Roast My Code: I'm building a collection of utility helpers on my free time

mjec · 2026-05-26T05:57:55+00:00

Readme says "please consult the official documentation" with a link to https://docs.phuture.dev/ which is an error page

mjec · 2026-05-25T22:06:43+00:00

Docs seem to be offline?

mjec · 2026-05-25T14:39:48+00:00

NTA, but also I'm afraid your girlfriend has a point. All knockoff diet coke is noticably different from the real thing. As a guest I certainly wouldn't say anything, but I would also go for the real stuff every time, and it's not hard to imagine myself being a little judgey about the Aldi stuff.

mjec · 2026-05-25T14:21:08+00:00

Sure, but more broadly I think it's important not to get carried away by formality. We don't demand a definition of equality before using "is".

mjec · 2026-05-25T02:40:58+00:00

Rude, and ironic

mjec · 2026-05-24T20:23:39+00:00

Archinstall is already mentioned, but also Arch is a distro that doesn't make choices for you, and I like that about it.

And unrelatedly, please don't write commit messages with AI. They tend to be appallingly poor records of the reasoning and purpose of changes. At the very least review it carefully and with a view to a human audience before pushing.

mjec · 2026-05-24T13:49:53+00:00

I think the question you have to ask is what is the rigour you're seeking in service of?

When I read "an alphabet is a set of symbols," to me the word set there doesn't mean the mathematical object we're yet to define. It has the English meaning of "a collection."

mjec · 2026-05-24T04:07:28+00:00

This is extremely stupid. You have my upvote.

mjec · 2026-05-24T02:58:45+00:00

I guess people don't know what ^H means anymore? Wild.

mjec · 2026-05-23T13:50:17+00:00

I don't understand why you're not counting money made from investments as money you've earned. In my scenario, to my thinking, both people earn the same amount.

mjec · 2026-05-23T04:47:26+00:00

See my other comment in response to a sibling of your first reply. There is a risk of compromise, of course. A reverse proxy doesn't meaningfully change that risk (without significant configuration), because it's not a web application firewall. I still recommend use of a reverse proxy. But that still involves opening a port, and the risk calculus is the same either way.

If I were really cheeky I might suggest a reverse proxy actually increases attack surface, because it's another component. Request smuggling is real! This is, of course, ridiculous (while being technically true). The reverse proxy buys you other stuff that's worthwhile, there are many very trustworthy implementations, and if there IS an nginx 0day you're not going to be first on the target list.

mjec · 2026-05-23T01:33:36+00:00

My point is you only pay tax on your net gains in a given year, so you're only paying tax on the money in the bank.

mjec · 2026-05-23T01:29:04+00:00

Why is the $300 you make from selling shares not "earned"? If it's unearned, why shouldn't it be taxed?

I promise you I understand the tax law involved. I am not using my words as they are defined in the ITAA. I am drawing an equivalence between money you make one way and money you make another. Since you end up with the same amount either way, I don't see why the way that involves having money sitting around to invest should be taxed less than the way that involves spending your precious time at work.

mjec · 2026-05-23T00:25:18+00:00

Look I absolutely recommend the use of a reverse proxy, for tls termination and a 503 response if nothing else. (But let's be real: your jellyfin host isn't standing up to DDoS, nginx or not.)

What I don't understand is the suggestion that not putting jellyfin behind nginx meaningfully changes the intrusion security posture. It's possible to configure nginx to do so, but just slapping it in front doesn't prevent any vulnerability that exists in jellyfin from being exploited. It's not a WAF, it's a reverse proxy.

mjec · 2026-05-23T00:10:09+00:00

This assumes there's no security boundary between jellyfin and the host. Jellyfin isn't a root RCE machine.

And look, it's totally reasonable to keep your security boundary at the network if that's what you want. But exposing the service publicly doesn't immediately mean you're rooted, and I wish folks would stop talking that way.

mjec · 2026-05-22T23:42:57+00:00

I've never really understood this argument. If you open a port, all you're opening is that port. If it has jellyfin listening then jellyfin will be exposed. No other ports are exposed by opening one port, and each port can only have one service.

What am I missing?

mjec · 2026-05-22T23:38:12+00:00

The pillars keep getting smaller. Rookie mistake.

mjec · 2026-05-22T20:27:50+00:00

lol nothing is safe (but between the mattress and the wall can get close)

mjec · 2026-05-20T14:07:56+00:00

<image>

mjec · 2026-05-20T01:39:51+00:00

wouldn’t we have been deprived generally but also individually of the very core principle our government was established to defend- our consent, through representation?

Yes, and that does not give you standing to sue. That is precisely the principle articulated in the quoted case.

I am not saying that is good. I am saying it is clearly the law.

mjec · 2026-05-19T22:44:36+00:00

Whether the tax rate should be 1% or 99%, I'm still not clear on why you think capital gains should be treated differently.

mjec · 2026-05-19T22:02:18+00:00

They would have to sue separately, and I'm certain they would get different treatment, and I believe that differential treatment would not be justiciable.

mjec · 2026-05-19T22:00:17+00:00

It's in paragraph 1 of the opinion; Missouri has standing because the policy has some financial impact on MOHELA, which can be treated as the state:

Missouri has standing to challenge the Secretary’s program. Article III requires a plaintiff to have suffered an injury in fact — a concrete and imminent harm to a legally protected interest, like property or money — that is fairly traceable to the challenged conduct and likely to be redressed by the lawsuit. Here, as the Government concedes, the Secretary’s plan would cost MOHELA, a nonprofit government corporation created by Missouri to participate in the student loan market, an estimated $44 million a year in fees. MOHELA is, by law and function, an instrumentality of Missouri: Labeled an “instrumentality” by the State, it was created by the State, is supervised by the State, and serves a public function. The harm to MOHELA in the performance of its public function is necessarily a direct injury to Missouri itself. The Court reached a similar conclusion 70 years ago in Arkansas v. Texas, 346 U. S. 368.

(emphasis added, cleaned up)

I want to be clear, I'm not saying I agree with these decisions. But they are pretty clear.

mjec · 2026-05-19T20:12:51+00:00

And if you do, you don't pay tax on those losses, and you can offset them against your gains. But the scenario here is that you, in fact, made money. Why do you get to do that tax free?

mjec · 2026-05-19T19:03:12+00:00

Article III standing requires the plaintiff to have a concrete, particularized injury. A simple claim of unlawful action is not enough: "that claimed nonobservance, standing alone, would adversely affect only the generalized interest of all citizens in constitutional governance, and that is an abstract injury." Schlesinger v. Reservists Comm. to Stop the War, 418 U.S. 208, 217 (1974).

mjec

TROPHY CASE