• 0 Posts
  • 53 Comments
Joined 3 年前
cake
Cake day: 2023年7月16日

help-circle
  • The title also doesn’t state that VPNs need closing. They are talking about VPNs being a loophole to the “age” verification that needs closing. For anyone being even a little bit tech savvy, it was crystal clear from the beginning that forcing people to provide official identification documents or a picture/video of themselves will create a response of attempts to circumvent this. And VPNs being the easiest (as in affordable, ease of use, and various providers being available) way of doing that, are now obviously the next ones to take the hit. If, or rather when, the EU decides to crack down on VPN providers, they are effectively closed. Why would I use a service that forces me to ID myself to circumvent the ID requirement of other services? The only reason to use a VPN is anonymity.




  • Google has never been doing anything else. How is showing yet another popup a war on general-purpose computing? All they are interested in is their profit and market share. You always will be able to install external APKs, worst case using adb. And the more they’ll lock it down, the more workarounds, jailbreaks and tools will pop up.

    Literally every company is doing the same, from your smart TV to your smart fridge. Further restrictions on external installations (as in non-PlayStore) is at least something that arguably brings some benefit to some users, given the current state of cyber security.

    “Anti-property-rights propaganda” is a very big term in the context of the sideloading change, when you should assume that your device might get fully and remotely bricked anytime when Trump or one of his cultists finally loses his shit and orders a cease of operations e.g. in Europe to put pressure down.

    Anyone who is concerned about Google’s ethics has moved to another ROM where Google can’t do shit. Others don’t care, and keep using it as-is. And that’s all there is, like it or not, move on or don’t, but yapping about propaganda for a term preceding the play store by about 20 years is not doing anything.


  • Why is everyone so upset about the term sideloading. It’s not “denormalizing”, the “normal” way for your average joe is using the app store. Y’all need to take a step back and be aware that the average lemmy user is by far more tech savvy than your average smartphone user. And of course it’s not a term used in the context of windows or Linux, because the normal way there simply allows installations.

    If Google does that as they describe they do - an additional layer, that I can disable in some settings, if I want to, why are we upset about that? It does help protect users that are not aware of what the consequences may be.

    And of course Google wants to maximize device control. Just as Apple. And Microsoft. And any other company. You want full control over your device, use the according software for that.



  • In addition to all the suggestions - check out modding databases like nexusmods or whatever. Many older games that would not fit your definition have graphical mods that will make your GPU work.

    Personally I’ve played modded stalker, fallout, elder scrolls. Hell, you can make Minecraft look absolutely amazing, but it’s a pain to set up properly. You’ve mentioned you’re not into horror games, some games also have total conversions available that do a some genre bending too.

    Cyberpunk is not that old, but it’s one of the best looking games ever made IMHO.

    Witcher 3, also potentially with mods.



  • “Googling a lot while coding” is not even remotely close to vibe coding, please don’t gaslight yourself into that.

    When you read up on things, you know what you’re looking for. You read a potential solution (e.g. part of a documentation, an example, someone else’s solution, a solution to a similar problem), you think about it and transfer that to your own problem, with your own code, with your own thoughts.

    Using AI support is totally fine too - it’s a smarter code completion, nothing more. It might spit out something wrong, something partial, something good. You might ignore it as with the regular completion. In the end, it’s still you thinking about it, modifying it until it works, and doing your thing.

    “Vibe coding” is basically saying tech jesus take the wheel. And it might go well for someone who cannot code, who managed to create their small game or some website. It will go horribly wrong for any project handling user data, sensitive data, or something that needs to be maintained after. We’ve had more than enough examples of that.




  • And where did I say that no one should pay for youtube premium? Where did I say that everything should be 100% free?

    If YouTube premium is worth it for you, go for it. In my opinion YouTube is getting worse by the day, and it’s monopoly due to its reach and resources suppresses any competition, unfortunately. Even if YouTube Premium would cost 10 cents I won’t pay it, because I simply think that YouTube has severely gone wrong. Vote with your wallet.

    And before other connoisseurs of boot material chime in - I’m paying for Google one. I’m using drive and mail daily. I bought the new pixel, watch and buds day one, and all of those are amazing Google products I’m very happy to pay for, just as I do for Spotify, HP, Netflix, IntelliJ and any other product that brings me value.

    Pay for what you want, and let me do the same.






  • NPM allows for code to be executed while you install the package which is different from maven or nuget and allows for easy exploitation paths

    This is the winner. Combine that with a vastly bigger group of inexperienced developers (and I’m willing to die on that hill), and you have a lot of people running node / npm as an admin / root user, who have close to zero idea what they are doing, hitting their project with third party dependencies left and right for no particular reason (left-pad, is-number, ansi console and similar useless crap), and then your dependency management allows for code execution. Also, from my personal feeling, it seems that npm simply cannot properly audit the packages due to the sheer mass. From a technical standpoint it’s close to trivial to put your malware onto npm, and then you just need to get someone to install your package, which is way simpler than in other package managers


  • The smallest footprint for an actual scripting probably will be posix sh - since you already have it ready.

    A slightly bigger footprint would be Python or Lua.

    If you can drop your requirement for actual scripting and are willing to add a compile step, Go and it’s ecosystem is pretty dang powerful and it’s really easy to learn for small automation tasks.

    Personally, with the requirement of not adding too much space for runtimes, I’d write it in go. You don’t need a runtime, you can compile it to a really small zero dependency lib and you have clean and readable code that you can extend, test and maintain easily.