taminka

might be a silly question, but isn't macos relatively easily virtualisable? i understand it's not done commercially bc of licensing issues, but is there a piece of software where you just get a vps or two and virtualise all of your build targets yourself, so your ci bill is just the vps bill?

99% of commits on a project come from 1% of contributors, so the main issue w/ migrating to an alternative isn't the networking effect of github, rather that you can't carry over github specific stuff (prs/issues)

i personally like how radicle.xyz managed that, where they manage issues/prs/user identities as git objects, so your entire project is self contained as git repository

yeah messenger still has the pin code thingy, i'm curious why they do it at all that way, can't you just have your keys on fb servers encrypted with another set of keys derived from your password, which is much stronger than a 4-6 digit key?

oh, i see, is it the same for facebook messenger and instagram, imessage, etc?

they do have encryption, just not e2ee, and in fairness to them, it doesn't make sense to have e2ee on a channel or a group with 100k ppl in it, also device sync is possible with e2ee, it's just a slower

whatsapp, facebook messenger, imessage all support multi-device and it's pretty convenient, in fairness to telegram they launched a bit before double ratched was invented, but still, they've had over a decade to switch to it...

it's really unfortunate that telegram doesn't do e2ee, bc it's hands down the best messenger otherwise :(

it's unironically just react lmao, virtually every popular react app has an insane number of accidental rerenders triggered by virtually everything, causing it to lag a lot

you do/can control all the VPN nodes in this setup (most often just a single one) since your traffic doesn't actually go through the website you're masking under

and the nature of the protocol makes it extremely difficult to detect and thus get server IP banned, i got one server banned, but after that i implemented some practices (including directly connecting to websites that are inside Russia) and it's been working fine since then

you need secure channels of communication (and preferably a connection to the outside world) to solve any problem

vpn protocols we use here nowadays are way more advanced than this, they mimic a TLS handshake with a legitimate (non blocked site, like google.com) and looks essentially like regular https traffic to that site

it looks like they are basically impossible to detect, given the failure to block them, outside of timing attacks (seeing if a request crosses Russia's border and comes back quickly after), however that is fully mitigated by just having having the vpn "disconnect" and route traffic directly to Russian unblocked sites, which would otherwise be able to perform such a timing attack detection

pretty interesting stuff, there are several versions of this system, and even the ones that have existed for a while work pretty well

perhaps, there's still hope i think:

- roskomnadzor just not being competent enough to implement the block fully

- they'll reserse the block, since it will likely completely cripple everything that relies on the internet (which is basically everything nowadays)

- they won't go through with the ban completely, since if they do, their job is sort of done, and they want to continue to exist to make money off of the digital infrastructure required to implement the block, and they'll just continue playing this game of cat and mouse

- outside internet connectivity will likely remain to some degree, it'll just be very slow and probably expensive, but i really struggle to see a country like Russia being completely cut off from the internet in the year of our lord 2026

i could be wrong, who knows, after all this whole situation is unprecedented, and human ingenuity sort of always finds a way

and in a somewhat positive note, mobile internet has come back today and the blocks are bypassable with a regular vpn now, even ones that aren't being hosted on whitelisted subnets

read the post please, the precise problem is that this may soon not work