ChipTuner

To be fair most GOOD security optimized code doesn't change, just minor bugfixes over a long period of time. openssl has regular patch versions but considers the last major version to be safe I believe, which can be a few years tmk.

2025-04-04 17:44:51

- reply

yeah... The only alternative's are monocypher (which is meant to be portable, not fast and lacks features) or libsodium, which has parity and performance, but a much larger library in comparison. I don't think it's ABI compatible by default though.

2025-04-04 17:20:04

Linux peeps. So I seem to be correct in my speculation. Checking out my dnf list in Fedora 41 (just tested in-place upgrade), I found libargon2. I followed the dnf source (linked below) and found that they compile the official P-H-C argon2 C library just like myself. Except it's been abandoned for 6 years. I wonder how many other distros and packages rely on it. It's probably not reason to ring alarms, but it would be nice to see someone take over the argon2 library, there are some good PRs waiting last I checked.
https://rpmfind.net/linux/RPM/fedora/41/aarch64/l/libargon2-20190702-6.fc41.aarch64.html

2025-04-03 01:13:22

What's the point of you copy-pasting a headline from an article without copying the link to your sources? It seems like you're just trying to scare people without leaving people room to verify and question you, aka think for themselves.

2025-04-02 20:42:28

- reply

Just recently? Like this year or so?

2025-04-02 20:40:05

Starting to hear more rumblings of layoffs. Most people I know in decent positions have been surviving the past few years until recently. Kind of expected things to start turning around by now, but what do I know.

2025-04-01 15:38:03

- reply

Yeah for me sometime in 2020 I realized I spent too much time and got nothing but frustration in return. That's why I'm here also. Unfortunately I'm kind of on both sides. Ads sell really well on Facebook, but it's objectively just an ad wasteland I will never use again.

2025-04-01 15:24:41

- reply

AI content is really the only think on Facebook anymore at least from what my friends tell me.
Currently AI generated content gets the most attention in analytics by far in all forms of content or interaction. It's not even close, it outperforms even the best tiktok ads at the moment by a large margin. The numbers say people want to see AI content. At a minimum they can't stop interacting with it, which means it will continue to be stuff in people's faces until they decide to stop interacting with it.
Unfortunately it takes a long time for marketing to change tact so were likely to be stuck with it for a while.

2025-03-30 16:07:13

- reply

Right, this is tough because we're building pricing as an average across expected amounts for normal/small repos. Something that large would need some dedicated storage and pricing which is @npub1l5s…gx9z department :)

2025-03-30 06:22:53

- reply

So I don't know how to nostr. I would love separate follow lists I could easily switch between. Devs, news, other leisure and fun stuff follow lists. Sure I could create new keys, but not good ux to switch between them

2025-03-30 06:08:07

- reply

Don't tempt me :)

2025-03-30 04:34:39

- reply

The http part makes nostr auth easy. I haven't researched how to implement any sort of auth via nostr keys over ssh. If we did it, I was planning to maybe find a way to add ssh keys over http with nostr auth possibly.

2025-03-30 04:29:57

- reply

I really need to catch up with @npub16ux…lra7 at some point for CI/CD on nostr then it won't really be our problem to manage that from scratch and be nostr native. Which we'd all love to see.

2025-03-30 04:25:58

- reply

Ehh, if all goes as planned maybe by the end of the year. If the design (I plan to get road mapped and charted this week hopefully) works, it should scale very well, so I think it could be done, but I don't want to promise anything yet!

2025-03-28 18:08:48

- reply

I just don't think onedev is good for the job in that case. Jenkins can at least be run outside of the repository as an extension service.
Kind of I suppose. It would be over my head at the moment. You can assign executors to a job, and agents to an executor, but throttling doesn't really solve a schedueling issue.
It's a backward stop-gap imo not worth using if starting from scratch. Real hardware scheduling would be better imo. So user Y's job gets queued after user X's and make more efficient use of the agent service.
Stacking multiple agents on the same machine just consumes more resources that are already expensive. The goal would be to use the same resources and just better schedule use of them.

2025-03-28 17:29:27

I'm too blue collar for this place, this stuff makes me want to fight people XD
#nevent1q…m6tg

2025-03-28 16:26:01

Curious what you might consider a long software build time? My vnlib projects are starting to creep up on 4-5 minutes on an 8 core vm. Incremental stuff during development is nearly instant so it doesn't matter, but a full publish be hammering my hardware.
Just running all vnlib builds and testing at one time can keep a 64 core machine very busy. If I wasn't running my own hardware I don't think I could afford to run a cloud build server, albeit with slightly newer hardware. Builds would probably take all day on a 2-4 vcore cloud vm.
I've never used GH actions, but do you have to pay for CPU time?

2025-03-24 16:41:00

- reply

This depends heavily on the age though.

2025-03-24 16:40:40

- reply

I also cannot wholly agree an old device is simply worse than a new device with new features I don't understand and didn't ask for either. Don't worry I've read the stats too, it's not that simple, and I'm not the average user.

2025-03-24 16:36:37

- reply

I think not having a smart phone is probably better, but dumb phone options are even harder to find. They all use some BS low security firmware and try to run apps and other garbage.
Every 2 years is absolutely bonkers to me. Who TF can afford that? Silly question I guess most of my friends and family just finance it that frequently anyway, never paid off.

2025-03-24 16:27:59

- reply

Pretty bad opsec to completely disclose the device im using and it's status...

2025-03-24 16:19:43

- reply

It's end of life so no way to upgrade it. There's nothing on it to take. I suppose the worst that could happen is it becomes a packet sniffer without my knowledge.

2025-03-24 15:53:26

- reply

That's all I'm asking of people like you is to just be honest with people about what they're getting. I just want to make yall say it.
It's not a silver bullet and there are many gotchas. I also don't believe it's the BEST we have in terms of privacy, it's the highest convenience trade off. But I have no proof of that.

2025-03-24 15:35:19

- reply

Sure. But I still have to pay Google, to use a Google device, so that I can get away from Google...
I also must trust what people like you tell me that it's "safe". Sure I can ReAd tHe cODe but lets be honest while I'm familiar with firmware and kernel code I'm not going to know where exploits can exist, it's a trust game. Period.

2025-03-23 00:03:56

- reply

That is the only difference. They keys are literally the same. At least with bitcoin you may have the chance to move your money in the event you know it was compromised, can't do that on nostr. No to mention plenty of sites use nostr login now. Sites like coinos use it, so if my key is compromised so is one of my wallets.
We've been doing software signatures too, that's a big deal for more than just the key holder that can compromise a whole community.

2025-03-22 06:11:45

- reply

Something to mention. I'm thinking the quickest way to get this done is HTTP only. So I hope most people would be okay with that. I'm not sure what protocol ngit uses for the git stuff.

2025-03-20 16:32:05

- reply

Yeah they don't seem to offer any solutions :(

2025-03-19 17:44:02

- reply

But I have to learn Go to make plugins which is retarded. What if I want to write in C or C++ or Rust or Zig? GFY? With ELF I can write in nearly any compiled language I want, have ultimate performance and efficiency since hardware and OS's understand ELF. It's universal.
Some people are going to be better suited in the language they can perform best in, and simply won't be in others.

2025-03-19 00:04:35

- reply

It seems to load in shared libraries? So I don't have to use the second shittiest programming language invented :)

2025-03-18 19:35:26

- reply

True but I like to live by "Give me six lines written by the most honest of men, and I will find something in them to hang him." If they can't find six lines I'm safer.
I'd be more worried about the copyright material than the porn (CP aside of course) if you are in the US XD. They like to kick doors in for that too now days.

2025-03-18 19:11:48

- reply

Same but I use the same VPN for many things and background services all use the same VPN so you can hide your physical location but not your activity.

2025-03-18 16:06:52

- reply

2025-03-18 15:39:16

- reply

^ Im curious too. You were helping me understand torrent stuff a little while ago but I'm still a little too busy for it :)

2025-03-18 15:36:20

- reply

Our options are only as independent as our cloud provider(s)... Most cloud is supported by the same big tech. CDNs and other backend tools inside data-centers are often the same big tech subject to the same policies.

2025-03-18 15:31:08

- reply

Something to consider is we only need the git part... Onedev GitLab and whatever else you can think of are WAY too much.
Maybe we shouldn't even bother considering those extra features since we prioritize and encourage the use of nostr. We can do this literally with HTTP servers. Sure I can get more complicated but lets keep in mind what we need for a simple git remote server to work

2025-03-17 15:02:22

- reply

I saw a brand new repo (of European Adults btw like seem to be in their 40s or later) of a public project and every commit by the owner (merges from prs and so on) he used a git tool (or configured it to) add emojis to every commit message.

2025-03-17 00:01:18

- reply

Lmao they just don't. Idk why that sent me over the edge today but it did XD

2025-03-16 23:48:22

Idk who needs to hear this, but your commit messages don't need emojis.

2025-03-15 21:33:42

Not that this needs to be said in 2025, but please consider removing big-tech automation gadgets, especially the voice activated ones and video cameras. Id personally appreciate it if you considered not using Ring or similar outdoor equipment to spy on your neighborhood and send the video data to big tech and law enforcement without anyone's consent.
#nevent1q…mnlr

2025-03-15 20:23:03

- reply

Well I'm kind of a, "I don't like change person" so my daily driver is a corsair k95 from 2012. Nearly every led is burned out. When I'm feeling it I keep my dell AT101W right behind the k95, plugged in 24/7 so I can whip it out on demand. Both are only useful in daylight though. At night I have this cheaper RedDragon k5556 rgb thing. Keys are fine, its also completely aluminum so it's very sturdy which is my primary requirement.
I'm really liking those Ducky vintage remakes. Id like to see one that looks and feels similar but has a single color led backlight to use at night. I'm a very good touch-typer but I still like some light. I can re-home faster with my eyes than I can by feel.
https://www.vaughnnugent.com/public/resources/downloads/cms/c/dszvkmdbxsrfva3sylh6q5ylxy.webp

2025-03-15 17:03:20

Somehow I had a smile on my face the entire time. I'm now listening to it again for giggles.
https://fountain.fm/episode/T1V2BN5es8IpKSipgBNy

2025-03-13 15:21:14

- reply

2025-03-10 19:08:03

- reply

lol fair enough. I'm assuming the linking process is the same as C# and many other frameworks. Header files are only used to provide information to other C/C++ apps, in any other system they become irrelevant to the ABI. IDK if Go tries to do some type of header parsing instead of looking at the actual symbols during build time. Typically you write the wrapper yourself and link against the binary.

2025-03-10 15:31:56

- reply

How so? GM

2025-03-08 22:02:31

I haven't said this in a while but. FYI the ABC agencies will use memes seized from your devices against you in federal court.
The funny part is I was told the prosecutors printed them onto full sized poster boards to display at his trial. I was never told if the jury laughed. I laughed when I heard it.

2025-03-06 16:23:24

- reply

lol. I also moved Alexandria for now. Once we get on docker I should be able to switch it back for us!

2025-03-05 20:27:45

- reply

well i'd have to share it across a nfs or cifs share which historically has been shit for things like that. Server disk space is expensive. I would much rather have "centralized" db servers in a cluster and have them available for services to connect to them.
Id like the instances to be deployable in an HA environment so the disk can't be shared since it's not on the same server.

2025-03-05 20:20:32

- reply

Pleb relays is the way, but some of us are going to have to handle thousands of concurrent users (hopefully)
strfry uses and embedded db doesnt it? lmdb iirc?
How can I run multiple strfy instances from the same db?

2025-03-05 17:39:15

- reply

I would really like to be able to "load balance" relays meaning they are stateless and use a backend that I can administrate on my own. I don't want to rely on the relay software itself to admin the database. Again where SQL wins. As an admin I can do optimization outside of the relay environment.

2025-03-05 17:01:24

- reply

You might be right. But no relays are using scalable KV services though? At least none that i've seen?

2025-03-03 20:09:34

- reply

same.

2025-03-03 16:15:42

- reply

We do. Well where I grew up we did and still do. VoTech is a common program (or school) in high schools where I grew up. It's also very unionized so it's unlikely you won't run into a trade worker. I was born from a long line of bakers. Baking can't be what is used to be, I'm the first to go to college and break the cycle. I was the first in the family. Now that I mention it, a whole side of my family graduated a very strict and very good trade school. They're basically guaranteed jobs because the network is so large of graduates from the school in good positions.

2025-02-26 18:07:45

- reply

It's to avoid repeating yourself actually. And yes, to get people to use your stuff you need to make compromises that help other developers and may take extra work. That's what it takes to make a good product.
Sorry doxygen didn't get bundled inside my compiler toolchain. C developers already know this. It's not complicated or difficult to make it part of the build process, or just write read useful docs. People who consume code regularly know actually hand written docs outside the source code are superior anyway. That's the focus.

2025-02-26 17:32:12

- reply

I'm not even sure what that means. Changelogs are universal, and been around a very long time. Developers always write them. Instead of writing them on the releases page on GITHUB just write it in a file LIKE EVERY OTHER MULTI MILLION DOLLAR BUSINESS HAS FOR DECADES
https://git.vaughnnugent.com/cgit/vnuge/noscrypt.git/tree/CHANGELOG.md

2025-02-26 17:08:56

- reply

The language the product is developed in has no bearing on this opinion. C has had doxygen far longer than GO has existed for comments -> docs generation.
You make a changelog so other devs can easily track what you've changed when I go to clone/pull your code. Sure changelogs can be seen as relics from when git was handled via email, but the fact that I have to use a browser to got to github.com, your releases page, then read each entry since my last update to see what you've changed is dumb compared.
Chagelogs are universal, especially for those of us who don't use GitHub

2025-02-25 19:11:08

- reply

Whats that, my cgit server?
https://git.vaughnnugent.com

2025-02-25 17:22:46

- reply

lmao it cuts the part where he has to rip chug's head out to breath because it forgets to breath XD

2025-02-25 17:19:21

- reply

It's a working diagram. I'll give you some time to settle on the layout :)

2025-02-24 21:26:05

Lol I slimmed and vendored Brotli and zlib this weekend into VNLib.Core, and now GitHub shows it as 49% C and 48% C#
https://github.com/VnUgE/VNLib.Core

2025-02-24 19:26:46

- reply

Yes and especially those who advertise explicitly that they don't test XD and yet somehow that's what gets all the type. not boring old tested software

2025-02-23 20:35:40

- reply

So he just sent me some back story. His dad had a work accident a few years ago and needed to find something to do. Turns out he can make some sweet knives who knew
https://preview.mailerlite.io/preview/957740/emails/144991577834522591

2025-02-23 20:27:04

- reply

Unfortunately not yet although I'm really trying to orange pill them. His family runs the site and their old timers. They'd prefer gold up there XD

2025-02-23 20:21:02

Helping a good friend sell some bad ass knives. Hand forged on their homestead in Alaska. Some handles are made of moose antler or bone so you know it's authentic :)
https://commongroundalaska.com/product-category/common-ground-bladesmith/
I think this one is my favorite style
https://commongroundalaska.com/wp-content/uploads/2024/12/6-1536x864.png

2025-02-23 19:10:36

Success. Today's mission was to get outbound emails working to mask my IP and have a good sending reputation. I've had a resend.com account for a while and now they support smtp relay service. While I try to self host a much as I can, masking IPs requires some cloud service and my VPS provider has a terrible IP reputation so here we are.
Anyway git patch submissions via email should be easier to handle and automate when the time comes.

2025-02-22 21:23:37

- reply

lol relay and server devs GFY

2025-02-22 21:17:36

I could pine for hours, but no one would listen
#nevent1q…0fja

2025-02-22 21:15:10

Look how snazzy things are becoming
#nevent1q…5dh7

2025-02-22 21:14:17

- reply

Anything but eclipse.
I paid for a commercial license for Visual Studio a while ago (not vscode) so I use that for 90% of my work and VScode for most other things. I like netbeans too (MPLab variant for working with TI hardware, sims, and debuggers). I used to use netbeans very often for Java at one point.
Python is for toddlers, so I fiddle with Idle on the rare occasion I whip out python the shell isn't enough XD.
Notepad++ with extensions was the go to before I got a VS license.

2025-02-22 20:10:03

- reply

Na were talking enterprise dawg

2025-02-21 21:07:08

- reply

> You’re probably thinking of the concept of two-party consent in the context of privacy laws, particularly regarding wiretapping and recording conversations, rather than warrants.
Yeah that's not what I meant. It latched onto the "2 party consent part" unfortunately that was the best way I could phrase it.

2025-02-21 20:07:24

- reply

It's only missing the emojis XD

2025-02-21 20:06:48

- reply

I assume the people that notice use it regularly. It's a "template" response from ChatGPT at first look

2025-02-21 20:02:11

- reply

Chances are I read that wrong, but that's how I understood it

2025-02-21 18:20:31

- reply

I was reading (or misreading) the US constitution and I remember reading about a part where (at some point) warrants must have 2 party consent. Meaning You must be notified and allow representation at the warrant hearing and lose that judgement, and at some point that was papered away to single party (the state).

2025-02-21 02:25:10

- reply

Please read the and papers yourself to make an actually informed decision. I find most normies look at signal or WhatsApp. Whatsapp is more mainstream (they run ads everywhere including televison). If your choice is between signal or whatsapp please convince them to consider signal. Both can be a trust-me bro model but one is owned by a company who has absolutely no incentive or history at preserving user's privacy, in fact their business model relies on the complete opposite.

2025-02-21 00:48:38

- reply

Popular mainstream normie platform bias, for me anyway. I also assume platforms that large are gross with KYC. Choose your KYC platform evil I suppose.

2025-02-20 17:29:51

- reply

That's the dream :)

2025-02-20 17:29:01

- reply

Were the same over here. High taxes, expensive land. $150k combined is pennies. Barely pays the insane mortgage on people's $500k 1000sqft starter home and utilities XD

2025-02-20 17:26:03

- reply

I don't know any of those but I'll take your word for it. Maybe people in their 50s I could point to. But they had 30 years of making much less than that. By the time I'm 50 I want wayyyyy more than that, or that much completely passive.

2025-02-20 16:36:26

- reply

100%

2025-02-20 16:36:06

- reply

My friend's and I have decided, from our experience (mostly theirs) about $250-350k is a healthy range for a single income and keeps the feds away. It's also possible to make that without really getting into shuffling money everywhere all the time.

2025-02-20 16:34:20

- reply

Not at all and I've never made anything near that. But I also think $1m isn't a lot of money either.

2025-02-20 16:26:34

- reply

It's the learning how to do that part that's tricky.

2025-02-19 20:52:08

I finally added some contributing guidelines to noscrypt.
https://www.vaughnnugent.com/resources/software/articles/62ca932f68b8e0b1b99dca6e1c9ffe5538205efb#contributing

2025-02-19 19:06:59

- reply

Where's the gif?

2025-02-19 18:59:32

- reply

Did they put the cap back on the budget yet? Or are they still adding more printers to the treasury department

2025-02-19 18:57:48

- reply

My computer is mounted in a rack :) I'd need a lot of cables to take it outside

2025-02-19 00:02:34

- reply

Very good!

2025-02-18 20:25:39

- reply

Gotta keep the sats coming in brother! Hope everything is going as well as it can be, I haven't been on nostr much lately to check in on ya.

2025-02-18 16:14:30

- reply

ORMs still fix this pretty well in many language cathedrals in my experience. I find people who often complain about SQL haven't learned ORMs.

2025-02-18 16:03:24

- reply

Well a file has a path which describes the traversal to reach the desired leaf. So it contains a pointer to the root, which could be fetched for metadata. So as long as there is enough information to find the root, then you shouldn't have any trouble fetching metadata from a child node.

2025-02-16 20:10:50

- reply

That's pretty neat. Almost what I was after with my project cmnext, except it's still a server system, and not focused on websites just content.
https://www.vaughnnugent.com/resources/software/modules/CMNext

2025-02-16 20:08:35

- reply

For components, depending on the task, I might use a mix of:
- daisy
- flowbite (html)
https://www.hyperui.dev (html)
https://sailboatui.com (html)
https://www.agnosticui.com

2025-02-16 20:04:54

- reply

I've used a few. Lately I really like dasiyUI for rapid development. It reminds me of a classic somewhat opinionated style-sheet similar to the old bootstrap stuff (at least when I first played with it). I used TurretCSS and a few other opinionated kits before switching to tailwind. Flowbite and a few others implement their styling in their component libraries. It looks good, but it's not as easy to change things globally, like changing the style of inputs, you'd have to go to every input and modify the classes (or hack some css to override them). For migrating existing codebases I think daisy is awesome, it just kind of works, and is very unified, especially themes and coloring. When using tailwind, I would always create classes for colors for a more unified theme and easy to remember. Like `input-primary` or `text-primary` or `text-primary-background` stuff like that. So I'm not even using the classes that flowbite and others use in their components.
Point being, learning frontend from scratch, I lean toward large single style-sheets, and whatever framework gets me there. I've tried both over the past few years and realized I just tended toward consistency with less time investment which brings me back to big single style-sheets (I use scss so it's more like a dozen named style-sheets instead). Daisy UI is pretty close to that for me, and themes, and pretty easy adjustment to those themes.

2025-02-15 03:26:50

- reply

Too many sciencey words to say a structure is a contiguous region of memory with a constant size and named offsets. You can get into vectors if you want, but that's it.

2025-02-15 03:18:49

- reply

hahahaha. I mean I hold on to some disks if they're still working in an array, assuming I have the space in a non-important application, but my rotations typically knock them out. I used to resell them. Ones that had good smart data I run some DBAN (I have an old copy if you need it btw) for a couple bucks just to see them move on. I sold a bunch of 3tb drives for $15 a piece on markeyplace a few years ago with almost 40k hours on them. They sold out basically over night it was wild.

2025-02-15 03:15:16

- reply

There are much smaller models and ones that are trained off R1 that need much less hardware, but they seem to be big stinkers, so I was hoping others may have actually be able to do some real work with them without $6000 worth of hardware. I spend that much on far more hardware for my application, doesn't involve GPU's though and hard to justify the price of them for how many CPU's I could buy for the same price.