@ljrk@todon.eu
@ljrk@todon.eu avatar

ljrk

@ljrk@todon.eu

gecos/CN: Leonard/Janis R. König
SAN: ElleJay (lj), Janis, Leo

content:

  • Commentary on world and German politics
  • Teaching and related politics
  • Rants about bad typography (& occasional praise)
  • Linux/LaTeX/GNOME/whatever-editor-I-currently-try-using
  • IT Security & Reversing
  • Climate change and anti-car policies
  • The Gender™

Opinions my own.

pfp: me, red lipstick, red foxy cat ears, brown hair tucked into a blue-grey shawl, silver feather earrings.
banner: photo of various hacker & related stickers

JMT: https://justmytoots.com/@ljrk@todon.eu

This profile is from a federated server and may be incomplete. Browse more on the original instance.

ljrk, to random
@ljrk@todon.eu avatar

Mir hat's gereicht und jetzt mich endlich auf https://weg.li registriert um Falschparkende zu melden. Hier bei mir um die Ecke gibt es einige richtig gefährliche Kreuzungen wo ich noch zusätzlich oft durch scheiß Autos dazu gezwungen werde komplett auf der Mitte der Straße zu warten(!)

Registrierung war einfach und die Website sieht nicht schick aus, tut's aber. So muss das. Auf dass das Blech bald in Flammen steht.

ljrk, to random
@ljrk@todon.eu avatar

Well, that's some terrible customer support at

ljrk, to macos
@ljrk@todon.eu avatar

Hello everyone, so at my new job I'll get a MacBook snd until supports the security processor I will be a good girl and use . For someone coming from a setup mixing , / , even some and does weird stuff with sometimes: Are there some general recommendations from other exiles (I use vanilla nowadays mostly, so maybe not too much lol?)

I currently plan to use the mac as mostly a shiny looking physical terminal + some vscode/vi, that should be mostly trivial. As such I'm mostly worried about things like a proper keyboard layout (I use us altgr-intl, caps mapped to ctrl, tab to esc).

Otherwise I'm thinking of grabbing and activating Lockdown Mode. I've seen nix-home and will try setting that up for day-to-day tasks/tools.

Coming from Evolution, is Apple Mail decent? Any other "classic" GNOME tool I'd miss? Currently looking for trustworthy replacements for Nick's YT downloader, Warp (Wormhole GUI), Frog (OCR tool), Obfuscate (picture obfuscator/censoring tool), Characters (searching through Unicode symbols/emoji). Anything else I may take for granted but is different? ¹

¹ I already know the cli differences w.r.t. bsd based tools, but my personal scripts are mostly posix/ksh8x compliant anyway :D

ljrk, (edited ) to random
@ljrk@todon.eu avatar

Hmm, dear bubble, I'm currently at my wits end when using in . My goal is to insert a background image (but on the first/title slide only). Further, however, the image should basically be bottom-aligned:

\documentclass{beamer}  
\usepackage{graphicx}  
\begin{document}  
{  
\setbeamertemplate{background}{  
 \vfill  
 \includegraphics[width=\paperwidth]{example-image-a.jpg}  
}  
\begin{frame}  
hello world  
\end{frame}  
}  
\end{document}  

However using vfill, vskip etc. yields

! Missing } inserted.  
<inserted text>   
}  
l.13 \end{frame}  

Any ideas?

ljrk, to random
@ljrk@todon.eu avatar

Wenn ich mir die Argumente gegen Masken bei lese... dann wird da immer so von krassen Einschränkungen geredet. Und ich bin grad schon etwas irritiert, was jetzt plötzlich sooo schlimm dran sein soll?

ljrk, to random
@ljrk@todon.eu avatar

I HATE

/usr/lib/mono/msbuild/Current/bin/NuGet.targets(131,5): error : 'base-devel' is not a valid version string. [/path/to/my.sln]  
/usr/lib/mono/msbuild/Current/bin/NuGet.targets(131,5): error : Parameter name: value [/path/to/mysln]  
Done Building Project "/path/to/my.sln" (Restore target(s)) -- FAILED.

Guess which file does not contain the string 'base-devel' nor does any file in the whole directory? Hmmmmm?

ljrk, to programming
@ljrk@todon.eu avatar

Coding in again (need to, SDK to $service only available in JS) and I'm frequently using to look up what kind of function I'd use in (foldMap, unzipWith, ...) and then looking for JS packages that implement them.

Am I doing this right?

ljrk, to GNOME
@ljrk@todon.eu avatar

For anyone else configuring Ctrl at the position where on IBM keyboards Capslock is, just like God^WSun intended, on you can use tools in Keyboard & Mouse, Caps Lock behavior and select Make Caps Lock an additional Ctrl. Similar methods work on different compositors as well, as everybody uses xkb in the backend AFAIK.

This is not only useful to users but also /, since that's also the position where it was on Bill Joy's keyboard, when he invented vi. Esc was where nowadays Tab is, however, remapping this is painful since Tab is very useful outside of vi. But using Ctrl+[ for Esc works wonders, so you don't need to reach up there. Of course, also use Ctrl+T and Ctrl+D for (un-)indentation in insert mode.

I also set Ctrl position to Left Ctrl as Meta which basically just gives me a huge two-button Meta key :-p

It also inhibits me from accidentally triggering caps lock from re-training. I'd love to actually just completely "disable" that button (combining "Caps Lock is disabled" with "Swap Ctrl and Caps Lock" does not achieve that :|)

ljrk, to random
@ljrk@todon.eu avatar

So, does anyone know how to contact when for some reason their simply... doesn't list my domain anymore? Others do and my authoritative DNS does as well.

ljrk, to macos
@ljrk@todon.eu avatar

So allows switching between windows of the same application (e.g., two instances of Firefox) using Command+Backtick. Except when the other window is on a separate Workspace.

Okay, so let's switch to the workspace of that window, and then switch between applications using Command+Tab to get the window in question. Except macOS then switches to "the" workspace of "the" application. Which is odd, because the workspace I was on had a window of said application.

Basically impossible to switch to that window using keyboard shortcuts.

Why ? Why is your so freakin' terrible?

ljrk, to random
@ljrk@todon.eu avatar

TIL, the German #Datev uses #IBM #zOS for paycheck #PDF generation. PDFs are generated through PDFlib by the Munich based company of the same name:

PDF producer: PDFlib+PDI 9.0.4-m (zSeries z/OS)

The API ref is promising some fun:
"For use with C, C++, Cobol, COM, Java, .NET, Objective-C, Perl, PHP, Python, REALbasic/Xojo, RPG, Ruby"
(https://www.pdflib.com/fileadmin/pdflib/pdf/manuals/PDFlib-9.0.4-API-reference.pdf)

As well as:
"PDFlib is available on a variety of platforms, including Unix,
Windows, OS X, and EBCDIC-based systems such as IBM i5/iSeries and zSeries."
(https://www.pdflib.com/fileadmin/pdflib/pdf/manuals/PDFlib-9.0.4-tutorial.pdf)

And since IBM #zSeries does everything in #EBCDIC, this, of course is also supported:

"stringformat ebcdicutf8: All strings and option lists are expected in EBCDIC-UTF-8 format with or without BOM."

And although I do hope that Datev uses Unix System Services #USS instead of plain #MVS on z/OS, this does give me the creeps:

"MVS versions of PDFlib GmbH products are not thread-safe"
(https://www.pdflib.com/fileadmin/pdflib/System_Requirements/PDFlib-9.0.4-system-requirements.txt)

Truly curséd. But PDFlib on zSeries doesn't support networking ... unfortunately?

ljrk, to random
@ljrk@todon.eu avatar

After having spent a /lot/ of time teaching, I'm quite convinced that most of the "I'm bad at X" things are faults of the teacher, not the student.

I've seen people who "could never do math" rock their 1.0 in exams, understand and do quite tricky cryptography or do some crazy functional programming leveraging higher algebra.

All that was required was a change of teacher, proper teaching method and some time (mostly to overcome the "I can't do this" thinking).

Of course some people are better or worse at some things. But too often this is an excuse of bad teachers not to improve and effectively victim blaming.

(There's also the issue that modern teaching institutions have the wrong goals and too little time to actually enable good teaching on a wide scale.)

ljrk, to random
@ljrk@todon.eu avatar

If an edge lord does Nazi shit (idc whether it's saying Sieg Heil, Swastika or some "modern" alt-right bs) they get punched.

  1. There's no outside way to check whether this bs is sincere
  2. However there's a simple way for them not promote that shit – stop it.
  3. There's no necessity to show these signs, at all.
  4. Even if they're "not actually Nazi", the effect doesn't change.

It's never "just a sign". The last years should've shown everyone who's not ignored the world outside of their computer terminal that Nazis aren't those uniform wearing brown pants anymore. They meme, they troll, they provoke – and use the same signs they use for that for signalling, coordination, and when preparing terror attacks.

Christchurch wasn't a brown pant, it was a guy with "weird fashion choices" and "just a troll" with "bad memes".

ljrk, to passkeys
@ljrk@todon.eu avatar

Wow, the comments on my article on in the German / has shown me a lot of misconceptions people have:

  • No, you don't need to synchronize Passkeys
  • nor do you need to use Google/MS/Apple
  • nor is storing an encrypted binary blob a big danger
  • Passkeys aren't just autofilled : they use challenge auth, not shared secrets!
  • 's aren't better because they're a real . Actually they suck against .
  • A secure enclave can still be used, but it's mostly used for decrypting the keychain, not storing it
  • You can still use 's, either with discoverable creds (uses 1 slot each) or non-discoverable creds (1 slot for all Passkeys)

Generally, I think the term 2FA is misleading. Not all 2FA is created equal. One could even argue that Passkeys are "less" 2FA than Password+TOTP -- and yet, it's more secure in most attacks because it can't be phished.

A lot of people seem to think that the more annoying and difficult to use a technology is, the more secure it is. We have the same problem with passwords and their complexity. We humans suck at guessing how secure something is through intuition.

Article:
https://www.heise.de/meinung/Kommentar-Passkeys-sind-toll-fuers-Internet-und-schwierig-in-Unternehmen-9543202.html

ljrk, to random
@ljrk@todon.eu avatar

The worst "feature" of the Pixels from 6 and up is moving the finger print reader from the back to the front. We got:

  • reduced accuracy
  • higher temperature sensitivity
  • a blinding flash of light when unlocking in the dark
  • unlocking takes longer now (enable display, then use fingerprint; instead of just fingerprint)
  • less repairability

But hey, now we have the sensor hidden below the display which is indeed an impressive engineering feat. BUT FUCKING USELESS :(

Sensor on the back was so useful, it was even at a natural resting position for the finger :(

ljrk, to random
@ljrk@todon.eu avatar

Can anyone tell me why @nostarch uses this weird typographical convention:

> The first paragraph after chapter start is typeset in larger size font than the body font.

I think this just looks really odd, like the result of a "paste with formatting" error. This plus the huge chapter number, graphics, inspirational quote (in another different font size), ragged typesetting, ... make for a very uneasy read.

ljrk, to random
@ljrk@todon.eu avatar

I know it may sound a bit elitist but there's a certain branch of self taught programmers that regularly gets on my nerves in a very non-healthy way: Those who say that it's always good to challenge your thoughts with an outside idea no matter how outlandish it may sound.

While it does sound great and lovely at first, I will not engage with people who think to have "cracked cryptography" and found a perfectly secure cipher (other than 1TP). Who think they could create something that's Turing complete but without the downsides, who think they can "solve" the halting problem. There are certain limits to be obeyed.

And at some point, them piling into the industry and giving advice and "good ideas" about how to "secure your computer network" is both dangerous and takes a lot of my time away. And I frankly don't give a shit about their "18 years of experience" in building frontends. I would, if the topic would be frontend. Not, it if it's fucking IT Security mate.

ljrk, to restaurants
@ljrk@todon.eu avatar

Welche anderen "interessanten" 1-Zutat oder 1-Gericht gibt's so in ? Ich weiß von:

• Knofel: Knoblauchrestaurant
• Knödelwirtschaft
• Maultaschen Manufaktur
• Berliner Kartoffelhaus

Gibt's da noch mehr?

ljrk, to macos
@ljrk@todon.eu avatar

Gna, 14.1 seems to have broken/removed my installation ... reinstalling.

ljrk, (edited ) to php
@ljrk@todon.eu avatar

Oof, I like as an idea but hosting that stuff is terrible... pulling up the image doesn't work... it just dies because the data/db directory must exist and be writable by the user *drumroll* nobody. The error is extremely misleading, mostly talking about the database itself not being writable, not the containing directory, which seems to be just a thing to do:

> If you receive an error while trying to write to a sqlite database (update, delete, drop):
>
> Warning: PDO::query() [function.query]: SQLSTATE[HY000]: General error: 1 unable to open database
>
> The folder that houses the database file must be writeable.

https://www.php.net/manual/en/ref.pdo-sqlite.php#57356

Finally, when creating a local user you need to manually pass prod to the symfony console:

bin/console --env=prod fos:user:create

Otherwise it will complain about modules not being loadable :|

ljrk, to random
@ljrk@todon.eu avatar

ugh, I think I just can't stand "old skool" "security" "experts". That is:

  • unconstructive hate against Secure Boot (there are problems with it)
  • claiming that smart phones are per-se insecure
  • arguing that PGP is "simple" and should be the solution everyone should "just" use.
  • similar case for YubiKeys
  • jUsT SelFhOsT eVerYtHinG

Do note, all of the above can be done properly!

  • Secure Boot is certainly one of the worst signed boot mechanism
  • Old and badly outdated phones (unfortunately almost anything but Apple or Pixel devices) are pretty bad -- but then again, it's nowadays pretty hard to "catch" actual bad malware on your phone
  • Operational PGP is a thing and the crypto is still solid
  • YubiKeys are awesome, I use them myself!
  • Self-Hosting is fun and is certainly helpful in terms of data privacy, quite often! And, as we've seen, Azure ain't really secure either.

But all this neckbeard-y bullshit... I can't cope anymore.

ljrk, to random
@ljrk@todon.eu avatar

Continuing my read of the book mentioned in
https://todon.eu/@ljrk/110731363944727133 and there's a passage that struck me:

> putting the problems that need solving to get there at the centre of how we design our economic system. … It means asking what kind of markets we want, rather than what problem in the market needs to be fixed.

Now, this book is definitely mostly focused on capitalism and I'm . However it's clearly thinking of market-capitalism as a means to find a solution (in a way quite traditional capitalism). That made me wonder though: In how far could we "decouple" this market/competition from the core of capitalism, namely owning capital. E.g., how should we image an alternative form (syndicalism, communism, ...) which would still be able to fulfill this means? Notably all those alternative forms do not abolish companies and industry, they just put the power to the workers.

At this point it occured to me that a lot of the criticism of say the UdSSR's economy is pretty much concerning problems we have analogously in our current capitalist world (see the linked toot): Incompetent govts with the modern twist of an oligarchy of consulting. I'd argue, a lot of the problems were less about communism vs. capitalism, but symptoms of other misgovernment.

ljrk, to random
@ljrk@todon.eu avatar

Oh, I also almost forgot to drink today

proceeds to drink a glass of water

0.2l per day ought to be enough for everybody

Why is maintaining a body so hard? At least I had 1 piece of food today!

ljrk, to berlin
@ljrk@todon.eu avatar

Überlege nun schon seit längerem mir ein anzulegen. Aber in bin ich unsicher: Wo stellen Leute ihr Fahrzeug ab um es auch vor Diebstahl zu schützen?

Und: Wenn etwas repariert werden muss was etwas komplexer ist (Elektronik), wo würde man das tun?

ljrk, to random
@ljrk@todon.eu avatar

Simultaneously enjoying the warm sun and in existential crisis about climate change :~

  • All
  • Subscribed
  • Moderated
  • Favorites
  • JUstTest
  • kavyap
  • DreamBathrooms
  • thenastyranch
  • magazineikmin
  • InstantRegret
  • Durango
  • Youngstown
  • everett
  • slotface
  • rosin
  • cubers
  • mdbf
  • ngwrru68w68
  • anitta
  • GTA5RPClips
  • cisconetworking
  • osvaldo12
  • ethstaker
  • Leos
  • khanakhh
  • normalnudes
  • tester
  • modclub
  • tacticalgear
  • megavids
  • provamag3
  • lostlight
  • All magazines