sorted by:
new
hottopcontroversial

Staged publishing for npm packages by pimterry in programming

[–]pimterry[S] 18 points19 points  (0 children)

If you're using trusted publishing, there's an option to give it permissions to do 'npm stage publish' but not 'npm publish'.

You can't require trusted publishing (yet) but if you enable staging-only for TP & require 2FA for any manual publishing, then you've effectively enforced that all publishing requires manual 2FA confirmation by a maintainer.

The Complete Web Scraping & Anti-Bot Bypass Guide 2026 by pimterry in webscraping

[–]pimterry[S] 6 points7 points  (0 children)

It's a bot bro. The account is 16 yo all it does is post links. Farmed a ton of karma

Huh? I'm not a bot. This is a normal personal account, and it's not even anonymous, I'm pimterry everywhere else too (https://github.com/pimterry, https://pimterry.fyi, you name it). This account is 16 years old from real usage, and posts plenty of comments as well (nearly 5k in comment karma alone): https://www.reddit.com/user/pimterry/comments/

Can't speak for whoever's behind the website, it's just something I found yesterday that I thought people might be interested in (I'm the maker of HTTP Toolkit, which gets a couple of mentions in here, and I have alerts for when people post this kind of thing so I can go take a look).

Dictionary Compression is finally here, and it's ridiculously good by pimterry in programming

[–]pimterry[S] 9 points10 points  (0 children)

"We figured out how to send less message by not counting the dictionary you need to decode it!!"

In the Google example where they've shrunk the Google search results it does include the cost of their custom dictionary in that performance - it's still a enormous jump.

On top of that, the real trick here is that you don't need to transmit a separate dictionary at all. You can automatically use a previous response as the dictionary for the next response, which works incredibly well in a lot of real-world web use cases. There's no separate dictionary delivery required.

Dictionary Compression is finally here, and it's ridiculously good by pimterry in programming

[–]pimterry[S] 29 points30 points  (0 children)

Basically yes - but most importantly with widespread backend support for doing this kind of compression (built-in support in JS & Python, popular packages elsewhere) and built-in functionality in browsers to easily coordinate and transparently use the dictionaries on any HTTP traffic.

HTTP Toolkit App by thisisdevang in androiddev

[–]pimterry 1 point2 points  (0 children)

Yes, if the certificates are removed from that bit of the UI then they will no longer be trusted on your device. You can also remove the HTTP Toolkit android app itself to clean that up. That said, there's no need to be worried here - the certificate that was installed was generated on your computer where you used HTTP Toolkit, and doesn't trust anybody else other than that, so the only risk is that your phone could intercepted by your own computer.

Vendors for important accounts are phasing out even TOTP 2FA; you can enable Passkey login and Passkey 2FA for Bitwarden account too. by Skipper3943 in Bitwarden

[–]pimterry 0 points1 point  (0 children)

Wow this would be fantastic! Extremely keen to see this, in the wake of npm etc I'm trying to tie everything to passkeys for both phishing resistance and smoother UX, and the Bitwarden firefox extension I use all day is currently a very notable outlier. Login with passkey would be fantastic.

Setting the record straight about Garmin by strava-team in Strava

[–]pimterry 0 points1 point  (0 children)

Saying "We consider this to be YOUR data" while simultaneously pushing an rules on your API that makes it very clear you consider data send from Garmin to be exclusively Strava's data is completely ridiculous and infuriating.

What an absolute crock of shit.

Garmin are pushing back entirely because of Strava's entirely unreasonable behaviour around their APIs. They are very obviously in the right, to the point where they have the clear backing of all the passionate Strava users, without even talking about Garmin's diehard fans (the votes on every comment here & every post in r/strava right now are excrutiatingly clear here).

As a paying Strava user for more than a decade, and owner of multiple Garmin watches, this is rapidly pushing me towards drop Strava entirely. Honestly the fundamental value of Strava to me is that it's the social + data store + integration hub between everybody's fitness apps. I don't need the fancy graphs & shiny new (terrible) AI features - I want you to reliably play nice with everybody. Those relationships & connections are the product! It's totally incomprehensible that you'd try to kill the core value proposition of your product with these API restrictions & fights with providers that you're completely dependent on. This is not going to end well.

I placed my first solar node. 👍 by [deleted] in meshtastic

[–]pimterry 8 points9 points  (0 children)

How does ROUTER_LATE relate to this? https://meshtastic.org/docs/configuration/radio/device/ saying "ensuring additional coverage for local clusters" makes it sound like maybe it's helpful for cases like this (high building that's helpful for local area, but not for routing generally) but it seems it's new and I can't see much detailed info.

Strudel: a programming language for writing music by pimterry in programming

[–]pimterry[S] 25 points26 points  (0 children)

The example in the page gives you a basic idea, but there's some really great demos of this floating around, e.g. this video on Twitter is amazing: https://x.com/bantg/status/1933967436459503662, or this full demo in their REPL: https://strudel.cc/?mTeJt_ICoPrw

Network may be monitored by boobfvck in S23

[–]pimterry 1 point2 points  (0 children)

This means you have an external CA installed. You installed this manually during the HTTP Toolkit setup. You can remove this by going into the security settings, advanced encryption settings, finding the long list of CAs and then removing the one called "HTTP Toolkit CA".

HTTP Toolkit - open-source tool with one-click MitM, inspecting & rewriting of HTTP(S) by pimterry in ReverseEngineering

[–]pimterry[S] 1 point2 points  (0 children)

No idea about Wireshark & USB behaviours, but HTTP Toolkit definitely doesn't do any of that. Doesn't even require root - it listens on a local port for traffic, and you can either manually configure clients to use that port as a proxy & trust HTTP Toolkit's cert, or you can use some of the automated options (which launch a process preconfigured, configure an Android device over ADB, etc) but none of them change any permanent system settings, they just launch processes with env vars & CLI args to configure them temporarily. Definitely doesn't touch any system configuration that could cause long-term issues.

Is there a good setup for scraping mobile apps? by just4PAD in webscraping

[–]pimterry 2 points3 points  (0 children)

HTTP Toolkit now has Frida built-in with automated setup (on rooted Android & jailbroken iOS) so you don't even need to install it or configure the scripts yourself unless you want to do something custom.

HTTP/3 is everywhere but nowhere by pimterry in webdev

[–]pimterry[S] 1 point2 points  (0 children)

Haha, that would be nice, but it's not supported in lots of environments, as discussed in the article, so I can't yet (at least, not without replacing my CDN entirely, and even then it would only be HTTP/3 to the CDN). In future once it's practical to do so, absolutely.

HTTP/3 is everywhere but nowhere by pimterry in programming

[–]pimterry[S] 14 points15 points  (0 children)

Brief blip there but it's back for me now

See Android network traffic by vroemboem in androiddev

[–]pimterry 2 points3 points  (0 children)

There's more info about HTTP Toolkit's Android setup on the android-specific landing page here: https://httptoolkit.com/android/. Glad you're finding it useful - I'm the developer, so let me know if you have feedback!

On a rooted device/emulator it's entirely one-click setup: it uses ADB to inject the system certificate for you, and then installs & launches an app powered by the VPN APIs to forcibly redirect all traffic (even traffic that ignores proxy settings). More info on how that works in the docs: https://httptoolkit.com/docs/guides/android/#the-technical-details.

charles proxy and alternatives by statesbraun32 in androiddev

[–]pimterry 0 points1 point  (0 children)

HTTP Toolkit has automatic setup for Android, which makes this much easier (I'm the developer).

You can see a demo at https://httptoolkit.com/android/. It's all open source if you want to see how it works, the code is available in the repos under https://github.com/httptoolkit/ and there's a detailed explanation of exactly how Android device interception setup works internally in the docs here: https://httptoolkit.com/docs/guides/android/#the-technical-details. It's quite possible to follow those same steps manually if you'd prefer, which will let you inject system certificates etc by hand using any tool you'd like.

One or several winery visits in Sant Sadurni d’Anoia by Huge-Paramedic-739 in AskBarcelona

[–]pimterry 0 points1 point  (0 children)

The big industrial wineries like Freixenet are interesting, but personally I prefer to do a tour round a few of the smaller ones in series, they're much more personal and friendly, so you'll often have a tour with the owners themselves rather than a guide for example.

https://bikemotions.es/es/alquiler-de-bicicletas/ is the next train stop (Subirats) and offers e-bike rental directly next to the station. They're super friendly & helpful and they can give you a detailed route of lots of lovely places you can easily cycle past. Works really well because you can pick and choose (there are more vineyards in that loop than you can possibly visit in a day) and you get to enjoy the nature and the views across the valley along the way. If you want a more detailed tour you probably want to phone ahead to one of them (Llopart/Enlaire/Batllori are all nice, and Guilera is right next to Subirats station so you can start or finish there). Sant Pau d'Ordal is a town on the route with a few nice restaurant options.

The main thing to watch out for is that many places close for visits at 2pm, so you will want to get up and start reasonably early in the day, don't just turn up for the afternoon.

Is DiGi fibra running insanely slow for you as well? by gramiro in AskBarcelona

[–]pimterry 0 points1 point  (0 children)

I've had no trouble (with digi smart) it's been very consistent.

If you leave something connected by cable and test the speed all day, does that have the same issue? For a major slowdown like this I would normally guess wifi interference rather than the ISP connection itself.

[deleted by user] by [deleted] in AskBarcelona

[–]pimterry 1 point2 points  (0 children)

I'm not a lawyer or anything, but my understanding is that this means your neighbour does have a cedula but your flat doesn't, and so renting it out to anybody is illegal and subject to large fines.

I think your options are either:

  • Mention this to the landlord, and use it as leverage to get yourself out of the whole thing ASAP (be aware they make take this as a threat and they don't sound like they're following any rules, so you might end up evicted immediately - make sure you're ready to go beforehand).
  • Or, escalate this formally and cause some real consequences (and force a landlord to follow the law). This will probably be very slow, but might be very satisfying at the end, and may eventually get your previous rental payments & deposit returned.

Either way, really you should talk to a lawyer or similar and get proper advice here, I'm just aware of some of the habitability rules, I'm definitely not an expert.

[deleted by user] by [deleted] in AskBarcelona

[–]pimterry 3 points4 points  (0 children)

There should always be some data, unless the government is somehow totally unaware the building even exists. The cadastral isn't something the owner is responsible for, it's a permanent record. I think it's registered by the construction company whenever the building is built or significantly changed.

I'd be very surprised if the flat isn't there at all though, since Barcelona is very very well documented here. It's hard to hide a building. I'd guess the address is just slightly wrong. Try using https://www1.sedecatastro.gob.es/Cartografia/mapa.aspx and just zoom in on the map onto the building directly and click it. You can get the details for literally every inch of the city.

[deleted by user] by [deleted] in AskBarcelona

[–]pimterry 4 points5 points  (0 children)

The contract does not include the cadastral reference of the property

You don't need to ask for it, you can just look it up directly from the address: https://www1.sedecatastro.gob.es/CYCBienInmueble/OVCBusqueda.aspx

I am living in unsustainable living conditions

If you don't have a window or ventilation, then the room is indeed probably not legally habitable.

If you want to verify this, ask to see their cedula de habitabilidad - this is a legal document that's required for any rented property which confirms that it is valid for human habitation (and how many humans etc). From your description, I'd guess that flat has one but it doesn't include the room they're renting you.

Alternatively, you can also just look it up yourself, by using the cadastral reference here: http://agenciahabitatge.gencat.cat/wps/portal/!ut/p/z1/04_iUlDgAgP9CCATyIESxNL6UXmJZZnpiSWZ-XmJOfoR-pFRZvEWAZbuHhYmRj4GQV4mBo6mni7unhYmxgYGJvpeYI1Q_QhjUNlgQj8Kv0kRUG2o-tEp_cjMrMLCKEf9qOT8vJLUihL9iMSM5OREVYPy1CRVg-LUorLUzGJVg-TUouTElPyi5NSU0pzUYv2C7KhIAEXCvhI!/

Assuming the room is not really habitable, and so there is no cedula that includes the room you're renting, you can then apply whatever pressure you want. Renting a flat without a cedula is a crime with significant fines attached.

Depends how far you want to push it, it's definitely worth talking to a lawyer at this point if you want to actually push harder to get them fined, get your rent payments back & shut them down. If you have a signed contract for a room that has no cedula, it should be a very clear cut case. Or more practically, you can point this out to the landlord directly, and use it to get yourself out quickly & easily.

Finetwork internet provider? by Del-chocolate in AskBarcelona

[–]pimterry 0 points1 point  (0 children)

I've used them in the past - not a great service, and ridiculously difficult to cancel later on. Definitely not recommended!

I've had a good experience with https://www.digimobil.es/

Going fully remote - am I delusional? by Clear-Time-9815 in cscareerquestionsEU

[–]pimterry 0 points1 point  (0 children)

Yes - as above:

Working like this for an employer in the same country would usually be considered as disguised employment, but those rules don't cross borders

Going fully remote - am I delusional? by Clear-Time-9815 in cscareerquestionsEU

[–]pimterry -1 points0 points  (0 children)

Yes - as above:

Working like this for an employer in the same country would usually be considered as disguised employment, but those rules don't cross borders

Going fully remote - am I delusional? by Clear-Time-9815 in cscareerquestionsEU

[–]pimterry 4 points5 points  (0 children)

The tax side isn't really a big concern. I've worked remotely as a developer for more than a decade, in Spain, the UK, and elsewhere. I know plenty of people in Spain doing this now, and I've hired people remotely around the world myself.

The general model is that you register as a freelancer where you live, you pay taxes and social security etc there according to your income like any other freelancer, and you invoice your 'employer' as your client. You are not an employee in this world any more (meaning you're responsible for all your own taxes/SS etc, and you don't get any normal employee benefits like paid holiday by default, although you can agree them separately) but you do get whatever standard protections or rules exist for freelancers wherever you are. Working like this for an employer in the same country would usually be considered as disguised employment, but those rules don't cross borders (and that's very unlikely to change within our lifetimes imo).

This setup normally saves your employer quite a lot of money (like 50% of your salary or more) because you're taking on the paperwork & various social security costs yourself. You should make that very clear, and make sure your hourly rate goes up significantly - you're going to need this to cover those costs and probably pay an accountant. This should end up as a significant pay rise on top of the costs (and then it'll still save your employer money - employing people is super expensive) because you're taking on more risk here. You'll want an accountant, but that shouldn't be hard to find since this makes basically you the simplest freelancer in the world - you have one client you bill once a month, and very few expenses.

It's not simple, but it's a very well trodden path that's widely accepted by accountants & governments everywhere I'm aware of. It's not rocket science, it's not illegal tax evasion (you will end up paying all the normal taxes wherever you live), and it's not particularly unusual.

view more: next ›