• 5 Posts
  • 221 Comments
Joined 1 year ago
cake
Cake day: June 18th, 2023

help-circle

  • Its what literally changed my life. I was really socialy awkward, spend most of my lide behind a computer, and when I managed to go out to parties in a subculture scene parties I loved, I couldnt talk to anyone, had a few beers awkwardly in a corner and went home.

    Then I met someone who introduced me to MDMA. That happened almost 8 years ago, and now I am an organizer of 2/3 of the same scene regular parties in our city, Im helping and DJing on a festival that happens here, and am living my best life in that regard. All thanks to that one best friend who got me something that made me talk to, and get to actually know people in the scene in the extent that I always wanted, and get comfortable enough that I no longer need to be high to interact with anyone. Since now they are friends and regulars, and not random people I wanted to talk to, but was afraid of approaching.

    But, it wasn’t as easy as it sounds. I was always trying to be responsible and cautious, and In did get bordeline to addiction in the process, which I was fortunately able to recognize early and put a stop to it by getting help in a adictiology nonprofit. It was never bad, more like a precaution. And I caught it in the best possible moment. I’ll never forget my first group session, where literally everyone else said “I’m 35+, I used to take stuff at parties for fun when I was 25, and then I ended for 10 years in meth…”.

    Everyone had similar story. And I went “Well, I’m 25, and I take stuff on parties for fun…”. And that was a really strong lesson, where I realized I’m stopping a really huge problem at exactly the right time.

    So, it might help. It is definitely fun, but it is so hard to not end up badly. You will need a lot of luck, especially if you are exploring it on your own. I still take things on parties, but with personal experience about the dangers it has. And getting that, is something that no one can give you, unless you see it for yourself. And for most of the people, that comes too late. I was lucky, you probably won’t be. But in conclusion - drugs are amazing, and have changed my life. Its a shame that personal experience will probably vary.





  • I self-hosted it few months ago, and it’s actually surprisingly easy! Someone has made an Ansible script for Matrix with Element and some bridges, that (at least a month ago, IaaC tends to be pretty fragile) worked out of the box on a first try. I just set up some config values (mostly about enabling bridges I want) based on their amazing documentation, and then ran it once and everything is working so far. I even updated it several times already, and every time it was smooth, and it was basically just running a single ansible command. Their documentation is pretty well written, and with my basic cloud, IT and Linux knowledge I had no issues with following it. All you need to know is how to set up cloud VM, get a domain and set DNS, and set up SSH keys to access the server.

    In total it took me about two hours in total, from when I decided “I’m setting up Matrix tonight” without any prior knowledge, looking up my options and finding the ansible script, setting up cloud and getting Matrix up and running.

    I’m renting a VM on Hetzner for like 6$ per month, and it worked without issues so far. I use it for Discord and Messenger, although the Meta bridge does have some problems, for example I didn’t figure out how to message someone with whom I haven’t had a conversation since I set up the bridge, since only then it creates the room for it. But that can be solved by keeping the Messenger app or usign the browser to send a first message, and it immediately shows in your Matrix bridge (and stays there forever).



  • Ever since I played watchdogs and shadowrun, I wanted to work in cybersecurity, especially as a Red Teamer, which is literally Shadowrun - you run complex ops that have to break in, and steal stuff from largre banks without anyone but the management knowing about the test, with almost nothing being off-limits, as long as it doesn’t cause some kind of damage.

    Five years later, I do work as a Red Team Lead. Hpwever, our company was just scrambling to start doing RT since thats the buzzword now, and while we did have amazing pentesters, unfortunately pentesting and Red Teaming requires vastly different skills. Ypu never need to avoid EDRs, write malware with obscure low-level winapi, or even know what kind of IoC ajd detections will a command you run create, when you are doing a pentest.

    But since no one knew better, and I love learning and researching new stuff, while also having Red Teaming romabticized, my interrest in it eventually led to me getting a Lead position for the barely scrambling team.

    Mind you, I was barely out of being a junipr, with only three years of part time pentesting experience. It was NOT a good idea.

    I quickly found out that RT is waaay harder and requires the best of the best from cybersec and maleare development. We didnt have that. Also, turns out that I love to learn now stuff and take on a challenge, but being a Lead also means you are drowning in paperwork and discussions with client, while also everyone from the team doesn’t know what to do and turns to me about what should we do. Which I didn’t know, and barely managed to keep learning it on my own. Our conpany didnt want to give us much time for learning outside of delivery, I was only working parttime, and I was slowly realizing that we don’t have almost any of the skills we need.

    We were doing kind of a good job, most of our engagement turned out pretty well, but it was atrocious.

    Turns out, I’m not good at managing and planning projects, or leading people. I’m better just as a line member.


  • My favorite windows update was when I was attending an onsite coding competition hosted my Microsoft. We were all in this large meeting hall that looked like a theater, and we spent first 10 minutes or so at the start of the competition just looking at Windows update, with the Microsoft rep apologizing to us, because his pc decided to do the “Forced update restart you cant postpone any more” literally two minutes into the presentation




  • I’d like to mention one exception, because it took me ages to properly debug.

    If your endpoint is serving mirrors for APT, don’t redirect to HTTPS.

    APT packages are signed and validated, so there is no need to use TLS. Lot of docker images (such as Kali) do not have root certificates by default, so they can’t use the TLS, because cert validation fails. You also can’t install the certificates, because they install through APT. If your local mirror redirects to https by default, it will break it for people who choose the mirror, which IIRC happens automatically based on what’s closest to you. I think this issue is still there for Czech Kali package mirror, and it took me so long to figure out (because it’s also not an issue for most of the users, since they have different mirrors), so I like mentioning this when talking http/s. It’s an edge case, but one that I find interresting - mostly because it would never occur to me that this can be an issue, when setting up a mirror.

    But that was more than a year ago, it may be better now.




  • Mikina@programming.devtoMemes@lemmy.mlts moment
    link
    fedilink
    arrow-up
    3
    ·
    edit-2
    1 month ago

    Serious EVE players are something else. The mention about IT security isn’t a hyperbole, some EVE players take the espionage meta-game very seriously, and even though it’s not only against the rules but also illegal, that’s not gonna stop them. I mean, once they literally got someone to turn off electricity for a whole town just so they can win a fight (I tried to find a link to the article, because I’m 90% sure I did read about it somewhere, but I can’t manage to find it anywhere, if anyone has a link. Maybe it was just a rummor, or an unexecuted plan?)



  • We’ve had to work in Pharo for our OOP uni course, and it was one of the worse experiences I’ve had in school. Mind you, it was something like 7 years ago, so the language may very well be a lot better now, but the whole “your IDE is the code” felt cubersome, it was buggy and crashed randomly, and in general I spent more time fighting with the IDE than doing something useful.

    It was a bad time, but also a great learning experience. Being forced to work in something that IMO sucks is an useful skill, but I never want to see that language again :D


  • But a paid licence will affect users that are all right abd for whom you’re doing it.

    I understand that using something with a risk of loosong access because you’ve upset the developer is something that will turn away a lot of people, but then again, I’d say that “don’t be a dick” is a pretty reasonable requirement. The only issue I see that it’s a pretty vague definiton, but maybe just limiting it to profanities and insult towards the contributors is something more concrete, which would be easy to fulfill and also enforce.


  • I wonder, is it possible to create a license that would allow you to simply ban people who are being a dick about something from using it? Sure, it may turn away some people, since there’s always a risk of abuse, but it’s your work and as far as I know, you are the one who sets the terms.

    If I’m not mistaken, most of the FOSS licenses (or maybe even laws?) guarantee you that you would be able to use the software even if the project later decides to change to proprietary license. But I assume you can simply specify in a licence “Everyone can use it, expect X.Y.Z”.

    Would that be legal? Sure, it would probably be pretty hard to enforce, but in some cases it could make for a pretty satisfactory (and petty, of course) C&D letters, for people that really deserve it. You insult the devs of a software your company depends on, demanding something while being a dick about it? Well, fuck you, no library for you and your company.


  • Another one came to my mind - ROBLOX_OOF.mp3 by hbomberguy.

    It’s really a wild ride. As traditional with his videos, it starts with a pretty innocent investigation into one of sounds popular on the internet, and then gets into a mindboggling rabbit hole about Tommy Tallarico, the guy behind Video Games Live, and how he accidentally discovered what an insane text-book example of pathological lier he is. It’s funny, and really absurd - I’d recommend it to everyone, because it’s really interesting insight into how bad can it get with pathological liers. It’s a roller coaster, and a really fascinating one. And I also learned that Guiness World Record is a scam and literally only an advertisement business, which I never realised before.

    It’s a shame, I really liked Video Games Live, the live recordings of it’s shows are great. Assuming you skip the ego-trip monologues he interupts the concert with.