• 0 Posts
  • 145 Comments
Joined 1 year ago
cake
Cake day: June 11th, 2023

help-circle
  • You can vote from overseas in whatever location was your last permanent US residence.
    People in DC get to vote for president because a special law was passed giving them electoral votes.

    People in Puerto Rico have a US permeant residence that doesn’t let them vote for president, so they can’t legally vote from a different jurisdiction.
    One of the proposals that’s come up occasionally is to make a similar law for Puerto Rico as we did for DC, but there’s never enough consensus on any plan to go forward, up until relatively recently.


  • if you technically pull people out of poverty by outsourcing to the lowest paying, least labor regulated parts of the world, is the fact that extreme poverty went away in those areas even a good thing?

    Yes. Your prospects of a healthy life increase when going from not being able to provide for yourself to being barely able to provide for yourself by working in fantastically poor conditions.

    If a sweatshop didn’t provide more worker value than extreme poverty, people just wouldn’t work there.

    The bare minimum of improvements is still an improvement, and that we should strive for better than the bare minimum doesn’t make the bare minimum worthless to the people who got it.



  • Depends on the vendor for the specifics. In general, they don’t protect against an attacker who has gained persistent privileged access to the machine, only against theft.
    Since the key either can’t leave the tpm or is useless without it (some tpms have one key that it can never return, and will generate a new key and return it encrypted with it’s internal key. This means you get protection but don’t need to worry about storage on the chip), the attacker needs to remain undetected on the server as long as they want to use it, which is difficult for anyone less sophisticated than an advanced persistent threat.

    The Apple system, to its credit, does a degree of user and application validation to use the keys. Generally good for security, but it makes it so if you want to share a key between users you probably won’t be using the secure enclave.

    Most of the trust checks end up being the tpm proving itself to the remote service that’s checking the service. For example, when you use your phones biometrics to log into a website, part of that handshake is the tpm on the phone proving that it’s made by a company to a spec validated by the standards to be secure in the way it’s claiming.


  • Package signing is used to make sure you only get packages from sources you trust.
    Every Linux distro does it and it’s why if you add a new source for packages you get asked to accept a key signature.

    For a long time, the keys used for signing were just files on disk, and you protected them by protecting the server they were on, but they were technically able to be stolen and used to sign malicious packages.

    Some advanced in chip design and cost reductions later, we now have what is often called a “secure enclave”, “trusted platform module”, or a general provider for a non-exportable key.
    It’s a little chip that holds or manages a cryptographic key such that it can’t (or is exceptionally difficult) to get the signing key off the chip or extract it, making it nearly impossible to steal the key without actually physically stealing the server, which is much easier to prevent by putting it in a room with doors, and impossible to do without detection, making a forged package vastly less likely.

    There are services that exist that provide the infrastructure needed to do this, but they cost money and it takes time and money to build it into your system in a way that’s reliable and doesn’t lock you to a vendor if you ever need to switch for whatever reason.

    So I believe this is valve picking up the bill to move archs package infrastructure security up to the top tier.
    It was fine before, but that upgrade is expensive for a volunteer and donation based project and cheap for a high profile company that might legitimately be worried about their use of arch on physical hardware increasing the threat interest.


  • If you watch the video, he wasn’t using it for anything political. He’s doing low stakes crowd work. He’s chatting with people, gives a guy in a trump hat a signed hat while making some self deprecating jokes and good natured insults to the guy in the trump hat. Definitely makes like he’s going to steal the guys hat, and puts it on for a second for a bigger laugh.

    Optics good, bad, or neutral, it wasn’t a planned “solidarity” thing like the headline makes it sound.

    A better headline would have been “Biden borrows trump hat for laugh at lunch following 9/11 memorial event”







  • So, you’re correct that active emergencies take priority.

    That being said, in essentially every place that has 911, both numbers connect to the same place and the only real difference is pick-up order and default response.
    It’s the emergency number not simply because it’s only for emergencies but because it’s the number that’s the same everywhere that you need to know in the event of an emergency.

    It should be used in any situation where it should be dealt with by someone now, and that someone isn’t you. Finding a serious crime has occurred is an emergency, even if the perpetrator is gone and the situation is stable.
    A dead person, particularly a potential murder, generally needs to be handled quickly.

    It’s also usually better to err on the side of 911, just in case it is an emergency that really needs the fancy features 911 often gives, like location lookups.





  • Yup, I would definitely agree more with what you’re saying here than what I understood from above.
    It definitely takes willpower to lose weight, and you definitely need to learn to identify why you’re eating and break those habits you don’t want, which also takes willpower.
    I would characterize boredom/stress/comfort eating differently than hunger, since there’s the distinction between “want to eat” and “feel hungry”.

    Whatever your reason is for wanting to eat, you need to handle it. If it’s boredom, you can use willpower to push through chips being more interesting than the show you’re watching, ideally by doing something else.
    If you want to eat because you’re hungry, there isn’t a way to handle that beyond eating. So the smart move is to make choices about what and how you eat so that feeling stays away longer, which goes a long way towards helping to break the habit of feeling like you’re “supposed” to eat more often than you need to.

    I think you’re initial comment came across much stronger than I see it is now, and we’re actually very close in terms opinion. :)




  • Precisely. And to be entirely clear: it will always take willpower and motivation to lose weight. Your body is thought to have a sort of target weight that it wants you to be at all else being equal. If it were effortless to maintain a healthy weight, it would be because that’s where your body was pushing you to be.

    The key is not to be stronger than your body, but to work with it. Use your finite supply of willpower on things like “making a healthy shopping list and not deviating from it”.
    Instead of insisting you need to “not be lazy” and always cook a healthy meal at home, be realistic and accept that sometimes you’ll be tired and have a lazy dinner option that’s a better choice than pizza.
    Buy apples instead of Oreos, so that when you feel hungry between meals it isn’t a choice between feeling hungry and eating a sleeve of Oreos, but just eating an apple. You’ll feel more full after the apple than after 20 times more calories in Oreos. If you choose to be hungry, you’ll be aware of being hungry and food in general until you eat, which will likely either make you fail hard, or eat more at the next meal because food is more appealing when you’re hungry.
    It can also take a lot of motivation to work through which desires to eat are hunger, which are boredom and which are, of all things, thirst. Eating is a source of dopamine, and so if you’re bored “food” is an easy source of entertainment (your body is so dumb that just chewing is often enough for it, hence “gum” is pleasant). Sometimes your body asks for sugar when what it needs is water.

    “You” don’t control what “you” want, you just get to figure out how to get it. A deeper, vastly stupider, part just shouts vague demands you get to act on. “WATER. FOOD. <GENDER> SEX. SLEEP. SCARED. BORED.” it doesn’t stop shouting if you ignore it. So use your willpower to give it what it wants in the healthier but more difficult way, and to make doing so a habit that it won’t veto.

    And that’s before you get to things that need a medical intervention in addition to behavioral.
    If your pancreas or hypothalamus have decided to be shits, there’s absolutely no amount of willpower that can regulate things.