nurple

Don't forget user accounts!

It's called "parallel construction".

Yes! I run graphene, but still don't connect it to my android auto capable car.

The ability to control network connectivity for apps (and sensors) is really the killer feature for me. Maybe I'll give android auto a shot if I can figure out how to keep it from outside comms.

Please provide a reference to the page that talks about the data that carplay collects. There are zero hits for "carplay" in that doc.

I have done extensive research into this, and Apple provide basically zero information about what information carplay collects about your vehicle.

Location data isn't the only kind of data that your car feeds to your device through the carplay connection.

> Even after the modem is removed, if you connect your phone to the car via Bluetooth then the car will use your phone as an internet connection and send all the same telemetry data back to Toyota. However, if you use a wired USB connection then it does not do that (see the discussion here and elsewhere), so I exclusively use CarPlay via USB.

The problem with this is that both carplay and android auto capture their own vehicle telemetry. So even though the car is not able to use your phone as a general data pipe, Google and Apple still get access to this data when you're connected.

They are both very cagey with how they talk about this (or don't).

Easy. One of the primary reason that I don't subscribe to any kind of news anymore is exactly because of all the advertising and the being owned by giant money and power concerns.

I would happily subscribe at a quite a bit higher rate for news orgs that go non-profit/co-op and nuke the ads, and I don't think I'm in the minority here.

Keep trying to do the same thing expecting a different outcome, and you know the rest of the story. I applaud this step and hope they push their differentiation as a people-aligned source of Utah news even further.

With how connected we are these days, what I'd really like to see is for them to make crowd-sourcing and discussion a systemic part of their processes and site/app. They can't be everywhere where news that's important to some is happening, but all of us together can.

Yes, but promises are (unfortunately) _not_ monads!

https://rybicki.io/blog/2023/12/23/promises-arent-monads.htm...

This is a really interesting space, and one that I've been playing with since the first GPTs landed. But it's even cooler than simply using completion choice to encode data. It has been mathematically proven that you can use LLMs to do stego that cannot be detected[0]. I'm more than positive that comments on social media are being used to build stego dead drops.

What I find really interesting about this approach is that it's one of the less obvious ways LLMs might be used by the general public to defend themselves against the LLM capabilities used by bad actors (like the more obvious LLMs making finding bugs easier is good for blackhats, but maybe better for whitehats), i.e semantic search.

The reasoning in my head being that it creates a statistical firewall that would preclude eaves-droppers with privileged access from being able to use cheap statistical methods to detect a hidden message (which is effectively what crypto _is_, ipso facto this is effectively undetectable crypto).

ETA, the abstract for a paper I've been working on related to this:

Mass surveillance systems have systematically eroded the practical security of private communication by eliminating channel entropy through universal collection and collapsing linguistic entropy through semantic indexing. We propose a protocol that reclaims these lost "bits of security" by using steganographic text generation as a transport layer for encrypted communication. Building on provably secure generative linguistic steganography (ADG), we introduce conversation context as implicit key material, per-message state ratcheting, and automated heartbeat exchanges to create a system where the security properties strengthen over time and legitimate users enjoy constant-cost communication while adversaries face costs that scale with the entire volume of global public text. We further describe how state-derived proofs can establish a novel form of Web of Trust where relationship depth is cryptographically verifiable. The result is a communication architecture that is structurally resistant to mass surveillance rather than merely computationally resistant.

0. https://arxiv.org/abs/2106.02011

I agree with you, but I found the argument in this article that "glazing" could be considered a neurohack quite interesting: https://medium.com/@jeremyutley/stop-fighting-ai-glazing-a7c....

Sounds like "we don't want you to have a portable abstraction between our platform and your automation". Also, their documentation directing users to reference github actions `@master` is classic fly...

Neotree `close_if_last_window` config setting is helpful for this case.

I've crashed an RC helicopter because of a similar software issue. Rotorflight is an OSS flight controller, and it has an internal mode for tracking if the vehicle is on the ground or not that isn't always quite accurate at the margins. If you're touching the ground and it's not in ground-handling mode, the I-term in the PID loop winds up really quickly (because the input isn't producing the expected rotation rate) and flips your model on its side.

Betaflight (flight controller for drones, which rotorflight is based on) has a similar function called "air mode" which is common to either disable or set to a switch for aerobatic drones so that they'll still have full rotation rates at zero throttle.

The 787 had three such bugs, in 2015 it was found out if the plane wasn't restarted once every 248 days (2^31 100ths of a second), the AC generation system would shut off, even mid-flight[0].

In 2016 it was found that if the plane wasn't restarted once every 22 days the 3 flight computers could reboot simultaneously, also in mid-flight[1].

In 2020 it was found that if it wasn't restarted at least every 51 days that the stale data monitoring system, and the stall and overspeed horns all stop operating[2].

Some A350s also had an uptime-dependent fault found in 2019[3].

0: https://www.engadget.com/2015-05-01-boeing-787-dreamliner-so...

1: https://www.pcmag.com/news/boeing-787-dreamliner-bug-fix-req...

2: https://www.theregister.com/2020/04/02/boeing_787_power_cycl...

3: https://www.theregister.com/2019/07/25/a350_power_cycle_soft...

My workstation seems fine:

  $ ls -R /{lib,usr,bin,sbin}
  ls: cannot access '/sbin': No such file or directory
  /bin:
  sh

  /lib:
  ld-linux.so.2

  /usr:
  bin

  /usr/bin:
  env

Oh right...

  $ ls -l /usr/bin/env
  lrwxrwxrwx 1 root root 65 Mar 21 23:39 /usr/bin/env -> 
  /nix/store/9m68vvhnsq5cpkskphgw84ikl9m6wjwp-coreutils-9.5/bin/env

  $ ldd /usr/bin/env 
        linux-vdso.so.1 (0x00007ffff7fc4000)
        libacl.so.1 => /nix/store/dyizbk50iglbibrbwbgw2mhgskwb6ham-acl-2.3.2/lib/libacl.so.1 (0x00007ffff7fb3000)
        libattr.so.1 => /nix/store/vlgwyb076hkz7yv96sjnj9msb1jn1ggz-attr-2.5.2/lib/libattr.so.1 (0x00007ffff7fab000)
        libgmp.so.10 => /nix/store/dsxb6qvi21bzy21c98kb71wfbdj4lmz7-gmp-with-cxx-6.3.0/lib/libgmp.so.10 (0x00007ffff7f06000)
        libc.so.6 => /nix/store/maxa3xhmxggrc5v2vc0c3pjb79hjlkp9-glibc-2.40-66/lib/libc.so.6 (0x00007ffff7d0e000)
        /nix/store/maxa3xhmxggrc5v2vc0c3pjb79hjlkp9-glibc-2.40-66/lib/ld-linux-x86-64.so.2 => 
        /nix/store/maxa3xhmxggrc5v2vc0c3pjb79hjlkp9-glibc-2.40-66/lib64/ld-linux-x86-64.so.2 (0x00007ffff7fc6000)

Thanks for writing this. It reminds me of Steve Job's commencement speech at Stanford.

> Again, you can’t connect the dots looking forward; you can only connect them looking backward. So you have to trust that the dots will somehow connect in your future. You have to trust in something — your gut, destiny, life, karma, whatever. This approach has never let me down, and it has made all the difference in my life.

I enjoyed his recent conversation with Lex, but I lost quite a bit of respect for his opinion on politics when he called the Cambridge Analytica scandal nonsense.

Ah interesting, I haven't tried running it on k8s yet. Migrating my mail stack over to k8s has been on my todo list for a little while; should probably get around to it since dovecot and postfix have supported inet sockets for user/domain db and auth for ~12 years now.

Dovecot is really great, and a ton of stuff supports using it as a sasl auth backend (postfix being an important one). I made a simple facade service that feeds it and postfix from couchdb via its dict backend[0] and postfix's tcp_tables[1], then point everything at dovecot for auth. Couch document IDs map really well to email/user, domain, and sieve script lookups; helluva lot simpler than setting up and managing LDAP.

0. https://doc.dovecot.org/2.3/configuration_manual/dict/

1. https://www.postfix.org/tcp_table.5.html

Not sure if you tried prosody[0], but I found it rather powerful and simple to configure, including multiuser chat(muc) and peering. It's written in lua and has a module system so it's easy to extend. In particular I used the dovecot auth module[1] so users could login with their email credentials and I could manage a single user repo.

0. https://prosody.im/

1. https://modules.prosody.im/mod_auth_dovecot

Apparently, some DNS query implementations use an "0x20 bit encoding" to add additional random bits to the query ID for poisoning attack resistance.

I've been trying to track down a DNS latency issue in my network and noticed a device doing this and initially thought it was malware, but there is an RFC[0](though expired), and Google announced that they had implemented this for queries from their public DNS servers in 2023[1].

0. https://datatracker.ietf.org/doc/html/draft-vixie-dnsext-dns...

1. https://groups.google.com/g/public-dns-discuss/c/KxIDPOydA5M

Yes! LEDs as photometers is something that you don't really see around much anymore, but it is really cool. Even an LED matrix can be used as a self-illuminating proximity sensor with the right setup.

https://www.youtube.com/watch?v=GaAtpAuNN_o

Yeah, I realized this was a low-quality discussion when I got to the part where the author is basically stumping for security through obscurity as part of the solution.

Agreed, it's a fact that any US corporation will not be allowed to run lest they give the gov access to the data they hold (cref lavabit). I've never really understood the trust given to Signal in the tech community when a hard identity is required (phone #) and it immediately asks you to send your whole contact list to them on first run.

We know from Snowden that metadata about who is communicating with whom, and when, is one of their most valuable data streams. While signal may not be able to turn over the contents of your messages, they absolutely retain a rich stream of metadata.

Digitalization of aircraft is a really interesting space right now! Even local legislatures are talking to media about "vertiports" (ostensibly to justify the CEOs flying to the office, we promise it's coming to you), though I really wonder how they'll drop an R44/66/Bell505 sized aircraft into a business park because of the noise.

I'm watching two companies in this space(I guess 3 now!):

Hill Helicopters[0] is working on a ground-up build of an aircraft, turboshaft engine, and an avionics suite that you can "drive like a car". It's an enormous undertaking, and I'm not sure if they'll pull it off or not.

The second one is Skyryse[1] and their SkyOS. They're focusing on the avionics like you guys, and putting it in an R66 initially, though they plan fixed-wing versions as well. It is also intended to be a single-stick input which can handle emergency situations automatically; they've already demonstrated their first automatic manned autorotation.

I do think that one of the bigger problems in aviation is cost. Most people can't afford an aircraft whether it flew itself or not. This leads to people not flying enough to become excellent and safe pilots. I've been working on my rotorwing addon and the R44 time is $750/hr!?! If you look at the cost of aviation indexed against median income, it has increased over 5x since the cessna 172 era. In cities, another big problem is hangarage, these have waiting lists currently in the decades and costs in the range of a new home.

Another area I'd really like to see more innovation in is aircraft design. Besides Mr Ruttan, everyone just builds tried and true designs and rarely explore the edges of what is possible.

I will also say, while I think that the range you're targetting is smart, and the mass of mostly unused airfields is staggeringly sad to me, there are a lot more issues than just getting there that need to have infrastructure that I'm not sure will be easy to scale.

I think the reason we see gov talking about vertiports now is because in medium-to-large cities they are completely lost on how to solve the traffic issues (hence rich powerful people asking for them). One area that I don't think aviation looks at enough is relatively short-range travel. If you think of a time-topography map of a city, you could make a much larger city, by area, if you can shrink the time it takes to travel (i.e. same QoL if I can go 50mi in 15min vs 10).

0. https://www.hillhelicopters.com/

1. https://www.skyryse.com/

One thing I'm very frustrated by is my city's(Salt Lake) push for water conservation to the point they're paying residential owners to xeriscape their property. We've spent over a century terraforming the desert into a beautiful green canopy, and every day they're building more concrete and asphalt jungles with nearly no greenery while existing properties are tearing out greenery and replacing it with rocks. We even had one politician try to say we needed to cut the trees in the canyon down to save the Salt Lake, because they're absorbing too much water.

In the state, residential water usage is almost a single-digit percentage and unmetered secondary water systems have been a standard feature of neighborhoods built over farmland. They're now going around putting meters on the secondary water systems and no new developments even have them at all.

I'm really worried as the city is beginning to resemble hellscapes like Las Vegas and LA. The developer-captured legislature is just pushing shit through without much thought for their livability or scalability. Couple legislative sessions ago they removed the requirement for them to review referenda brought by concerned residents, which is one of the only methods we still had to push back against overdevelopment.

Was always an Anders fan because of his work in the turbo/delphi community.

Org as code

This is how I am with software. There's usually a reason I'm arriving at 70% done, and it's not often because it's well designed and documented...