• 2 Posts
  • 118 Comments
Joined 2 years ago
cake
Cake day: September 27th, 2023

help-circle
  • Can’t go wrong with publishing order. I refer to the Coppermind wiki for that: https://coppermind.net/wiki/Cosmere#Bibliography_of_the_Cosmere

    I personally started with Stormlight Archive, which I wouldn’t call optimal, but hey, I have no regrets. In general I’m a “gates open” kind of fan, so I encourage readers to go in whatever order they like and enjoy any extra mystery that might come along with it. :)

    The only ones I’d really recommend against reading without context are The Sunlit Man, and to a lesser extent Yumi and the Nightmare Painter. It kind of pains me to say that about Yumi because it’s such a fantastic book and I’d hate to discourage anyone from reading it. But you’d need to comfortable rolling with confusion if you’ve never read any Stormlight Archive, because

    mild spoiler

    the narration is written in the voice of Wit and it has many references to Roshar

    That said, Lost Metal includes connections to

    other books

    Elantris, and The Emperor’s Soul

    I wouldn’t say that’s required reading before Lost Metal. I personally read Lost Metal first and, again, no regrets. But now I do kind of want to go back and read a few chapters again given the additional context I have now.


  • For most: yes, there is a risk that the vendor has included a backdoor. There is also the risk that they are straight-up lying about how their service operates.

    For Signal in particular: You can verify that their claims are true because you can audit the source code.

    The Signal client is open-source, so any interested parties can verify that it is A) not sending the user’s private keys to any server, and B) not transmitting any messages that are not encrypted with those keys.

    Even if you choose to obtain Signal from the Google Play Store (which comes with its own set of problems), you can verify its integrity because Signal uses reproducible builds. That means it is possible for you to download the public source code, compile it yourself, and verify that the published binary is identical. See: https://github.com/signalapp/Signal-Android/tree/main/reproducible-builds

    You might not have the skills or patience to do that yourself, but Signal has undergone professional audits if anyone ever discovers a backdoor, it will be major news.

    You are more likely to be compromised at the OS level (e.g. screen recorders, key loggers, Microsoft Recall, etc.) than from Signal itself.


  • I’m also on a Brandon Sanderson kick (for roughly two years now). I’m currently reading The Sunlit Man. It’s good, but don’t read it until you finish the Stormlight Archive series and the standalone novella Shadows for Silence in the Forests of Hell. Most of the Cosmere stories are fairly approachable in isolation, but this one is very dense with references to established characters, places, and lore, to the point where it should be considered a sequel or spinoff. Even I feel a little lost!

    If anyone’s looking for an easy way into Sanderson’s Cosmere (it’s intimidating! I get it!), I highly recommend the novella The Emperor’s Soul. It’s self-contained, it’s short, and it’s just a fantastic story. If you prefer listening to reading, Graphic Audio has an “audio movie” version which is a nice taste of what they offer, too.

    @[email protected] let me know if you want recommendations on reading order before you continue on to The Lost Metal.



  • One reason is that Python is not built-in on macOS anymore, so it’s hard to justify using it for management scripts. Particularly when you do not have control of the execution environment to begin with. I’ve written some obnoxiously complicated bash (or zsh) scripts because I want to make sure it will run on a vanilla Mac with no additional dependencies. 10 years ago I would’ve done all that stuff in Python, but not anymore. Thanks, Apple!

    From a technical perspective, sure, I could push out a portable python environment and it wouldn’t affect the rest of the system. But that comes at a cost. I don’t want to fight for it, and I don’t want to be responsible for maintaining it. It’s easier to just use bash/zsh.

    Python is also too heavy for some embedded devices. Not sure if I can count on Amber scripts to run in a busybox environment but maybe?

    That said, if the question is “is it worth learning a whole new thing when I already know bash/zsh”, I am not so sure. But in principle, I dig it, regardless of how practical it is with my specific background and needs. I mean, if I learned about this 20 years ago I feel like I might still be reaping rewards.








  • To elaborate on this a little, you can use Flatseal to specify which directories a Flatpak app can have access to directly. For example, in a music player that stores the path of your music library, you’d want to use Flatseal to be sure it has direct access to that folder. This is similar to GrapheneOS’s storage scopes.

    Aside from that, apps can also call on a file picker that lets you choose any file/folder on your system, and flatpak then creates a virtual path to bridge to that file/folder without exposing the entire rest of the filesystem. This is nice for one-time open/save commands, but doesn’t work for apps that need persistent access to a specific directory like in the music player example. This is similar to Android’s file provider API.

    I don’t recall off the top of my head what flatpak apps have access to by default. Some subset of the home folder, I think?




  • I jumped on a lifetime deal they had a few years back. I mostly use it via the web UI and Android app, so I cannot comment on desktop or CLI client functionality.

    The Android app is “okay”, but not great. Background photo sync doesn’t work consistently; I need to manually launch the app periodically to jog it. I know Android is kind of aggressive about background services, but other apps do this better so I think this is on Filen. Perhaps they should run a permanent notification to stay alive 24/7, like Syncthing does?

    As with pretty much every other cloud storage app, it does not let me sync arbitrary folders/files, only photos and videos. *sigh*

    It uses Android’s file provider API, so you can open and save files in most apps directly from/to Filen. However, this only seems to work for one-time use, not for apps that need to regularly open/save the same file. For example, when using Keepass2Android, you can have it store your password database on a cloud storage service. This works pretty well with Google Drive, but with Filen it loses the connection frequently because the pseudopaths the API returns are not stable over time (which makes sense, I guess, and is one more reason I want arbitrary local file sync instead). Personally, I went back to storing my Keepass database locally and then periodically backing it up rather than keeping it on live cloud storage.

    It’s one of the cheapest E2EE cloud storage services I’ve seen (definitely the cheapest for me with the lifetime promo I got), and the core functionality of uploading and downloading files (and folders) works. That’s good enough for me to give it the thumbs-up.




  • I’m not sure what the exact model is, but it’s probably from the Performa or Power Mac 5000 or 6000 series. It’s low-res so it’s hard to read, but the text next to the floppy drive says “PowerPC”, referring to the CPU family used in Macs in that era.

    The screen looks like Mac OS 8. It’s so low-rest that it’s kind of hard to tell, but the menu bar at the top of the screen is clearly from Mac OS. Could be 7.5, but I’m guessing 8 since that’s what’s shown in the web browser.

    I think the left screen is showing Windows. Again, super low-res, but those look like Windows 95/98’s blue window title bars and gray task bar at the bottom.