Alt account of @Badabinski

Just a sweaty nerd interested in software, home automation, emotional issues, and polite discourse about all of the above.

  • 0 Posts
  • 22 Comments
Joined 21 days ago
cake
Cake day: June 9th, 2024

help-circle
  • Eh, I have a low tolerance for this kind of bullshit. I know what I like and what I don’t like. I went through their posting history before blocking them, and I found that the subjective quality of their contributions failed to outweigh my irritation towards them. To me, it’s better to just block them and never risk seeing comments like this from them again. There are a bunch of people on this site who I’d rather interact with.

    As a bonus, they’ll only ever have one shitty passive aggressive comment from me to deal with.








  • As a Utahn, it pisses me off that we still have fucking coal plants here. We have 200-250 days of sun here. Shit, we’re at 4-5000 feet of elevation, so the solar flux is fucking intense. Why the fuck haven’t we built solar panels and shut these plants down? Why aren’t our reservoirs covered in at least some number of panels to cut the evaporation? Rather than fix that, let’s scum up the air for us and our neighbors with our shitty 1900s era coal plants and our fucking oil refineries that help contribute to some of the worst air quality in North America when an inversion hits Salt Lake City.

    I have nothing but contempt for the basket of cunts our gerrymandered districts keep shitting out. It’s amazing how ugly the politics can be in such a beautiful place.


  • The article mentions this, but this is the second time this piece of software has been in the news in as many years. Last year they had an SQL injection vulnerability on an unauthenticated page that was widely exploited to grab all kinds of juicy data. This year, it appears like their dumb, closed source SSH library may be responsible for allowing unauthenticated access.

    I’m excited to see what vulnerability 2025 will bring. Maybe this will push more people to use audited open source code like openssh and the tooling built around it. I’m pretty sure sshd is compliant with HIPAA and PCI.


  • I always just derive the interface name from first principles. Like, if I want to know which interface will be used to get out to the internet in a script, I’ll just find the one that’s L2 adjacent with the default gateway. If I’m given an egress or cidr, I’ll just find the interface that has that IP. Modern iproute2 has a JSON output option which makes getting this information pretty trivial. Doing that means that it doesn’t matter what scheme your OS is using.

    I personally prefer the persistent names for Ethernet, although I don’t like them for WiFi. Luckily, it seems like my wireless adapter always just ends up as wlan0. I’m not sure why that’s the case, but it works out well in the end for me.




  • Isn’t this just a research grant? Plus, it’s like, 11 million dollars. That’s a shitton of money, but also an inconsequential amount of money when compared to the dogfuck tire fire that is the US healthcare system.

    Like, I am regularly filled with rage at the stupid ways the US and various states waste money that could have paid for meals, houses, or hospital beds. I hate how we don’t take care of people who need help. I hate that we all have to live in a place where rage like this is normal and accepted and reinforced, because it means we’re all suffering under so much shit and all we can do is get angry. This video just makes me feel sad because it looks like a trauma response. I can empathize with and try to understand trauma, but I can’t encourage it.

    I just don’t think a concept study for a train on the moon is the cause for our problems. I don’t think it even represents the cause for our problems, because at least it’s trying to look forward and consider/solve issues that humans will eventually face.



  • Jesus, what a terrible regex. I love regexes and use them frequently, but you could just, y’know, declare your requirements and then check they’re being met using string methods. Min length 8, max length 256, one set/dict/map for each character class, the minimum count for each character class, and then loop over the string and check that your declared requirements are being met. A regex might be faster (if the regex engine isn’t being asked to do crazy lookup shit), but why torture yourself? Just parsing the string is also nice because it’s readable and makes frontend documentation easier to generate.

    Or skip all of this shit and just require longer passwords. My company has mandated 16 character passwords with no character class requirements for years and it’s great. Want to use a password manager? You’re set. You a big fan of passphrases? correct_horse_battery_staple your way through that shit. A long password + 2FA is all you need for security.

    edit: also fuck you apparently if you want to have a ñ or ü or (⁠・⁠o⁠・⁠;⁠) in your password. I’m guessing the database column for this only supports ASCII? Smells like smelly MySQL/mariaDB to me.

    edit: well, Unicode might be allowed. I get turned around with all of the groups and references. I guess it also depends on how the regex is being compiled. I know that in Python you can pass a bitwise flag to re.compile to force ASCII.