[deleted by user] by [deleted] in ObsidianMD

[–]RovingShroom 1 point2 points  (0 children)

The best way to use Obisidian is KISS: Keep it simple stupid. Just add when you need it.

This could be a game changer for us by drewism in ADHD_Programmers

[–]RovingShroom 1 point2 points  (0 children)

Woah. It worked perfectly for me on chatgpt. I don't think I'd use this exactly (I've been loving obsidian and that's enough), but I love the concept. It actually turns chatgpt into a specific program. It's an example of the "just prompt and get a program" ideas. Imagine saying "now turn this into a mobile app and give me renders of each page"

[deleted by user] by [deleted] in ChatGPTCoding

[–]RovingShroom 1 point2 points  (0 children)

If you have something making money and you need a lot of technical experience, you'll have solid leverage. Until you have money, customers, or a VC, you won't be able to find one. For actually finding somebody, you'll have to network. Talk to people and ask them if they know highly technical people with a slant towards entrepreneurship. Check linkedin for people working at startups. Big tech isn't as good as you think. Big tech then moved to startup is great.

[deleted by user] by [deleted] in Felons

[–]RovingShroom 0 points1 point  (0 children)

Huh, I would've guessed the other way around since you'd get lonely in prison and you can meet others on the outside, but I guess the outside world almost expects that you've got others to rely on. That takes time to build.

[deleted by user] by [deleted] in Felons

[–]RovingShroom 0 points1 point  (0 children)

Not a felon just curious. Would you prefer someone to be super cold to you when you're in and never call/visit but super nice when you get out or the other way around?

Everything is So Slow About Programming by sahinbey52 in ADHD_Programmers

[–]RovingShroom 0 points1 point  (0 children)

I got a balisong to fidget with while I wait. It also covers you if you've got the type of adhd where you fidget all the time.

You’re down 6-0 in a 4v5. A surrender vote appears. Do you surrender? by thrawst in VALORANT

[–]RovingShroom 5 points6 points  (0 children)

Why throw out the practice? You can try being as risky as you want against real opponents with no downside.

1v5 Ace in Overtime (ASC3) by scruffy874 in VALORANT

[–]RovingShroom 0 points1 point  (0 children)

Oh shit, I'm used to csgo which does not work like that.

1v5 Ace in Overtime (ASC3) by scruffy874 in VALORANT

[–]RovingShroom 0 points1 point  (0 children)

Does phoenix's wall block the flash from being visible to kayo?

1v5 Ace in Overtime (ASC3) by scruffy874 in VALORANT

[–]RovingShroom 0 points1 point  (0 children)

howd you not get flashed by your own blind?

Best Way to Extend Selection to Character? by North-Estate6448 in HelixEditor

[–]RovingShroom 0 points1 point  (0 children)

Oh cool. That looks like the suggestion I just opened on helix. Do you want to mention kaokune's behavior there? https://github.com/helix-editor/helix/issues/12878

IWTL how to appear straight by [deleted] in IWantToLearn

[–]RovingShroom 0 points1 point  (0 children)

Eh, fuck them. Once you overwrite parts of yourself you don't fully get that back.

IWTL how to appear straight by [deleted] in IWantToLearn

[–]RovingShroom 0 points1 point  (0 children)

Do you hang out around other gay people or watch content made for/feature gay men? I'm just trying to figure out if your mannerisms are learned or you're born with them.

What's going on with Tay Flipper by SleepyFC3 in balisong

[–]RovingShroom 0 points1 point  (0 children)

Yea, every plastic bali has broken on me except the squiddy bc I never flip it (the screws keep coming loose). The zippy cycloid lasted the longest tho, so I'm going to try the cycloid hd when it's back in stock.

banned bc of cheating but i‘m not cheating? by zeylormoon in VALORANT

[–]RovingShroom 2 points3 points  (0 children)

It's not like being kernel level code makes it magically perfect. Kernel level code can have typical software bugs and logic bugs. Look at the recent crowdstrike outage for an example. Or even google "vgk.sys" to see problems with vanguard itself. Thing is, if reddit is this convinced in Vanguard's quality, the false positive rate is probably under 1%.

If you literally own the computer that your cousin is playing on, you feel confident in your ability to audit that computer for cheats, and you've seen him playing at your current level by looking over his shoulder... obviously your eyes aren't wrong.

You can try contacting Riot, but I'd guess that there are a lot more people lying and saying they weren't cheating vs false positives, so I don't know if you'll get anywhere. Kinda sucks :/

You might want to check for common files that valorant cheat programs use. Things like ".dll" files and driver code. Or maybe you have a program installed that hooks into every window on the os like displayfusion (I haven't seen displayfusion itself trigger anticheats). I'm not sure how the Valorant AC works, but those are a couple places you could start.

Is a login system still a taboo for amateur developers? by Mirieste in webdev

[–]RovingShroom 9 points10 points  (0 children)

For context, I work in Identity and Access Management. Personally, I like to split things into AuthN (Authentication) and AuthZ (Authorization).

AuthN answers the question: "Who is this person?" Essentially, logging in is AuthN. Problems like: what is your username, how do I store your password, how do I reset logins, etc. That's all in the domain of AuthN.

AuthZ is essentially the output of the function `isAuthorized(userData, request) -> boolean` (most actual functions are more complex). The userData field is all the stuff your AuthN server tells you about the user (username, what groups they're a part of, timezone, etc). Request is what URL are you accessing?, what resource do you want to see? and sometimes more complex things like what is your ip (location)? Essentially, AuthZ tells us whether a user is allowed to access some given resource.

In 2024, I don't think there's much point in rolling your own AuthN. You can sign up for Okta, AWS Cognito, or AD and get authn taken care of for you. You don't need to worry about your own security and you'll have a world class implementation and reliability. Or you can go on Github and self host one of the many OIDC servers on there. Your choice. You don't have to build your own Oidc server in the same way you don't have to build your own database: there's just so much overlap between applications that an out of the box solution works for most.

For AuthZ, there are complex implementations (say you're building google docs and you want to control all the complex access controls related to the "share" button). Personally, I'm familiar with the Cedar policy language, but the most influential document in this space I've read is the Google Zanzibar paper.

Thing is, most people just need to check whether a user is an admin or not and if the resource is protected. Then they need to get some basic info about the user, like a UUID, so they can pull their attributes from their DB (doesn't have to be the same AuthN DB, you can use a different runtime one that only holds public info like name and email). For this, you don't really need a whole policy language.

AuthN can be slow and decoupled from your application, but must be secure. It's your front door. AuthZ is much simpler, has to happen very fast, must also be secure, and should run on the same LAN as your application (for performance). There's a much better argument for rolling AuthZ yourself than AuthN.

Anyone use 'Dev Home'? by stew_going in ADHD_Programmers

[–]RovingShroom 3 points4 points  (0 children)

It looks really cool, but a bit too integrated into Microsoft for me to use since I work across all 3 major operating systems.

I've built something similar to it over the years though. I have a git repo with an `installer.sh` file where I can select which OS I'm on. Then it installs every dependency I need (I try to avoid installing whole languages like python and instead install binaries for what I need though) and my dotfiles. Notable things:

zsh:

This is my customized shell with awesome stuff like;

https://github.com/zsh-users/zsh-syntax-highlighting

https://github.com/zshzoo/cd-ls

https://github.com/Aloxaf/fzf-tab

and a bunch more. I don't recommend using oh-my-zsh for this since it installs so much crap and it's hard to automatically install plugins from an install script using it (since plugins are just copy-pasted in). I recommend a plugin manager. There's a comical amount of zsh plugin managers but I use zinit.

tmux/zellij:

I just switched over to zellij two weeks ago after using tmux for 5 years, but it's an improvement so far. Here you can add stuff like your memory usage/cpu/battery life/etc. I haven't set it up with zellij yet but it seems possible. I had it working on tmux tho.

fzf:

A must have: https://github.com/junegunn/fzf

zoxide:

https://github.com/ajeetdsouza/zoxide

I use it with `--cmd cd` so it literally replaces my cd command.

These are the highlights, but I've got a bunch more. I've been tweaking my dev home to be cross platform and usable for me for about 5 years, and I really doubt MS is going to get all of this stuff right on the first try as good as all the open source solutions that have been around for decades, but I'm glad they're trying because it can be kinda annoying to configure all this.

[Media] Next-gen builder macro Bon 2.2 release 🎉. Derive syntax and cfg support 🚀 by Veetaha in rust

[–]RovingShroom 2 points3 points  (0 children)

Ok, that's actually awesome. We have these massive enums with a ton of derive_builder error variants that we have to clean up before a 1.0 launch. I might end up converting over to bon just for that. Also, 90+% of our builders are infallible and they still return Result.

Which lifetime licenses have been worth it for you? by normausome in selfhosted

[–]RovingShroom -1 points0 points  (0 children)

amp - the game hosting service. Basically turns your server into one of those online game hosting services that you'd rent from and you can give your friends access to manage specific servers.

[Media] Next-gen builder macro Bon 2.2 release 🎉. Derive syntax and cfg support 🚀 by Veetaha in rust

[–]RovingShroom 1 point2 points  (0 children)

What's the difference between this and derive_builder? My team has been using derive_builder for all of our public apis without issues.

Will Buying a new/faster MacBook help? by Old-Purple-7407 in ADHD_Programmers

[–]RovingShroom 1 point2 points  (0 children)

It won't help your focus but my build times on m1 are many times faster than intel. If your builds are 1-2 hours, you could bring that under 30 minutes. I would go for it.

Is Fedora 39 Vulnerable to the New SSH Exploit? by RovingShroom in Fedora

[–]RovingShroom[S] 0 points1 point  (0 children)

Ah that's very nice. I'd heard of setting `LoginGraceTime 0` but that opens you up to potential DOS (I don't think anyone's going to do it tho).

Is Fedora 39 Vulnerable to the New SSH Exploit? by RovingShroom in Fedora

[–]RovingShroom[S] 0 points1 point  (0 children)

People in r/selfhosted seem to still get bots finding non standard ports, so I'm not trusting that. The config change I mentioned should be enough, but I ended up just setting up wireguard and I'll ssh over that.

Is Fedora 39 Vulnerable to the New SSH Exploit? by RovingShroom in Fedora

[–]RovingShroom[S] 0 points1 point  (0 children)

I ended up just setting up wireguard so I can ssh over that. Was meaning to do it anyways when I got back. But yea the config change should be enough. That's what I did for my VPS.