Spyke

Replies

Comment on

The pirates are back - Anew study from the European Union’s Intellectual Property Office (EUIPO) suggest that online piracy has increased for the first time in years. In fact, piracy rates have bee...

Is a lobotomy needed to become a lobbyist?

1.) Article claims w/o any kind of source/data, that people cannot afford subscriptions 2.) Article warns that the big services have to raise their prices soon, because of losses made by piracy, which according to 1.) is caused by people not having enough money for the subscriptions

The article doesn't mention the shareholders, which get billions of wins by milking the subscribers stupid enough to sign up for the bullshit. ... oh, but the article mentions the poor artists/working people, which loose money because of online piracy. I almost forgot about the recent strikes, because the people actually producing the content don't get shit from the companies/shareholders.

Seriously, I'll cancel my last subscription right now, because I am feed up giving my money to shareholders, companies and lobbies who buy politicians and laws.

linux

Comment on

When do I actually need a firewall?

Seriously, unless you are extremely specialized and know exactly what you are doing, IMHO the answer is: Always (and even being extremely specialized, I would still enable a firewall. :-P)

Operating systems nowadays are extremely complex with a lot of moving parts. There are security relevant bugs in your network stack and in all applications that you are running. There might be open ports on your computer you did not even think about, and unless you are monitoring 24/7 your local open ports, you don't know what is open.

First of all, you can never trust other devices on a network. There is no way to know, if they are compromised. You can also never trust the software running on your own computer - just look at CVEs, even without malicious intentions your software is not secure and never will be.

As soon as you are part of a network, your computer is exposed, doesn't matter if desktop/laptop, and especially for attacking Linux there is a lot of drive by attacks happening 24/7.

Your needs for firewalls mostly depend on your threat model, but just disabling accepting incoming requests is trivial and increases your security by a great margin. Further, setting a rate limit for failed connection attempts for open ports like SSH if you use this services, is another big improvement for security. (... and of course disabling password authentication, YADA YADA)

That said, obviously security has to be seen in context, the only snake oil that I know of are virus scanners, but that's another story.

People, which claim you don't need a firewall make at least one of the following wrong assumptions:

  • Your software is secure - demonstrably wrong, as proven by CVEs
  • You know exactly what is running/reachable on your computer - this might be correct for very small specialized embedded systems, even for them one still must always assume security relevant bugs in software/hardware/drivers

Security is a game, and no usable system can be absolutely secure. With firewalls, you can (hopefully) increase the price for successful attacks, and that is important.

Comment on

Java at 30: How a language designed for a failed gadget became a global powerhouse

Java is IMHO one of the most underrated platforms outside of enterprise environments.

Most people also forget, that Java is not only a language, but also a platform, an ecosystem and active research is applied to many parts of Java.

Concerning Oracle: OpenJDK is actively supported by very different but big and capable companies (IBM, Amazon, Eclipse Foundation...). The quality of the language, libraries and documentation needs people which are payed to work on this, full time.

Bring to this the free IDEs one can get for Java - Eclipse and Netbeans are a little bit old school, but offer everything to build/debug and develop complex software.

Java is not my favorite programming language, but when I want to write interesting software and ensure it will be running for the next decade w/o significant changes, Java is really hard to beat.

Of course, in hindsight we know how to do a lot of things better as they were done in Java. Still, what other open source Language/Platform/documentation with the backing of capable companies and really independent and interoperable builds are out there?

One last note to all people which were damaged by Java in university or school: Usually the teachers/professors/lecturers have no real world experience of software development besides the usually university projects, and for the usual university projects which basically means getting small to midsize projects to run Java is total overkill.

Don't confuse this with real world software projects in the industry, which are mission critical and need to work a decade from now on. Java was always a bread and butter language, but one which learned from other languages and even the verbosity makes sense, once one dives into code written a few years back by another person.

Comment on

Why is math a hard subject for most people?

  • Teaching math is mostly done w/o context and history, IMHO a lot of math makes much more sense when the original problem is understood, before the level of abstraction is being raised.
  • Math is a also a language and a notation. Unless one uses math regularly, there is simply not enough practice/repetition to read/speak this notation.
  • Math is a tower of abstractions, depending on other abstractions. A lot of topics in math depends on people understanding a lot of basic parts, which means if a student just got by with a prior topic, it is near impossible to catch up/understand what is currently being taught. (Compare to other topics: For example, if a student is bad in their Greek history, they get a fresh start when the topic is industrialization in England w/o any penalty.)
  • Math in the primary and secondary schools is mostly computation, 'real math' is only taught to people studying MINT.

tl;dr

  • we need a better curriculum in the primary/secondary schools
  • we need more exercises in reading/writing the mathematical notation (sorry, just understanding math is not enough, because understanding doesn't make one fluent)
  • at least in my school years, math was not repeated enough.
  • reading/understanding math is really hard, at the higher levels, understanding 2-3 pages on a textbook per day is an acceptable pace. I guess all the entertainment nowadays makes it not easier to sit still in a room and get math into ones brain

For me the 'breakthrough' with math was, simply to accept that at the higher levels we are speaking about symbols (abstractions) that follow certain rules and everything else is derived by pure logic. Just accepting that one is manipulating symbols with rules to get to other symbols and learning the rules, made it click for me. Disclaimer: Was lucky with great math teachers in university, but even in my university there were people who simply could not accept the game of mathematics and were frustrated, because they wanted easy question/answer style formulas in the sense: When you see this, substitute PI with 3.14 and multiply r by r and write down the number that your calculator shows. They never made any effort to understand where PI comes from, where the radius comes from and why it makes sense.

What is insane, is how many people studied computer science but are totally unable to apply mathematics to the problems they try to solve. Supposedly most of them learned relational algebra and discrete mathematics during their studies (and formal languages/complexity theory)... it is like something is missing in their ability to transfer what they learned in the university to basically the same problems where the symbols have different names. That is something I would love to understand.

firefox

Comment on

Mozilla opposes Web Integrity API proposal

IMHO we have several really big problems with the web as it is today, which are intertwined:

  1. The web (standards) is by far too complicated. If even Microsoft doesn't have (or isn't willing) to provide the resources to implement a browser, there are not many players left with the resources and the motivation

  2. Google Chrome and Safari are the only game in town. (My main browser is Firefox, but seriously, we have such a small market share that nobody gives a damn)

  3. Most people/governments/companies don't care or don't understand the problem of the mono culture for browsers

  4. The value of the web is everything which is already on the web and that one can access anything with the browser - for this reason, we can only grow in the direction of more complicated while keeping backwards compatibility

  5. Besides lip-service to the contrary, our politicians want to control communication and supervise their citizens, so for politicians it is better to have a browser controlled by a company like Google, than a really free web

Given how fundamental important the web is for modern human basic infrastructure, we (as a society) should find a better way to protect our infrastructure, freedom of speech and basic freedoms.

linux

Comment on

What's new in Fedora Workstation 39

Reply in thread

First, Fedora is not Red Hat but their own community. (Although heavily sponsored by Red Hat) Second, Red Hat is FOSS.

The ones hostile to FOSS are all the freeloading companies, which used the work of Red Hat to increase their own profit, w/o contributing anything back.

If it is so easy, cheap and so much fun to support a stable Distribution for 10 years with backports for security vulnerabilities and drivers, I am very surprised that we don't have hundreads of community distributions which do this.

Finally, over the years Red Hat contributed a load of the things we take for granted now.

(Writing this as a happy Debian user. I am just tired of reading this kind of bullshit again and again and again.)

Comment on

What was a profound moment that a video game caused you to experience, and why?

X-COM (from the 90's, not the remake):

I totally sucked at playing X-COM and died a lot, until I learned about real world squad tactics.

In X-COM, the members of your team can get scared/lose it, and behave in random ways like throwing away their weapons/fleeing the fight or just going berserk and shooting around.

So, after I improved my game with my newly acquainted knowledge of real world squad tactics, I had a terror mission. Terror missions are missions, where the aliens attack and which are harder than the other missions.

I managed to survive the load out from the helicopter and kill nearly every alien on first contact, thanks to very careful and orchestrated movement of my squad.

There was one alien left, I tried to shoot it several times from a distance, and of course (this being X-COM after all), all of my shoots missed...

... THE ALIEN STRESSED OUT AND BERSERKED...

I didn't even know that it was possible. After weeks of loosing and frustration, this one moment is the most satisfying moment of my entire gaming history (more than 30 years now).

Haven't found any modern game, where this would be even possible!

Mandatory link to OpenXcom

Comment on

An earnest question about the AI/LLM hate

I am in software and a software engineer, but the least of my concerns is being replaced by an LLM any time soon.

  • I don't hate LLMs, they are just a tool and it does not make sense at all to hate a LLM the same way it does not make sense to hate a rock

  • I hate the marketing and the hype for several reasons:

    • You use the term AI/LLM in the posts title: There is nothing intelligent about LLMs if you understand how they work
    • The craziness about LLMs in the media, press and business brainwashes non technical people to think that there is intelligence involved and that LLMs will get better and better and solve the worlds problems (possible, but when you do an informed guess, the chances are quite low within the next decade)
    • All the LLM shit happening: Automatic translations w/o even asking me if stuff should be translated on websites, job loss for translators, companies hoping to get rid of experienced technical people because LLMs (and we will have to pick up the slack after the hype)
    • The lack of education in the population (and even among tech people) about how LLMs work, their limits and their usages...

LLMs are at the same time impressive (think jump to chat-gpt 4), show the ugliest forms of capitalism (CEOs learning, that every time they say AI the stock price goes 5% up), helpful (generate short pieces of code, translate other languages), annoying (generated content) and even dangerous (companies with the money can now literally and automatically flood the internet/news/media with more bullshit and faster).

Comment on

People outside the US, do you still consider America a democracy?

When was the US the last time a democracy?

You can vote democrats or republicans, which mostly get bankrolled by the same rich assholes. As a normal citizen of the US you have almost no influence at politics at all, because the media is controlled by rich people, the biggest internet platforms are controlled by rich people, elections are paid for by rich people, ...

The current situation is not a spontaneous, miraculous, magical result of Trump and his gang, it was years in the making by lobby groups, influential/rich/powerful people and neo liberal brainwashing of the masses.

Same holds true for most other western so called democracies.

linux

Comment on

Firefox enables user tracking

Reply in thread

... first of all, providing a new API to give out information about me is not a good thing in my mind.

Second, this would be the first time in human history, the advertisers would not simply add that APIs information to everything else they aggregate including fingerprinting of your browser.

So, serious question: How is this good for me?

Edit: typo

linux

Comment on

ZRAM is insane

Reply in thread

Let me give it a try:

Imagine you are having breakfast and sitting on your breakfast table. Everything on your table and reachable w/o getting up is what your CPU holds in its register. When you need something from the fridge in your home, this is your RAM. If you need something that is not in your fridge, you have to get dressed, get out of our home, walk to the groceries store which is half an hour away, find what you are looking for, pay for it, walk home for around half an our, switch back to your relaxed clothing and finally you can continue your breakfast. The groceries store is your hard disk/ssd whatever. With compression, imagine you have a big second fridge in the basement (or the house next to yours, you get the idea). Not as good as having stuff on your table or in your fridge, but usually at least an order of magnitude better than having to visit the groceries store.

piracy

Comment on

I feel like the Steam Deck is the best proof of Gabe Newell's quote that "piracy is a service issue."

In my personal life, I run Linux on all my devices and I would never invest in non-opensource technology for my career. (Work forces me to run macOS, but that's another story).

For years now, I happily and only buy games on Steam, even if I have the choice between Steam and NoDRM. Simply because Steam just works(TM) and is convenient. (Of course one never buys games on steam with a forced additional starter from Ubisoft etc.).

Steam is really great from a technically POV, from a giving back to the community point and from a customer friendliness point (never had a problem with a return).

I even bought a SteamDeck although I am no big fan of handhelds, and for what it is, it is great.

I'll happily waste more money on my Steam backlog of shame. ;-)

piracy

Comment on

I used to love Android but I want to move, and I don't know if it's the right thing.

there is no android phone that I am passionate about,

Not what you asked for:

A phone is a tool which should enable you to do stuff. Be passionate about friends, hobbies, art, not a piece of plastic.

Being forced to use iOS (work phone) and Android (Samsung, also work), both suck IMHO but Android sucks less.

My next Android will be a Pixel, as others suggested custom roms are the way to go, but even vanilla Android is more functional/open/practical for my needs than iOS.

I would never buy Apples shit with my own money: Dumped down, locked down and in the end you are renting a device from Apple to pay fees for their Appstore and Cloud offerings and vendor lock in. No thanks.

Comment on

Backdoors

Reply in thread

THIS.

I do not get why people don't learn from Node/NPM: If your language has no exhaustive standard library the community ends up reinventing the wheel and each real world program has hundreds of dependencies (or thousands).

Instead of throwing new features at Rust the maintainers should focus on growing a trusted standard library and improve tooling, but that is less fun I assume.