• 0 Posts
  • 43 Comments
Joined 1 year ago
cake
Cake day: June 21st, 2023

help-circle



  • As someone who has done a lot of distro hopping in the past, I’ve found that going for a stable release that is widely used as a daily driver is superior for gaming than “gaming specific” linux distros, largely on the basis that the gaming distros have routinely had buggy UIs, driver issues, and a variety of unexpected and undesired behavioral problems tied to the array of “gaming adjacent” software installed, most of which you can install yourself with little to no effort and most of which you probably don’t want or need in the first place.



  • I’ve heard similar from the worst first year CS students you could ever meet. People talk out their ass without the experience to back up their observations constantly. The indentation thing is a reasonable heuristic that states you are adding too much complexity at specific points in your code that suggests you should isolate core pieces of logic into discrete functions. And while that’s broadly reasonable, this often has the downside of you producing code that has a lot of very small, very specific functions that are only ever invoked by other very small, very specific functions. It doesn’t make your code easier to read or understand and it arguably leads to scenarios in which your code becomes very disorganized and needlessly opaque purely because you didn’t want additional indentation in order to meet some kind of arbitrary formatting guideline you set for yourself. This is something that happens in any language but some languages are more susceptible to it than others. PEP8’s line length limit is treated like biblical edict by your more insufferable python developers.





  • If there’s one thing I learned working in IT it’s that devs actively half-ass their error messages, routinely misspell critical words you’re gonna grep for in logs, and never even consider having someone in Product read over customer-facing error messages like this. All they see is a Jira ticket that says “include the following verbiage in the VPN rejection message” that was typed up by a mostly plastered PM one afternoon after they downed 3 margaritas at “lunch” at the taqueria next to their office. And then they just copy and paste that shit into whatever bullshit HTML template took the least effort to find.



  • I’m not. Universities aren’t places of open or free learning. They’re deeply invested in capitalism and benefit greatly from intellectual property laws. In fact, most universities function largely as state subsidized pipelines that take people without a viable, real world skill set and turn them into people who still don’t have a viable real world skill set, but who do have a piece of paper telling corporations that they’re able and willing to put up with complete bullshit, general mistreatment, and dull, grueling labor for years without incident. Which is good enough for your typical middle-class wage slave and whatever they might want to do.


  • I also wouldn’t be surprised if even the automated processes that edit your comment to be gibberish even accomplishes that. Text is, in the software world, remarkably cheap to store, even at volume. It also compresses easily, is remarkably easy to tie to version control mechanisms, and with reddit’s comment system can easily be structured as a part of an existing dialogue tree. They know people are pissed at them and are looking to nuke their comment history, so I wouldn’t be surprised if they already have multiple cold storage backups of reddit’s entire site comment history over the course of months or years. Right now, that data is the most valuable thing they have, their reputation as the “front page of the internet” be damned.





  • This is the only realistic answer. Corporations have effectively decided that the future of the web is closed source proprietary javascript bloatware apps that are all functional skinner boxes. Many people, especially young people, have no clue how to use an actual computer. It’s “click the bubble to make it pop and give us your mom’s credit card number to unlock super premium bubbles.” That’s the future of the internet. But probably worse.




  • A “typical” home user, whom I assume is less knowledgeable about technology, is probably the person who would benefit the most from strict firewalls installed on their device. Such an individual assumedly doesn’t have the prerequisite knowledge, or awareness required to adequately gauge the threats on their network.

    They also would not realistically be doing anything that would cause open ports on their machine to serve data to some external application. It’s not like someone can just “hack” your computer by picking a random port and weaseling their way in. They have to have some exploitable mechanism on the machine that serves data in a way that’s insecure.

    Would this not be adequate rationale for having contingencies, i.e. firewalls? A risk/threat needn’t only be an external malicious actor. One’s own mistakes could certainly be interpreted as a potential threat, and are, therefore, worthy of mitigation.

    I am assuming that there’s a hierarchy of needs in terms of maintaining any Linux system. Whenever you learn how to use something (and you would have to learn how to use a firewall), you are sacrificing time and energy that would be spent learning something else. Knowing how your package manager works, or how to use systemctl, or understanding your file system structure, or any number of pieces of fundamental Linux knowledge is, for a less technically sophisticated user, going to do comparatively more to guarantee the longevity and health of their system than learning how to use a firewall, which is something capable of severely negatively impacting your user experience if you misconfigure it. In other words: don’t mess around with a firewall if you don’t know what you’re doing. Use your time learning other things first if you’re a not technically sophisticated user. I also don’t exactly know what “mistakes” you’d be mitigating by installing a firewall if you aren’t binding processes to those ports (something a novice user should not be doing anyway).

    Well, no, not necessarily. It’s important to understand what the purpose of the firewall is. If a device can potentially become an attack vector, it’s important to take precautions against that – you’d want to secure other devices on the network in the off chance that it does become compromised, or secure that very device to limit the potential damage that it could inflict.

    You just wrote that “One’s own mistakes could certainly be interpreted as a potential threat, and are, therefore, worthy of mitigation.” The best way of mitigating mistakes is by not making them in the first place, or creating a scenario in which you could potentially make them. Prevention is always better than cure. You should never open ports on your local network. Ever. I don’t care if you have firewalls on everything down to your smart thermostat - if you need to expose locally hosted services you should be maintaining a cloud VM or similar cloud based service that forwards connections to the desired service on your internal network via a VPN like Tailscale. Or, even better, just put Tailscale’s service on whatever machine you’re using that needs access to your personal network. And, yes, if you’re doing things like that, you would also want robust firewall protections everywhere. But the firewall simply isn’t ever “enough.”

    Anyway, just my 2 cents. The more you know and do, the greater steps you should take to protect yourself. For someone who knows very little, the most important thing that can help them is knowing more, and there is a hierarchy of learning that will take them from “knowing little” to “knowing much,” but they shouldn’t/don’t need to concern themselves with certain mechanisms before they know enough to reliably use them or mitigate their own mistakes. That said, if you are a new user, you’re probably installing a linux distro that already comes with its own preconfigured firewall that’s already running and you just don’t know about it. In which case, moot point. If you’re not, though, I’m assuming your goal is learning linux stuff, in which case, I’ve gone into that.