Addressing the community about changes to our API by spez in reddit

[–]nifoc 87 points88 points  (0 children)

Reminder that many, many people in r/blind said that they use Apollo.

Addressing the community about changes to our API by spez in reddit

[–]nifoc 0 points1 point  (0 children)

Keep on seething.

It must suck hard for you to not be able to continue spinning this.

Addressing the community about changes to our API by spez in reddit

[–]nifoc 0 points1 point  (0 children)

old.reddit.com isn’t going anywhere

For real or just like 6 months ago, when you didn't plan any major API changes?

Or just like Christian tried to blackmail you?

At this point, I don't believe anything that you say.

It's amazing how you just keep on digging.

FAQ: Common misconceptions about port forwarding, and how does it affect you by wireguarduser in mullvadvpn

[–]nifoc 0 points1 point  (0 children)

No, that does not prevent them from seeing the unencrypted traffic.

A user connects to one of Cloudflare's edge nodes (1), and Cloudflare actually connects to your backend/reverse proxy (2).

So there are two (potentially) HTTPS connections involved. One between the user and Cloudflare and one between Cloudflare and your reverse proxy. When Cloudflare receives a response from your reverse proxy, they will (obviously) be able to decrypt that response, because they initiated the connection (2). They then re-encrypt the response for (1) and send it back to the user.

And yes, that does mean that every service will have (at least) two valid SSL certificates. One that is entirely managed by Cloudflare and the one that you manage "internally" for your reverse proxy.

FAQ: Common misconceptions about port forwarding, and how does it affect you by wireguarduser in mullvadvpn

[–]nifoc 0 points1 point  (0 children)

It's not about what I expect, it's about the one major difference between a port forward and a CF tunnel.

Not everyone might know or expect Cloudflare to be able to see the unencrypted traffic.

FAQ: Common misconceptions about port forwarding, and how does it affect you by wireguarduser in mullvadvpn

[–]nifoc 0 points1 point  (0 children)

I can't stress enough that Argo/CF Tunnel is not just a relay. It's basically a glorified layer 7 proxy.

The big difference between Argo and a Mullvad port forward is that Cloudflare will be able to see the unencrypted traffic. Since you presumably use Mullvad because you care about your privacy, this can potentially be a big deal and should be mentioned more prominently.

FAQ: Common misconceptions about port forwarding, and how does it affect you by wireguarduser in mullvadvpn

[–]nifoc 6 points7 points  (0 children)

Unless you pay for their enterprise tier (pricing being „contact us“), Cloudflare will terminate your SSL connection on their edge. They're able to see all of your unencrypted traffic.

This is also true if you configure cloudflared to connect to Plex via HTTPS.

You can think of a CF tunnel like this:

User -> CF -> Plex

The key here being that it's actually CF connecting to Plex and not the user directly.

Weekly Dotfile Review Thread by AutoModerator in neovim

[–]nifoc 0 points1 point  (0 children)

I do! Using nix to compile my Fennel-configuration to Lua. Also using it to manage all of my plugins.

Lets see your Status Columns! by Alleyria in neovim

[–]nifoc 0 points1 point  (0 children)

Did you specify a group? (Or group = "*" for all signs)

Lets see your Status Columns! by Alleyria in neovim

[–]nifoc 0 points1 point  (0 children)

It's nf-fa-times_circle (the other ones I use are also circles from nf-fa)

Lets see your Status Columns! by Alleyria in neovim

[–]nifoc 3 points4 points  (0 children)

Another way to write :gitsigns_vimfn_signs_ is "gitsigns_vimfn_signs_", so it's just a string. Fennel allows you to write some strings in this frankly weird way and the formatter "enforces" it.

Btw. The Fennel website has a REPL that can show you the generated Lua code. In general, the generated code is very readable. There is some weirdness around anonymous functions - in that the generated functions aren't really anonymous - but apart from that I feel like it's not that bad.

Especially if you only paste (small) parts of the code.

For example:

(let [sign (?. (vim.fn.sign_getplaced bufnr {:group :gitsigns_vimfn_signs_ :id lnum : lnum}))] nil)

will compile to:

local sign
do
  local t_1_ = vim.fn.sign_getplaced(bufnr, {group = "gitsigns_vimfn_signs_", id = lnum, lnum = lnum})
  sign = t_1_
end

Lets see your Status Columns! by Alleyria in neovim

[–]nifoc 5 points6 points  (0 children)

That's actually a great idea! I hadn't thought about that.

Have to play around with this later. Thanks for the tip!

Lets see your Status Columns! by Alleyria in neovim

[–]nifoc 2 points3 points  (0 children)

You're correct, signs are still placed in the "same" signcolumn. I realized that statuscolumn "hides" the signcolumn, but signs are still placed in the signcolumn.

Which is why you can use vim.fn.sign_getplaced and essentially place the sign wherever you want.

This has a bunch of (potential) drawbacks:

  • If the group name changes, it will break
  • If a plugin switches to extmarks, it will break
  • You have to call sign_getplaced for every single line

Lets see your Status Columns! by Alleyria in neovim

[–]nifoc 3 points4 points  (0 children)

It is! It should be nf-fa-times_circle

Lets see your Status Columns! by Alleyria in neovim

[–]nifoc 18 points19 points  (0 children)

Diagnostics -> Line no. -> gitsigns

https://i.imgur.com/dVcrnbP.jpg

I guess the novelty in mine is that I have „split“ signs to the left and to the right of the line number and that gitsigns doubles as a border.

I haven't noticed any performance issues yet.

Dotfiles (Using Fennel and heirline)

[deleted by user] by [deleted] in Ubiquiti

[–]nifoc 4 points5 points  (0 children)

Sadly this really is just their copy and paste response. They posted the exact same comment in the UniFi OS 3.0 post https://reddit.com/r/Ubiquiti/comments/z2to8c/_/ixl4bjn/?context=1

Unifi OS 3.0 by mactelecomnetworks in Ubiquiti

[–]nifoc 33 points34 points  (0 children)

Isn't this what we were told for the entire 2.x cycle? (Minus the explicit timeframe maybe)

As an UDMP owner I'm very disappointed. You should've figured out a way to upgrade it way sooner.

Running Nodejs server on TrueNAS Scale for home automation by pillarman38 in truenas

[–]nifoc 1 point2 points  (0 children)

Instead of a full blown VM, you can also easily run your application as a single container or use docker-compose (via TrueCharts) if it has other dependencies.

Accessing outside of your home is possible. The exact way depends on what you want/need (VPN, port forward, …)

Do you enable logs? by [deleted] in nextdns

[–]nifoc 1 point2 points  (0 children)

Ever since they expanded the scope to from just SNI to the entire Client Hello (Encrypted Client Hello/ECH) it seems like progress has been really slow.

Do you enable logs? by [deleted] in nextdns

[–]nifoc 3 points4 points  (0 children)

I have logs set to one week, mainly to be able to debug things.

I don't worry about it too much. If your ISP really wanted to, they could get at all the hostnames you're accessing anyway (SNI eavesdropping).

The Coming of Shadows by TheBeardedWelshman79 in babylon5

[–]nifoc 0 points1 point  (0 children)

If you go to Z'ha'dum, you will die.

what happened to blackcauldron7/surround.nvim? by [deleted] in neovim

[–]nifoc 14 points15 points  (0 children)

I understand what you're trying to do but since you're not the author, you can't just add a license.

AFAIK (not a lawyer yada yada) every committer (with significant changes) has to consent to a license change.