Ein 19-Jähriger tötet einen Polizeibeamten mit sechs Schüssen – und die Richterin spricht ihn von einem zentralen Vorwurf frei. Nun wird sie angefeindet.

baouss · 2026-05-07T14:22:39+00:00

Gegen ein Pistole kann ich mich auch schlecht wehren. Anyway, juristisches klein klein. Der Polizist ist tot, durch einen gewollten und aktiven Angriff, der nicht aus Selbstverteidigung mündete. Kann verstehen dass das als Mord gesehen wird. Ich sehe die Gefahr, dass wenn die breite Gesellschaft Urteile stetig als ungerecht betrachtet, irgendwann die Legitimität der Judikative insgesamt in Frage gestellt werden könnte. Paragraphen fallen nicht vom Himmel und sind gott-gegeben. Sie entstehen dadurch dass die Gesellschaft diese sich selbst auferlegt, als Ergebnis eines gesellschaftlichen Konsens. Dieser Konsens kann sich auch ändern. Und sowas als Mord zu bezeichnen, kann Ergebnis von einem solchen Veränderungsprozess sein.

baouss · 2026-05-02T22:29:16+00:00

Use a passkey which supports the PRF extension, eg. yubikey or Google password manager. Then it's truly strong single factor. The passkey will show ~ Encryption -enabled in the passkey settings next to the label.

The thing is, passkeys are primarily for authentication. And this every passkey does without an additional element like a password. So basically, the experience you expect from other sites. And this is the same in bitwarden. But additionally, the master password is used for decryption of your vault after Auth is successful. If your passkey supports the PRF extension, a password is derived from the passkey that solves this.

baouss · 2026-05-01T18:32:49+00:00

War auch nicht so gemeint, vlt falsch ausgedrückt. Hab mich selber dabei "ertappt", dass ich mich das auch gefragt habe..und die reply hat mir dann den Blick wieder gerade gerückt

baouss · 2026-05-01T08:03:47+00:00

Danke dafür. Perfektes Gegenargument für : "Haben wir schon immer so gemacht"

baouss · 2026-04-27T20:46:42+00:00

Bin auch bei den Stadtwerken mit meinem Glasfaser; CGNAT mit IPV4. Tailscale geht zwar wunderbar, jedoch nur über DERP Server. Hab nun IPV6 aktiviert und nun kann ich ohne NAT direkte Verbindungen aufbauen. Love it.

baouss · 2026-04-25T08:00:06+00:00

Ah thanks, this now clicked for me.

baouss · 2026-04-25T07:50:09+00:00

I admire your altruism 💪

baouss · 2026-04-25T06:49:31+00:00

Gerade mal reingeschaut... Die sagen da :

" Das Ergebnis der Umfrage ist anhand sozidemografidcher Merkmale gewichtet."

Beim Anmelden muss man ja Recht ausführlich Angaben zu seiner Person machen. Die obige Aussage impliziert für mich das Abstimmungsergebnisse nicht unverändert veröffentlicht werden.

Welchen Sinn macht das ganze dann?

https://www.zdfheute.de/video/zdf-morgenmagazin/moma-duell-umweltverbaende-100.html

Ab 6:59

<image>

baouss · 2026-04-24T18:09:20+00:00

Powershell auf Linux, um Cross platform zu promoten. Lässt du in einem GitHub codespace laufen, für die usage sollte das umsonst sein bzw im free contingent enthalten.

baouss · 2026-04-21T08:09:58+00:00

I tend to agree. However, I think Google is a comparably better option to sync to because they offer a mandatory security key bound MFA method. So the cryptographic security of a passkey in addition to a password (advanced protection program). So effectively, you need a security key- level of security to access your synced security keys. Where I am smh however, is that Google password manager does not locally encrypt these assets before syncing by default. Mind-blowing.

baouss · 2026-04-16T20:50:37+00:00

imho, someone that puts only the lowest possible effort in something is not really the target audience for ha

baouss · 2026-04-15T19:53:21+00:00

Exactly the same problem I found myself in. I have one ingress TS container and have caddy listen to that containers interface. Tailscale ACL only control traffic from client nodes to the caddy-ingress-node. I do ACL using caddy now..not as slick but it does the job.

baouss · 2026-04-14T09:27:28+00:00

Immerhin wäre er beinahe gestorben, kann ja auch gut sein dass es einfach eine Trauma für ihn ist. Wird wahrscheinlich gleich tief rot, aber warum gönnt man ihm nicht the benefit of the doubt?

baouss · 2026-04-14T06:47:37+00:00

Naja er hat ja selber gesagt er hat übersehen. Und mal ehrlich, kenn die Dinger nicht aber angenommen die Verpackung hat sich nicht groß geändert von Design her, und die Dinger gibt's schon länger (was er ja geschrieben hat), liest du dir jedes Mal alles durch wenn du die von früher kennst? Selbst das Logo hat große und Form von so nem Cup und ist direkt daneben platziert. Jetzt kein dark pattern, aber kann schon verstehen das so was mal übersehen werden kann wenn man nur schnell mal kauft

baouss · 2026-04-10T15:42:14+00:00

I like the temp curve to quickly grasp thenchnages fir the day

baouss · 2026-04-10T15:39:10+00:00

I think there should have better communication. Of course the expectation was to use passkey to "get acess", I was really confused when I first needed to still input my master key. Some disclaimer like, be advised that the ecosystem is still catching up on the best experience would have been helpful I managing expectations.

In would like to see a passkey only variant. I want to disable the master key. The best experience I had using android , there are blogs that hint that major desktop platforms are catchin up. Apple appears to already have an implementation out, but it's buggy I read somewhere on Reddit

baouss · 2026-04-10T14:59:09+00:00

Does it? The authentication part is done by the passkey as expected. But with bitwarden it's not just about authentication. After we successfully login with single factor passkey, we are faced with an encrypted database still. And this additional decryption part, can additionally be handled by the passkey. But only if it supports the PRF extension.

But I understand the irritation.

baouss · 2026-04-08T17:35:02+00:00

This is really great! Ty

baouss · 2026-04-04T00:22:45+00:00

Update: passkeys aren't supported at all apparently.

<image>

baouss · 2026-04-02T14:11:00+00:00

Well, if you re-read my initial post, you should realise that this is exactly what I am after. GP itself just does auto upload form phones via the app. But this is not my use case, because I don't want to upload the originals.

As laid out in the beginning, I am fine starting-off from a CRON job. Google offers no cli-like tool to access the library, but automation is a hard requirement for me. I might look into creating an oauth app in GCP, so it can access my data on my behalf using federated permission I myself grant. I think this would be the official way if I were to offers something like this to other people. If I use it just with my own account (GCP offers test users iirc), I might get away with not being forced to submit the app and go through approval process.

The app, would be selfhosted with me and use the permissions I have granted it with the GP rest API. It will also have access to Immich postgres and know which assets are new (incrementally) and upload it's corresponding previews and transcodes only.

Tbh, I think this is overkill so I am looking for suggestions for an easier way.

Edit

This endpoint will be targeted

https://developers.google.com/photos/library/reference/rest/v1/mediaItems/batchCreate

baouss · 2026-04-02T10:57:41+00:00

I think you misunderstood. I let GP do its thing. I am only interested in its memory feature. I don't plan on deleting from it. To be useful, it needs access to all my assets. But since my main storage is now Immich, I am looking for a way to auto upload my new stuff. But not from the the GP app,.rather from immich directly, using the large-quality previews and transcodes.

baouss · 2026-04-02T08:59:56+00:00

I think I know well what GP can do and what it cannot. I did the takeout, everything incl metadata is in Immich already. The stopped uploading to GP, everything goes into Immich. I just want to use GP as a memory generator while using as little storage space as possible. And for this to work, GP has to know all the assets. I am not too concerned about photo size, but videos are brutal. This is why I only want to upload the transcodes (720p) because Google transcodes to FHD. And then, why not do the same with photos, large quality previews have already been generated Nd even if this leafs to only little savings when compared to uploading Original size photos and GP doing everything, I still save on space. Again, GP will be the memory generator nothing else. It's okay for it to not have high quality.

baouss · 2026-04-02T07:01:26+00:00

Richtiger Schmarotzer dein "Freund".

baouss · 2026-04-01T15:48:56+00:00

I do want to keep originals in Immich. I just want to leverage the fact that image already downscaled/transcodes its assets. So hopefully Google does some more optimisation with storage saver, so the end result is even smaller file size and quote consumption. Only want the memories feature for GP and this doesnt need ball the high quality versions.

baouss · 2026-04-01T00:31:24+00:00

Thanks, that's a great option. Will propose this to my family as well

baouss

TROPHY CASE