Skip Navigation

Undaunted

@ Undaunted @feddit.org

Posts
1
Comments
62
Joined
1 yr. ago

  • I wish...

    Jump

  • That resonates so well with me. Attending all the meetings, discussing feature requests and evaluating their feasibility is so exhausting. But working overtime for a few days to find and fix the bug that completly halted production? No problem!

  • ich🚜🐑iel

    Jump

  • Je nachdem wie risikofreudig du bist, kannst du das direkt in einem Rutsch erledigen.

  • doomed yuri speedrun

    Jump

  • Right?? What a lunatic

  • doomed yuri speedrun

    Jump

  • One ski boot every night? That's very strange indeed.

  • Yes son

    Jump

  • You mean Wind🤮ws?

  • I like the infinity symbol but it has to be done properly

    Jump

  • That's amazing, thank you for this detailed explanation! I'll try that out later.

  • I like the infinity symbol but it has to be done properly

    Jump

  • Does anyone know how to properly do the bottom variant in Inkscape? I only know how to do the top one and I don't like that

  • Deleted

    Permanently Deleted

    Jump

  • I grew up with trackballs because my dad preferred them to the old mice with a ball underneath. So for office work I still use one too. But it's still just a pointing device so I'd say it would be similar to learn using a split keyboard or a dvorak layout or something. You'd still press one key after antother.

    The CharaChorder is so different in the way your "typing" multiple keys at once. I feel like it has such a steep learning curve because you have to not only learn another button layout but the whole way your thinking about typing and writing in general. I'm afraid I'd just get frustrated and never use it, even though I thinks it's extremely cool.

  • Kulturfreitag

    Jump

  • Law ready for this?

  • Kulturfreitag

    Jump

  • Oh ja das stimmt! Tress of the Emerald Sea zähle ich zu meinen absoluten Lieblingsbüchern.

  • Kulturfreitag

    Jump

  • Ich lese—oder viel mehr höre—aktuell "Yumi and the Nightmare Painter" von Brandon Sanderson. Außerdem habe ich seit sehr langer Zeit mal wieder die erste Staffel von VGHS gesehen.

  • ich🕵🏻iel

    Jump

  • Der schwarze Schimmel in meiner Dusche ist da anderer Meinung!

  • ADHD aah behavior

    Jump

  • The magic key for me is to tell no one about my project, until it's in a workable state. Just telling someone what I want to do, including the details of my plans, is sometimes enough for me to never actually start with it. But keeping it quiet—which is very hard mind you—leads to me actually acting on my plans.

  • Deleted

    Permanently Deleted

    Jump

  • Do you mean the CharaChorder? I thought about getting one in the past bit it looks like a super steep learn curve and I'm not sure if I'm willing to subject myself to it.

  • Drawing practice

    Jump

  • I always draw directly with ink. If I use a pencil first then I stress too much about everything to be perfect. When using ink directly from the start, I have to live with the mistakes and make them work. It's a lot more relaxing for me.

    I learned from Sketching Scottie on YouTube and it's my favorite way to draw.

  • Self-Driving Tesla Crashes into Wall Painted to Look Like a Road… Just Months Before Planned Robotaxi Launch

    Jump

  • That statement of him is not entirely wrong. But we humans have a very powerful bio computer that is perfectly tuned to process those visual inputs in realtime. Until a comparable performance is possible, removing LIDAR is very stupid.

  • Am in the only one who cringes at install instructions that require piping some curl output into bash?

    Jump

  • I never tried to win any argument. Hell I was not even aware that I'm participating in one. I just wanted to share the info, that even if the vendor is absolutely trustworthy and even if you validated the script by downloading and looking at it, there's still another hole that's not obvious to see.

    Yes it's unlikely, but again, I never said it were. There are also arguments you can run curl with, to tell it to do the download first and then push it through the pipe afterwards, though I don't know them by heart now.

    It won't cost you anything to set those parameters, when you insist to use curl | bash, just in the off chance that someone's trying to do what I mentioned.

    But I'm also someone who usually validates their downloads with a checksum so maybe I'm just weird. Who knows.

  • Am in the only one who cringes at install instructions that require piping some curl output into bash?

    Jump

  • Oh, you're welcome, kind person :)

  • Am in the only one who cringes at install instructions that require piping some curl output into bash?

    Jump

  • It is actually a passive detection based of the timing of the chunk requests. Because curl by default will only request new chunks when the buffer is freed by the shell executing the given commands. This then can be used to detect that someone is not merely downloading but simultaneously executing it. Here's a writeup about it:

    https://web.archive.org/web/20250209133823/https://www.idontplaydarts.com/2016/04/detecting-curl-pipe-bash-server-side/

    You can also find some proof-of-concept implementations online to try it out yourself.

  • Am in the only one who cringes at install instructions that require piping some curl output into bash?

    Jump

  • You shouldn't install software from someone you don't trust anyway because even if the installation process is save, the software itself can do whatever it has permission to.

    "So if you trust their software, why not their install script?" you might ask. Well, it is detectable on server side, if you download the script or pipe it into a shell. So even if the vendor it trustworthy, there could be a malicious middle man, that gives you the original and harmless script, when you download it, and serves you a malicious one when you pipe it into your shell.

    And I think this is not obvious and very scary.