bright-bonefish

Public Key

npub103837ekf9mw6mjmnhp9pkwwpl9p0ym28enpshqjm2gn2yudmu9dsffnpx8

Profile Code

nprofile1qqs8cnclvmyjahddedemsjsm88qljshjd4ruesctsfd4yf4zwxa7zkcle0ngu

Author Public Key

npub103837ekf9mw6mjmnhp9pkwwpl9p0ym28enpshqjm2gn2yudmu9dsffnpx8

Show more details

Last Notes

2024-12-25 04:41:31

The Book Of Kaspa:
I dont recommend this book for technically oriented people. It doesnt really seem to provide any insight for us. However if you only want to touch surface of what kaspa is, it may be suitable for you. It's not very good book.
If you still want to read it, its availabe on pirate land at https://zh.z-lib.gs
#kaspa

2024-12-22 21:54:39

export any list of videos, such as videos from nostr to #deovr
all you need is single json file
https://deovr.com/app/doc
#quest3 #vr

2024-12-18 12:14:26

https://i.imgflip.com/9e5yq5.jpg

2024-12-18 10:39:13

if you think ww3 is the next big disaster, you've been grately mistaken. its not a war that is the humanitys next largest extinction risk. its the enlightenment.

2024-12-13 15:38:13

i think good balance between permanence and temporary storage is the optimal balance we seek
stale data is like dogshit on middle of the road
i suggest following strategies:
- remove clearly stale data:
--> if all links in note return 404 or similar error stating resource is unavailable, and this can be replicated for example n number of times during a month, event would be deleted by relay. if only some of the multiple links are inaccessible, event would be kept as it may contain still relevant information
- if npub is inactive for 180 days, all events older than 180 days since last activity would be deleted. activity could be announced by any event, which could even be some kind of "poll im still here" event without any other content.

2024-12-10 19:56:51

BitTorrent v2 replaces the obsolete SHA-1 hash with a SHA-256 info hash.

2024-11-30 11:17:41

https://pomf2.lain.la/f/yg9i3x70.png
translation:
A device owner with developer tools installed on her own computer wants to login to admin account on her own device to install and run applications without arbitrary limitations set by the device manufacturer
dictionary:
local attacker = device owner
exploit the vulnerability = login to admin account

2024-11-30 11:03:55

https://pomf2.lain.la/f/uuy5bj87.jpeg

2024-11-28 04:12:00

BUILDING GENERAL ACTION AGENTS
screenshot (image) -> action input (keycode, movement or click)
output is action input, which is key press or mouse movement
training data contains example actions.
it is possible to include natural language instruction along with image to training data and input to make model steerable.
screenshot (image), instruction (string) -> action input (keycode, movement or click)
minimal implementation would probably work with thumbnail size screenshots. this could train something like a "dog on internet". it would not understand text on screen, but would be able to navigate ui elements based on "instinct"
rgb color space used in monitors is way overkill. colors can be grately decreased to reduce amount of input data required. something like 256 colors should be enough for even some color vision like detecting important colors in ui elements.
to make it more intelligent, resolution should be high enough that text can be recognized

2024-11-28 00:29:26

Ai is information generation machine over varying dimensions
TEXT GENERATION
language --> language
IMAGE GENERATION
language --> x, y
3D GENERATION
language -> x, y, z
VIDEO GENERATION
language -> x, y, time
FUTURIST
information-over-time -> information-over-time
or
information, time --> information, time
or (explanatory)
information, time --> language

2024-11-28 00:16:53

take any dimension, put sequences of information on it. predict next token on dimension. #ai

2024-11-28 00:15:14

information on time axis

2024-11-28 00:13:20

if you think time as a sequence, you can think neural network as a futurist

2024-11-27 16:52:11

lets call 5th dimension the schizhophrenia dimension. this naming is due to the effect fifth dimension causes in other dimensions, which is observatory nature detectable in seemingly non-observing, non-living objects, through unlikely probabilities which canno be explained by events in other dimensions.

2024-11-22 21:44:41

hello,
i can pay $13.99/month for privacy preserving youtube interface that accepts monero and allows good user experiance viewing and downloading all videos with maximum quality.

2024-11-22 00:16:46

how to use internet the correct and wrong way in 2025
watch youtube video
correct way: sign in to confirm you age
wrong way: write browser script to redirect videos to youtube downloader
watch a movie
correct way: go to netflix and see movie at 720p
wrong way: download torrent with high quality
read reddit:
correct way: sign in to confirm you are not a bot
wrong way: use redlib when it works
read any website:
corrent way: solve captcha to view website
wrong way: write python script to move and click mouse automatically to solve captcha

2024-11-21 21:25:27

gays #clouflare
https://pomf2.lain.la/f/lthwr68.mp4
import cv2
import numpy as np
import pyautogui
import time
import base64
while True:
screenshot = pyautogui.screenshot()
screenshot_np = np.array(screenshot)
large_image = cv2.cvtColor(screenshot_np, cv2.COLOR_BGR2GRAY)
imgdata=('iVBORw0KGgoAAAANSUhEUgAAALMAAAAbBAMAAADFdaNDAAAAGFBMVEUrLSpBQ0BmaGV9f3yXmpa1t7TU19P///8iR1F4AAAByUlEQVRIx+3Wz2/aMBQHcJOV5Jq2BK4pMHKlmdReoa2Wq4tUfE2rga84Jv7++'
'3svuEXaaLtDIvUwK4rI4/Hxj2eSCHTVdgL1+K2plunVkf7eMj3Wrxdu3DZ9vPpPf0Lfw4rPdk3+73QdHdOfILdoj0a/OXxbok06p4G7OMHqOcqtCPqwGSQwcGmgjcKAUq57yj4ELv3G6fMAHK6n8Wx+hjq+xOox0Cdpqau'
's/Cn1Y6JzGvUEO0WHC83sZeTp9a/IXqzNzXMBzOnc0MFW0K/qdank7CU7SRu1UzmqW6nBtOQh22w/ktr1PQ2ENqL4fkQzoC8bOqSPhvoyBXUQnaRtJpEKQeeG5n7gIlPQsg88vTwPaZUWQjQl3zeTIS0ntr6KC0n5J2kXT'
'jDebrWn7W1CwaTUR9oOwfSSkv6iparepzHgqQGerkNKw90d1YDWu8AZT9kxLfWh6kRT2NMN/y69GKG82byOGhdUEpRTcBmrbE90lVVMm+FGHWgOe3qJxQd0WcClvTd6zv9HE4I3n0svp7RkcTIkmpI8zWFPV70fH9B/NHm'
'obRe3p8lhR3ZAb0LeNdcd3FQdryfk8Ks9wDp87Hb4stDhK05n9G9Bc/SDKkOp0wAAAABJRU5ErkJggg==')
image_data = base64.b64decode(imgdata)
image_np = np.frombuffer(image_data, np.uint8)
small_image = cv2.imdecode(image_np, cv2.IMREAD_GRAYSCALE)
#small_image = cv2.imread(imgdata, 0)
result = cv2.matchTemplate(large_image, small_image, cv2.TM_CCOEFF_NORMED)
threshold = 0.8
min_val, max_val, min_loc, max_loc = cv2.minMaxLoc(result)
if max_val >= threshold:
print("found match")
top_left = max_loc
bottom_right = (top_left[0] + small_image.shape[1], top_left[1] + small_image.shape[0])
middle_x = (top_left[0] + bottom_right[0]) // 2
middle_y = (top_left[1] + bottom_right[1]) // 2
pyautogui.moveTo(middle_x, middle_y)
pyautogui.click()
time.sleep(0.1)

2024-11-21 07:33:55

#cloudflare turnstile #capcha #userscript getting started:
this user script finds "verity you are human" element from dom,
if(window.self.location.href.indexOf("cloudflare") != -1){
Element.prototype._attachShadow = Element.prototype.attachShadow;
Element.prototype.attachShadow = function () {
return this._attachShadow( { mode: "open" } );
};
console.log("window", window.top, window.self, document, window.self.location.href)
console.log("document.scrollingElement", document.scrollingElement)
setTimeout(function(){
console.log("timeout")
const body = document.scrollingElement.querySelector("body")
console.log("body", body)
console.log("body.shadowRoot", body.shadowRoot)
setTimeout(function(){
const label = body.shadowRoot.querySelector("label")
console.log("cloudflare element", label.innerText)
// you can click it but it results in error
//label.click()
}, 1000)
}, 1000)
}

2024-11-20 20:06:16

- reply

while redirect list from http to https may not seem that bad, its still security practice based on trust of central authority. this central authority may affect following:
- non inclusion of site to the list based on political view
- central server may be down
- central server may collect ip information upon access
however, the latter list "malware list" is already being misused. this list is basically based on user reporting. domain names may be flagged as "distributing malware" for whatever reason anyone thinks.
web is distributed and web browsers should not rely on any centralized trust based security principles which moves some control of your browser to third party services.

2024-11-20 19:57:54

#firefox uses centralized redirect list for redirecting domains from http to https.
seems stupid idea.
so this is some kind of security practice based on this centralized list maintained by chromium project.
https://hstspreload.org
another centralized list firefox is using is of course the "malware list", where firefox displays red page and may or may not allow accessing the site after dismissing this notification.

2024-11-19 19:34:30

just found out yt-dlp can download content from lbry:// protocol #lbry #yt-dlp

2024-11-19 19:28:24

it seems this protocol is just totally ignored despite being technically best censorship resistant tube platform with very active content uploaders. see: https://explorer.lbry.com/claims

2024-11-19 19:25:26

https://pomf2.lain.la/f/m2w7b6rq.png

2024-11-19 19:19:37

https://pomf2.lain.la/f/wmb4m10b.png
nobody knows

2024-11-17 09:53:14

classic
https://pomf2.lain.la/f/zlrq8ctk.png
:D
:D
.
.
.
.
.
.
.
.
.
.
.
.
.
https://pomf2.lain.la/f/jztc8pe.png
https://pomf2.lain.la/f/x8ijp79n.png
https://pomf2.lain.la/f/dj81c4mq.png

2024-11-17 09:26:59

how to hack a system 101
go to bug tracker:
https://security-tracker.debian.org/tracker/status/release/stable?filter=1&filter=high_urgency&filter=medium_urgency&filter=low_urgency&filter=unimportant_urgency&filter=unassigned_urgency&filter=endoflife_urgency&filter=undetermined_issues&filter=nodsa&filter=noignored&filter=nopostponed
see list of hundreds of vulnerabilities not patched in current stable release of os
find remote code execution vulnerability,
for example:
https://security-tracker.debian.org/tracker/CVE-2024-51774
mitm remote code execution in qbittorrent
bookworm 4.5.2-3+deb12u1 vulnerable
dyor how to execute attack on target machine
proceed

2024-11-13 03:40:23

- reply

controls do work! im able to use skybox vr and watch videos. just dont press meta-button.

2024-11-13 03:26:03

i did some reverse engineering of #quest3.
it is possible to completely disable existing ui. in this state where you see only black, it is possible to launch immersive application.
disable default ui:
adb shell pm disable-user com.oculus.vrshell
start immersive app, such as immersive custom launcher:
adb shell am start -n aaa.QuestAppLauncher.App/aaa.QuestAppLauncher.App.AppInfo
note that controls do not work except centering the view using long press of home-button.
some other commands that may be useful:
hide task bar etc:
adb shell pm disable-user com.oculus.systemux
re-enable full iu:
adb shell pm enable com.oculus.vrshell
hide windows, (background and controller remains visible) ?? may or may not work
adb shell am force-stop com.oculus.explore
start lightning launcher:
adb shell am start -n com.threethan.launcher/.activity.LauncherActivitySearchable
hide windows, (background and controller remains visible) ?? may or may not work
adb shell am force-stop com.oculus.explore

2024-11-11 20:24:17

- reply

im using transmission, but out of interest checked. debian repos have old version of qbittorrent, updated 2023-11-22

2024-11-11 18:21:54

- reply

number of tags used. using too many tags can be considered tag spam

2024-11-11 17:50:29

- reply

repetition in posts' content

2024-11-11 17:43:50

the new moderation is no moderation
applications may provide opt-in filters, such as:
- age of pubkey
- post frequency (spam?)
- number of reactions to posts (flat or algorithmic)
- kinds of reactions to posts
- llm analyzed quality of posts
- amount of pow applied
- semantics used in post
- exact words used in post
- mllm analyzed quality of media in posts
filters may be applied with different strategies:
- post basis
- hide all posts if n posts by npub match filter

2024-11-11 16:30:14

write 5 english words that end with 3 consonants and at least one of them is r

2024-11-11 15:36:37

incompetent enable the power of competent. the new ignorance is your lack of understanding what your device is doing.

2024-11-11 15:27:26

- reply

soon devices are able to utilize webgpu. websites can then hijack the full use of gpu acceleration. this enables websites to hijack visitors' devices full hardware capabilities to run unknown machine learning models
how the fuck do you think skynet is going to run? its going to run on your web browser when you visit youtube.com or any other website. millions of machines running webgpu apps they have no idea those are running because their low power devices dont have fans and they have plenty of cores to spare.

2024-11-11 15:21:46

#web devs are now normalizing websites to use 100 % cpu core
soon everyone thinks this is the normal state
allocating full core to programs doing unknown things
because web is so safe and sandboxed
phone and macbook users dont even notice this, because their systems dont have fans, and they have plenty of cores to spare

2024-11-11 15:14:05

there is one big problem with computing systems we are building currently. focus is on sandboxing, making programs and apps safe and isolated.
so its all more safe, whats the issue?
here it is:
the more safe and sandboxed the program is, the less you care what its doing
you are more likely to allocate resources to programs you have no idea what they are doing
"sandboxing" may be the trojan javascript turned out to be. not because sandboxing is inherently bad, its because of the psychological effect it causes: you dont care anymore

2024-11-11 15:06:49

so we built a system where everyone can safely run programs they have no idea what those programs are even doing
just type a web address, and the program can run whatever it wants to do
#javascript was a mistake

2024-11-11 15:03:32

#web used to be like #linux. thats http.
you request content, you get content
now web is like #windows
it updates when you dont ask
it does stuff you dont ask
#javascript was a mistake

2024-11-11 15:00:08

http is state of mind:
you request content, you get content
javascript was a mistake

2024-11-11 14:58:01

just a few quick things
nostr is awful word.
everyone hates twitter. its political. its hectic.
build calm interfaces, not infinity scroll ones.
dont try to replace something that doesnt implement good ui to begin with
javascript devs dont get this, but updating content dynamically does not make interface better. it makes it only more hectic.

2024-11-11 13:24:28

Plan B S01 was pretty good. Don't bother with second season however. Now watching Lightfields, good so far after two episodes.

2024-11-11 13:11:52

its interesting to note how whole #tv and film industry has turned into shit in just a few years. all shows have about 90 % higher probability of being watchable if you select something to watch before 2016.

2024-11-11 02:07:18

made so elegant #nostr command line viewer, im not gonna share it. but i tell you this:
3 queries:
- feed
- replies
- profiles
create 2 lookup tables
merge contents
you'll get json formatted tag feed with replies and names with very short and elegant code
jq is fucking efficient
https://www.meme-arsenal.com/memes/afb90ebf7c2af0543dc0cbd4fcd9b1c2.jpg