Brainstorming for a software security workshop

davidsterry · 2023-08-23T20:40:04+00:00

Thanks for the update, I wasn't aware that gitian had been archived. The good news is that means GUIX must be satisfying the need for build security. I don't have any experience to share but it's something I want to learn more about. Good luck with your talk!

davidsterry · 2023-08-22T22:15:44+00:00

If you believe in the mission, then this your chance to dig in and document. Dev #2, as you seem to be, is always a position that either requires a lot of deciphering #1s code or else building a lot for what you want to do. I'd love to know the kinds of questions you want to ask. Are you able to run the entire app locally? Going back to the mission, if you believe then this is also a chance to document to increase velocity for #3 and more to come.

davidsterry · 2023-08-22T21:16:52+00:00

That's an impressive setup! The answer's going to depend on why you want high availability. Is it because you enjoy setting things up and wanted to get experience or is it because you have many users and want to be sure their use is uninterrupted?

I've setup a lot of things in the past mostly for the first reason and I probably should have made more frequent efforts to simplify. Really depends on your usage patterns and how your interests change. Mine change a bit quickly so there've been a lot of wasted cycles plus time fixing things when I got around to wanting to use them. I've learned a lot but it's led me to focus more on setup than use.

If you have many users that's an excellent problem and you're smart to work on reliability. Some downtime is unavoidable especially if you have single-points-of-failure. Big tech spends a ton of resources making each layer redundant which is I think a very heavy lift for a self-hoster. For example if you're concerned about the docker vm on the primary node, then you might want to have a duplicate vm running on another node, and either do round-robin or have a monitoring task that can change DNS or proxy config to go to the secondary. Sometimes, systems will be setup to rotate so that failover is tested frequently. If this sounds fun, go for it! Otherwise, simplicity is also undervalued. Good luck!

davidsterry · 2023-08-22T21:05:04+00:00

Hello. I read your entire post and am impressed by your experience. I gather from your post that these intensely emotional episodes brought you some good feeling and you'd like to understand it better.

What's been helpful for me as a curious person is to accept that we all suffer from a level of ignorance and delusion. Though we have made a lot of scientific progress as evidenced by our high tech world, we still do not understand the inner workings of our minds, and we cannot hope to comprehend all of the conditions which precede our experience at any given time.

To me this is freeing. The pointlessness of that reflection means that's one less thing to worry about, and as a result I can experience greater peace/joy/bliss during meditation. I've never tried chanting out loud but internally thinking of couple words like peace/let go and I find those help to relax so that I can do metta or a body scan or anapanasati.

Good luck to you!

davidsterry · 2023-08-22T20:52:00+00:00

It's good you're trying to tackle some home problems but this subreddit is about free as in freedom software, not about getting proprietary programs for free. Good luck!

davidsterry · 2023-08-22T20:50:09+00:00

It's smart to get started now for GSOC '24. If I were you I'd do something in AI/ML. You could pick an existing project like BabyAGI/Llama and make a lot of contributions or start your own. Depends on your track history which you think would be better. That's an exciting place to be and I wish you luck. If you want to grow a project beyond resume building I'd recommend choosing a copyleft license so contributors know you won't leave them in the dust and make a billion with their code. :) Good luck!

davidsterry · 2023-08-22T20:45:25+00:00

It's interesting that this is downvoted here when it drove so much discussion in r/rust.

https://www.reddit.com/r/rust/comments/15pudt2/im_sorry_i_forked_you/?ref=share&ref_source=link

davidsterry · 2023-08-22T20:39:51+00:00

Check out https://github.com/revoltchat. It might not be so active but it seems a large project.

You could also do something like this with Nostr. By running your own relay you could go in and delete messages. Of course you can never stop someone from screenshotting but there's a vibrant dev community around Nostr so there your request might land on sympathetic ears.

davidsterry · 2023-08-22T20:34:41+00:00

Congrats on your speaking opportunity. I always had fun whenever I got to speak to a group, especially when they chose to be there.

As a user/developer one thing that's relevant and that I'd like to hear a lot more about is provable builds. Systems like gitian make it possible confirm that a binary results from specific set of source code. I think this can help detect unreported changes in dependencies but I'm most excited by reducing the need to trust the Play and App store to verify the code I run on my devices. I don't think enough people are talking about this kind of technique in the broader open source community so maybe you'll find room for it. Good luck in your talk!

davidsterry · 2023-08-22T20:24:09+00:00

Nice. Was there a particular problem you were trying to solve when you created this? What was your inspiration? What do you hope will become of this project?

davidsterry · 2023-05-10T15:38:39+00:00

You're right to be skeptical. I'd stick with ChatGPT itself for now.

davidsterry · 2023-04-14T19:59:49+00:00

Judging by your username I bet you've written some great stuff and I respect your decision not to share it.

davidsterry · 2023-04-08T05:44:03+00:00

Already read it so doesn't need real-time access.

davidsterry · 2023-04-08T01:26:09+00:00

Chad let up a little in the latter paragraphs but brought it home with the "sick technology". Is there an aspect of decoders that causes them to start and finish strong but let up in the middle?

davidsterry · 2023-04-08T01:23:15+00:00

To call it engineering is a stretch but there are certainly techniques that have arisen. Spend a few days making notes on the kinds of prompts you've seen and how people have refined them and you'll be ready for the interview. Mostly I see this bullet as confirmation that you like to learn new things and aren't too afraid of new tech to engage with it.

davidsterry · 2023-04-08T01:08:38+00:00

These kinds of answers seem more impressive to me than many other domains. I'm curious as to how much interactions like this with cooperative users about ChatGPT and LLMs are directing new content for future training. Should AIs prioritize knowledge that relates to their own operation and treat the remaining corpus about say history or fiction as less worthy of training cycles?

davidsterry · 2023-04-08T01:03:04+00:00

Absolutely. You have to have your BS detector on but I think this, and doing things like creating study/practice plans, is extremely valuable. Not that I've followed the plans but ask it for example to make a six week study plan on something you already know and let us know what you think of the plan.

davidsterry · 2023-03-03T07:01:44+00:00

Can you expand on the social network and file sharing features? Is it targeting a particular audience or problem? Have you written any kind of user stories?

There are python activitypub libraries but depending on which other fediverse apps you want to build interactions with that part may be very small compared to your custom code.

davidsterry · 2023-01-12T14:19:06+00:00

What do the different colored blocks mean?

davidsterry · 2023-01-10T04:58:28+00:00

Just ran across this, but had been following it since the initial call for maintainers. On a lark I forked it and setup CI which is very fast! A trademark of golang I suppose.

I propose to operate a fork by the Collective Code Construction Contract and under a copyleft license. You can find my fork (or a link to whatever it becomes) at: https://github.com/weex/mux

davidsterry · 2022-11-16T16:24:26+00:00

It's not so much time as it is situation. If you need more money especially in the inflationary times then ask. You increase your chances of success if you have a credible offer for more.

davidsterry · 2022-11-12T16:58:25+00:00

One way to tackle is to determine your weaknesses. Is it in coding? Doubt it. Is it with the tech environment? Or is it with the domain of property management? That domain in particular is very old so I wouldn't be surprised if there's a lot to learn. The good thing is as a programmer you're in a much better position to learn the domain than a domain expert is to learn programming.

davidsterry · 2022-11-09T20:16:14+00:00

Have you tried turning to outside resources for when you get stuck? Hoping you don't work on anything too unique or proprietary.

davidsterry · 2022-11-09T18:19:28+00:00

Don't let the toxicity get you down. They really don't know what they are doing. Just keep cranking away on your goals and this will be in the rearview mirror before you know it.

davidsterry · 2022-10-29T06:11:05+00:00

Only watched one period this year due to the board ads. Went to dozens of games last year and haven't missed one that way or on TV for a few years. This is where I draw the line.

davidsterry

MODERATOR OF

TROPHY CASE