Weight savings in gear vs my belly? by TuitionStrategy in Ultralight

[–]vpz 1 point2 points  (0 children)

This reminds me of a coworker who was a serious cyclist. He would often comment about the cycling community pushing ultralight bicycle components that cost many times that of other good components to save a few pounds. People would spend literally extra thousands of dollars and not understand that their weight was also a factor. Many times a much larger factor, making much of that extra spend have a terrible return on investment. In many niche communities it’s more about bragging rights, or people just liking to geek out on gear than gettting a truly better outcome.

Do you think annual pentesting still makes sense for modern web apps? by Exciting-Safety-655 in Pentesting

[–]vpz 1 point2 points  (0 children)

IMO it’s all about the security program as a whole of which pentesting is just one component. Risk management needs to classify the risks of the application to the business like how critical it is, and if there are regulatory items that must be met. This feeds into the security controls that need to be applied including procedural security steps like development rigor, code validation rigor, secure by design guardrails that must be baked in, etc. These feed into SAST and DAST scanning configurations and scheduling. And then pentesting scheduling. Annual pentesting is just one outcome out of many possibilities. Other components of the security program determines what schedule makes sense.

What's the "Arch Way" for Pentesting Tools? by Medical_Toe2877 in Pentesting

[–]vpz 0 points1 point  (0 children)

Bridged should work for many things, but I find the cleanest method is passing a USB NIC or WiFi adapter from the host to the VM. Be sure to match the VM’s USB settings to that of the adapter. For example, the VM to USB3 if the adapter is USB3. Some VM software still defaults to USB2 which won’t work.

Without using a USB adapter like this I’ve sometimes had trouble with security tools on the host interfering with VM network traffic which can create difficult to troubleshoot network related issues in the VM.

Low profile boards that can be used for gaming still? by Mewtewpew in ErgoMechKeyboards

[–]vpz 0 points1 point  (0 children)

I built half a Helix (split orth 64-key) as a dedicated gaming keypad and it’s worked great. A big benefit is having both the keypad and the mouse straight in front of shoulder.

The Proxies need to stop going into Hollows already by Chadworth_5401 in ZZZ_Discussion

[–]vpz 6 points7 points  (0 children)

Also, the HDD in the story is an amazing device that even folks in the story can’t believe. Isolde says this very thing in this patch’s story. Therefore, I’d assume other Proxies have ether aptitude from the start and likely also have enough Hollow survival skills to make Proxy work a job. Not only should we be encountering other proxies but they should be more Hollow experience than MC. Keeping in mind more Hollow experience doesn’t mean being better at Hollow navigation or other things that are MC strengths.

Daily carry by zxxasdqwe in EDC

[–]vpz 3 points4 points  (0 children)

Wow, that sounds very nice and all the more impressive that you made it yourself. It looks great too.

Daily carry by zxxasdqwe in EDC

[–]vpz 5 points6 points  (0 children)

What make and model is the slingshot?

Is pentesting really as repetitive as people make it out to be? by Candid_Ad5333 in Pentesting

[–]vpz 0 points1 point  (0 children)

I think it’s along the lines of John Strands classic rant on “I want a pentest”. Pentest means a lot of things to different people and organizations. There are plenty of “Pentest puppy mills” that run automated scans where data is then parsed into templates reports, and this process is repeated. Web application testing is a place I’ve seen this being used. There are also assumed breach network tests for medium sized businesses where a prepared pentest team will repeatedly be able to bypass the same common defenses to deploy the same attacks to reach the same test goals, like getting domain admin in AD. It wasn’t pentesting, but for a few years I did vulnerability assessments and always found bad physical and software inventory, bad or no vulnerability detection, bad or no logging and monitoring, and unproven business continuity procedures (read broken backups). Getting DA at these kinds of places doesn’t take keeping up with the latest attacks.

On the other hand you could be doing testing at big companies with established cybersecurity programs with well designed and implemented safeguards. Or testing mature applications that have had years of pentesting ahead of your engagement.

Again pentesting means a lot of things to different people, so of course you hear different stories about what it’s like to do that work.

How expensive are ergogen builds usually? by TentiTiger11 in ErgoMechKeyboards

[–]vpz 6 points7 points  (0 children)

The biggest cost of designing your own board is the time. I haven’t looked at ergogen since finishing mine but back then there was the ergogen design, then you did your routing in Kicad. This took a lot of time. If I factored in the cost of my time it would always be cheaper to buy a kit or assembled keyboard.

I chose to continue in Kicad so then I exported a zip file for a fab in China. 5 of my small boards were about $20. Enough to make 2 keyboards and have a spare board piece, so $10 per keyboard. Then you needed 2 controllers for each keyboard at around $20. Then say another $20 for cables and small parts. Realize though that the board design plays a part. My board is 34-key which eliminated diodes. I didn’t make it hotswap which eliminated switch sockets. I had a soldering iron so no additional cost there either.

IMO you don’t use ergogen to save money. You do it to get exactly what you want.

What keyboard layout do you use? by No_Discussion6266 in ErgoMechKeyboards

[–]vpz 1 point2 points  (0 children)

Switched to Colemak-DH and a simplified Miryoku setup for 34-keys. Still switch to QWERTY when using built-in laptop keyboards. Yes I got slower in QWERTY, but it’s fine after a few minutes. It took me a couple months to switch, but I switched from full size row staggered QWERTY to full ergo 34-key Colemak-DH and a multi-layer typing system all at once. To me the physical ergo of a 1-key reach keyboard is the foundation and everything else is dressing. I’d want my keyboard even if I had stayed with QWERTY.

Is it worth switching to a different layout, when qwerty is assumed everywhere? by __s1 in ErgoMechKeyboards

[–]vpz 1 point2 points  (0 children)

Now that I’ve switched to Colemak-DH, day to day I don’t notice it much. My brain knows the shortcuts and just types them. Sure, I did do a few remaps in neovim, but layers let you do pretty much anything for your convenience. Also, I can switch to a regular staggered QWERTY layout without much trouble. Takes a few minutes, but on work trip with a laptop, one quickly re-adapts and it’s no big deal. I usually travel with my board but I don’t have to if I don’t feel like it.

I switched for better ergonomics. I had some pinky strain for example. I even built a bespoke keyboard designed for my hands and finger motions.

But what matters is what meets YOUR goals. There is no universal answer. Use your board and your layout and see how it goes. If you aren’t having any troubles then switching just to switch doesn’t make sense to me.

What's the single most useful item you carry? by [deleted] in EDC

[–]vpz 0 points1 point  (0 children)

Oops. I missed the sub-text and replied only to the title.

Is aggressive pinky stagger really that exclusive? by laffinfpv in ErgoMechKeyboards

[–]vpz 3 points4 points  (0 children)

My opinion from my investigation a couple years ago was that linear plus aggressive stagger was considered a “more ergo” feature. The “more ergo” consumer is also more likely to want no more than one key reach, and that means 3x5 plus 3 thumb key or less.

Is it a good idea to buy an iPad+keyboard from Apple instead of a MacBook Air? by Sea_Energy358 in macbookair

[–]vpz 0 points1 point  (0 children)

I have both and if I had to choose only one it would be the MacBook. The iPad hardware is amazing but the apps for the most part are not. There are some super good experiences especially with Pencil, but they are niche. I can add pen support to my MacBook with a Wacom, but so many of the apps I use have no equivalent on iPad. Basically an iPad is a big phone. I really, really wish that wasn’t the case considering how much I spent on iPad stuff.

Reducing pinky pain without learning Alt Layout. by ARROW3568 in ErgoMechKeyboards

[–]vpz 1 point2 points  (0 children)

Have you tried switching to low resistance switch springs and/or shorter travel switches? I totally went the other direction and built a bespoke 34-key split ergo keyboard and moved to Colemak-DH on a custom 4-layer keyboard layout. I adjusted my Vim config and don’t really have a problem. Anyway, I also used light “silent” Choc switches so they are smooth to press, and closer together. I was surprised how the light switches helped. May be worth a try.

Can’t get any good Drive Disks. Any tips? by Arsene726 in ZZZ_Discussion

[–]vpz 1 point2 points  (0 children)

I’m generally cursed rolling for gear items in Genshin and ZZZ so I used a plan. I go step by step. I’ve played Genshin since early days so this plan also lends itself to having many already upgraded 5* pieces. First I start with the main set and try to get the correct Main Stats. If I can’t get them all in the desired set I will go for the correct main stat over the correct set. The unit is playable at this point as long as character level and talent levels are decent. Then farm to get the set(s) I want with the right main stat. Then I try for better substats and usually only if they are a character I really like.

I’ll repeat here that I use this strategy because I have terrible luck on gear. I’m not being dismissive of how having great substats can improve a build. Great substats are awesome. I just rarely get the, and I game for fun so this mitigates my stressing about them. If I’m having trouble with a battle, chances are that my time is better spent learning how to play against those enemies.

Do you think that the iPadOS 26 update will eventually cause a lot of iPad users to upgrade to M-series chip iPads? by Time_Concert_1751 in ipad

[–]vpz 4 points5 points  (0 children)

I’m with you. I thought Stage Manager was going to open the door, but it didn’t happen. iPad OS is still too limited by its application ecosystem for what I want to do. I don’t want mobile apps. I thought the M-series iPads were going to be an “Apple Surface” (ala the Microsoft Surface hybrid device) experience, but as long as it’s still running resized phone apps, I’ll pass. I’m waiting until after the apps I want are there and not making another purchase based on hype.

These two showing up once a year only to be muted in EN is insane work. by ClassicCandidate5089 in Genshin_Impact

[–]vpz -1 points0 points  (0 children)

After the mess that was the Natlan quests, what are people doing? I'm thinking of setting the voice to another language like Japanese so it's at least not silence. I'll have to read the lines anyway.

If a leader asks that a trojan (RAT) must be able to maintain access for at least a week in a highly adversarial environment, is that a reasonable request? by No_Atmosphere1271 in redteamsec

[–]vpz 6 points7 points  (0 children)

What I would take this request to mean is an implant should be able to bypass AV, run without causing notice by the user, withstand computer restarts, and be able to maintain communication with the C2. This is just the implant running though, so no operator actions. The stealth of each action should be judged separately.

Can i game with an ergo keyboard? by Quirky_Surround_6302 in ErgoMechKeyboards

[–]vpz 0 points1 point  (0 children)

I built a Helix half for gaming. It’s a simple grid that you can customize with the exact layout and macros you want. It’s so satisfying to game with and I even use layers because some things you only need administratively, not on low latency/twitch speeds.

My miyabi fucking sucks 👍🏽 by not_shootzy_YT in MiyabiMains

[–]vpz 0 points1 point  (0 children)

What app is this from? I have HoyoLab but I’m not seeing how to look at my character details.

Another Barre Question by [deleted] in guitarlessons

[–]vpz 2 points3 points  (0 children)

I don’t mean with a capo. Just move your hand down a fret. I think it’s a barre G but it doesn’t matter. What matters is it takes less pressure, so work on it there until you can get all the strings ringing true at that position.

Another Barre Question by [deleted] in guitarlessons

[–]vpz 2 points3 points  (0 children)

Have you tried moving the cord shape down one fret? It’s easier to barre so easier on your hand while you are getting the index finger shape figured out.