Remote

Pika

@Pika@sh.itjust.works

lemmy 0.19.20

Just your normal everyday casual software dev. Nothing to see here.

0 Followers

0 Following

50 Posts

Joined August 15, 2023

Pika @Pika@sh.itjust.works

· 1mo ago

Replying to

Fully agree. I think that Steam should make it a platform requirement that external launchers cannot be used on the platform. It makes zero sense for me to hit play just to have a third party launcher open, and I have to hit play in that third party launcher as well. and I have to hit play in that third party launcher as well. At that point, I’m better off just buying it through the third party launcher. The whole third-party launcher update process is also obnoxious… Every gatcha game does it. what’s the point of using steam at that point

47

5

0

0

Pika @Pika@sh.itjust.works

· 1mo ago

Replying to

Google Wallet users can share a passport ID pass; Google sends Discord a birthdate, and Discord derives age from it without retaining that date. … if google wallet is determining it anyway, why can’t google wallet just reply yes or no to the “is over 17” query… it seems like discord wouldn’t need to know exact age at all in that flow.

39

6

0

0

Pika @Pika@sh.itjust.works

· 1mo ago

Replying to

I think the window of compromise has long since passed. Flock as a company went in with a guns blazing, anti-privacy, record everything, give the information to anyone style business style, and then chose to double and triple down on the style when the controversy/outcry first started. Once you’ve hit the stage where there’s people starting to protest and riot and cities have started to go out of their way to ban the product and retract contracts due to the fact that they’re concerned about public support. It’s too late. That’s a fire that’s not being put out.

48

1

0

0

Pika @Pika@sh.itjust.works

· 1mo ago

Replying to

is it auto reject, or just doesn’t auto approve and leaves it open. It seems weird that you can’t do a pr at all with 1000 line changes, any moderate size feature additional could hit that mark

13

4

0

0

Pika @Pika@sh.itjust.works

· 1mo ago

Replying to

for a new feature request? a pull isn’t a commit, it’s a set of commits which would add to the line change amount. Like even if you spread it out across 20 or 30 commits that’s still going to be the same line count. I guess you could push not functional code, that seems in bad taste

9

1

0

0

Pika @Pika@sh.itjust.works

· 1mo ago

Replying to

I wouldn’t sell your gear, put it in a closet, or continue using it without purchasing any more in their ecosystem. But if you sell your gear, you’re going to enable someone else who is willing to purchase into the ecosystem. Where if you just closet it or only play with what you have, then they won’t gain anything else from it.

6

0

0

0

Pika @Pika@sh.itjust.works

· 1mo ago

Replying to

Yeah, which is why I think it doesn’t make sense that Steam allows it in the first place. Like, it’s actively letting a direct competitor use your platform. You get none of the benefits and all of the upkeep.

7

2

0

0

Pika @Pika@sh.itjust.works

· 1mo ago

Replying to

If it wasn’t $20 to join, I might have tried it. But considering they haven’t even finished their core case saying whether or not they’re even allowed to use the branding yet, and they’re trying to get $20 or $40 out of every new user, I’m going to pass. I will check back at a later date to see its progress, but right now I don’t think it’s worth it.

6

0

0

0

Pika @Pika@sh.itjust.works

· 6mo ago

Replying to

the pinephone does that, its not built into the lock screen button but, it has a switch for most the privacy central features.

Privacy switches — PinePhone Pro

Privacy switches — PinePhone Pro

Picture of the privacy switches The PinePhone features six switches that can be used to configure its hardware. They are numbered 1-6, with switch 1 located nearest to the modem. Their “on” position is toward the top of the phone.

31

4

0

0

Pika @Pika@sh.itjust.works

· 6mo ago

Replying to

However much is earned by time saved by that app. I stopped using openstreetmap because it wasn't reliable enough for me. I found myself going the wrong direction, or not finding what I wanted to find and having to swap back anyway. I liked the goal but, it just wasn't a valid tool for me.

17

11

0

0

Pika @Pika@sh.itjust.works

· 6mo ago

I read this as they learned it was far too difficult to moderate /all and that the easier thing corporate wise was just remove it.

15

0

0

0

Pika @Pika@sh.itjust.works

· 6mo ago

Replying to

Yea you are right, the privacy switches are under the battery cover, so it requires taking the cover off flipping the switch and putting it back on again. The cover is made similar to how the Acatels are if you have ever used them, so its a pry instead of a slide which is annoying, but at least its there, in my opinion its a design defect, I think the switch would have worked better if the cover was a slide like how the old Samsungs were prior to going to the non-removable battery layout

13

0

0

0

Pika @Pika@sh.itjust.works

· 8mo ago

Replying to

they have already done this for at least the last year or so easily. I noticed it when I requested by data package last year, theres a clear area on it that infers both your gender and your age in it. They are just acting like this is a "new system" but in reality its a system that have had for awhile now, just didn't have any public facing usage of it. For anyone else that wants to see it themselves, and they have a discord takeout. ~~its located at the very bottom~~ in the events file in activity/analytics. ~~the end of~~ the file shows json objects that indicate what your predicted age and gender is. edit: I found this file isn't a static location, it is still in the activity/analytics directory in one of your event files, but you need to search "age" or "gender" to find it if it isn't at the bottom

20

0

0

0

Pika @Pika@sh.itjust.works

· 6mo ago

they don't allow port forwarding which nerfs the effectiveness of seeding, seeding is still possible, just not as effective.

13

1

0

0

Pika @Pika@sh.itjust.works

· 8mo ago

Replying to

I don't contribute to projects most of the time strictly due to the hurdles in place for contributions. if I see an issue with something, I would like to be able to properly fix it, not have to follow a multi month process to actually get it in The last project I wanted to contribute to had the following system: 1) make an account (makes sense, its a self hosted tracker) 1) verify my identity and specify what I wanted to do in a whole different project in order to get validated to be able to open issues in the tracker 1) open an issue stating that I found a problem 1) state in the issue that I was willing to fix said problem 1) agree to sign the code away if done 1) wait for response confirming that it was ok 1) fork the project 1) fix the issue on your fork 1) create test units for the project 1) submit a merge on the main project 1) wait weeks to months for the actual maintainer teams to review the fix and make suggestions/alterations 1) fix any merge conflicts that was created during the time that it took to review 1) rinse and repeat the last 2 steps until it's finally merged Luckily I had noticed that the timeframe of existing requests prior to doing it, and decided to pass on it. Don't get me wrong, a lot of those steps are necessary for proper development cycles but, it's the extra steps that are annoying. I'm looking to quickly contribute and move on. Too many steps or if the process seems like it will be a major pain in the butt = You can find and fix it yourself. Most projects if they have that I will at least open an issue for it so it's known as a problem... but some projects don't seem to want them reported, let alone fixed.

21

2

0

0

Pika @Pika@sh.itjust.works

· 6mo ago

Replying to

I don't respect them because most instances a 403 is more than adequate for your security. The only time I agree with having a 404 over a 403 would be file-specific pathing, but realistically the entire file directory should be a 403 instead of a 404, And then if the user is authorized to access the resource(but it isn't there), then it gives a 404.

11

3

0

0

Pika @Pika@sh.itjust.works

· 6mo ago

Replying to

No, I disagree. It is not one person's doing. That is the deflection. I will not downplay the effect of this by saying they are the only one involved. Every maintainer so far that has locked or approved any changes that they did are equally at fault here. In fact, one of those linked articles even stated that the primary reason they locked it is because they didn't like the amount of coverage it got. This is a failure on the community as a whole, not the individual. edit for clarification: By failure, I'm talking more on projects that are humoring it and actually going through with it without considering the potential side effects of just blanket applying that. Currently considering that a handful of these are locked or posted as we don't know if we're going to be doing this yet, I haven't quite put them in that same sector yet, but it's rapidly approaching it.

12

0

0

0

Pika @Pika@sh.itjust.works

· 6mo ago

Replying to

Honestly. I think if tracking is disabled it should do the following:

anything screen dimension related including available height/width -> blocked (realistically java-script should never need to disclose this information outside of an internal function anyway)
User Agent: generalized (this usually already is the case)
Cookie status: kept the same as needed for functionality.
addon/plugin info: blocked
buildID: blocked
hardware concurrently: generalized instead of a set number (low end being request for permission by default

Like there are many steps that can be done to help mitigate fingerprinting, its just getting vendors to actually do it.

being said I had never known about the TLS fingerprinting option, I generally don't see that shown on the fingerprint detector sites, that's interesting.

8

2

0

0

Pika @Pika@sh.itjust.works

· 8mo ago

Replying to

as much as I would love this. If it ever did become a thing, what you would see wouldn't be companies taking the fine, you would see companies "off-branching" and having income be reported on a parent company that is contracted to the offending company. like in the case of alphabet, they would likely just migrate the android division to be a contractee that they have full control over that they never terminate the contract for. They no longer "own" android legally, they contract android to do their bidding. So when it ends up in court, it ends up as a "well Android did it not us" much like how Amazons third party delivery services worked when they tried to enforce unionization laws.

9

1

0

0

Pika @Pika@sh.itjust.works

· 6mo ago

Replying to

Not gonna lie back when websites had password hints that you could do. I used to put something like that where it wouldn't be the full password, but it would be either a part of the password or I would label it as same as computer password or something like that. God, I was so insecure when I was young.

5

0

0

0

Pika @Pika@sh.itjust.works

· 8mo ago

Replying to

Yeah, I understand that point of view as well, especially for feature expansions. I don't agree with that point of view at all for bug reports /fixes though. It's not like I'm asking for an additional feature on top of the devs' already existing code. I'm fixing a mistake that the dev added to their code that they haven't had time to fix, I don't see the need of multi week or month review processes for those. But at the end of the day I tell myself that if the dev wanted help with the project they would have made the system easier and I just move on with my life. or if it's too much of a blocker or if it's a small change just fork the code myself if allowed, fix it and then never bother with the hassle of submitting it upstream.

9

0

0

0

Pika @Pika@sh.itjust.works

· 6mo ago

Replying to

I firmly agree. It's a give and take, I don't have the time or energy to spend a couple hours mapping the local area on OSM that way it can be properly used. I did that for my home town, and then realized that outside of big corporate entities, it wasn't done at all for any of the surrounding towns or even cities. To me having an accurate map with ability to give directions and traffic reports is worth more than my location data.

5

0

0

0

Pika @Pika@sh.itjust.works

· 5mo ago

Replying to

If your company isn't keeping track of receipts for goods sold, the IRS is going to have an absolute field day with you about time they decide to audit the company.

4

4

0

0

Pika @Pika@sh.itjust.works

· 8mo ago

Replying to

Concidering that they were estimated to be making 31 billion USD off the android ecosystem alone ~~back in 2016~~ over 10 years 2006-2016, im sure it's not even a drop in the bucket now.

8

0

0

0

Pika @Pika@sh.itjust.works

· 5mo ago

I've never once heard a song and said "I need to listen to all the songs by this artist" but I think I would be concidered an EDM normie, so I just listen to what is concidered popular in the feeds. Being said, I have heard some songs that were dual offs at times, like there's a bunch of dubstep composers who I think fall under that where they had a real good ones and the rest are meh

4

1

0

0

Pika @Pika@sh.itjust.works

· 6mo ago

I love the cross posts: 3 hours, 3 hours, 3 *years*. I almost responded to the 3 year post, I had to do a doubletake.

4

0

0

0

Pika @Pika@sh.itjust.works

· 6mo ago

Replying to

Generally speaking, unless you're using OAuth for an authentication, you would check your username and your password at the same time. It's just you wouldn't respond if either existed or not. You would just say invalid username and password combination. What gets really complicated is the hybrid SSO integrations where they use a username and then if the account has SSO enabled it then redirects you to the sign-in page, Otherwise, it brings you to a password field. Realistically what these sites should do to prevent that vulnerability would be to make it so you have to click a dedicated sign in with single sign on button. But not everyone does that type of flow. Granted, this also doesn't include sites that convert your user account into a user ID. And then for your password's table, only give a user ID. Those would require two queries or a join, regardless, because it's two separate data places. One to get the user Id and one to get the passwords

3

1

0

0

Pika @Pika@sh.itjust.works

· 6mo ago

Replying to

Honestly... almost 10 years later most of those points are still pretty valid. I agree with all but #2 (mostly because that defeats the entire purpose of a decentralized platform) and #4 But I also believe that it can't go mainstream. If it did that would ruin what many went to these style platforms to avoid. I believe the same thing with the Lemmy as well, if it became mainstream, it'll just ruin what is already here. I can't say much on that though, since I was one of the "refugees" that came in around the time that the core ecosystem of lemmy started changing. So I'm sure some of the OG lemmy members feel the same about us.

3

0

0

0

Pika @Pika@sh.itjust.works

· 6mo ago

Is it safe enough to use vpns based out of the US?

yes, just be aware that the gov could require the company to log you without letting you know, even if they have a no log setup. For the everyday person this is a non-issue, but if you are doing shadey stuff or have ties that may make someone super interested in your activities, you may wanna choose elsewhere.

3

3

0

0

Pika @Pika@sh.itjust.works

· 5mo ago

Replying to

honestly if its just one show.. it might be even worth just buying it with the price of netflix now. Thats how I felt with movies that are on there with it at 20/m now

2

0

0

0

Pika @Pika@sh.itjust.works

· 8mo ago

Replying to

yea was about to say the only difference between this article and the US is that in the US it would be death in the office or at home not the hospital bed.

4

1

0

0

Pika @Pika@sh.itjust.works

· 9mo ago

Copies of the twilight zone and books on multi-dimensional theory such as imagining the 10 dimensions

4

0

0

0

Pika @Pika@sh.itjust.works

· 6mo ago

Replying to

Whether you respond as a 404 or a 403 would be dependent on whether or not the user who is logged in has the authorization to read the previous directory. A site administrator, for example, would have the authority to read the previous directory, which means that the site administrator would know whether or not the resource existed or not(as the previous directory would list it) so in which case a 404 would be proper. However, a user who doesn't have authority to read the previous directory should not have the ability to know whether or not it exists. so a 404 would not be proper here because the proper one would be a 403 because it's inherited from the previous directory. edit: changed traverse to read, as traversal doesn't mean you can see what else is there.

2

0

0

0

Pika @Pika@sh.itjust.works

· 6mo ago

Replying to

I don't believe they do. I'm pretty sure since its a soft fork and still has firefox as an upstream, that they would need the permission of any contributor that had agreed to the MPL license, and that would include the Mozilla project, and it's very unlikely that Mozilla would agree to that.

2

0

0

0

Pika @Pika@sh.itjust.works

· 7mo ago

Replying to on sh.itjust.works

hell divers 2, my friend group is pressing me hard to buy it

2

1

0

0

Pika @Pika@sh.itjust.works

· 5mo ago

Replying to

Personally, I think the easiest one is the US government refunds the tariffs to the company with the requirement that the company has to give it back because the company already has all that information However, if We were to continue this hypothetical situation where the US is the initiator. All they would need to do is make it so it's a hard requirement in order to get the tariff return that the companies provide basic transaction data For that duration, They could even dictate what format they needed it in. (or Alternatively they could assert they have a system in place already to handle it themselves but I think most would just let the gov handle it in bulk processing than need to make a framework for it) Then for returning the money, there's a few options. They could either use the existing framework that they have to send returns to cards on file because it's almost certain that they have direct access to every major card network. Or they can filter the master list by the card identifiers at the beginning and send them to the banks/card companies and let them deal with it. For cash transactions, it would be a pain in the ass, but that's going to be the case for both distributions, because there's no link to an actual identity. What they would have to do is they would have to compare the receipt to the transaction data that they have, which you are right, they could scam you on. However, they would have to know where it was purchased, they would have to know the time stamp, they would have to know the amount spent. Honestly, the most annoying part of that entire deal would be that people who paid in cash, regardless, are going to have to reach out to some system to say, hey, I spent this money, where's my return? But I don't think fraud is going to be a very big risk case here. Honestly, they could probably even set up an online portal to do everything for you. You just have to supply the information needed, much like how unpaid claims are

1

2

0

0

Pika @Pika@sh.itjust.works

· 8mo ago

Replying to

some important clarification though, that is a hard cap, realistically it will likely be quite a bit less.

2

0

0

0

Pika @Pika@sh.itjust.works

· 8mo ago

nah that's a separate department and they deliberately keep that book as far away from the overall study as possible.

2

0

0

0

Pika @Pika@sh.itjust.works

· 6mo ago

Replying to

Oh, I fully understand that. But the everyday person isn't going to affect the government to the extent where they want to not only issue a court order ordering a company to do this, but also issue a gag order to prevent the company from saying anything. Political leaders, possibly. Terrorist organizers, definitely. But your typical protest, or right versus left debate, that's not going to be enough for them to bother, let alone a court order forcing it.

1

0

0

0

Pika @Pika@sh.itjust.works

· 6mo ago

Replying to

the users don't start insulting you when you ask a perfectly legitimate question

I dont know about that one chief, on lemmy it defo depends on the question/topic Ive noticed lol

1

3

0

0

Pika @Pika@sh.itjust.works

· 1mo ago

Replying to

The issue with that setup is, if Fortnite is one of the primary things he does, he’s just going to stay on windows and never use the linux install. Nothing is more annoying than having to constantly reboot into a new OS since it requires closing everything out. It would likely end up being a Windows default and occasionally swapping to linux (more realistically just never swapping to linux)

0

3

0

0

Pika @Pika@sh.itjust.works

· 3w ago

Replying to

I’m glad you added from 2025 there because otherwise it would have been super deceptive. I definitely thought it happened again, and I was gonna be like, well that was fast. Like we all know it’s going to happen again, but that would have been extremely fast.

0

0

0

0

Pika @Pika@sh.itjust.works

· 3w ago

Replying to

I was originally going to add that usually different services can use the same name as long as there’s no overlap, but you can’t even use that on this one because they’re both blogging platforms. Yeah, unless they have authorization from the original project this is likely going to require a name change.

0

0

0

0

Pika @Pika@sh.itjust.works

· 2w ago

Replying to

The only benefit I could think of isn’t going to be in the areas that they want to deploy this service. Like, I could see this being advantageous in lower populated areas that don’t really have DoorDash drivers. But yeah, if you’re in a populated area, I don’t really get why I would want this over. Just having a traditional driver that arrives.

0

0

0

0

Pika @Pika@sh.itjust.works

· 4w ago

Replying to

We have… I’m more impressed that you found a toaster that doesn’t. I don’t think I’ve had a toaster in the last ten years that didn’t give a little bit of leeway on the lever to let you pull up a little bit more to be able to grab it.

0

0

0

0

Pika @Pika@sh.itjust.works

· 1mo ago

Replying to

you missed the second half of that quote. but thats also because I don’t play a game that hard requires windows to function, so my usage of the OS is strictly hardware/firmware updates and the once or twice a year that I do have a game that straight doesn’t work on linux at all.

0

1

0

0

Pika @Pika@sh.itjust.works

· 1w ago

Replying to

zabbix with ntfy for short term alerts and a telegram bot for long-term alerts.

0

0

0

0

Pika @Pika@sh.itjust.works

· 3w ago

Replying to

Yeah, that’s how I took it, but the developer acted like every system that was on the workshop was infected. They never listed a mod that caused the issue and instead just issued a blanket statement of this is what happened. It’s very weird.

0

0

0

0

Pika @Pika@sh.itjust.works

· 3w ago

Replying to

That would make sense, although I think it’s unlikely that it embeds itself into the mods. It would probably replace itself. Since in order to embed itself into the mod, it would have to know how the mod is made/structured but I guess it would be possible if it was able to completely replace the existing mods with the worm.

0

0

0

0

Pika @Pika@sh.itjust.works

· 3w ago

Replying to

I don’t own this game or project or whatever it is, but I’m confused. How does a mod getting hacked on a workshop make it so every player that’s on the workshop has a virus?

0

2

0

0