• 0 Posts
  • 737 Comments
Joined 2 年前
cake
Cake day: 2023年6月10日

help-circle

  • My point is that of those 120 probably 110 have never been compromised nor forced you to change the password due to expiration policies. The remaining 10 are the ones that require some mental gymnastics, so while the problem exists it’s not as serious as it sounds. I probably have more than 120 identities using this method since I’ve been using it for years, and I don’t think I ever had to use the counter, it’s a matter of being consistent in how you think about websites, for example if you know how you refer to a site slugify it and use that for the field, so you would use spotify, netflix, amazon-prime.





  • Yeah, it’s probably a legal thing, rreading-glasses is just metadata for books, completely legal, but readarr legality is less clear, so maybe they’re trying to prevent issues.

    Also I didn’t understand what is rreading-glasses and why you need it

    Say you want to grab a book by Isaac Asimov, you type the name of the book in readarr search bar, readarr contacts a metadata provider to show you cover images, author, date, etc. Then when you select the book readarr uses that metadata to search for downloads and ensure you’re getting the correct book and not another random book with the same name.

    The problem is that readarr uses a closed source API for it’s metadata, and it’s constantly offline, which makes it impossible to use readarr. Luckily they allow you to customize the URL for the API, and rreading-glasses is an open source implementation of that API that you can use as a drop in replacement.




  • Honestly, I’m absolutely happy with my Steam Deck, I think it ticks most of your boxes (it even runs Linux, so it’s essentially a portable Linux computer designed for gaming), so I think it’s the better option that you’re looking gor. To your points specifically:

    it’s really geared towards family/party gaming

    There are plenty of party games on Steam.

    it’s Nintendo, so you get the whole usual games (Mario Kart, Zelda, etc.)

    This is the only reason to get a switch, if you want a Nintendo console and Nintendo games this is the way. Everyone who gets a switch understand this is the reason they’re getting it. If this is as strong a point to you that it makes you overlook everything else, then get the switch.

    like most consoles, it’s plug and play and can be enjoyed in the living room (I kind of gave up trying to set up a proper gaming experience with my Linux PCs, given that I don’t have the hardware for it)

    Steam Deck also has a Dock that you can plug to your TV, you’ll need controllers but even so it should be much cheaper in the long run since games are extremely affordable compared to Nintendo.

    the battery life is not great to say the least (2.5 hours takes me back of the Game Gear in early 90s!)

    Haven’t seen many benchmarks of the switch to be honest, but that does sound bad, the Deck only gets that bad battery life if you’re playing Cyberpunk or something, for more casual games it can get upwards of 6h. Plus you can get power banks that fast large it while playing, which I assume is also possible on the switch although the switch 1 used to have some issues with power banks.

    the screen seems to be pretty bad too (at least it’s a step back from the OLED one of the Switch)

    All but the cheapest Deck models now use a 90Hz OLED panel

    the joycons are still not using a Hall effect sensor, meaning they might still be prone to drifting

    While the Deck’s default sticks are not hall effect, they are easily replaceable and Valve sells hall effect replacements on ifixit, so if you ever get drift in your sticks it’s fixable.

    most of the games will not be sold as proper cartridges but as download codes

    If you’re going down this rote Steam sells download codes for much cheaper

    the whole thing (console, additional gamepads, games) is quite pricey

    The Deck is about the same price, but like I said you’ll end up saving in games since you start with your whole Steam Library and can get more games much cheaper.

    it’s Nintendo, famous for their anti-everything (anti-homebrew, anti-emulation, anti-piracy)

    The Deck is by far the most open console you can get, you can even replace the entire OS if you want to, but StramOS is great and you shouldn’t need to.


  • It’s strange how I never see this mentioned anywhere, but there’s a way to get unique secure passwords for every site/app without needing to store them anywhere. It’s called LessPass, and essentially generates passwords based on 3 fields (site, username, master password) and works relatively well, because the advantages are quite obvious I’ll list the potential downsides:

    • If one password is compromised or needs changing for whatever reason you need to increase a counter and need to remember which counter for which site (this is less problematic than it sounds, except in places that have a password policy that forces you to change your password periodically)
    • Android can store the master password and use fingerprint to input it, but in PC you always have to type your master password which can get annoying.
    • You need to change your passwords to this new format, which can take a while, and years down the line you’re trying to login somewhere and don’t remember if you’ve already migrated it or not.




  • Damn, I thought I had sent the reply and it’s been erased.

    I’ll keep it short, muscle memory for qwerty doesn’t go away that easily, at least it didn’t for me, but I’m able to type blindly in qwerty (just not touch typing). Still I think that something I can use in my laptop is very useful so I can keep the ergonomics on the go.

    I don’t have the exercises, it was just something someone told me to do, I’m sure whatever your doctor is telling you would be better.

    For the split vs ortholinear I think split makes more difference, whenever I use a normal keyboard I feel this, but never had any pains related to it, it’s just more comfortable.




  • I understand, and I agree, although I’m reading all the replies are already becoming wall of text so I’ll skip parts but I have read them and they’re all interesting.

    I’ve landed on Night.

    That looks interesting, although I would be weary of learning a layout that only works on specific keyboards, it will make it hard for you to use a laptop on the go, work in an office with a normal keyboard or any other similar situation.

    Furthermore, how bad did things become?

    I think it’s easier if I answer this first. At the worst I had problems holding heavy stuff in my hand, as in fingers lackesld strength or didn’t respond properly. And for my lower back at the worst it was constant pain where I needed to lay down with a pillow on my lumbar to stretch. After fixing those I became very aware of the initial feelings, such as numbness or feeling pain when stretching (which btw I strongly recommend you check out wrist and finger stretching exercises as they help a lot). Lots of the changes I made (e.g. split ortholinear keyboard) were probably not needed, but the wrist pain that kickstarted everything got me worry enough that I don’t want to take any chances.

    After a couple of hours, I do experience strange sensations that border on pain. Furthermore, there’s (almost) always some level of unease/discomfort. Thankfully, resting continues to feel good and I get especially revitalized after sleeping well. But I acknowledge that this isn’t sustainable.

    It’s not, those are exactly the early signals that you asked me about, you think that because you’re able to rest and stretch and it goes away that it’s all fine, but it will require ever more stretching and resting until they don’t go away ever. At least that’s what happened to me, at the beginning I would stretch my wrist and fingers and rest for a while and be fine, eventually that became next day I’ll be fine, then over the weekend, then never.

    Wrist pain and fingers that feel wacky. So, this is basically carpal tunnel 101.

    That’s exactly what I had, although mine was never actually diagnosed, but I had all of the symptoms and my dad had to do the surgery so I have family history. It does get better if you adjust, I don’t feel any of the symptoms I once did, and it is sustainable I haven’t had any symptoms in about 10 years since I switched to a more keyboard centric flow and the layout, so putting in the work does help out. I should say I had 24 years when the symptoms first appeared, so it was kindof young which was one of the reasons I got very scared about getting those symptoms so early.

    org-mode seems to be Emacs’ forte.

    Org-mode is absolutely wonderful, I haven’t tried any replacement because the reason I abandoned org-mode wasn’t emacs related, I kept using emacs for org-mode for a while after I dropped it as my main editor. The reason is that there’s no compatibility with other editors or apps. Everything uses markdown, and for most basic stuff markdown is good enough. I do miss habit tracking, task management, table calculations and other neat stuff, but the commodity of using the same format for everything and that other people use it as well outweighs all of that for me.



  • Curious to see this at the very top of your list. Perhaps I should make my switch to Sway rather sooner than later. Thank you for the endorsement!

    For me it was a lot off wrist pain, so switching to a more keyboard centric way of interacting with the WM was very impactful.

    I intend to learn this with the alt keyboard layout after the more ergonomic split keyboard has arrived. Wish me good luck 😉!

    Which alternate layout are you considering? I recommend grabbing something you typed and feeding it here to check heat map of keypresses you would have done to have some visual representation of your usage.

    So I suppose that by effectively removing most need for a mouse, the switch to a trackball has been less impactful.

    Bingo, I actually switched to trackball before going to keyboard centric WM, but after it I’ve even gone back to mouse a few times feeling almost no difference, because I end up using the mouse a lot less.

    Btw, perhaps related, would you happen to be aware of hints? If so, could you touch upon its relevance?

    I have, not exactly it but similar stuff, I used to use a browser called conkeror that had emacs key bindings, and have tried to learn a very similar system to hints in the past. Honestly, when I has lots of wrist pain they were useful to completely remove the need of a mouse, but they’re clunky and not as efficient as a pointer so I tend not to use them.

    Curious. Is this a special ergonomic chair (or something)?

    Nope, just a Secret Lab Titan Evo, but any good chair would do, I spent a year with a cheap Amazon chair and had lots of back pain.

    Did you advance/progress in increments because you were testing out the latest addition to the setup? And thus, only introduced a subsequent change after judging that you were not ‘done’ yet?

    It was more of a gradual thing, I had wrist pain, so I switched to a trackball, that helped but didn’t got rid of it. So I tried AwesomeWM, found Conkeror and slowly the pain started to fade away and I dove deep into the keyboard centric thing learning touch typing and Colemak. Eventually other issues came on, like pinky strain from Emacs, or a different kind of wrist pain from a small keyboard that made me switch to a split one, or back pain that made me invest in a good chair. I don’t think my setup is “done”, it adapts to whatever my body is asking, but I’ve started to listen carefully and switch stuff on the early signals because that first wrist pain was an eye opener on how bad things can get if you ignore them.

    I am so glad to read this! While the journey until I am able to interact with my systems without any pain seems far away right now, success stories like yours make me so pumped to pull through.

    Do you feel pain now though? If so what? You should address that immediately. At most points I would have answered that I felt no pain with my setup, because those things build up gradually, if you’re at the point of feeling pain the time to take action is now.

    About the emacs plugins, yeah, by the name I can tell you those do the same to the ones I cited, my point is that the plugin ecosystem for it might be a bit less extensive, and not sure how to set shortcuts that use vim key bindings for other plugins.

    I would only try out Emacs or Neovim through a opinionated config.

    Why? Having had an emacs config that I copied from somewhere and ended up growing and becoming something unmanageable, I’m have a very strong opinion that one should build your own config files from scratch to know them. Presets are good if you’re going to be using them bare, but if you’re going to customize them they can get in the way. And that’s another point for Nvim for me, their configs are very easy, I followed this guide and had a working config that I could easily expand in no time.

    org-mode FTW

    Ah, I miss org-mode, it’s too bad the world went with Markdown instead.

    Granted, I’m still very much enjoying Emacs. But, I shouldn’t disregard/dismiss Neovim any longer. It’s time to revisit this rabbit hole 😂.

    Meh, maybe, maybe not, Emacs is great, I just never would have gone with evil mode, it sort of feels like it defeats the purpose of both emacs and vim in my mind for some reason. It’s like if someone told you they put a Ford engine on their Chevrolet, it feels convoluted and strange to think on that solution before thinking of using a Ford.


  • No, there are other ways to get access to your machine without needing it. In general you can classify vulnerabilities as either code execution or privilege escalation, a code execution vulnerability allows an attacker to execute code on your machine, a privilege escalation allows him to break barriers that you might have imposed on him.

    For example, if you’re running service X as root, and someone manages to find a way to use something on service X to execute code, they might get a reverse shell to your box and run anything there. So you might set service X to run as your user instead of root, now that vulnerability is less important because it only compromises your user, but the attacker could use this one in conjunction with the other one to gain control of your user, then escalate to become root.

    If this is something you’re interested in, there’s a cool website called hackthebox where you have to do these sort of things for real. If you want to have an idea on how it looks, there are some excellent videos here showing walkthroughs for many of them he boxes, I recommend checking something labeled easy since these boxes can get quite complex, but it will give you a good idea of the steps attackers need to take to compromise your system