jokeyrhyme

joined 3 years ago
sorted by: new top controversial old
59
Is anyone else concerned about internet-connected 3D printers? (lemmy.ml)
 

Howdy, folks!

I'm teetering on the brink of connecting my Sovol3D S06 ACE to my wireless network, but I'm pausing because this device can make physical real-world actions like:

  • record photos and videos using its built-in camera
  • shaking so much that it manages to knock itself on the floor
  • melting so much plastic that it dribbles all over itself and then all over everything around and beneath it
  • consume lots of electricity and cost me a fortune on my utilities bill
  • burn the house down

None of this happens in normal usage, of course, but watching it self-calibrate did make me wonder:

  • how safe the firmware is?
  • is it retrieving instructions from Sovol3D or some other party by itself?
  • is it sending records of my print jobs to a 3rd party?
  • is it sending photos and videos to a 3rd party?
  • how safe the firmware is once its receiving arbitrary network traffic?

All IPv4 traffic from the internet goes through a NAT/firewall that I conceivable control, but my devices all get public-facing IPv6 addresses, and the default SSH password on all of these printers is publicly-documented

It looks like the Sovol3D S06 ACE firmware is https://www.klipper3d.org/ + https://www.obico.io/ + some unknown amount of stuff that Sovol3D adds on top, and it doesn't seem like they've kept the public source code up-to-date: https://github.com/Sovol3d/SV06-ACE

I do already self-host https://www.home-assistant.io/ and plan to integrate the 3D printer with it, avoiding any cloud behaviour as much as possible, but I'm wondering if anyone else has already done this and has any advice on what to avoid?

Cheers! <3

Proton is dead (for me). Let's collect and discuss alternatives! ✊🛡 in c/[email protected]
[–] [email protected] -1 points 2 weeks ago

I know Google just donated to Trump's inauguration, and also does all the stupid surveillance capitalism crap that Google does, but I just compared prices, and Google Workspace is a few dollars per month cheaper per user than Proton is, for my needs (family, custom domain names, etc)

We've been on Proton for a few years, and it's fine, but we do also have Pixel Android phones, and not using Google services constantly feels like swimming upstream, plus all family members also still end up having to use Google services for work, anyway

It's just not practical for me to de-Google, which is a shame, so I think I'll be switching in a few months, unless pricing changes significantly :S

24
first timer here, Sovol3D S06 ACE arriving this week, open to suggestions :) (www.sovol3d.com)
 

After immersing myself in 3D printer content on YouTube and Lemmy, I'd talked myself all the way up to spending AU$2000 which is just absurd for a first timer, but then talked myself into the Sovol3D S06 ACE as a decent starting point, haha

Anyhow, I'll be running this in my garage (garage door open) and I think the first batch of filament in the pack is either PLA or PETG, which seems beginner friendly

I've been wondering about 3D printer profiles and calibration in slicer apps... is there a way to print as many benchies that will fit on the bed, but each which different profile parameters, so I can see which profiles do or don't work best? Or do current slicer apps always produce a plan that uses the same parameters for the entire job?

Note that I'm 100% on Linux (no Windows here), so I'm probably limited to https://github.com/prusa3d/PrusaSlicer or https://github.com/SoftFever/OrcaSlicer (or maybe https://github.com/GladiusSlicer/GladiusSlicer if I'm in the mood for contributing my own code)

I've consumed probably too much YouTube at this point, but any especially important hints and tips for a first timer would be appreciated!

P.S. oh, just noticed, https://lemmy.ml/post/23597074 thanks!

Sovol SV06 ACE Review: Affordable and Speedy in c/[email protected]
[–] [email protected] 2 points 3 weeks ago

Thanks for sharing! <3

In 2025, what features do you want in a terminal emulator? (that currently aren't widely available or at all) in c/[email protected]
[–] [email protected] 2 points 3 weeks ago (1 children)

Okay, let's go with xterm running bash, where the user ran ls, so xterm -> bash -> ls ...

  • ls never talks to xterm directly, it's stdout/stderr are provided by bash
  • bash effectively outputs a grid of characters to xterm, xterm doesn't know about prompts or words or line feeds, just the grid
  • every time ls outputs a line, bash adds a row of output to the grid that it sends to xterm
  • if there's not enough space for a new row, bash discards the top-most row, moves all other rows up by one row, and then inserts the row for the ls output

Now imagine a hypothetical fork of bash or some other new shell ...

  • the only thing different is the direction that the rows move off the edge of the screen when running out of space, that's all

Thus, this is entirely a shell problem, with a shell solution

However, what I've neglected to mention so far is that terminal emulators and shells are almost certainly optimised for rows dropping off the top edge and new rows being added to the bottom edge

So, the role of a terminal emulator in this scenario could be to provide ANSI control characters or other protocol for operating just as quickly in the opposite direction, sure

In 2025, what features do you want in a terminal emulator? (that currently aren't widely available or at all) in c/[email protected]
[–] [email protected] 2 points 4 weeks ago

There's also https://www.waveterm.dev/ which seems to be an open-source attempt at something sort of like Warp/Jupyter

I don't mind that it uses the web stack for rendering, but that'll probably turn some folks off

In 2025, what features do you want in a terminal emulator? (that currently aren't widely available or at all) in c/[email protected]
[–] [email protected] 4 points 4 weeks ago (3 children)

Seems like a shell feature, and not a feature that a terminal emulator would implement

Polling the group: what do y'all know about the Orion browser from Kagi? in c/[email protected]
[–] [email protected] 4 points 2 months ago (1 children)

The whole thing is weird and the CEO especially so, and not weird in a good way: https://d-shoot.net/kagi.html

Are there any open protocols for facilitating online gaming? in c/[email protected]
OSS Read-it-Later service Omnivore sells out to AI startup ElevenLabs in c/[email protected]
[–] [email protected] 19 points 3 months ago (5 children)

Gosh darn it I only just onboarded to Omnivore a few months ago Now I guess I need to find a new place to store bookmarks

Firefox will consider a Rust implementation of JPEG-XL (with Google's help) in c/[email protected]
[–] [email protected] 2 points 4 months ago (1 children)

One example I can think of is Widevine DRM, which is owned by Google and is closed source: https://en.wikipedia.org/wiki/Widevine

Google currently allows Mozilla (and others) to distribute this within Firefox, allowing Netflix, Disney+, and various other video streaming services to work within Firefox without any technical work performed by the user

I don't believe Google would ever willingly take this away from Mozilla, but it's entirely possible that the movie and music industries pressure Google to reduce access to Widevine (the same way they pressured Netflix into adopting DRM)

The Best Encrypted Messengers in 2024 in c/[email protected]
[–] [email protected] 5 points 5 months ago (1 children)

For disappearing messages to work, your conversation partner has to promise they won't take photos of their screen, and they have to promise to use an app that actually implements the feature instead of just pretending to, and the app developers have to promise to have implemented the code to delete a message when the service says it should

Is there actually a cryptographically-sound and physically-complete method for ensuring that a message is only legible for a temporary duration once it leaves your own device and is delivered to someone elses?

So let's say I wanna ping 1.1.1.1... every 5 seconds... forever. Alternatives? in c/[email protected]
[–] [email protected] 9 points 7 months ago* (last edited 7 months ago) (1 children)

Hmmm, is CloudFlare known for being a bad actor in terms of privacy?

Setting that aside, no matter what you pick, you'll be exposing your IP address, from which your ISP and/or general location may be derived

If you don't trust CloudFlare with that information then you basically cannot trust anyone else, so maybe you'd need to run your own service and ping that instead now that you're in a situation where you can only trust yourself 🤷

The other issue that comes to mind is that you're only testing reachability to one address, which means you could get a false negative where that address stops working but the rest of the internet is actually fine

What laptop do you use/recommend? in c/[email protected]
[–] [email protected] 5 points 9 months ago

Without being specific, I'd try to get something with firmware updates available on LVFS: https://fwupd.org/

And you might want to check for distribution specific notes on that model e.g.

If Wayland is more important to you than AI/ML/LLMs then you probably don't want anything with an nVidia GPU

73
Wi-Fi connectivity issues resolved by dropping wpa_supplicant in favour of iwd (lemmy.ml)
 

My desktop PC is the only machine in the house having Wi-Fi connectivity issues (connects fine, but drops out randomly after a few minutes or sometimes a few hours)

I think wpa_supplicant is getting confused and thinks signal strength is poor (I have a Netgear mesh, but this seems increasingly common, so it's weird for that to be the issue)

I did pick up a TP-Link USB Wi-Fi adapter, but can reproduce the same connectivity issues

The fix was switching away from wpa_supplicant in favour of iwd, which seems rock solid in comparison

I'm sure there's a way to fix wpa_supplicant, but it's man pages only seem to list the options without actually describing what they do, which seems sort of poor considering how old the project is 🤷

162
Quantum Resistance and the Signal Protocol (signal.org)
submitted 1 year ago* (last edited 1 year ago) by [email protected] to c/[email protected]
20 comments fedilink
 

We believe that the key encapsulation mechanism we have selected, CRYSTALS-Kyber, is built on solid foundations, but to be safe we do not want to simply replace our existing elliptic curve cryptography foundations with a post-quantum public key cryptosystem. Instead, we are augmenting our existing cryptosystems such that an attacker must break both systems in order to compute the keys protecting people’s communications.

...

Our new protocol is already supported in the latest versions of Signal’s client applications and is in use for chats initiated after both sides of the chat are using the latest Signal software. In the coming months (after sufficient time has passed for everyone using Signal to update), we will disable X3DH for new chats and require PQXDH for all new chats. In parallel, we will roll out software updates to upgrade existing chats to this new protocol.

92
Migrating Arch Linux's packaging infrastructure to GitLab (about.gitlab.com)
306
Montana loses fight against youth climate activists in landmark ruling (arstechnica.com)
23
Rust fact vs. fiction: 5 Insights from Google's Rust journey in 2022 (opensource.googleblog.com)
 

Rumor 1: Rust takes more than 6 months to learn – Debunked !

...

Rumor 2: The Rust compiler is not as fast as people would like – Confirmed !

...

Rumor 3: Unsafe code and interop are always the biggest challenges – Debunked !

...

Rumor 4: Rust has amazing compiler error messages – Confirmed !

...

Rumor 5: Rust code is high quality – Confirmed! ...

4
Passkeys may not be for you, but they are safe and easy—here’s why (arstechnica.com)
 

cross-posted from: https://lemmy.ml/post/1073275

Great explainer / FAQ

I'll probably still use my Precursor and Yubikeys for the most part, but I'll definitely enable Passkeys wherever they are an option

4
Passkeys may not be for you, but they are safe and easy—here’s why (arstechnica.com)
 

Great explainer / FAQ

I'll probably still use my Precursor and Yubikeys for the most part, but I'll definitely enable Passkeys wherever they are an option

11
Google is activating their own Bluetooth-based tracking network (blog.google)
 

That’s why later this summer, we're launching a refreshed Find My Device experience that makes it easier than ever to locate your devices and belongings quickly and securely by ringing compatible devices or viewing their location on a map in the app – even when they’re offline. The new Find My Device network will harness over a billion Android devices across the world to help you locate your missing belongings like headphones, tracker tags, or even your phone via Bluetooth proximity.

This earlier announcement about a joint effort with Apple to work out how stop stalkers and other criminals from abusing these networks now makes a bit more sense: https://security.googleblog.com/2023/05/google-and-apple-lead-initiative-for.html

18
Bloatware pushes the Galaxy S23 Android OS to an incredible 60GB (arstechnica.com)
 

We can take a few guesses as to why things are so big. First, Samsung is notorious for having a shoddy software division that pumps out low-quality code. The company tends to change everything in Android just for change's sake, and it's hard to imagine those changes are very good.

...

Unlike the clean OSes you'd get from Google or Apple, Samsung sells space in its devices to the highest bidder via pre-installed crapware. A company like Facebook will buy a spot on Samsung's system partition, where it can get more intrusive system permissions that aren't granted to app store apps, letting it more effectively spy on users.

Urgh, it's so frustrating that Samsung is the leading Android manufacturer, the market is rewarding greed and incompetence

5
Requiem for a string: Charting the rise and fall of a theory of everything (arstechnica.com)
 

In fact, all the “easy” versions of supersymmetry have been ruled out, and many of the more complicated ones, too. The dearth of evidence has slaughtered so many members of the supersymmetric family that the whole idea is on very shaky ground, with physicists beginning to have conferences with titles like “Beyond Supersymmetry” and “Oh My God, I Think I Wasted My Career.”

view more: next ›