TheCondor

Did they start doing automatic updates?

I have a lifetime subscription, I use plex to share the media with the wife and kids on all of our devices, it does the job. I won't bitch about their streaming ambitions, but doing automatic updates and taking security seriously would go far for them.

PGP is special to me, I was a beta user when Phil uploaded it to some Colorado BBSes, way back when. He even made time to talk to teenage me about it on the phone.

What's crazy is when it was concieved, we didn't have trusted strong cryptographic primitives. We did have DES but it wasn't trusted. We did have some of these crazy ideas that we all would have "secrets" and you might put those secrets encrypted on a disk in a vault and you'd not even want the feds to get them. Now we have all sorts of much more vetted crypto primitives, but the idea of actual secrets you'd keep in cold storage is largely dead. You're spot on that modern use cases need different APIs and tools and specialized solutions.

It was about 18 months back, with gitea, I was starting some new projects and went sha256 because I’m a nerd that adopts things early. I could do basic git stuff, but I was stunned by how much didn’t work. A lot of actions, maybe even the entire action runner itself wouldn’t/couldn’t/didn’t work. It’s a deep cutting change and an expensive one that doesn’t have a new feature value. I abandoned that effort and rebuilt my repos.

Intentional attacks and collisions aside, what do you say to the fact that Sha1 had a lifespan at design time? NIST has issued retreating usage guidelines for the last 15 years and they themselves say it should be completely phased out by 2030. It just seems like good hygiene to switch it out. I agree, it will have a long tail and be a big bowl of suck, especially for the not dead but rarely touched code.

I appreciate the intent of “modern” tools with no switches, no ways for devs to make bad security choices because the hash, cipher and encryption mode are fixed vs all the crazy looking asn.1 stuff in tls and openpgp to enable n-degrees of configuration but this very issue is the counter example.

It is a special sensation when you go to your hand rolled backup "solution" to make some simple recoveries and start finding problems. It is a complex mix of not dread but disgust, sick to your stomach, self-anger, and loss. I can only image what that's like with like all of your children's baby pictures being the lost material. Borg and restic are fantastic, it still seems like some sort of dummy proof mode might be desirable, all the features in the world and they have some some reasonably sane policy or something that includes verifications.

On the flip side of that though, really and truly, I've restored a laptop from a timemachine backup and it came back damn nearly identical and that was magical.

I've been a long term subscriber. I don't read it every day, but more like a few times a week and there is always good stuff.

I highly recommend subscribing if you can. It's really one of the great ones and it's still oldshool style, not a lot of fluff, just nerds presenting nerdy news.

If it’s even available.

I think most of America’s options are the big warehouse furniture places or an ikea if it near by, they do delivery well.

He also voiced aspects of Voltron and Saber Rider, maybe “narrated” is the right description

Such a big part of my youth

I'm a father. Best thing I ever did, but it is work, it is hard.

In ways, it really crisped up my time working on work. My wife and I have some bottom lines, we're invovled, we have dinner as a family every day. We go to school events, all of them. We go to sports and activities, all of them (although there have been some times we had to split up and each to a different one.) I'm at the table when my kids have breakfast, every day except when I travel for work which is a week or two per quarter. It's great for the kids, it's great for the family but suddenly it feelds like your day is shorter. Personally, I have tried to find other "thought time" and that has resulted in much better execution when I get to writing code or plans or whatever. I used to sit at the blank editor and start to compose but now I am forced to think more before hand. I've built a few things I honestly don't think I could have built before kids, just out of necessity, I've had to be more efficient and effective.

There are also times of utter exhaustion but I had those before kids. I'll also went through the process of sort of cutting out extras to make time, once your kids are in that 10-11 age, they'll have friends and interests, I've added some of those extras back because they are busy on Sunday afternoons or whenever.

I'll toss out another alternative idea. Not that I'm against the warrant requirement exactly but I just think it becomes a lot more fuzzy since the data will be managed by private companies that only accumulated it because they already have other ways to monatize it. And it's only one tool that they have to harass people.

This is fundamentally a police officer problem. You make it a felony and a terminable offense. You make all or part of the Brady List public and this automatically places an officer on it. ALPRs are just one tool for a police officer to stalk someone, they could just as well park outside their house or place of work and follow them around or do other things. We could require warrants to get the ALPR data but we'd still have these jerks pretending in to protect and serve.

In my perfect world, if we had an Amber alert or we knew there was a particularly violent criminal driving a specific car with a specfic license plate, I think it would be a step forward if all of the information was made available quickly and there was a quick and safe capture. Judges can issue warrants pretty quickly when motivated. Likewise, if some officer is stalking his ex-wife or something, cutting off the license plates is a nice step but I'd rather him not be involved in law enforcement at all.

I'd love for these datasets to be fully audited, but I suspect industry will balk that the very use of it is proprietary.

My Insta360s have wifi builtin, you have to connect to it with their phone app to do some of the processing. It's kind of nice, especially away from home but I wouldn't know how you'd know if it connected to something else or something else connected to it.

I don't know how you'd get devices like that certified for certain higher security applications.

A friend and I were talking about this. What would you pay for it?

When iTunes + came out, you had 2 options, you could buy a song for $0.99 or you could be the plus version for more, I don't remember but it was like $1.35 or something. Plus had a higher bit rate and it wasn't encrypted.

Suppose you could buy a movie for $12.00, how much would you pay for the forever version? $30?

Where do interest rates factor in to your calculus? We've just had really cheap money for a really long time in the US and the car makers seem to have adapted and found ways to sell vehicles for more. A top of the line raptor has a tremendous amount of power and interior amenities. Oddly, they're not uncommon, I see landscapers driving them around. Maybe not the very top line Raptors, but I do see Raptors and that seems like an awful lot of truck to pull some lawnmowers and sprinkler parts around in. Low-interest financing and then we've never had high gas prices for terribly extended periods of time.

I don't know that I think the US manufacturers have taken "inexpensive, but good value" cars seriously for decades. The least expensive Ford vehicle, I think is a Maverick which starts around $28k, Hyundai, Kia, Toyota, Mazda and Honda all have cars under $25000.

There is some truth in that. Like I said, I'm a fan, but I also remember some painful times where we were missing a physical terminator and at least twice adding a new device and had to check the jumpers on everything and someone one of the jumper blocks were upside down or maybe we couldn't tell which pin was 1 or something such that the devices were numbered wrong. We got it fixed and working every time though.

Aside from the time we lost a terminator for a few days, I never once felt like the scsi system couldn't work, it was just a matter of a really young me and my dad getting it sorted out. IRQ/DMA/ISA fuckery? There were multiple times I can remember getting a shiny new piece of hardware, that took months of begging my parents, and after getting things assembled thinking that "this configuration of devices" might not be possible to make work together.

You may not have ever had to deal with SCSI termination errors before. Earlier system had to have the device numbers manually assigned, if they were wrong, all sorts of weird things could happen (of just nothing would work)

I'm a SCSI fan, but it took a few revs to get it righted.