tatterdemalion

joined 3 years ago
[–] tatterdemalion@programming.dev 1 points 4 hours ago* (last edited 3 hours ago)

Agreed that the solution to metastasized slop debt is to just rewrite it. That's kind of another way of saying that your entire codebase was written at prototype quality, except worse because of all the hidden decisions no one made.

I think the solution is a radical shift in how we test and review code. If your coworkers weren't thorough at testing and code review before 2026, then you are probably suffering right now.

I'm guessing LLM advocates want to solve this problem by throwing more LLMs at it, I.e.adversarial review bots, harness engineering, etc. And those are probably good ideas to raise the competency of LLMs, but I don't think they can replace the better judgement of humans anytime soon.

If your workplace culture already had strong testing and code review standards, then a sloppy PR is going to fail the smell test quickly.

And the biggest problem I see is simply with lazy people who don't review their own slop but expect others to review it. It's infuriating and completely unacceptable.

Assuming everyone is trying their best, there is really no substitute for getting your hands dirty and making sure you at least understand all of the code you submit and take the time to interrogate the surrounding code as well. I don't think there is a hard rule to know that you've adequately "digested" and refined the LLM output. But even before LLMs, I used to review my own code and iterate to make it more readable. It's like writing prose: you read, edit, re-read, until it's good.

[–] tatterdemalion@programming.dev 16 points 20 hours ago

I don't regret the times I show anger at work, but it's a definitely a fine line that can leave me feeling a bit uneasy afterwards. It's one of the "social capital" things; you need to earn enough good will to spend your anger on the battles that really matter to you.

"Fraud" might be a bit strong, but Theo just generally seems to have myopic takes on programming. I always cringe when I watch his videos.

[–] tatterdemalion@programming.dev 21 points 1 day ago (3 children)

Why would you want your entire home folder in syncthing?

[–] tatterdemalion@programming.dev 0 points 2 days ago (1 children)

I'm not sure I need a lot of compute on my NAS. I guess I might as well get as much as I can before it becomes cost prohibitive. Not planning on running any local LLMs on it though, so a GPU is probably overkill.

[–] tatterdemalion@programming.dev 0 points 2 days ago (3 children)

I've been thinking about getting a real NAS machine instead of having my gaming PC always on. This looks pretty slick.

Or both little dudes and big dudes to make the big dudes look even bigger. Worked well in The Odyssey.

Another commenter just told me about WAICT and there is also an experimental extension called WEBCAT by the freedom of the press foundation. Going to look into these more.

Thanks this is very interesting! I also found an extension called WEBCAT that does a similar thing.

[–] tatterdemalion@programming.dev 4 points 1 week ago (2 children)

I think that's the prevailing sentiment in this thread. People would rather trust the site to run the code as advertised and get some added convenience rather than verify the code for themselves.

[–] tatterdemalion@programming.dev 6 points 1 week ago (3 children)

The point is you can't prove the server won't serve you code that won't take your key and send it somewhere arbitrary.

 

I'm trying to create a web app that involves sharing of user-generated content, but one of the goals is that the service host operator should be blind to the content. Only authorized users should be able to see the content shared with them. This implies the content must be encrypted at rest, and users must hold custody of their private signing key.

I figure the situation requires an open source browser extension to hold onto a user's keys and decrypt content for them. The web app would still be able to browse all of the site's metadata, but any plaintext content must be siloed in the extension. The reason for using an extension is that the source code would be open source and independently verifiable, while building the same functionality into the web app would require trusting the host to serve the code you expect.

Do you think that's a reasonable tradeoff or is this asking too much from users?

The other option would be just requiring users to download an open source app for content viewing.

EDIT: Perhaps an important followup: are you OK placing trust in the host to never access your confidential data if it means you don't have to install additional client software or worry about verifying that client software's authenticity?

 

This might not be entirely on topic, but I think someone here will know the answer.

Does anyone have a working setup for streaming from jellyfin to an OLED TV (preferably LG) that supports Dolby Vision? AFAICT every device in the chain (except the server) needs to be DV-licensed.

Apparently KODI on a linux box (my current setup) cannot output DV content over HDMI.

I'm wondering if LG's native OS has a Jellyfin client that supports DV well. It's either that or:

  • Apple TV + infuse client (expensive)
  • Google TV Streamer
 

I didn't think I'd spend hours reading about this today, but some things surprised me:

  1. Just using a Playstation sounds like it won't work or will be a huge time sink.
  2. Blu ray optical drives are way more expensive than I thought
  3. The copy protections on Blu rays are exceptionally annoying, to the extent where there is really only one closed source software -- MakeMKV -- that can work around them. This post goes into some interesting details.
  4. Finding a drive that is known to work with MakeMKV is a pain. There's a brand called Pioneer that seems promising but they have stopped producing bluray drives ~~went out of business last year~~. I have no idea which model works, and it's common that secondhand sellers will swap enclosures and pass it off as a different model.
  5. Sometimes you need to flash the firmware on the drive to make it work with 4K UHD discs.

I was going to try ripping a Blu-ray that I bought recently, since I couldn't find a quality rip anywhere, but I'm pretty turned off from the whole prospect at this point.

Anyway I'm not really asking for a specific reply, I just thought this topic was interesting and I'm curious what people think about Blu rays and optical media in general. Does the future seem bleak? Are we going to be stuck with shitty WebDLs for most new content? Or is physical media here to stay?

 

Struggling to find a particular book. I was going to buy it on Rakuten Kobo, but they literally won't sell it if you're not in Japan.

112
submitted 9 months ago* (last edited 9 months ago) by tatterdemalion@programming.dev to c/asklemmy@lemmy.world
 

I think like 98% of mobile games are pretty much trash, but there are some diamonds in the rough.

In the past I've enjoyed:

  • Monument Valley
  • 2048
  • Fruit Merge
  • Hashi
  • Papers Please
  • Baba is You
  • Balatro

I'm getting bored of my usual picks lately. I'm looking for something that's quick to jump in and out to pass the time, not something heavy. But hard puzzles or strategy totally fit!

Is the FF Tactics port good? Better alternatives?

 
 

AFAICT, if a Netflix account owner sets up a VPN for their household, then anyone sharing the account who routes their Netflix traffic through that VPN would appear to be accessing Netflix from that household's WAN IP address.

Is anyone doing this? Is it really that simple or are there more challenges?

EDIT: We get it, you like torrenting. Let's keep comments on topic folks.

 

Richard once decided to read the mind of a hermit oracle who knew everything. This drove Richard insane.

I just had to act insane for multiple D&D sessions.

 
 

I ask because it would be nice to use the "I2P mixed mode" features of qbittorrent, but I want to keep my clearnet traffic on the VPN.

Background

I have I2PD running only on my home gateway for better tunnel uptime.

To ensure that torrent traffic never escapes the VPN tunnel, I have configured qbittorrent to use only the VPN Wireguard interface.

Problem

I think this means qbittorrent I2P traffic will flow into the VPN tunnel, but then the VPN host won't know how to route back to my home gateway where the SAM bridge is running.

 

I've configured my i2pd proxy correctly so things are somewhat working. I was able to visit notbob.i2p. But sometimes Firefox really likes to replace "http" with "https" when I click on a link or even enter the URL manually into the bar. I have "HTTPS-only mode" turned off, and I also have "browser.fixup.fallback-to-https" set to "false" and "network.stricttransportsecurity.preloadlist" to false.

I tried spying on the HTTP traffic in web dev tools, and I see the request gets NS_ERROR_UNKNOWN_HOST. This does not happen when using the xh CLI HTTP client, so Firefox is doing something weird with name resolution. I made sure to turn off the Firefox DNS over HTTPs setting as well, but it didn't seem to make a difference.

I assume that name resolution needs to happen in i2pd. How can I force Firefox to let that happen?

Update: Chrome works fine.

Update: I started fresh and simplified the setup and it seems fixed. I'm not entirely sure why. The only things I've changed from default are DoH and the manual HTTP proxy.

view more: next ›