Avatar
Ingwie Phoenix (aka. birb)
5e336907a3dda5cd58f11d162d8a4c9388f9cfb2f8dc4b469c8151e379c63bc9
[ENG/GER] NOT a bitcoiner/stacker/maxi. I am here to have a damn good time! Rabbithole conniseur; I enjoy random stuff. :D Ex-Furry, (close to) blind, hobby developer/sysadmin, waifu enjoyer, long hair fetish (#hairjob). I sometimes talk about NSFW stuff; because fucking is fun =) (DMs always open.)

Go hard or go home! Good luck dude =) !

The pre-turnament hype is real; lived through it many times back when I did YuGiOh on a high metal level in 2012/2013 ^^

Remember when you opened an app, and it just loaded up and was usable? Well, it ain't like this doesn't exist anymore but every time I open my browser or Spotify (which is an Electron app, thuis technically a browser - I know), it takes forever, and I have a Ryzen 9 3900X.

It is slow, because it first checks for updates and then proceeds to run bloated, unoptimized code for forever. LimeWire launched faster and that thing was ... a thing. XD

Probably moaning on a high level here, but man... i hate waiting, especially when I know that it's unnessessary. Just do that bloody version check in async; it's literally a JavaScript keyword...

Cuz it's fun.

"haha look at those centralized economy people ask for more centralization haha lol"

Much like politics, I just don't take them serious anymore. Different world, different rules, but a whole lot of idgaf x) So yeah, hate-watching cuz fun; not like they care anyway.

Im liking this for the picture, but also because anything that isn't twitter or instagram is already awesome and I have enjoyed some of the bots people had run on poa.st. So I am glad you guys are around. ^^

Have you ever wondered why #GrapheneOS has a separate PDF viewer?

Well that answer is pretty obvious, it is more secure to have a separate hardened, sandboxed utility designed for that instead of sharing such a responsibility with a much larger app with greater attack surface like a web browser or office suite. It is trivial for some threat actors to deliver weaponized, malicious PDF files to their targets.

If we know all of this, the next step for some may be to wonder "Why is the GrapheneOS PDF viewer secure?", for you, I will explain some of the most important details:

The GrapheneOS PDF Viewer app requires absolutely no user-facing permissions to run, it doesn't ask for any, nor does it need them. Without permissions the app is completely contained in the Android app sandbox and the security access model is far greater.

How the viewer opens a file is through making a false request to Localhost from the WebView and then intercepting that request with a stream of the PDF data. The benefits to this include:

1. We don't needing files access in the WebView (both setAllowFileAccess and setAllowContentAccess are set to false).

2. Allowing us to intercept headers into the request like CSP, Permissions Policy for hardening the sandboxing done via the WebView With CSP, all dynamic and inline CSS and JS is disabled. The only scripts loaded are those used for the viewer itself.

3. In addition to using WebView for PDF Viewer, Vanadium takes the place for the WebView on GrapheneOS, meaning GrapheneOS users take advantage of the exploit protections used in Vanadium.

Even with all of this, the PDF Viewer still has a fair amount of room for improvement when it comes to quality of life features and usability enhancements.

I just wish it didn't suck... Zooming randomly resets, and paging is a nightmare if you have a visual impairment because the paging icons are so thin, when not zooming in on them to switch the page, then moving the zoom area to read the page, things can get lost and a little messy.

But so far, its the only "PDF Viewer" that didnt also have other awkward behaviours.

Why can't there just be a PDF viewer that lets me scroll all pages, two-finger zoom in and out, and ... thats it. :/

Less to maintain.

I mean this is why people use cloud bullshit; easier to let someone else do the maintenance. xD

Me: Let's back up the NixOS configs of our remote clients through SFTPGo on our file server by using a shuttle method via the after_download hook so the real filesystem is rarely ever touched.

My collegues: Just dump it all into a private Github repo.

Have I lost my sanity or are my standards too high? But last I checked, Microsoft scanned basically all the repos for everything. As far as I know, this is technically handing over sensitive customer data (and two of them are banks) to a third party. And to Microsoft in 300% AI craze, no less.

Yep... complete non-custodial lightning has been a pita.

Though, to be fair, once its configured, it just runs. Biggest problem is actually joining the network in terms of channels and stuff but thats a different topic.

I like the idea of a hybrid approach; it simplifies things, keeps the annoying parts to a minimum and does well for protecting the user.

One question though; Say the fedimint goes bust. Where does such a hybrid wallet connect to, then?

#sillychain best chain ever, just dumb stuff with your friends in a discord server.

https://void.cat/d/Buc3C2oeQtPan4Fhyxa6rC.webp

Reading this: https://github.com/drakkan/sftpgo/blob/main/docs/full-configuration.md

I wonder if I could take advantage of this on my Android phone to call termux-wake-lock before and -unlock after file modifications. This would be quite nice. Sadly, Termux:Boot seems to occasionally not launch at, well, boot. Seems like I have to get into Tasker for that...

I knowwwww T_T

I really, REALLY need to set up Grafana, OnCall and Influx... afaik, CLN even exports Prometheus metrics - and even so, just monitoring the livelyness of the process would be enough. Aaaaaa-

We even use all those things at work but I have to learn them top to bottom because:

- Each k3s node is bootstrapped with NixOS

- The telegraf agents are built with NixOS (specifically their config)

- We have a cluster of InfluxDBs and Grafana configured to read from that

Its all still new to me and I am doing my best to speedrun the docs - but I keep getting sidetracked because my collegues keep breaking other Linux boxes or even come up to me asking - just like that meme template - "whats an env file?" and I have to sit down and explain them everything because the support service that the cloud infra provider we use does not! XD It expects them to just know - which they don't, because they're mouse pushers used to Windows servers and are literally at the level of "dabbling with this linux thing".

Believe me, I've got my work cut out for me XD

Anyway, good morning #Nostr!

Germany is still frozen over, let's see how today goes.

I did power-cycle my NanoPi because it was behaving oddly, but I had done that while heading out so that it would have fully rebooted once I was out. However, I never integrated my remote-restart script to make sure Redis was reachable on the remote server via my VPN; so i have to run that manually, and entirely forgot. xD

That was a bit of a shock-minute. o.o:

Rebooted my node and my channel is still there. Phewwwww... @.@ What a relief.

Turns out my CLN node crashed and I didnt realize up untill now.

Oh no...