Comments

This profile is from a federated server and may be incomplete. Browse more on the original instance.

jasondj, to memes in Seriously spends $80 to drive 20km..

For real I had a 2003 Hyundai Tiburon a while back. Went to a tool consignment store. Saw a full sized tablesaw with stand. Owner told me he’d give me $25 off if I could fit the whole thing in my Tiburon…and I did. And it wasn’t even hard.

jasondj, to linuxmemes in Bye bye edge

I don’t disagree with you but dude people are sick of the politicization of everything and their operating system doesn’t even get onto that radar. They are ignorant and quite happy of it. Please let the pigs eat their shit in peace.

That said, it is quite telling that Microsoft apparently finds it more advantageous to have two divergent feature sets than to apply the change universally.

jasondj, to comicstrips in Jaunty

I think most Americans know who Oma, Abuela, and Ya-Ya are, just from cultural immersion. Can’t speak for the rest of the world.

jasondj, to mensliberation in Benevolent sexism: a feminist comic explains how it holds women back

🙄

jasondj, to privacy in The FCC can now punish telecom providers for charging customers more for less

This is why I think that the lines should be owned by the municipalities (or a multi-community partnership) and access to them resold. Not even just for fiber, do all of them. The town already handles the water and the sewer, why can’t they lay the pipe for the gas?

They don’t need to be the ISP, or the cable company, or electric company, or whatever (though they can be). Just own and maintain the infra. Obtain right of way. Lease access.

jasondj, to piracy in [Louis Rossmann] Piracy is COMPLETELY justified: Louis tries NetFlix and remembers why

I pretty much only look at All and somehow like a good third of my feed is Star Trek stuff. Mostly memes, and mosty TNG/DS9.

I somewhat enjoy it because I’m not really a big trek fan and it reminds me what it feels like to not be “targeted” by an ad. But ironically, it had the effect of me starting to put on TNG at night.

jasondj, (edited ) to piracy in [Louis Rossmann] Piracy is COMPLETELY justified: Louis tries NetFlix and remembers why

Id feel weirdly awkward and embarassed seeing my computers innards posted in a YouTube video, and I don’t know why. Like if my middle school yearbook photo showed up on Facebook.

That actually happened to me recently. My grade school best friend posted a pic from a field trip like 30 years ago and I’m naming off every person in it like I just saw them yesterday…then I see one person in it and I’m like “who the fuck is that hideous looking child? Is that me??? Shit that’s me”

jasondj, to memes in The panzer has spoken

Idk if it’s the weed, the adderall, or the ADHD, but this thread is everything I need in my life.

jasondj, (edited ) to memes in The panzer has spoken

Honestly I recently switched to vyvanse and I don’t actually smoke to get high (at least not until the kids are in bed). I just microdose a bit throughout the day and it balances out the vyvanse. Like, the stimulants alone are just a little bit too much for me. The combo, though, I can dial in just right.

But weed alone always made me fixate on arithmetics. And then stims turn that up to 11.

jasondj, to privacy in Article 45 Will Roll Back Web Security by 12 Years

But you only really need one to say it’s authentic. There are levels of validation that require different levels of effort. Domain Validation (DV) is the most simple and requires that you prove you own the domain, which means making a special domain record for them to validate (usually a long string that they provide over their HTTPS site), or by sending an email to the registered domain owner from their WHOIS record. Organization Validation (OV) and extended verification (EV) are the higher tiers, and usually require proof of business ownership and an in-person interview, respectively.

Now, if you want to know if the site was compromised or malicious, that’s a different problem entirely. Certificates do not and cannot serve that function, and it’s wrong to place that role on CAs. That is a security and threat mitigation problem and is better solved by client-based applications, web filtering services, and next-gen firewalls, that use their own reputation databases for that.

A CA is not expected to prevent me from hosting rootkits. Doesn’t matter if my domain is rootkits-are.us or totallylegitandsafe.net. It’s their job to make sure I own those domains. Nothing more. For a DV cert at least.

Public key cryptography, and certificates in particular, are an amazing system. They don’t need to be scrapped because there’s a ton of misunderstanding as to its role and responsibilities.

jasondj, to privacy in Article 45 Will Roll Back Web Security by 12 Years

Yeah, except you aren’t supposed to TOFU.

Literally everybody does SSH wrong. The point of host keys is to exchange them out-of-band so you know you have the right host on the first connection.

And guess what certificates are.

Also keep in mind that although MS and Apple both publish trusted root lists, Mozilla is also one of, if not the, biggest player. They maintain the list of what ultimately gets distributed as ca-certificates in pretty much every Linux distro. It’s also the source of the Python certifi trusted root bundle, that required by requests, and probably makes its way into every API script/bot/tool using Python (which is probably most of them).

And there’s literally nothing stopping you from curating your own bundle or asking people to install your cert. And that takes care of the issue of TOFU. The idea being that somebody that accepts your certificate trusts you to verify that any entity using a certificate you attach your name to was properly vetted by you or your agents.

You are also welcome to submit your CA to Mozilla for consideration on including it on their master list. They are very transparent about the process.

Hell, there’s also nothing stopping you from rolling a CA and using certificates for host and client verification on SSH. Thats actually preferable at-scale.

A lot of major companies also use their own internal CA and bundle their own trusted root into their app or hardware (Sony does this with PlayStation, Amazon does this a lot of AWS Apps like workspaces, etc)

In fact, what you are essentially suggesting is functionally the exact same thibg as self-signed certificates. And there’s absolutely (technically) nothing wrong with them. They are perfectly fine, and probably preferable for certain applications (like machine-to-machine communication or a closed environment) because they expire much longer than the 1yr max you can get from most public CAs. But you still aren’t supposed to TOFU them. That smacks right in the face of a zero-trust philosophy.

The whole point of certificates is to make up for the issue of TOFU by you instead agreeing that you trust whoever maintains your root store, which is ultimately going to be either your OS or App developer. If you trust them to maintain your OS or essential app, then you should also trust them to maintain a list of companies they trust to properly vet their clientele.

And that whole process is probably the number one most perfect example of properly working, applied, capitalism. The top-level CAs are literally selling honesty. Fucking that up has huge business ramifications.

Not to mention, if you don’t trust Bob’s House of Certificate’s, there’s no reason you can’t entrust it from your system. And if you trust Jimbo’s Certificate Authority, you are welcome to tell your system to accept certificates they issue.

jasondj, to privacy in What can we do about major sites blocking VPN providers?

At least they got that far.

There’s a good reason as a web server to block anonymizing VPNs. Turns out the bad guys use them too. Who knew.

jasondj, (edited ) to memes in The panzer has spoken

9% of 3 is easier to estimate because you know it’s “almost 10% of 3”. Or, since 10-1==9, you could think of it as (10% of 3)-(1% of 3) and get the right answer using some other shortcuts. Humans being generally pretty good at base10, this is easy to figure out in your head as (0.3 - 0.03) and get 0.27.

Or, you could do what another commenter suggested and “3% of 9” can broken down as (3/100)•(9/1), becomes, (3•9) / (100•1), becomes 27/100, becomes 0.27. And that can be simplified as xy/100.

Different tools for different jobs. Base10 tricks are good for stuff like figuring out, say, a 15% or 20% tip, because you can easily figure out a 10% tip just by moving the decimal one space to the left, and add half of that (for 15) or double it (for 20). Or half and half again for (almost) 18%. xy/100 is a good trick for figuring out small percentages like sales tax (unless you’re in a place like Mass where it’s 6.25 and you gotta change it now to 625y/10000. At that point I’d just estimate at 6 in my head, or if I had to solve it mentally do (6y100) + ((1y100)/4).

jasondj, to memes in You also found them really attractive too

What is flirting but a good conversation with some complimenting and occasional teasing?

I really wish when I was younger people hadn’t put the title of “flirting” on having a fun conversation with people of the opposite sex, and put it on the checklist of getting a date. If people had just said “be yourself and try to have fun”, around all intersections (and not just as cheesy dating advice when talking about the opposite sex) I probably would’ve been a lot more successful in forming relationships in my teenage years.

jasondj, (edited ) to memes in Hey OpenAI

When was it economically viable to replace hand-sewn lumber with lumber mills?

Then they went and made portable electric saws. What a world!

And then electric drills! And laser levels!

Remember paper ledgers and abacuses? Ever hear of Microsoft Excel?

We keep making tools that always increase productivity and reduce time and cost. It’s Constant incremental progress, and on a large scale it’s great because it frees up (human) resources to focus on new industry and technology, which furthers the CIP. On the micro scale, there may be a small number of temporarily displaced workers as jobs shuffle around and workers re-skill.

But at this particular intersection of technology, we are at a pretty bad spot. We are on the verge of massive progress in multiple industries, and wealth has concentrated in the elite classes. “Temporarily displaced workers” won’t have the capital to re-skill or invest their own resources into new industry. This is bad.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • localhost
  • All magazines
  • Loading…
    Loading the web debug toolbar…
    Attempt #