• 6 Posts
  • 420 Comments
Joined 1 year ago
cake
Cake day: August 4th, 2023

help-circle
  • I kindof hate the slogan “they go low, we go high” (from Hillary’s campaign.)

    But this is an example of the “good” side of that slogan. The political left(-of-what-passes-for-center-in-the-U.S.-now-a-days) isn’t given to publicly calling for assassinations of the opposition party. It’s not even given (and, yes, there are exceptions) to calling privately for assassinations of the opposition. And that’s a good thing.

    It means the left(-of-U.S.-center) hasn’t turned into the fascist-dictatorship-trying-to-happen that the right has. It’s not the left(-of-U.S.-center) calling for civil war and pandering to creeps who chant “blood and soil” while carrying tiki torches around the capital.

    The day left(-of-U.S.-center) news sources delight in assassinations even of opposition as dangerously unhinged and power hungry as Trump because that sentiment started with snide remarks like yours is the day we have to worry that maybe the Democrats are sliding into their own brand of fascism.

    Don’t get me wrong. I’m for radical support of LGBT rights, womens’ autonomy in matters of personal health, universal free healthcare, and most other “liberal” causes. (I also identify as well left and libertarian-ward of the Democratic party and would love to see “to each according to need” be our modus operandi. I’m also for direct action.) I don’t fault the Democrats for being “too radical” by a long shot. (More likely, the Democrats will continue to be far too willing to let the Republicans control the narrative and cheat their way to political power. And that’s the bad side of “they go low, we go high”) And I don’t believe it’s very likely that the Democrats will slide into widespread advocacy for political violence like the Republicans have much more so already.

    But taking delight in assassination attempts and wishing they’d been successful – even those directed at Cheeto-flavored Hitler himself – isn’t helpful.

    All that said, I get it. I’m pissed at the U.S.'s descent toward fascism, too. But wishing him assassinated isn’t going to change anything for the better.


  • I was going to end my boycott once they did that.

    But like… a week later? (I don’t remember the exact amount of time, but I remember it being surprisingly soon on the heels of the OGL 1.1 debacle.) They pulled the whole Pinkertons/MTG bullshit. Had they not done that, I’d have bought more 5e materials, watched the D&D movie, and likely caught up on some Transformers movies by now.

    At this point, I don’t think much could end my boycott of WotC short of Hasbro selling off WotC and better people being put at the helm of WotC. I don’t think much could end my boycott of Hasbro short of a huge shift in upper-level management at Hasbro.


  • I mean, borrowing the DVD from the library will make it unavailable for someone else who might want to watch it, which might incentivize them to buy a copy. Also, if it’s always checked out and unavailable when people go to try to check it out, it may increase hype/enthusiasm about it. Buying it second-hand would have similar consequences.

    I might pirate it if I can get a chance. Doing so a) wouldn’t reduce supply of copies of it in ways that might incentivize others to purchase a copy or stream it on Paramount+ or whatever and b) kindof feels like a slap in the face of Hasbro of the sort I don’t mind delivering.

    I’m fully aware of how petty this all comes across, but, man, thoroughly fuck Hasbro. What a shitty company. Don’t underestimate just how much I hate them. Lol.




  • On the one hand, I want to believe Scott Adams succumbed to some diagnosable degenerative mental illness or something. I used to enjoy Dilbert comics/media. (Anybody remember the animated series?)

    On the other hand, even reading old Dilbert, a bit of me is always like “ok, yeah, in retrospect there’s a disturbing undercurrent of xenophobic right-wing BS going on here”. Maybe he was always like this at least to some degree before the Qanon brainworm devoured what was left of his connection to reality.



  • No joke. I’m ashamed to say I have had to endure Weblogic in the past. God was that time a massive clusterfuck.

    The company I worked for decided to use two particular separate products (frameworks, specifically; ATG and Endeca, even more specifically) to use in tandem in a rewrite of the company’s main e-commerce application. Between when we signed on the dotted line and when we actually started implementing things, Oracle acquired the companies behind both products in question.

    The company should have cut their losses, run away screaming, and started evaluating other options. That’s not what happened. Instead, they doubed-down and also adopted several other Oracle products (Weblogic and Oracle Linux on (shudder) Exalogic servers) because that’s, of course, what Oracle recommended to use with the two products in question. The company also contracted with Oracle-licensed “service integration” companies that made everything somehow even worse.

    And the e-commerce site rewrite absolutely crashed and burned in the most gloriously painful way possible. They ended up throwing away tens of millions of dollars and multiple years on it.

    When the e-commerce site rewrite did happen, it was many years later and used basically only FOSS technologies. I guess at least they learned their lesson. Until the upper management turns over again.







  • Yeah, I do know about that. (You’re referring to the PPA repo thing, yeah?) But there are a couple of reasons why that isn’t a workable solution specifically for me specifically.

    • The major reason is that I only use Ubuntu on my work machine and my employer’s compliance department won’t really answer questions about whether it’s allowed to add extra repositories or install things not from the official Ubuntu repositories on company-owned hardware. (And they’re always really threatening and assholeish about breaking the rules they won’t elaborate on, so my best option is kindof just to interpret the rules as strictly as I can and follow that. Or else flout the rules and dare them to fire me. Heh…) Raising questions like that is always a whole thing.
    • “firefox” from the PPA repo and “firefox” from Snap have the same package name which makes things awkward dealing with Apt. (Unless you use “firefox-esr” from the PPA repo, which would otherwise be an acceptable workaround if that was the only issue.)

    So I just use Chrome on my work machine. I dislike Chrome more than Firefox for many reasons, but I at least mitigate some of the issues with Chrome by specifically not doing anything personal on my work machine. I don’t really care if Chrome invades my employer’s privacy. Especially when my employer doesn’t give me a choice in browsers. If anything comes of it, it’s their own damned fault.



  • Do they play a part in commercial DDOS protection?

    Absolutely! As well as mitigating other types of threats. “Web Application Firewalls” (don’t be fooled, they’re not like regular firewalls really) are a type of transparent web proxy that watch requests for anything that “looks like” a SQL injection or XSS payload and block those requests if necessary. Transparent web proxies may also do things like caching or even “honeypot” functionality that may shunt likely bot traffic to a fake version of the website to prevent scraping of real site content.


  • Ooo. This is a good one.

    A computer can have more than one network interface, right? (Like, you can be plugged into ethernet at home but also connected to the WIFI of the coffee shop across the street.)

    A VPN gives you a whole new network device (“virtual ethernet card” if you will) that works as if that card was connected to some LAN somewhere else. Typically, you’d forward “all” of your computer’s/smartphone’s/etc traffic through the VPN so that your computer “thinks it’s on that remote LAN” rather than on your home WIFI or whatever.

    Proxies… well the term can mean a few different things in different contexts, really. But generally you’re not forwarding “all” traffic through them, just HTTP traffic (and usually only a subset of all HTTP traffic) or just traffic that is specifically told to be forwarded through them.

    An opaque web proxy is one that you can point your browser (or other HTTP interface) to. It won’t handle protocols other than HTTP. And when you want to use an opaque web proxy, your HTTP client has to know how to do that. (Whereas with VPN’s, it’s your operating system, not your individual applications, that need to know how to forward through it.)

    A transparent web proxy can be something you (and your apps and OS) don’t know you’re even using. When you point your browser or app to a Lemmy instance, it’s almost certain that the domain is pointed not at an application server that actually runs the Lemmy code, but rather at a transparent web proxy that does stuff on the instance-owner’s end like preventing spamming or whatever. This type of proxy is sometimes called a “reverse web proxy” and can also only work with HTTP.

    A SOCKS proxy, like an opaque web proxy, requires applications to know how to use it. (Ok, technically that’s not 100% true. It’s possible in some cases to have a transparent proxy of some sort forward through a SOCKS proxy in a way that the application doesn’t know SOCKS is involved. There are also some cool OS-level hacks that can force an app to go through a SOCKS proxy without the app knowing anything about SOCKS. But if you’re doing those things, you’re a hacker.) And with a SOCKS proxy, your computer doesn’t “think” it’s connected to a whole different LAN. Individual applications know that they’re forwarding through SOCKS. SOCKS supports more protocols than just HTTP. Probably all TCP-based protocols, but I don’t think it has any support for UDP. So you won’t be torrenting through SOCKS.

    That’s all I can think to say at the moment. There are special-purpose proxies for things like security auditing (like Burp Suite, for instance.) But I’m guessing that’s not the sort of thing you’re asking about.


  • TootSweet@lemmy.worldtoProgrammer Humor@programming.devJava Was The Future
    link
    fedilink
    English
    arrow-up
    21
    arrow-down
    1
    ·
    edit-2
    11 days ago

    I write Java for a paycheck, but I really hate it.

    It feels like everything is layers and layers of overengineered cruft, each added to the precarious tower for something extremely minor. But every subsequent card in the house of cards makes it more precarious. “But look, I don’t have to write accessors.” “But look, I eliminated the need for the web.xml file.” “But look, I don’t have to understand SQL now.” But look, the codebase depends on a shit-ton of completely opaque Automagic™ that you have no hope of understanding the moment something goes wrong – which it will if you even think of changing your Java version. And since it’s practically impossible to understand what’s going on under-the-hood of whichever dependency is fubar’d this week, you have to resort to a mixture of trial-and-error and copy-pasting shit (that you also don’t understand) from StackOverflow and praying to Cthulhu something works – which is also trial-and-error because Java questions in particular have tons of just straight up wrong answers.

    To be fair, I’m the guy on my team who people come to when they run into those sorts of “I bumped up one subminor version of Mockito to fix a bug that was preventing my unit test from working but now literally half of our unit tests won’t build” or “I added the war plugin to the build.gradle and now SwaggerUI is broken.” So maybe I see more than my fair share of “well shit, I guess I’ll just spend the next three hours hunting down which magical combination of Jar version numbers will fix things” kind of problems. But damn. This shit didn’t ever happen back when I was doing Python for a paycheck.

    I don’t use Java if I don’t have to. If I have to use Java, I prefer to just use Servlets (mostly I do web development) and absolutely as few dependencies as I can possibly get away with. Fewer moving parts mean less that can break.