Badabinski

I used to have this problem all the time, I think it’s pretty normal. I did many years of therapy, and part of what I got out of that was an understanding of how people deal with pain and anger. The best way to change someone’s mind is to try to empathize with their position and show your understanding. Once you share context with them, you can gently explain why you feel the way you do. Sometimes, you do this and find that the other person’s point of view is a more accurate reflection of your values and you change your mind instead.

Don’t do this with bad faith actors though. just block them.

I used to have this problem all the time, I think it’s pretty normal. I did many years of therapy, and part of what I got out of that was an understanding of how people deal with pain and anger. The best way to change someone’s mind is to try to empathize with their position and show your understanding. Once you share context with them, you can gently explain why you feel the way you do. Sometimes, you do this and find that the other person’s point of view is a more accurate reflection of your values and you change your mind instead.

Don’t do this with bad faith actors though. just block them.

I’ll throw in “folks” as another gender neutral option. I say “you folks” all the time, especially in professional contexts. I’m not from the South, but I have family there so y’all is a part of my vocabulary. I use it in more informal situations pretty commonly.

Android similarly makes it easy. If I just press and hold on ?, I get options for ¿ and ‽. Seems like mobile devices have worked out more convenient UIs for this type of thing.

I always have a terminal open in the workspace on my other monitor so it’s just <super-j> interr <tab> <return> <super-;> <c-v>

wait, that makes me sound like an absolute fucking nutcase lol. I typed that first sentence completely unironically and only realized how absurd it was afterwards. It’s faster than the whole “type the Unicode point value” thing, but I should probably start using compose key instead.

I fukken love me an interrobang. I have a shell alias on my computers that copies one of those bad boys into my clipboard so I can more easily display my shocked puzzlement. It’s very useful when dealing with msft products, especially Azure.

Yep, or when you’re doing EMDR and you open your eyes and your therapist is crying. That’s how you know you’ve hit the good shit 👉😎👉

Thankfully, that only happened once. It honestly made me feel better, it was incredibly validating.

Just wanna give a big ol’ +1 to The Body Keeps The Score. My partner read it and it was a game changer for her.

Based off of your comment history, it seeeeems like you live in the US, although I could deffo be wrong. That’s where I live, so I may have good news. It’s illegal to sell tritium products in the US, but it’s not illegal to buy it as an individual. There’s a Taiwanese company that sells all kinds of cool little tritium widgets: https://www.mixglo.com/

that’s where I got my vial from. It wasn’t cheap for what it is, but I think it’s cool.

edit: looks like they also ship to Canada if you live there. I’ve no idea what the laws are up there, but I’m assuming it’s legal if they’re willing to ship.

God, what a wonderful thread that was. I’ve decided to follow and star @[email protected] so I can follow up on their future exploits.

Sadly, it doesn’t appear that they’ve posted in quite some time. Hopefully they’ll come out of hiding one day and ask more ridiculous questions.

I have a little tritium vial on my keys because I am a clumsy oaf with ADHD and the little greeny glow has been useful a couple of times. It’s great when I’m out at night and my keys yeet themselves out of my pocket and land in the darkest possible area.

I mostly got it because it’s cool though. Radioluminescence is fukken rad!

I could not have imagined a more fitting name if I had been writing this whole episode as a work or fiction. The world can be so fucking delightful at small scales sometimes.

Right, but I can’t require a second factor on a different device that operates outside of my primary device’s trust store. I’m sure there is some way to make my desktop hit my phone up directly and ask for fingerprint auth before unlocking the local keystore, but that still depends on the security of my device and my trust store. I don’t want the second factor to be totally locked to the device I’m running on. I want the server to say, “oh, cool, here’s this passkey. It looks good, but we also need a TOTP from you before you can log in,” or “loving the passkey, but I also need you to respond to the push notification we just sent to a different device and prove your identity biometrically over there.” I don’t want my second factor to be on the same device as my primary factor. I don’t know why a passkey (potentially protected by local biometric auth) + a separate server-required second factor (TOTP or push notification to a different device or something) isn’t an option.

EDIT: I could make it so a fingerprint would decrypt my SSH key rather than what I have now (i.e. a password). That would effectively be the same number of factors as you’re describing for a passkey, and it would not be good enough for my organization’s security model, nor would it be good enough for me.

I just don’t get why I can’t use something like TOTP from my phone or a key fob when logging in with a passkey from my desktop. Why does my second factor have to be an on-device biometrically protected keystore? The sites I’m thinking of currently support TOTP when using passwords, so why can’t they support the same thing when using passkeys? I don’t want to place all my trust in the security of my keystore. I like that I have to unlock my phone to get a TOTP. Someone would have to compromise my local keystore and my phone, which makes it a better second factor in my opinion.

EDIT: like, at work, I ssh to servers all over the damn place using an ssh key. I have to get to those servers through a jump box that requires me to unlock my phone and provide a biometric second factor before it will allow me through. That’s asymmetric cryptography + a second factor of authentication that’s still effective even if someone has compromised my machine and has direct access to my private key. That’s what I want from passkeys.

This is a bad take. Several cities in my state banded together to create a municipal fiber network called UTOPIA. The fiber is owned by the cities that bought in and is used by several different ISPs. The ISPs pay UTOPIA for access, and then they have to compete with each other for subscribers based on performance, features, and cost. Like, there’s genuine market competition for internet! If the state owns the infrastructure and then forces the playing field to be level, then everyone benefits. People in the cities with UTOPIA got fast fiber internet waaay faster than anyone else, they have a plethora of choices (want a static IP and a business plan in your residence? There’s an ISP that sells that!) at great prices, ISPs get access to subscribers without having to maintain fiber, and the cities who bought in get to make money from this and attract residents and businesses who benefit from the service.

My city didn’t buy in. Google Fiber eventually came to town so I was able to kick Comcast out, but I am uneasy about what’ll happen if Google decides to drop their ISP business. If I was in a city with UTOPIA, it would just be one ISP folding and I’d be able to pick a new one and switch over right away.

EDIT: cool, Cory Doctorow wrote a blag post about it: https://doctorow.medium.com/https-pluralistic-net-2024-05-16-symmetrical-10gb-for-119-utopia-347e64869977
UTOPIA users have access to 18 different ISPs. I feel like that speaks for itself right there. This is the future we all should have had.

It already is. My company runs hundreds (possibly thousands) of ARM64-based instances right now. It’s done great things for our cloud spend. We still have more x86 stuff than ARM because some applications just don’t perform as well on ARM, but I can imagine that ratio will change as software gets more optimized (specifically the JDK, golang’s compiler, and GCC/LLVM) and Ampere releases new systems with better single thread perf.

EDIT: Ampere, not Alterra. God damn tech company names.

You can run Asahi Linux on M1 MacBooks right now. If you didn’t see the news, they’ve even been able to run some relatively modern AAA games with decent enough frame rates. Granted that’s only the M1 macs, but there’s at least one relatively modern ARM laptop that you can run Linux on.

I’ll totally concede that the new Snapdragon laptops aren’t running Linux yet. It seems like Qualcomm is taking Linux support seriously, but I’m a bit skeptical as someone who has been absolutely fucked by a shitty Qualcomm kernel module.

I just wish that companies enabling passkeys would still allow password+MFA. There are several sites that, when you enable passkeys, lock you out of MFA for devices that lack a biometric second factor of authentication. I’d love to use passkeys + biometrics otherwise, since I’ve often felt that the auth problem would be best solved with asymmetric cryptography.

EDIT: I meant to say “would still allow passkeys+MFA.” hooray for sleep deprivation lol.

https://sourceforge.net/p/flightgear/flightgear/ci/next/tree/

This random git repo I picked from their source forge page seems to have some pretty recent commits. I’m guessing they just have a slow release cycle.

That’s basically all I use from my Anduril flashlights. I don’t bother with the candle modes and all that shit. I’ve only ever used Anduril v2 flashlights, so maybe Anduril v1 was less intuitive?