JRaccoon

@JRaccoon@discuss.tchncs.de

• ⁨Comment⁩ on ⁨What are You Working on Wednesday⁩ ⁨⁨10⁩ ⁨hours⁩ ago⁩:

  It was a bit of a day at work, I must say.

  It started well, we were only minimally affected by the PHP apocalypse. Only two services to update, neither of them mission critical AND even better, both were already on fairly recent patches, so updating them was pretty much a five-minute job once the patch was released.

  Then we had a bit of a TLS issue, not related to eMudhra tho. Our public TLS certificates auto-renewed yesterday, routine stuff. But today two different clients complained that their browsers were giving them SSL errors. After a bit of back and forth, it turned out that our cert provider had switched to a new CA, and the IT departments at those two clients had, for some reason, pinned our domain to a specific CA and that had now to be updated. I can fully understand this kind of setup for internal CAs and such, but our service is on the public internet and uses a well-known SSL provider. This is the first time we’ve encountered something like this. I’m wondering whether it’s common for IT departments to do this. If so, why? Anyway, one customer had no problem with this, but the other tried to blame the “downtime” on us. Apparently, they expect us to warn them at least two weeks before rotating TLS certs. Trying to explain how ACME works didn’t help.

  Final headache of the day, one of our developers forwarded me an email they’d received from Atlassian. At first, it looked like a scam attempt (it started with something like “You need to make changes immediately!”), but it turned out to be real. Apparently, Bitbucket is changing their SSH endpoint. While that doesn’t seem like a too big deal, their messaging about it is just absolutely horrible. The deadline is in less than a month(!), but almost all their documentation still refers to the old endpoint. Even https://bitbucket.org/site/ssh still only returns the old hostname! I was really confused where to find the new host keys, but apparently they’ve decided to use the same host keys for the new hostname. That seems a bit odd to me, but it’s whatever… Then as a final F from Atlassian, when I tested connecting to the new hostname, the whole of Bitbucket went down. You can’t make this stuff up! Okay, I don’t think my connection attempt was what actually crashed it, but still, I wouldn’t be too surprised even if it was.

• ⁨Comment⁩ on ⁨What are some cool/decent PC games that are not on Steam?⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  Yeah, it’s available on Steam (for free) but I think it still fits this thread nicely.

  It’s impressive that they’re still actively developing it after 20 years. For anyone else like me who used to play Wesnoth a lot but hasn’t touched it in a couple of years, I just noticed that they have added a new mainline campaign fairly recently.

• ⁨Comment⁩ on ⁨Devianart maximum downloads⁩ ⁨⁨2⁩ ⁨months⁩ ago⁩:

  Image

  Old screenshot. They used to have basic security features like 2FA behind a paywall. That’s just stupid. But at least they recently changed it, allowing free users to secure their accounts.

• ⁨Comment⁩ on ⁨GitLost: How We Tricked GitHub’s AI Agent into Leaking Private Repos⁩ ⁨⁨3⁩ ⁨months⁩ ago⁩:

  I think the whole thing is a bit clickbaity. The only reason it works is that they specifically configured the AI workflow to have access to both the public and the private repositories. The solution? Don’t do that. The only thing GitHub could fix here is disallowing such an obviously unsafe configuration.

• ⁨Comment⁩ on ⁨⁩ ⁨⁨3⁩ ⁨months⁩ ago⁩:

  I’m from Finland and usually the subtitles for English content are good.

  One challenging example that comes to mind is Baby Shower. Since this concept is mainly from the US, there isn’t an equivalent term in many languages. People here usually just use its English term, but I’ve seen subtitlers sometimes translate it as vauvasuihku, which literally means “baby shower”, but no one is going to understand that term.

  In one series, there was the phrase “What is this, my shower?”, when a pregnant woman was asked if she had already chosen a name for the baby. The subtitler had translated this literally as Mikä on tämä suihkuni? (≈What is this shower of mine?), completely losing the context.

• ⁨Comment⁩ on ⁨Why are some Linux community so toxic?⁩ ⁨⁨3⁩ ⁨months⁩ ago⁩:

  I think most newbies would rather find the answer themselves in the wiki or old forum threads, but that’s often difficult if you don’t know what exactly you’re looking for.

  Running with your example, let’s say I’m trying to find out the color of the sky but don’t know it’s called sky. And to make it worse, right now it’s covered by some kind of gray mass… Is that perhaps The Cloud I’ve heard people talking about? I would Google something like “huge thing above color” but unsurprisingly I wouldn’t end up on your wiki. So I end up asking the question on the forums instead.

  I used to work in IT support, where 95% of the questions were about things that were already comprehensively documented if people would just read. Instead of yelling at customers for asking dumb questions, we had response templates we could send with just a single click.

  I don’t understand why communities overwhelmed by repeat questions don’t do something similar. The next time someone asks about the sky color, it would take just one click to reply politely with a link to that wiki article and everyone would be happy.

• ⁨Comment⁩ on ⁨New HTTP/2 Bomb DoS Attack Hits Nginx, Apache, IIS, Envoy, and Pingora⁩ ⁨⁨4⁩ ⁨months⁩ ago⁩:

  Caddy is not mentioned, I take it it’s not affected?

• ⁨Comment⁩ on ⁨[deleted]⁩ ⁨⁨7⁩ ⁨months⁩ ago⁩:

  Other users cannot. Your instance admin can obviously see it if they want. Then, it depends on the settings of your instance if all media downloads from other instances are proxied through your instance (hiding your IP from other instance admins) or not. I’m not sure if it’s enabled by default or not.

• ⁨Comment⁩ on ⁨What actually happens in a DDOS attack?⁩ ⁨⁨8⁩ ⁨months⁩ ago⁩:

  Slowing down enough is the same thing than being unavailable. Imagine someone is sending you 1000 text messages per minute from different numbers all over the world. Your phone handles it fine but you have to manually read every single message to check if it’s spam or something important. By the time you reach that one real message where your crush asked if you wanna hang out, it’s way too late and they already asked someone else.

• ⁨Comment⁩ on ⁨Name a game that you found SO FUN, but no one talks about it anymore.⁩ ⁨⁨11⁩ ⁨months⁩ ago⁩:

  SimCity 4. That was before the franchise went to shit.
  I dunno why exactly, but I just don’t get the same enjoyment out of Skylines or other city builders.

• ⁨Comment⁩ on ⁨How to get a new line in a post, but not two?⁩ ⁨⁨1⁩ ⁨year⁩ ago⁩:

  Android wants to automatically add a “.” to the end of a sentence if I double space too fast

  If using GBoard, that can be disabled in settings. I don’t know anyone who actually uses that feature, I don’t know why it’s enabled by default.

• ⁨Comment⁩ on ⁨In one week, Lemm.ee will shutdown⁩ ⁨⁨1⁩ ⁨year⁩ ago⁩:

  If you are in the UK (where lemmy.zip is geoblocked due to UK laws)[…]

  That’s news for me. Anyone know what law(s) exactly they have problems with?

• ⁨Comment⁩ on ⁨Dispatch offers something new for superhero video games — engaging deskwork⁩ ⁨⁨1⁩ ⁨year⁩ ago⁩:

  Link to the free demo on Steam

• ⁨Comment⁩ on ⁨Microsoft kills Windows Maps app⁩ ⁨⁨1⁩ ⁨year⁩ ago⁩:

  killedbymicrosoft.info

• ⁨Comment⁩ on ⁨Assassin's Creed Shadows Drops To 40 FPS At 720P On The Next-Gen Nvidia RTX 5070Ti⁩ ⁨⁨1⁩ ⁨year⁩ ago⁩:

  Might be an unpopular opinion but after around two hours of gameplay I’m perfectly happy with the performance on my 3060Ti. On medium-high settings it can easily maintain 60fps on 1440p. That is with DLSS of course and ray tracing turned down to minimum.

• ⁨Comment⁩ on ⁨Do you wish that you could recycle games?⁩ ⁨⁨1⁩ ⁨year⁩ ago⁩:

  I’ve learned that over in the EU, people can actually re-sell their games on Steam.

  Unless I’ve totally missed something, this is (sadly) not true.

• ⁨Comment⁩ on ⁨Favorite retro games?⁩ ⁨⁨1⁩ ⁨year⁩ ago⁩:

  The original Super Mario Bros. and SMB 3. The first console I got to play as a child was the NES at my grandparents’ house. Every couple of years I get a nostalgic craving and it’s usually those two games I return to. Also, there are many great rom hacks available if getting bored of the originals.

• ⁨Comment⁩ on ⁨Can I pay someone to add a specific feature to an open source app?⁩ ⁨⁨1⁩ ⁨year⁩ ago⁩:

  github.com/jarnedemeulemeester/findroid

  This is the repository? They have a ko-fi link in the repository meaning they accept donations to support the development. Have you tried contacting the lead developer of the project and asking if they would be interested in adding the feature you want if you sponsored it via a donation?

• ⁨Comment⁩ on ⁨MS new captcha: Why did it have to be that hard!?!?⁩ ⁨⁨1⁩ ⁨year⁩ ago⁩:

  Pretty sure any decent model could easily solve that anyways.

  True, but often these things also track the mouse movements or touch inputs and analyse those to see if they match natural human input or not. Of course advanced AI would be able to simulate proper inputs but most bots today would fail this check.