JSshelter looks cool, I'm not familiar but this makes it seem like it operates more like resistfingerprinting by blocking outright instead of noise injection, at the expense of more broken sites?
What all security extensions do you run? After running into issues over the years, with extensions doing multiple things that fight each other, I switched to trying to block via ublock origin as much as possible, then prefer other extensions to just do one thing to extend coverage, like this one. Makes it much easier to troubleshoot/exclude/disable when it breaks something vs. fiddling in settings.
I tested this extension that I've been using for a long time on the turnstile page and it got through, fwiw. I think it's a bit more subtle than how resistfingerprinting works but not sure what the privacy tradeoff is.
- Don't tense up and play the most relaxed you possibly can. it's very hard to unlearn if you start off that way like I did
- Be kind to yourself since playing guitar is an unnatural thing to do (wrist position, hand strength required, calluses, etc.), so it takes time.
- Play along with songs as much as possible. Slow it down if you need to or just do a simplified version at first, and just focus on improving/learning one thing each time you play. This is also a great way to get comfortable with improv.
- If you're struggling with something, break things down to the smallest possible parts you can, play it really slow and repeat, until your muscle memory takes over, then slowly speed it up and put it back in context.
- If you're playing an electric, turn the volume up enough and let that do the work instead of your picking
- If you catch yourself noodling instead of playing consciously, stop playing. It's OK to noodle sometimes but if you do it a lot you'll get used to going on autopilot and your skills can plateau
- Don't be afraid of the upper fretboard. You can play super slowly up here and as long as you can at least fake being confident/intentional it'll sound nice. If you have smaller hands and have trouble with stretching your hands on lower frets, this can work to your advantage.
- You can get a solid guitar for $400-500. Spending more money up to about $2-3k will get you a nicer guitar, chasing that extra 1% of tone and have a nicer feel in your hands, but it's diminishing returns the more you spend.
- Same with pedals. Yes you can spend lots of money on fancy/unique pedals, but there's nothing wrong with sticking to cheap ones, especially Boss. A lot of great 80s/90s music was recorded with them, and bands frequently use the cheaper/commodity ones while touring instead of fancy boutique ones.
- Per Nile Rogers: "It's not about the shit you play, it's about the shit you don't play" (especially for funk stuff)
- Also for funk (and post-punk and experimental) stuff, a guitar is also a percussion instrument if you want it to be.
- Once guitar playing gets to a certain level of virtuosity (Steve Vai, IMO), it paradoxically can become extremely boring. Playing simply but with the right emotion channeled into your picking hand is much more interesting than super technical stuff.
- Related, remember that Bill Withers was in his 30s when he started making music and chose a very simple way of composing things, but was still able to do amazing things
I haven't read the full article yet but I'm guessing they didn't give credit, as the New York Times tends to do. Not definitive but it's a very convincing case.
Yes and no, in this case you don't need a local vscode instance to connect to your vscode container, just a browser. It's more similar to self-hosted Github Codespaces, and but I believe code-server was actually released first.
Personally I've fiddled enough with podman that that part of it doesn't bother me, and I don't like Docker/Podman desktop (which I think is what devcontainers assume the setup is) and just want to use the docker/podman daemon/cli, so that's something I also don't want to have to mess with. I know you can also point devcontainers at a remote or local docker daemon, but that means giving it full control of the daemon, which is a nonstarter and too risky for me from a security standpoint. I really like to have my podman containers really locked down in terms of capabilities, userns, gvisor, etc. and given that it just wants full control of docker I'm guessing it takes none of that into consideration (or, painful to try and graft on).
I also really don't trust VSCode's remoting protocols (especially remote tunnels, which is basically just a reverse shell). So for me it's a matter of having more control over container runtime security (the docker/podman ecosystem usually treats it as an afterthought in favor of convenience, and devcontainers appears to be no different), and it doesn't depend on anything on my machine I'm accessing it from. Since VSCode just a becomes another self-hosted web app this way, it's pretty much the exact same experience no matter where I'm connecting from.
code-server, instead of VSCode. I can build my own podman image on top of it with whatever dev tools I need for whatever languages I'm working with, and if I have to install something weird or something breaks I can just restart the container. Especially on my work machine that isn't Linux, I have this running in a VM and can just use in my browser and don't have to jump through hoops to get the dev environment I want. On my personal instance I also use it for automating building stuff from source. Before I had this, I just had build tools on pretty much every single machine I was building for and it was a hot mess.
Wouldn't hosting a service to facilitate others' use of the exploits fall under CFAA? Since there have been numerous arrests for those hosting Ransomware-as-a-service, DDOS-as-a-service, etc. Just curious whether there is a legal nuance that prevents them from being criminally charged instead of just politics/diplomacy.
If you do a search for the word rape, there are tons of discussions about it, so it's definitely not categorically off topic. I'm going to email [email protected] per the FAQ since the way this keeps happening feels abusive and against the spirit of HN.
Unlike other stories critical of Sam Altman, it's very suspicious the way this is so quickly and systematically downvoted and flagged every single time it's posted.
This happened the last time this was posted too. Sam Altman deserves the right to defend himself in court as does Ann to tell her story (who personally I believe).
The good news is that with the lawsuit it will be in the news more and much harder to silence, maybe at some point we can have a proper discussion about it on HN without people (or more likely bots) trying to memoryhole it every single time.
That's a consequence of growth they should have thought of and a basic part of running any business.
At least in the US Attorneys General are being forced to do this work for them. It's essentially the only way to get a hacked Facebook/Instagram account recovered.
Git Bash is really nice for when I want a unix utility that will do the job simpler and better than Powershell, however it's painfully slow for larger I/O operations.
I end up barely using it on my Windows 11 work machine because I'm allowed to have Linux VMs. Even with the VM overhead, and having fewer CPU cores and less RAM than the host, things still end up being way faster there.
I remember one time running a grep command on a large-ish (~ 1 GB) log file in Git Bash and waiting at least 5 minutes for it to complete. After getting impatient I did the same thing in a VM and it took about 30-45 seconds, at which point Git Bash still had not finished.
The discussion of container security is completely lacking any mention of userns remapping, which is an excellent container security feature that's extremely easy to enable and use compared with AppArmor/SELinux (and would work extremely well in parallel with them).
That way if someone does manage to break out of a container they have the privileges of a dummy user that doesn't exist on the host, so unless they are using a kernel exploit, they don't have any privileges to be able to do any damage.
https://jshelter.org/fpd/
What all security extensions do you run? After running into issues over the years, with extensions doing multiple things that fight each other, I switched to trying to block via ublock origin as much as possible, then prefer other extensions to just do one thing to extend coverage, like this one. Makes it much easier to troubleshoot/exclude/disable when it breaks something vs. fiddling in settings.