well. All of a sudden they wanted to block me from using cards (no idea why, I've been a customer for at least two years).

I got told the change was due to security and irreversible, unless I delete and register a new account. I did that, and short story it worked for a few hours. After that I started failing ID checks (using the same information I registered for Binance).

Soon enough, I couldn't top up either by card or bank. They sent me an email telling me to use "alternative methods" when they literally are none - except directly transferring crypto over which kind of defeats the point.

I filed a complaint (different to a support ticket), so we'll see how that goes...

PS: Binance has been giving me issues as well. They owe me 5 USDT, and they told me to keep the chat open for approximately eight hours. Not as bad as Coinbase, but definitely not without issues.

What I never end up understanding about such topics is what is truly meant by "understanding" [that we have finite lives]. Don't we all know that anyways? Are we being asked to calm down and accept that? If so, isn't such futile for those that couldn't initially (as I don't see how reading a book would change their psyche) and placebo for those that could (as they've just never considered life in that way)?

That's what DALL-E said /s.

Just a thought, but what if all citizens over the age of 18 could use TOTP [with a randomly-assigned secret] to verify their age. If they don't have a mobile device, they could purchase one of those "calculator-like" TOTP devices.

Sure, you could give yours to a friend but you could also scan a friend's face with the biometric suggestion or their ID with that suggestion. At least the TOTP suggestion would be quicker to verify, [can be] more privacy-friendly, and can be offloaded onto any devices (you already have one if you're going to need to verify yourself).

I'd give the MSI Creator Z16 a look. Albeit, battery life is not amazing on [most] x86 platforms (compared to ARM platforms) though it should last notably longer on Linux.

Whilst I agree people should at least have a ".com" backup domain (at least for email use), many services are supporting the less common TLDs nowadays. In particular, ".dev" seems to be supported well in my experience (where Experian has been the only problematic service).

As for the spam filters, whilst the domain definitely does play a part in some cases - there's more to it than that. Having the correct security configuration (DKIM, etc.) and a "trusted" mail server (good luck asking M$ for their list, though) goes a long way.

That reminds me, I recently registered to Experian only to find out ".dev" emails are considered invalid. I had to register an email on one of my ".com" domains then forward over to even register with them. I called up support and they found it confusing as well, but hey ho - I can't even raise a ticket.

This isn't going to be just Lenovo. Microsoft requires that the certificate in question is not part of the Secure Boot database for any device meeting/utilising the "Device Guard" functionality.

And as others have said, as long as you can enroll your own keys this isn't really a bad thing. It improves security by default for the default OS shipped with the device. You have to go away from the defaults to use Linux anyways, so one more toggle isn't going to kill anyone.

There's SafeSearch for that, which can be enforced at the DNS level.

I never got round to PR'ing this (maybe I still will) but it would be great if Howdy had a feature where it could be "skipped" until the user is logged in.

That would allow people using systemd-homed's encryption to unlock their home directories, which they otherwise cannot have done [as it requires the passphrase].

MSI Creator Z16[P]

You should be able to disable the dGPU if you have no need for it, within the BIOS, to improve battery life.

As for why I recommend it?

1) It has a thin, MacBook-esque aluminium chassis.

2) A choice of two biometrics - Fingerprint and Facial (the latter works with Howdy on Linux).

3) The processor is a 11th (Z16) or 12th Gen. (Z16P) Intel Core i9. The former uses 3200MHz DDR4 AND the latter uses DDR5.

4) They both sport a RTX 30 Series dGPU for creative work or gaming.

5) MSI has decent Linux support historically, for their laptops at least.

6) MSI laptops feature a "hidden BIOS" which exposes hundreds of options and toggles (from undervolting and over locking, to tuning PCIe slot power limits). This is quite helpful at times.

7) It has a panel that pretty much ticks all the boxes except HDR: a good resolution of QHD, high colour accuracy (∆E < 2), a high refresh rate (either 120Hz or 165Hz), as well as touch support.

8) It sports RGB keyboard backlighting, if that's your thing.

9) It has a great selection of ports, with one (Z16P) or two (Z16) Thunderbolt 4 ports and two USB [Type-A] 10GBps ports.

10) MSI laptops of this size usually sport two NVMe slots, for expansion. You could even use one slot for a Google Coral. Furthermore, the included NVMes from MSI that I've had have been "top-tier" in terms of throughput.

That doesn't work here. DNS over HTTPS (DoH) uses port 443, which you probably don't want to forward to your local resolver.

Pfft. Start Menu ads are for losers. You should advertise with File Explorer [1] to get to more people.

[1] : https://www.bleepingcomputer.com/news/microsoft/microsoft-is...

Location: London, United Kingdom

Remote: Yes

Willing to relocate: Yes [, within reason.]

Technologies: C#, Python, System Administration, Linux System Administration, JS, VM Management, Cloudflare Workers, whilst eager to learn other technologies.

Résumé/CV: https://www.linkedin.com/in/dneiroukh

Email: dnairoukh at thezest dot dev

I'm Diab Neiroukh. I'm a student who has taken a year out and is looking for work (part or full-time) during such; I'm also happy to continue on with any full-time work as part-time through into my studies [provided the hours are reasonable]. I study a joint major of Computing Science and Physics (as a BSc).

I've had at least three years of experience managing Linux servers, and once set up a Windows network for a local, private school. I know C#, JS, and Python [the latter more so] but am adaptable to other languages (see my work in C on Android/Linux kernels, and brief Java usage on other Android projects) and would be open to work as a Junior Developer/Software Engineer. I also maintain a fork of NGINX aiming to improve performance [and security] of the web server called Zestginx [1].

I've also dabbled in many different areas outside of the above (from audio signal processing to compilers and assembly to graphics design) a few of which are visible on my GitHub [2] and GitHub Gists [3]. This allows me to often give a unique view on topics using knowledge from other "departments".

[1] - https://github.com/ZestProjects/zestginx

[2] - https://github.com/lazerl0rd

[3] - https://gist.github.com/lazerl0rd

I wonder if this was really "Anonymous" (with regards to who runs the Twitter page) or a collective effort with non-affiliated individuals. Ukraine has listed websites they asked "friends of Ukraine" to try DDos including such that have been down [1]. Anonymous (again, those who run the Twitter page) seemingly lied [2] earlier about a Ministry of Defense leak which they swiftly took down the tweet of [3].

[1] : https://t.me/itarmyofukraine2022/5

[2] : https://mobile.twitter.com/hexdefined/status/149732755266667...

[3] : https://web.archive.org/web/20220225193536/https://twitter.c...

My initial thoughts were "sand mushroom" and "sand seaweed".

I should've been a little clearer; by "enterprise systems" I was referring to RAID controllers and the like. Though yes, I believe enterprise SSDs/NVMes likely have a capacitor or, as one friend put it, an "overkill battery" to use for flushing data.

To be fair though, I sidetracked from the discussion at hand. The issue Marcan described was regarding the OS -> Disk rather than a "power loss situation". The latter does play in with the former, but solving the latter doesn't necessarily solve the former.

That's the first time I've heard of batteries [for RAID controllers] having an entirely separate port than that which hooks them up to the controller. Is this a "there are some of X" or have I just been out of the loop?

Correct me if I'm wrong, but I wouldn't call the management engine (eg. HP iLO) the BIOS. Whilst those may support such warnings:

1) Not everyone wants to use iLO or whatever equivalent another OEM provides.

2) Whilst such systems do support sending warnings about system components via email, dashboards, etc. that doesn't mean they'll necessarily warn about a RAID controller's battery being depleted. If I remember correctly, iLO4 doesn't.

3) What about RAID cards like the P420 (*not* the P420i) that either aren't hooked up to a management engine or are from an entirely separate OEM?

The funny thing here is that battery-backed enterprise systems are worse off in that manner, because you're much more likely to notice a dying battery that your entire device relies on than the little battery pack hooked up to your RAID array.

Sure, you could write a program that periodically checks the battery rate (you'd have to poll since there's no ACPI notification like with a "device battery") and sends an email to the admin or something. However that's a tool that doesn't "exist" (as in, there isn't notable program that does so) which possibly hints that this isn't something system admins often do.

The above also requires there to be an interface available from userland, not only in the management firmware or BIOS/UEFI. That exists for HP, but I'm not sure all other OEMs do so.

Location: London, United Kingdom

Remote: Yes

Willing to relocate: Yes [, within reason.]

Technologies: C#, Python, System Administration, Linux System Administration, JS, VM Management, Cloudflare Workers, whilst eager to learn other technologies.

Résumé/CV: https://www.linkedin.com/in/dneiroukh

Email: dnairoukh at thezest dot dev

I'm Diab Neiroukh. I'm a student who has taken a year out and is looking for work (part or full-time) during such; I'm also happy to continue on with any full-time work as part-time through into my studies [provided the hours are reasonable]. I study a joint major of Computing Science and Physics (as a BSc).

I've had at least three years of experience managing Linux servers, and once set up a Windows network for a local, private school. I know C#, JS, and Python [the latter more so] but am adaptable to other languages (see my work in C on Android/Linux kernels, and brief Java usage on other Android projects) and would be open to work as a Junior Developer/Software Engineer. I also maintain a fork of NGINX aiming to improve performance [and security] of the web server called Zestginx [1].

I've also dabbled in many different areas outside of the above (from audio signal processing to compilers and assembly to graphics design) a few of which are visible on my GitHub [2] and GitHub Gists [3]. This allows me to often give a unique view on topics using knowledge from other "departments".

[1] - https://github.com/ZestProjects/zestginx

[2] - https://github.com/lazerl0rd

[3] - https://gist.github.com/lazerl0rd

Since everyone's asking for a good password manager for their use-case, I may as well so the same. Thanks in advance for any replies.

I've been looking for an alternative to Enpass, which:

1) Supports using WebDAV as a backend (or an "app" exists for Nextcloud, if one exists).

2) Supports biometric authentication on Windows and Android.

3) Has a client which unlocks off the system keyring on Linux (Enpass doesn't do this).

4) Uses in-line autofill (through the Keyboard) on Android. Enpass said they'd add this month's back... but never did.

5) Has a not-ugly UI which at least partially matches GTK/Qt on Linux, Fluent on Windows, and MD2/Material You on Android.

6) Has Chrome and Firefox extensions that "take over" as Autofill like the Enpass extensions do (you can see it in Chrome Settings -> Autofill, if an extension does).

I don't mind if it's paid, as long as it isn't relatively expensive (i.e. no more than Enpass because I got that on discount).

NGINX has an experimental QUIC branch [1], but in my experience it is buggy and currently has lower throughput than using Quiche [2] with NGINX. I do the latter for my fork of NGINX called Zestginx [3], which supports HTTP/3 amongst a bunch of other features.

NGINX's QUIC implementation seems to also lack support for QUIC and or HTTP/3 features (such as Adaptive Reordering Thresholds and marking large frames instead of closing the connection).

[1] : https://hg.nginx.org/nginx-quic

[2] : https://github.com/cloudflare/quiche

[3] : https://github.com/ZestProjects/Zestginx

EDIT: A friend of mine who works at VK ("the Russian Facebook") informed me that they're helping out with the NGINX QUIC implementation which is nice to hear, as having a company backing such work does solidify the route a little.

Or the music industry cough youtube-dl.

> If you look closely, you’ll notice that no-one has built a new engine from scratch in 20 years.

That's not true. Servo is new, which is where Mozilla are picking their changes to Gecko/Quantum from. These false blanket statements aren't convincing me to use Vivaldi at all. Sure it has it's fair share of issues, but it "works" to a degree and maybe it'll chug along enough to finally be used by 2022.

Currently I'm using Ungoogled Chromium [1] on Windows and Bromite [2] on Android, but the latter will eventually be replaced with the former when I end up building Ungoogled Chromium TriChrome (it's a build mechanism for Android 10 and above to have a shared library package, as well as a WebView and browser package separately for Android).

Ungoogled Chromium is great because it accomplishes all that Vivaldi does, except syncing, all the while keeping the nice UI of Chrome. I'm not a fan of syncing, so that doesn't matter to me.

I used to use Firefox on desktop (prior to and after the Quantum update) but WebGPU was just way to slow for me and I switched to a Chromium-based application.

[1] - https://github.com/Eloston/ungoogled-chromium

[2] - https://www.bromite.org

wowldz tinywiest offwice

I maintain a NGINX fork with io_uring support (instead of AIO) here https://github.com/lazerl0rd/nginx. io_uring has been providing promising results, and recent updates to Linux have just been constantly improving it.