valaramech

joined 1 year ago
[–] [email protected] 22 points 9 months ago (1 children)

This is why I taught my parents to just hit the Win key to open the start menu and just start typing what they want. Usually, that gives them what they want in a couple characters.

[–] [email protected] 4 points 9 months ago (2 children)

No, this is actually a dichotomy. First Past the Post mathematically trends towards a two candidate system as its stable state. This isn't some psychological bullshit, it's math. The way our system works you never vote for the thing you like; you vote against the thing you don't. Doing anything else is literally handing the election to the side you don't like. It's called the Spoiler Effect and it happens basically everywhere in the US where FPtP is used.

The place you vote for who you want is in the primaries (or their equivalent in your state), not elections. If you're not participating in those, you get no say in who gets run and bitching about it does nothing. Hell, even then you barely get any say since, as far as I'm aware, both the DNC and RNC actually select their candidate based on a vote of some inner circle bigwigs, not the actual results of any of the state-by-state pageant shows.

[–] [email protected] 4 points 9 months ago

There's nothing wrong with OCI Images. If you're concerned about the security of Docker (which, imo, you should be) there are other container runtimes that don't have its security tradeoffs (e.g. podman).

[–] [email protected] 49 points 9 months ago

The short version is that the creators of this API are doing something more secure than what the client wants to do.

A reasonable analogy would be trying to access a building locked by a biometric scanner vs. a guard looking for a piece of paper with a password on it. In the first case, only people entered into the scanner can get in (this is the cookie scenario). In the second case, anyone with a piece of paper with the right password on it will be let in (this is the Bearer token scenario).

More technical version: the API is made more secure because the "HttpOnly" cookie - which, basically, means the cookie's contents can't be read with JavaScript in the browser - is used to hold the credentials the server is looking for.

By allowing a third party to access the application, this means you have to allow methods that can be set "client-side" (e.g. via JavaScript in a browser). The most common method is in the "Authorization" HTTP Header - headers are metadata sent along with a request, they include things like the page you're coming from and cookies associated with the domain. A "Bearer" token is one of the methods specified by the "Authorization" header. It's usually implemented via passing the authorization credentials prefixed with the word "Bearer" (hence the name) and, often, are static, password-like text.

Basically, because this header has to be settable by a script, that means an attacker/hacker could possibly inject malicious code to steal the tokens because they must, at some point, be accessible.

[–] [email protected] 6 points 9 months ago

As long as the US continues to use first past the post for voting on these things, voting for the lesser of two evils is the only actual option we have. Voting independent in these races is effectively throwing your vote away at best.

[–] [email protected] 8 points 9 months ago

WTB proportional representation for the House. No need to gerrymander shit when there are no congressional districts to gerrymander.

[–] [email protected] 5 points 9 months ago (1 children)

This misunderstands the premise. You cannot intuit someone's subjective experience of reality because it is impossible for you to experience their experience of reality. You have only what they're able to explain to you.

To come at this from the other direction, if a friend says to you "I'm having a good day" and does not appear obviously distressed, how could you judge the relative goodness of their day or if it was actually good at all?

[–] [email protected] 11 points 9 months ago

I can kinda understand Autism, to an extent. Certain forms of high-functioning autism - like the one I have - are more akin to mild learning disorders. Deliberate practice and effort can mitigate a great deal of the issues.

On the other side, I've seen people with more extreme forms of the condition and I can't imagine having to deal with that. I know I can be difficult to deal with and I work really hard to try to mitigate my shortcomings with others - especially people who don't know me well - but I pale in comparison to the difficulty of people with more extreme forms of Autism.

In this way, I think ADHD and Autism are probably similar - there's a spectrum of impact the condition has. The milder forms of the condition may actually feel like a superpower to those that shape themselves to utilize their quirks in their favor. The problem arises when all forms of the condition are considered beneficial when they are demonstrably not.

Hell, even I have problems that no amount of learning can ever overcome. You can't exactly teach yourself how to pick up on the subconscious body language queues that most people just know inherently. I'm totally blind to that stuff and it makes intense conversations incredibly difficult and a little terrifying.

[–] [email protected] 6 points 9 months ago (1 children)

Look, Birth Ma'am! It's the Birth Signal!

[–] [email protected] 13 points 10 months ago

Just think of how much back and forth must have happened for this person to be so fed up as to include this with a request for publication

[–] [email protected] 0 points 10 months ago* (last edited 10 months ago)

Possibly controversial opinion, the left needs a Fox News. A station that just unapologetically pushes liberal talking points and pays newsworthiness the same lip service that Fox does. Fuck this holier than thou bullshit we've got going on; fight propaganda with better propaganda.

[–] [email protected] 4 points 10 months ago (1 children)

I would fully expect Linux content on any community dedicated to technology (i.e. programmerhumor); the rest is totally understandable. Though, I have to agree with @CarbonIceDragon, I really don't see as much Linux content as you seem to - granted I use kbin, not lemmy.

I've read that Lemmy is a bit more personally curated than kbin, is it possible you've just accidentally built yourself a Linux bubble?

view more: ‹ prev next ›