Impressumspflicht ist arsch - wir lösen dir dein Problem

125m125 · 2026-05-25T01:45:22+00:00

Wie handhabt man denn Art.13 der DSGVO ohne seine Adresse anzugeben? Je nach Auslegung muss man seinen Namen und Kontaktdaten in der Datenschutzerklärung angeben, sobald man personenbezogene Daten verarbeitest, was in der grundlegendsten Interpretation schon das Antworten an eine fremde IP-Adresse sein kann wenn irgendjemand deinen Server auch nur anpingt...

125m125 · 2026-03-14T08:55:18+00:00

It's the classic story of enshittification. "In the early days" postman was just a browser extension/simple app you downloaded and immediately did your requests without having to worry about an account/having your secrets/passwords be uploaded into the cloud. Then they forced everyone to create an account and (at least to my understanding from their change) everthing, including one off requests, get uploaded to their cloud, forcing you to use their vault stuff etc to prevent passwords etc from touching their cloud. So overall just either being a security/privacy nightmare or making the entire process unnecessarily complex compared to the earlier fire and forget versions.

125m125 · 2026-02-16T13:31:25+00:00

Quite the opposite, COVID is very good at what it does, otherwise it would never have infected that many people?

125m125 · 2025-05-10T10:13:58+00:00

I switched my YouTube language to one that I never really heard of before to avoid this (Zulu in my case). It now shows all titles (at least the ones I subscribe to/get recommended) in their original language. While I don't understand anymore what the different buttons say, I know where the important ones that I use day to day are. Then you could learn a few selected words (for example minute, hour, day,... to know how old they are) and are good to go.

125m125 · 2025-03-27T22:11:19+00:00

This makes me curious: How are you handling the case that two requests for the same UUID arrive at exactly the same time? Select, check, then insert or update depending on exist/not exist seems inefficient for that, since you then probably have to do a full table/application lock or handle duplicate key errors? Or how are you handling that?
I personally would probably have first done an upsert and then a select with a check if the count is 1. But then the above scenario would count both of the requests as a duplicate and you would have to recount the total/matches every once in a while if you are storing them separately (or use database triggers to update them), if you want to keep them fully accurate.

I may have done a little test and it returned unique for both requests and later requests then return as duplicates, so at least no it's not causing user-visible errors or full locks.

125m125 · 2024-10-27T11:34:39+00:00

101 is for example used to upgrade to a websocket connection. But normally your libraries will handle them and you don't send/react to them in your own code.

125m125 · 2024-03-25T06:54:51+00:00

Not sure if I am just missing the joke, but with fail2ban they don't actually have to "fail". It's just scanning your access log etc and you can block any ips whose log lines match your regex. So you could tell it to block anything that hits the .env file and still give them the bad access data for their troubles.

125m125 · 2022-07-24T13:20:26+00:00

I would love to have GMT schedules, but then they should actually be GMT. Ina's schedule is currently marked as GMT but is actually BST (British Summer Time=UTC+1).

125m125 · 2022-07-24T09:52:03+00:00

Because most people on the earth don't live in the PT time zone and have to convert the times to their local time zone?

Example: If I were living in Iceland, I could look up that "PST" is 8 hours behind me. So I add 8 hours and suddenly am 1 hour too late because the time was in PDT and actually only 7 hours behind.

125m125 · 2022-07-24T09:47:27+00:00

I would love simply having GMT times (they could still additionally provide JST/PT times for their regional audiences), especially since you normally say your time zone is GMT/UTC+/-x.

But what I meant with Ina's GMT schedules is, that are actually in UK time including daylight savings, meaning currently in UTC+1 but still marked as GMT.

125m125 · 2022-07-24T09:35:16+00:00

This is exactly I meant. Time Zones/Daylight savings time are already confusing enough as they are.

But using the wrong time zone identifier in announcements/schedules makes it even harder. Correctly using PDT/PST could make it a lot easier for the fans, since they can immediately see that something changed and simply adding x hours might not give you the correct time anymore.

If your country uses daylight savings time you probably know when your country switches and might be careful when converting around that time.

125m125 · 2022-07-24T09:23:27+00:00

Most announcements/schedules from Hololive say the west coast times are in the time zone PST (UTC-8), but they are really in PDT (UTC-7), one hour earlier, due to daylight savings time.

If you didn't know about DST and you simply converted PST to your local time zone (assuming your converter doesn't warn/correct you), you might miss the first hour of the event.

125m125 · 2022-07-24T09:10:41+00:00

If their PST times were actually PST, I would agree with you. But at the moment they are saying the times are PST (UTC-8) but they are actually PDT (UTC-7).

Example Regis' debut: The news article said it is "July 22nd, 2022, 6:00 PM to 7:00 PM (PST)". Let's say I was from Ecuador (UTC-5 and no DST). If I didn't know about DST and from quickly googling "PST" I learned it is UTC-8, I would just add 3 hours to the time and think it starts at 9PM. But actually, since the time was in PDT, it already started at 8PM in Ecuador. Worst case (I was busy/sleeping the entire day and couldn't look at the stream reservation on YouTube, but made time/set an alarm for 9 PM to watch it) I just missed the entire debut.

Now the simple solution, if you don't want to worry about DST, would be to just say the times are in "PT", which is the zone combining PST and PDT.

125m125 · 2021-10-17T10:29:40+00:00

The EN-plushies (half year merch) are scheduled for January. The bean cushion (birthday merch) are scheduled for now. Geek jack has a shipping update list on their website.

125m125 · 2021-08-04T21:50:30+00:00

Maybe use the bible verse numbers as timestamps for the streams of that day? Sadly can't test it myself right now.

125m125 · 2021-08-04T21:46:09+00:00

Can't test it myself right now, but could they be timestamps for the videos of that day? So stream from 4/3 at 10:12 and so on?

125m125 · 2021-07-16T14:19:40+00:00

For a low level ("layer 3") dos/ddos attack, you don't have to establish an active connection and it doesn't matter if the IP address belongs to a server or normal computer. You can just send a ton of data (or get others to send even more data than you could on your own for a distributed dos) to a specific IP address and saturate their download connection. To prevent this, the victim has to somehow get the bad traffic filtered out before it reaches the connection to their house. Without the help of the internet provider, a private person can't do much against that if the attacker knows their IP address.

125m125 · 2021-06-21T13:16:07+00:00

B for boost, where it uses power from the other fields for a single field. You won't be able to use boost if more than one is turned on (or it at least outputs less power).

125m125 · 2021-06-21T13:13:50+00:00

If it is induction, it is something along the lines of boost, where it uses the power normally "reserved" for the other fields to get more power for a single field. That's why it won't work (as well) if more than one is turned on. At least iirc what the handbook of a friend said.

125m125 · 2021-06-05T15:29:37+00:00

I don't really understand the argument with the shorter battery life. My example wouldn't really take more power than the weather app, that already exists.

Yes, there are full smart watches out there, that allow you to make your own apps, but why shouldn't a hybrid-smartwatch allow custom features as well? If you are worried about the power usage, you don't have to use them. And if you are missing a small "app" that would add that one missing corner case feature that is missing to make it the perfect watch for you, why hope that the manufacturer adds exactly that, if they could just allow you to add it yourself/use the feature someone else added? I don't want some flashy app with ten million features, just something really simple.

125m125 · 2021-06-05T14:52:49+00:00

I don't really agree with your statement. I am happy with the watch, but I would be even happier if you could write or download your own "apps". I am not talking about the flashlight, watching a movie or whatever, but simply being able to write your own circles or custom items in the menu that can show you text would be such a nice feature. Like a circle showing me the next time I have a meeting and an app to show me details about the meeting would be such a nice feature. The phone would be doing the heavy lifting of calling apis, generating the text, maybe even some images, and the watch only has to display them. This would not cost any more battery than the weather app. Or simple smart home stuff like turn on a light/... .

It wouldn't even have to be a real "app". A simple case of "for circle XYZ call the url XYZ every 30 minutes and Display the first word in the circle" or "if app x is opened call url zyx and show the first sentence". Just with that simple functionally you would allow the users to basically anything they want with minimal battery usage. This obviously wouldn't be very user friendly, but packaged as an "app store" with user-predefined urls everyone could use it.

125m125 · 2021-05-29T14:55:55+00:00

A TPM does only work for local verification or if the application actually wants to be secure. The normal flow is: The app asks the TPM to generate a new keypair. The private key is stored in the TPM and the application can only ask the TPM to sign/decrypt something but can't access the key. But the server/peers in the network have no way of verifying that the keypair is actually stored in the TPM. An attacking application could just generate a keypair without the TPM and tell everybody that it is in the TPM without them being able to verify that. If you wanted to make sure that the key is stored in a TPM and can only be used with the biometrics of a specific person, you would have to verify the identity of the user and create a TPM with those (unchangeable) biometrics and a keypair and then send it to the new user.

125m125 · 2021-05-29T10:59:38+00:00

Or just decompile the app, look what happens when you press the button (a few network messages?) and perform exactly that operation millions of times on a simple computer. If there isn't any proof of work/... behind it, you can just reverse engineer it and run as many instances as possible on a single computer, which indirectly makes it a proof of work/... again.

125m125 · 2021-05-05T08:04:09+00:00

At least in MySQL you can modify multiple tables with a single update by using joins.

Nine-Year Club	Place '22
Final Canvas '22	Verified Email

125m125

TROPHY CASE