Fushuan [he/him]

Huh?

  • 0 Posts
  • 150 Comments
Joined 1 year ago
cake
Cake day: July 1st, 2023

help-circle
  • Yeah elden ring SotA, I finished all the bosses and all the content but 1 optional boss on saturday, and the last boss yesterday. Good dlc but the balancing is kinda whacky and is has the typical complainers about difficulty, the typical defenders that have not finished the dlc, and then people that have done all bosses that know that the last boss is the most overtuned piece of shit to be ever crafted in ER. The other optional hard boss (bottom right) is also kinda stupid but it’s optional and it does give you SOME breathing room, but the last one is just completely un enjoyable.



  • Shared poibters are used while multithreading, imagine that you have a process controller that starts and manages several threads which then run their own processes.

    Some workflows might demand that an object is instantiated from the controller and then shared with one or several processes, or one of the processes might create the object and then send it back via callback, which then might get sent to several other processes.

    If you do this with a race pointer, you might end in in a race condition of when to free that pointer and you will end up creating some sort of controller or wrapper around the pointer to manage which process is us8ng the object and when is time to free it. That’s a shared pointer, they made the wrapper for you. It manages an internal counter for every instance of the pointer and when that instance goes out of scope the counter goes down, when it reaches zero it gets deleted.

    A unique pointer is for when, for whatever reason, you want processes to have exclusive access to the object. You might be interested in having the security that only a single process is interacting with the object because it doesn’t process well being manipulated from several processes at once. With a raw pointer you would need to code a wrapper that ensures ownership of the pointer and ways to transfer it so that you know which process has access to it at every moment.

    In the example project I mentioned we used both shared and unique pointers, and that was in the first year of the job where I worked with c++. How was your job for you not to see the point of smart pointers after 7 years? All single threaded programs? Maybe you use some framework that makes the abstractions for you like Qt?

    I hope these examples and explanations helped you see valid use cases.



  • I think that it’s about intolerance, some people are using a term in the intended non-slur manner, and others are intolerant about that rational desire. Even tolerant people shouldn’t torerate intolerance, so no, being pissed about people telling them to stop using the term in the intended non-slur way is not toxic.

    If that really hurts you, it’s a you thing. It’s not intentional, the meaning isn’t derived from the slur, it’s not a micro aggression. You won’t like the answer, but toughen up.


  • Because that’s like saying that “negro” is a slur when it’s being used in a Spanish textbook. No it’s a fucking color. Context is important and rewriting other languages because it seems hurtful in yours is super toxic.

    Master means supreme, master piece, the supreme piece, master ball, supreme ball, master key, the supreme key. It was used in slavery because the master was the supreme entity for the slaves, in a bad way. One specific use of a word doesn’t and shouldn’t cover the inherent meaning of it and as a consequence all of its uses.

    Tbh, I don’t care which name is used for the supreme branch, be it main or master because my team usually renames them to prod/uat/dev and branches as feature_etc, but saying that others are using racial slurs because they are using the old default that makes perfect sense is toxic.


  • oh, yeah I’ve read and heard of plenty people saying that they definitely notice it. I’m lucky enough not to because most ARPGs don’t run 60FPS on intense combat, let alone 120 fps on a rtx3080 lmao.

    I was talking more about the jump from 240 and beyond, which I find surprising for people to notice the upgrade on intense gaming encounters, not while calmly checking or testing. I guess that there’s people who do notice, but again, running games on such high tick rate is very expensive for the gpu and a waste most of the time.

    I’m just kinda butthurt that people feel like screens below 120 are bad, when most games I play hardly run 60 fps smooth, because the market will follow and in some years we will hardly have what I consider normal monitors, and the cards will just eat way more electricity for very small gains.




  • on a similar topic, I recently upgraded my screen from two 24’’ 1080x60 to 24’’ 1080x144 & 27’’ 1080x120. I barely tell the difference but my card sure does, I quickly limited the refresh rate of both to 60 because I it’s pointless and I’ve read too many people saying that once you go 120+ it feels bad watching 60, and I really don’t want to get used to something that just makes me spend more electricity for nothing.

    If you enjoy stuff fine in FullHD, don’t bother increasing the resolution. As others have explained, there are other things to upgrade before going for resolution that will have a bigger impact on the image. That said, purchasing a good screen that happens to have 2K or anything higher than 1080 is no big deal, just set your resolution to whatever you want from software and be done with it.


  • But… PAKE is used as a method for ongoing exchange of messages, you wouldnt avoid using a password when authenticating, which is the whole point of this debacle.

    In really don’t see it that complex, in my last job IT installed a passkey in my laptop, which then Microsoft used to login and thorough its SSO, I just stopped using passwords altogether after logging into my PC itself. This is way more secure for the average Joe than having 5 postists with passwords pasted in the sides of the monitors. Yes this is way more common then you think, there’s a reason passwords need to be rotated all the freaking time.

    Once rolled out, workers didn’t have to do anything to authenticate, as long as they were using the work laptop the company assumed that the used was the one using it, since the laptop was registered to the user, and it was way more comfortable.

    It’s not really that hard to explain to people. Sending passwords is insecure because if an attacker gets the password, you lost. With passkeys, once you set it up, google/microsoft/pepapig.com will send a request to authenticate to your phone, where you will just say “yes” and they will talk with each other to give you access. If an attacker gets hold of that message, it doesn’t get anything of value because each time pepwpig.com and your phone talk with each other, they say different stuff and the attacker would just have yesterday’s responses, so they lose.

    Old people won’t adopt it unless forced, just like they adopted special passwords by adding 1 and * to whatever stupid word they use and writing it next to their work monitor, in the office. They just won’t. Either IT automates everything for them or anything we develop will get completely bypassed.


  • It’s like the initial authentication, where server and clientnexchange a symmetrical key with their asymmetrical keys. The difference is that in that exchange the server and the client meet for the first time whereas the point of pass keys is that once when you were already authenticated, you validated the device or whatever will hold the private key as a valid source, so then when the authentication code gets exchanged, both ends can verify that the other end is who they tell is, and both can verify the other end as valid, and thus that exchange authenticates you because you, in the past, while authenticated, trusted that device as valid.

    Technically, yeah, it’s an asymmetrical key exchange. Iirc the server sends you a signed certificate and you need to unencrypt itnwithbtheir public key and sign it with your private key, so they can the getnit back and ensure that it was you who signed it, using your public key to check the validity of whatever was sent.

    I don’t know enough to be 100% corrextbon the details, but the idea is that it’s an interaction between asymmetrical keys.

    Soporta like how we use keysbto authenticate through github through SSL, but with an extra level of security where the server validates a key in a single endpoint, not wherever that private key would be held (like with SSL)


  • I’m going to get technical. A registered passkey is basically your phone or whatever holding a private key and the server holding the public one. When you want to log in, you enter the username on the service, which contacts wherever you registered it, and asks for a verification. Then, the device creates a nonce, which is a random number to be used once (NumberONCE), and a copy of that number encrypted with the private key. Then, the service can unencrypt the piece and check that the value is the same as the unencrypted value. This process is called a digital signature, it’s a way for online processes to verify the sender of whatever.

    This way, the server knows that whoever is trying to authenticate is doing it from the authorised device. The difference between sending a signed nonce and a password, is that is someone steals the signed nonce they get nothing, since usually that number gets registered somewhere so it’s not valid again or something, it’s not exactly as explained but the point is that whatever is sent can’t be sent again. Something like a timestamp in milliseconds where it will be obvious that the signature would have expired. If an attacker captures the authentication attempt, with passwords they get the actual password and can the use it again whenever, while with nonces, they can’t.

    Iirc, the server sends the device a code and the device must send the signed code back, so the service knows that the one trying to authenticate is the device. No need for passwords.

    Now, if you need to authenticate to gain access to that private key, that’s of course an attack vector, so if you want any kind of syncronisation of passkeys, you need to make sure that you don’t need to send a password to get the pkeys. I use bitwarden, and unless I misunderstood, you don’t authenticate against the bitwarden server, when you access your vault they actually give you you the encrypted data, which you then unencrypt with the password locally on the browser. I’ll have to double checknon this because I have a 2fa on that for extra measure butidk how it actually works. My plan for the future is to actually use a yubikey to authenticate against bitwarden, following the same logic explained above, to then gain access to a bigger pool of passkeys. This way, ultimately all access is protected with my physical key which I can connect to most devices I use, and I can, with NFC use the key to authenticate the android bitwarden app, so it should be completely usable.

    In any case, passkeys are better than passwords, provided toy don’t store them in a less secure place. As we all know, the security level of a system is the security level of its weakest cog.


  • I agree, honestly. I also like specifications, but I don’t like the game to be inaccurately specified. I feel that it’s better if an umbrella term is used in the title instead of a more specific fake one, and then a short description describes how the game is played or what kind of experience I should expect in several words, instead of a single term. That, alongside screenshots, let’s plays, and all sort of resources are plenty help to decide if I should buy a game or not.

    RPG is used for games where you take the role of a character, and it should somewhat tell the story of either the character or the world around it. That alone differentiates some games from others like rocket league or fifa, where there’s no story, you don’t take the role of nobody that matters, what matters is the gameplay.

    Hack&slash was a term used for games where you killed tons of monsters with weapons, and then Diablo started using the ARPG term to say that besides killing tons of monsters, you also get to enjoy a story in a particular ambiance. Dark Souls games also fit the description where it’s more about the action than reading, but feel like a completely different genre, right? no isometric, itemisation is vastly different, the gameplay loop is completely different… This is why just reading ARPG means nothing to me nowadays, I have to dig into the description anyway.

    Another example, is “Ys origins” an ARPG or a JRPG? both? It has fast paced combat where you kill tons of mobs and a story, but it has a very japanese style, however, JRPGs are being known for having to manage a party and usually turn based combat, sooo? idk, a 3 line paragraph and 3 5 second clips would be much better than just a term for me.

    Sorry for the late response btw, I just forgot lol.





  • You say even more, as if it was comical to begin with. But yeah, it’s annoying sometimes but I’m not dropping 1k for a new GPU anytime soon, I’ll have to suffice with the one I have. Yeah I do update them weekly almost, every time I do yay there’s a new driver version, it updates and it works. No major issues besides the explicit sync but that’s being fixed soon and I installed a patch so yeah.

    For sure I spent more time customising it than I did in windows, but that’s kind of the point isn’t it? Linux is about that, windows is not supposed to be. I don’t mind spending time customising and tinkering if I know that a megacorp isn’t taking my data. That was the trade-off, data and money for convenience. Now that convenience has been reduced and the data has increased, it’s not worth it for me anymore.

    So yeah, with windows you need to work against the system, disabling stuff that they intend to ship that is harmful, while on Linux you work with the system, tinkering and customising stuff the way you like it, with the defaults being a community thing, not a megacorp thing.


  • Cool, as stated though, I would have persevered if it wasn’t for the vertical taskbar being removed. Oh you can’t have the main taskbar only be shown in the secondary monitor either. Look, I get that they are implementing features and apps are adapting and all that, but these features missing make it feel like a regression, alongside weird interactions with sound volumes I’m having in my work laptop where even if I change the volume, it gets lowered again and I have disabled all the features that let apps take control, dunno.

    I’m a developer, I get that beginnings are kinda rocky, but that’s what I expect from a FOSS product, not a paid one. Is it weird that I feel that it’s unreasonable to get out of beta with all these kind of issues? To suggest very aggressively to upgrade? Specially when the upgrade was free for all the win10 users? It’s not like they had a big monetary incentive to push the release forward.

    Win10 might have had tons of security holes and the cortana stuff, but it was really configurable, you could format the start menu as the win8 panel, as the simple win7 panel, or as the hybrid win10 panel natively, you could move the taskbar to wherever you wanted, across multiple screens, configure it as you liked natively. Now you need to install 3rd party stuff to emulate half baked imitations of those features, and if security holes appear in those products microsoft won’t fix them. Win 11 feels way too restrictive, in a way that I feel like it takes a lot of decisions not for me, but from me, and I really dislike that.

    Yeah, I know that the win10 panels can be re-enabled through the registry, but until how long will they be patched? They are clearly deprecated.

    Anyway, sorry for the rambling, I’m happy that you like the product.


  • For your first two points, I’m kinda against having to fight against the system, at that point I prefer to work alongside the system with Linux, but W/E. In any case, I would have fixed these if the taskbar wasn’t impossible. No I’m not going to install a 3rd party program to fix the taskbar.

    About the 4 monitors, it’s cool that you like having 4 taskbars, wasting tons of space. I don’t. I’m not asking that, I’m asking having a single taskbar vertically. It’s one of the big complaints I’ve read about win11, not being able to have vertical taskbars on the side of the monitor.

    I’ve not seen a way to remove the “recommended” space in the start menu, and I’m sorry but any recommendation I didn’t agree with is an ad. You might think otherwise, and that’s cool, but I don’t like ads in products I pay.

    That last sentence wasn’t very nice, especially considering that you didn’t understand one of the complaints (the taskbar thing).

    Anyway, happy that you are enjoying win11 and I wish I was, but yeah, I don’t fancy paying for less features.