Spyke

Replies

Comment on

Google tries to defend its Web Environment Integrity

Reply in thread

What people are rightfully scared of is that:

  • Big websites will only accept attestations from big companies like Google, Apple, and Microsoft
  • Google, Apple, and Microsoft will refuse to attest your browser if you have an adblocker installed, or if you are using a browser or operating system they don't approve, or if you made modifications to your browser or your operating system etc.

While adblocking can be detected, you can block anti-adblock scripts, it's sort of a weapons race. Depending on how deep an attestation goes, it might be extremely difficult to fight. Attestations might also be used to block more than just adblockers, for example using Firefox, or rooting/jailbreaking your phone, or installing an alternative OS might make your phone ineligible for attestations and thus locked out of a lot of the internet.

Comment on

I moved to Seattle for a high-paying tech job. It turned out to be the loneliest time of my life.

Men will literally write a Business Insider article instead of going to therapy. No really, I feel like this guy could benefit from some therapy.

It wasn't until I met a few women on dating apps that I realized being a software engineer in a tech hub is far from special. Working at companies like Amazon or Microsoft just isn't interesting; it's the norm here.

It's weird to expect that you'd get dates just for being an engineer. What? Like if someone did date you just because you are an engineer, that would be such a shallow relationship.

I think one big reason for that is software engineering doesn't require socially demanding skills like in product management or UX design.

Strongly disagree, software engineering is mostly social skills. It's all about communicating problems, learning your users pain points, explaining your solutions, and coordinating work. Coding the actual solutions is typically the easy part unless you are doing cutting edge computer science research.

Comment on

Chrome not proceeding with Web Integrity API deemed by many to be DRM

Reply in thread

This is worse. Let's go with an example: on an Android phone, you visit a website. The website asks for an integrity check, the browser works with Google Play Services to complete the check.

What if you have a de-Googled phone without Play Services, or if you made modifications to restrict Google's tracking? Then Google can refuse to verify you. What if you installed an ad blocker in your browser? Google can refuse to verify you.

If you fail verification, the website could ask you to complete a captcha, or just refuse to show you anything.

Comment on

nginx reverse proxy using subpaths help

You'll need to check the documentation of every app, they usually have an option to set a base path so the app will add that base path to every link and resource.

If some of the apps don't have support for that, the next option would be to build from source and patch all the links yourself.

Comment on

Garagefs selfhosed s3 compatible storage.

I don't like that garage requires manual intervention to upgrade, so I went with minio which can upgrade automatically. I have it deployed with docker, and I use watchtower to pull in upgrades automatically without intervention.

I do love minio. I have backups going into it, and I use it to host my static website blog too.

Comment on

Businesses can discriminate against their customers? Alright then...

Reply in thread

That's not what equal protections meant though. It just meant you can't refuse to serve a customer based on their protected statuses like religion or sexual orientation.

If a church calls you to order a cake but you were planning to take time off work for a while, you could still say no. It was only a problem if you say "no, I don't bake cakes for Christians". That's not slavery. You can stop working, nobody was forcing you. Just that when you do work, you can't discriminate.

Comment on

Ah, when we lose focus for a second and then we don't even known what our code was supposed to do

Reply in thread

It's also an amazing way of duck-debugging. By the time you write down what the problem is, you'll figure out where's the issue or at least what you should try next.

"X is giving me an error, I checked X's logs. X communicates with Y... Oh, I need to check Y next!"

And if you can't figure it out, you have the problem and everything you tried documented so you can ask for help and get answers effectively.

Comment on

Period tracking app options?

Reply in thread

The police can confiscate your servers. Considering some states are treating abortion as murder, I don't think it's unrealistic to say the police could raid your home and confiscate your devices just on suspicion.

The only thing safe against that is an encrypted device locked with a password, no biometrics like fingerprints or face ID. As far as I know, you can refuse to give a password under the 5th amendment, but you can't refuse to unlock a device with a fingerprint reader or face ID.