Show newer

@blitter I've recently ordered a (25 unit) bulk pack of Fluorecare combination tests (COVID, Influenza A/B, RSV) off Praxisdienst, which is a German supplier so presumably also ships to German-speaking countries. Claims to be for professional customers but will sell to individuals too

They were quite a bit cheaper on a per-unit basis than pretty much every other seller I've found that ships to NL (which all just sell like 1 or 5 tests at a time).

Grappig weetje over #Amersfoort. Als je met de trein vanaf het centraal station wegrijdt naar het noorden, is er bij de Eem een gebouw waar elke maand een andere nadenkspreuk op het dak staat. Sinds er ooit “Welkom in Alkmaar” heeft gestaan ben ik elke keer weer nieuwsgierig wat er staat.

@riley Practicality; you need the key to access the file's contents either way, *and* an address to locate the data to retrieve and decrypt in the first place, so if you were to use the hash of the ciphertext as the address, you would effectively double the size of the address; the actual address plus the decryption key.

By using a hash of the decryption key as the address, having the decryption key alone is enough to locate *and* decrypt the file, and it still lets you share that hash with others to give them access to the ciphertext only (which is necessary for some low-trust maintenance tasks).

nlpol 

"De Verenigde Staten van Amerika zijn in handen gekomen van Trump, dus nu is het nodig om de Verenigde Staten van Europa te beginnen, want dat model werkt duidelijk zo goed. Oh ja en iets met polarisatie."

Volt snapt er weer he-le-maal niets van. Zou mooi zijn als ze het militaristisch ingestelde deel van de partij er eens uit zouden keilen.

I've seen so many cool themes come by through @macthemes - I honestly wish I could use some of those on a Linux system today.

@jonah ("Malicious participants" here does not just include people who seek to join the cluster with malicious intentions, but also people with honest intentions who are compromised through their system getting hacked, stolen by cops, infiltrated, and so on)

@jonah Mainly that Garage does not have strong resilience against malicious participants; it's a high-trust system towards all participants (or at least it was when I last evaluated it).

That's fine for a lot of cases, but as conditions worsen, it becomes more important to have such resiliency, and it's not something you can trivially patch into the design after the fact, unfortunately.

(If you're going to do this, think about how much you would charge to be willing to do this kind of work, and double it. Then double it again.)

Show thread

I guess now is the time, as a freelancer, to start building up a reputation as "the guy who comes in to clean up the mess that the LLMs and LLM-bros left behind... for a fee"

unsolicited advice for folks running macbook laptops from the early/mid 2010s 

also now that my fan isn't on literally ALL the time, and with a new 3rd party battery, I can easily get 4–5hrs of light usage on a single battery charge, which feels close to what I got when it was brand new (despite apple's advertised figure of 10 hours on a single charge)

Show thread

unsolicited advice for folks running macbook laptops from the early/mid 2010s 

thermal paste apparently breaks down after a few years, so yours might not actually be conducting heat that well anymore. between the fan and the paste, my processor now keeps cool enough that it doesn't throttle frequency at 100% load, which makes a ton of difference for (e.g.) sharing your screen while on a video call. it's a tricky procedure but not impossible and ifixit has a bunch of guides ifixit.com/Search?doctype=guid

Show thread

unsolicited advice for folks running macbook laptops from the early/mid 2010s 

if you have the skills and inclination: consider replacing your thermal paste! my 2013 macbook air has always been a tolerable daily driver, but after i changed the thermal paste it tipped back over into being a joy to use. plus while you're in there, you can ACTUALLY clean the fan (I thought I'd been cleaning the fan, but when i actually removed it from the heat sink I saw that there was a huge chunk of lint in there)

(If all goes as expected, it should also be a neat way for different fedi instances to share the storage cost of static media among each other, instead of everyone needing to keep full copies, because it's a deduplicated storage system)

Show thread

Anyway the idea here is to have a distributed storage system that can be run on spare mismatched storage space by a group of friends, or a group of sysadmins, or whoever else, and be resistant against compromise and censorship. Both for personal data storage but definitely also for things that are meant for public access.

Which seems to have rapidly gotten a lot more relevant since I started on this project...

Show thread

The problem was that you can't have something addressed by both its content hash *and* a hash of its decryption key (for a decryption process that's several lookup steps removed from the initial one).

Or well, I *thought* you can't, but it turns out that with a small design change, you can in fact do that

Show thread

It turns out no matter how many times you try, you can't clone-tool away a spec of dirt on your screen

The idea is to have a distributed storage system that lets you set up a cooperative storage cluster between multiple semi-trusted parties; with RAID-like striping across participants (so more efficient than duplication) but with all data being encrypted and independently verifiable, so it's resistant to stuff like hacked systems. It's strongly inspired by Tahoe-LAFS (but makes some different design choices for practical reasons).

I got stuck on a seemingly trivial problem; how to make the hashes of different storage objects verifiable while also allowing retrieval of a file when the only thing you have is its decryption key

Show thread

Finally (slowly) making progress on my cooperative storage cluster project

PSA: If you are in the EU, bought an Alexa/Echo device, and the "keep recordings local" feature was *ever* advertised or mentioned to you in any sales materials anywhere...

The announced change (all recordings being sent to Amazon servers) means that you are likely eligible for a refund/return, because the device no longer provides the functionality that you were sold, and it is not a result of normal wear and tear.

The exact legislation may vary by country, it is usually called something like 'conformity' or 'legal warranty', and contrary to popular belief it is not capped at a fixed number of years for these kinds of cases.

Show older
Pixietown

Small server part of the pixie.town infrastructure. Registration is closed.