11
submitted 1 week ago* (last edited 1 week ago) by jeffhykin@lemm.ee to c/solarpunk@slrpnk.net

I didn't know anything about Bhutan before reading this, so it sounded fairly Solarpunk to me. I'm hopeful for their new city.

13
submitted 2 weeks ago* (last edited 2 weeks ago) by jeffhykin@lemm.ee to c/ergomechkeyboards@lemmy.world

While I'm particularly looking for chords (ex: if jkl; are all keydown at the same time then send the space keypress) I'd be happy to hear about your keymapping approach in general. E.g. how do you organize your layers, have you needed to custom compile anything, mapping choices you regret but are too hard to change now, etc.

I got my first ergomech board recently. I've got the background to flash the board manually and code everything in C. But before I go down that very deep rabbit hole, I wanted to see if what others had done/learned.

Personally I'm not planning to go full asetniop with cords. I think I just want a handful of chords to go along with layers.

27
submitted 2 months ago* (last edited 2 months ago) by jeffhykin@lemm.ee to c/privacy@lemmy.ml

Fingerprinting isn't always possible to defeat, and its not always possible to avoid making accounts (work and school accounts)

However, it should be possible to fill up tracked data with meaningless garbage and reduce the signal-to-noise ratio. Ex: a bot that browses random products on amazon to reduce profiling accuracy.

Do you guys know of any tools that do this? Anything from browser extensions to command line scripts, to anonymous group-accounts.

[-] jeffhykin@lemm.ee 116 points 2 months ago

I didnt upvote the other python-beginer friendly meme cause it wasn't accurate. But this one is on point.

[-] jeffhykin@lemm.ee 63 points 3 months ago* (last edited 2 months ago)

Don't forget the fully fledged remote desktop thats built in, WebVR (which is being replaced with Web XR), Web Bluetooth, Web USB (aka Web Serial), the API's for notifications, ambient light sensors, an entire transactional database (indexed DB), the language translation API, the Gamepad API (videogame controllers), hardware passkeys (yubikey), speech to text, text-to-speech, webGL, webGPU, webworkers, service workers, an entire suite of cryptography tools, GPS location, battery, vibration, FileSystem API, picture-in-picture API, WebRTC, WebSensors, etc.

And then, on top of all that, building a miniture OS-kernel so that tasks can be sandboxed scheduled/executed and prevent 1 tab from crashing everything or hogging resources.

25
submitted 4 months ago* (last edited 4 months ago) by jeffhykin@lemm.ee to c/privacy@lemmy.ml

I'm asking for existing tools/systems that let me programmatically say: "here is my public key, BUT if each of these 5 other public keys all send a signed message saying that my public key has been compromised, then you should mark my public key as compromised, and use the new one they provide". (This is not for a particular task, I'm just curious if any existing auth systems are capable of this)

I call the idea "guardian keys" because it could be friends' public keys or or just more-securely-stored less-frequently-used keys that you control.

NOTE: I know this would not work for data encryption. Encrypted data is simply gone if a key is lost. But, for proving an identity, like a login, there could be a system like this but I don't know of any

[-] jeffhykin@lemm.ee 61 points 5 months ago* (last edited 4 months ago)

This could actually be a pretty big deal

  1. The Eclipse foundation has been making alternatives to VS Code's "killer apps" (Docker, Python, Go, C++, SSH, Live share, etc). AKA the closed source ones exclusive to VS Code offical that make all forks of VS Code a huge downgrade. The Eclipse foundation is also running the extension store that powers VS Codium.
  2. "why not just use VS Codium?" (With the killer extensions made by Eclipse)
    • VS Codium is great, but because of manpower limits, they always have to be "downstream" of VS Code. They can't rewrite any of the core systems.
    • As someone who contributes to VS Code, and loves VS Codium, many issues I have with VS Code have been open on github for +7 years, with hundreds of comments and thumbs-ups. We can't even sort the file explorer view by last-edited and folders-first (but we can do folders-first alphabetical). Thats been open since 2017.
    • Theia looks like it could finally be the hard fork I've been waiting for. A hackable editor, trying to be open source, where all my extensions work, and the community can actually make a PR, get it merged, and extensions are not excessively sandboxed.
    • Will it be that? Only time will tell, but the Eclipse foundation has a pretty good record. They're definitely prepared for long term support.
40
submitted 5 months ago* (last edited 5 months ago) by jeffhykin@lemm.ee to c/solarpunk@slrpnk.net

I don't think I've seen any solarpunk art (much less real world construction) with transparent wood, so I wanted to share

Not only is transparent wood real but apparently it has been around in labs for a bit. Take a look! (And let me know if this is old news for you)

Article: https://arstechnica.com/science/2023/12/why-scientists-are-making-transparent-wood/

Wikipedia with video: https://en.m.wikipedia.org/wiki/Transparent_wood_composite

Original paper publication: https://45-79-48-20.ip.linodeusercontent.com/s/trDsHKKWwsHsQZ5

58
submitted 6 months ago* (last edited 6 months ago) by jeffhykin@lemm.ee to c/nostupidquestions@lemmy.world

Why doesn't every computer have 256 char domain name, along with a private key to prove it is the sole owner of the address?

Edits: For those technically inclined: Stuff like DHCP seems unnecessary if every device has a serial number based address that's known not to collide. It seems way more simple and faster than leasing dynamic addresses. On top of that with VOIP I can get phone calls even without cell service, even behind a NAT. Why is the network designed in such a way where that is possible, but I can't buy a static address that will persist across networks endpoint changes (e.g. laptop connecting to a new unconfigured wifi connection) such that I can initiate a connection to my laptop while it is behind a NAT.

  • Yes, it would be a privacy nightmare, I want to know why it didnt turn out that way
  • When I say phone number, I mean including area/country code
  • AFAIK IP addresses (even static public ones) are not equivlent to phone numbers. I don't get a new phone number every time I connect to a new cell tower. Even if a static IP is assigned to a device, my understanding is that connecting the device to a new uncontrolled WiFi, especially a router with a NAT, will make it so that people who try to connect to the static IP will simply fail.
  • No, MAC addresses are not equivalent phone numbers. 1. Phone numbers have one unique owner, MAC addresses can have many owners because they can be changed at any time to any thing on most laptops. 2. A message can't be sent directly to a MAC address in the same way as a phone number
  • Yes, IMEI is unique, but my laptop doesn't have one and even if it did its not the same as an eSim or sim card. We can send a message to an activated Sim, we can't send a message to an IMEI or serial number
65
submitted 7 months ago* (last edited 7 months ago) by jeffhykin@lemm.ee to c/privacy@lemmy.ml
  • I make websites
  • If someone is banned twice (two accounts) I want it to take them more than 5min and a VPN to make a 3rd account
  • I'm okay with extreme solutions, like requiring everyone to have a Yubikey-or-similar physical key
  • I really hate the trend of relying on a phone number or Google capcha as a not-a-bot detection. Both have tons of problems
  • but spam (automated account creation) is a real problem

What kind of auth should I use for my websites?

40
submitted 8 months ago* (last edited 8 months ago) by jeffhykin@lemm.ee to c/solarpunk@slrpnk.net

Often we dig our own grave making people "defend" their opinion. Instead of winning them over, we push them to become more and more entrenched in their opinion as they build larger mental defenses against the challenges we present. So I want to hear from you:

How do you avoid putting people on the defensive? (Even though those people had a strong alternative opinion)

What was a time where the opposite happened; all the facts were there, but absolutely no one was convinced by the talk?

I feel like solarpunk has a lot of obvious-once-seen ideas and powerful "ahh-ha" moments. But if we can't convince others to take a glimpse from our perspective, not much benefit will come from it.

[-] jeffhykin@lemm.ee 61 points 8 months ago
[-] jeffhykin@lemm.ee 68 points 9 months ago* (last edited 9 months ago)

For context, Tea (the cli tool) was created by the author of homebrew. But for some reason he changed the name to pkgx and made tea into the crypto thing: From the creator of Homebrew, Tea raises $8.9M to build a protocol that helps open source developers get paid

He's probably interested in blocking these kinds of PR's.

[-] jeffhykin@lemm.ee 92 points 9 months ago* (last edited 9 months ago)

What really bothers me is the "measuring foot traffic". I already refuse to use vending-machines because of the pricing and unhealthyness, but you're telling me I need to make GDPR takedown requests just for walking to class?

[-] jeffhykin@lemm.ee 276 points 9 months ago* (last edited 9 months ago)

It gets worse :/

I looked up the brand (Invenda). Their PDF includes "using AI", "measuring foot traffic", and gathering "gender/age/etc" e.g. facial recognition to estimate a persons age and gender

And in terms of "stored locally" this is straight from their website

The machine comes with a “brain” – Invenda OS – and is connected to the Invenda Cloud, which allows you to manage it remotely and gather valuable environmental, consumer and transactional data. The device can be branded according to your requirements to further enhance your brand presence.

The marketing also so fricken backwards that it reads like satire:

For a consumer, there’s no greater comfort than shopping pressure-free. Invenda Wallet allows consumers to browse, select and pay for products leisurely and privately 🤦‍♂️

[-] jeffhykin@lemm.ee 49 points 9 months ago* (last edited 9 months ago)

Go to the vendors website, and not only see hole for yourself, but look at them claiming to use AI to detect demographics.

PDF Link: https://a.storyblok.com/f/184550/x/e7435c019e/brochure-svm_generic-dark-netflix-ui.pdf

Their website: https://www.invendagroup.com/vending-machines

Here's my own screenshots in case the vendor takes their pdf down from bad press.

Hole: https://photos.app.goo.gl/rTk8fUWynmXgw7Zc6

AI Features: https://photos.app.goo.gl/RiF1Phrroj65tMdd7

[-] jeffhykin@lemm.ee 92 points 9 months ago

16% said "should not" to a grocery store? What?

I feel like there should be a separate question for the "I don't want anything near me" rural choice, since those might be making the rest of the responses misleading.

31
submitted 9 months ago* (last edited 9 months ago) by jeffhykin@lemm.ee to c/programming@programming.dev

My friends and I did this a while ago and it was quite fun.

7

JSON and YAML work great for passing data between languages.

However, sometimes, I have a pure function like y = mx + b, that I would like to pass between languages (for making plots).

What operators should be available? I think jsonnet's standard library(skip to the math operators) is the perfect example of a useful set of operations that could be shared across basically all programming languages. The operations would take/return json values rather than working with language-specific data types.

My question is does such a language exist already?

Close candidates:

  • Dhall and jsonnet are pure languages that generate json. But AFAIK they can't actually serialize pure functions. They can only use pure functions as a shorthand for generating json. I want to actually save/send functions over the wire.
42
submitted 11 months ago* (last edited 11 months ago) by jeffhykin@lemm.ee to c/asklemmy@lemmy.world

This might be a limitation of Lemmy or voyager, but is there some option for me to "watch" or "subscribe" to a post and be notified of new comments?

Especially relevant to asklemmy since occasionally I see a post before there's any answers.

10
submitted 1 year ago* (last edited 1 year ago) by jeffhykin@lemm.ee to c/adhd@lemmy.world

I'd like a small group with strict/well-defined meeting times that has a coach/conversation-conductor to keep topics on track. I feel like it would work really well if advice was given/received by others with ADHD, while having a leader do stuff like

  • make sure 1 person doesn't dominate the conversation
  • keep meeting notes
  • call/text people who miss a meeting
  • follow up with people who said they were going to do something

But I've never really heard of such a system.

I've found at least two online services, but I don't really know if they're worth trying. I'm curious on your opinion and/or if any of you have tried something similar.

There's "Study Hall" which I'm not sure is what I'm really looking for https://adult-study-hall-by-adhd-rewired.mn.co/sign_up?plan_id=230880

Then this site seems to have good coaching https://news.ycombinator.com/item?id=37252231

[-] jeffhykin@lemm.ee 71 points 1 year ago

The best part of this is the subtle implication that you can tell a million completely different stories with the same data.

[-] jeffhykin@lemm.ee 86 points 1 year ago* (last edited 1 year ago)

I dislike these kinds of articles (as someone who bikes to work everyday) because of how they treat an urban perspective as if its the only perspective. Some highway stoplights are in the middle of nowhere, have no crosswalk, can go a full year without a single pedestrian, and often have mimal cars. People who sit at those lights every day get mad from articles (like this one) that are completely tonedeaf to their situation.

Yes, in a busy city it makes no sense to allow turn on red, and the article has some great info but it also makes no sense to wait 2 minutes on red when there isn't a car or human within a 5 mile radius.

If we want people to be onboard with change we've got to include them. We can solve both; like getting rual lights to use a flashing red to indicate "allows for turning on red" and THEN get city lights to ban turning right on solid red. Solving one problem expense of another is a quick way to create enemies.

[-] jeffhykin@lemm.ee 54 points 1 year ago* (last edited 1 year ago)

I write a lot of bootstrapping scripts, and I have a solution thats probably something you and others in this thread have never seen before. You can write a single script in a full/normal language, no compilation step, and it works on systems that only have bash/sh. It doesn't compile to bash, or at least not in the way you might think/expect it to, but it should do what you want.

(guillotine because it's a universal executor) https://github.com/jeff-hykin/deno-guillotine

This^ one uses Deno/JavaScript, but in principle it might be possible to do with other languages. It definitely requires some explanation, so I'll try to give that here;

As another person said, shells are not nearly as standardized as we need them to be. Mac uses zsh, Ubuntu uses dash, neither store a posix bash exectuable in the same place, and both have ls and grep differences that are big enough to crash common scripts. Even if you're super strict on POSIX compliance, common things will still break if you write a big script (or trying to compile a big program to bash).

I hate JS as much as the next guy, but it is possible to write a single text file that is valid bash/dash/zsh/powershell and valid JavaScript all at the same time. It sounds impossible, but there is enough overlapping syntax that actually any javascript program can be converted into a valid bash script without mangling the JS code. It might be possible to do for python as well.

POSIX is good enough for making a small, carefully-crafted well-tested OS-detecting caveat-handling script. So that's exactly what we do; use a small shell script at the top to ensure that the JS runtime you want is installed (auto install if missing). Then the script executes itself again using the JS runtime. It wasn't easy but I a made a library that explains how it's possible and gives a cli tool that automates it for the Deno runtime (the link I posted above).

After that, I just recreated tools that feel like bash, but this time they are actually cross platform. Ex:

let argWithSpaces = "some thing"
run`echo hello ${argWithSpaces}`

I picked Deno because it auto installs libraries (imports directly from URL so users don't have to install anything)

view more: next ›

jeffhykin

joined 1 year ago