Yes, it was a stroke of genius to label their mediocre confectionery as “coffee”, although it can lead to near fatalities when someone who’s only ever had Starbucks encounters real coffee for the first time.

Still, my point stands. That website is like 20% useful content, 40% flair, and 40% wasted space.

That website is atrocious. It’s the web design equivalent of shoving five kilograms of sugar and whipped cream in a cup of coffee.

I might be able to snag that same model with an i5-6500 for around 60€. Could you tell me more about your experience with it? In particular, how are the thermals and the power consumption, can it handle 1Gb/s on both ethernet ports, and have you encountered any compatibility issues with OPNsense?

Why choose just one? https://www.youtube.com/watch?v=mghhLqu31cQ

Since your last post here, a new rule has been introduced. You must disclose AI usage in both the title and in the post body.

Four… Fucking… Pixels?

The working hypothesis is that this was some sort of debug or test key that was never meant to be used in production, being used in production.

The encryption that SSL/TLS provides (that puts the “secure” in HTTPS) uses a public–private key pair and a specific mathematical function. Generating the key pair requires a cryptographically secure random number that is impossible or very difficult to guess, which must be kept secret at all times. If this random number is leaked or guessed by a malicious actor, the private key can be reconstructed and used to impersonate a website or break the encryption.

The security of the encryption comes from the fact that the function is easy to calculate one way, but difficult to calculate its inverse. To demonstrate: multiplying the prime numbers 88117 and 44543 is easy, but the inverse, factorizing the semiprime 3924995531, is extremely lengthy in comparison.

One of the factors that determine the security of the key is the size of the number, i.e. the number of digits. In this case, a proper key should’ve had a length of 384 bits (or 116 decimal digits). In reality, the keys that eMudhra used had eight bits, which can only represent 256 possible values, and can be easily guessed even by brute force. The specific private keys were the numbers 4, 56, 66, 115, 155, 156, 230, and 237.

Currently having a very fun day at work.

Fortunately our own certificates are unaffected, but it’s the autumn break and most of the staff are absent and incommunicado.

No, we were taught about HTTP, the fundamentals of hypertext and how it gets rendered, how embedded code (Flash at the time; yes, I’m old) runs in the browser, and the concept of the digital footprint. The cybersecurity implications were obvious.

Actually, I have to correct myself. Some of this was taught in the 7th or 8th year of primary school, around ages 12-14. I was fortunate to be born in a country, at the right time, where the public education system was still worth something. My heart bleeds when I hear of what goes on across the ocean.

Not me. Call me old-fashioned, but I prefer organic.

Literally none of that should be surprising for people who have a basic understanding of how the WWW works.

Which, I’m starting to realize, is a depressively low fraction of the general population. I was taught this in middle school, for fuck’s sake.

They removed almost every basic networking feature with a firmware update. Even in “expert mode”, all I can do is set up the wifi and pick a single /24 network from 192.168.0.0/16. I can’t even pick a goddamn DNS server. Unfortunately the other ISPs that serve my area are at least twice as expensive.

One obstacle you might encounter is carrier-grade NAT or CGNAT. Some ISPs put residential subscribers behind an additional layer of IPv4 NAT, which makes your public address inaccessible from the internet. In that case, you’ll either need Tailscale or a similar service, or a VPS to act as a relay.

Then there’s Vodafone who have unilaterally removed both the port-forward feature and bridge mode from their residential cable modems, and I hate them, and wish them a hammer to balls.

i3-4160 running Proxmox (OPNSense VM and a couple of containers) with 3 spinny drives and no GPU, TP-Link 8x GbE switch, ASUS AX1800 as a Wifi AP, ISP’s own manky cable modem, plus a UPS eats about 66-72 watts at the wall socket. If I install a passively cooled GT-710 for transcoding, it adds 10-15 watts at idle.

Removed by mod

you’re conflating me with the author of Cliparr

My mistake, I’ve edited the comment to reflect this. Although I don’t understand, then, why you even brought Cliparr up. You’re not involved, and only taking offence on someone else’s behalf.

That also means that the lovely message of “Ipso facto, for all the AI “Akshually” pedants, I’ve tagged this as AIP. Politely go fuck yourselves :)” was precipitated by a single negative interaction and a handful of downvotes. Regardless of linguistic and cultural differences, that’s just being a dick, and it should be pointed out. Perhaps you should reexamine how you handle criticism.

I don’t see how you were “dunked on”. There was one (1) person who went farther than voicing legitimate concerns… and then you were a twat and a half about it in the edited post. “Politely go fuck yourself” with a smile is worth a downvote.

Developers have been getting criticism for using particular tools for decades. For using Electron, for using systemd, for developing in Rust, for not developing in Rust, for using GTK or Qt… but when LLMs get involved, it’s suddenly verboten and you get to take some reductive moral high ground because “it’s just a tool”?

(edit) Just to answer the actual question:

• If you don’t need to use AI, don’t. Messy, undocumented, human-authored code deserves more respect than clean code with dubious authorship.
• Show how the sausage is made. Don’t just push your project as a single squashed commit; it makes you look like you have something to hide. (edit 2) If a commit contains AI-generated anything, mark it as such.
• Again, don’t be a twat when you inevitably get pushback. As a developer of supposedly 25 years, you should be familiar with that of no particular renown, you should learn how to handle it gracefully before a reputation develops around you.

This will have dire consequences for the trout population.

All of the alternatives eventually run into the same “Will my banking app work on it?” problem. The absence of a healthy app economy is the one thing that can’t be fixed by throwing software engineers at it, and it is what caused the death of Windows Phone.

Our business-critical internal software suite was written in Pascal as a temporary solution and has been unmaintained for almost 20 years. It transmits cleartext usernames and passwords as the URI components of GET requests. They also use a single decade-old Excel file to store vital statistics. A key part of the workflow involves an Excel file with a macro that processes an HTML document from the clipboard.

I offered them a better solution, which was rejected because the downtime and the minimal training would be more costly than working around the current issues.