Readit News logoReadit News
rekoil commented on Everyone hates OneDrive, Microsofts cloud app that steals and deletes files   boingboing.net/2026/01/05... · Posted by u/mikecarlton
happymellon · a month ago
If the number of cheaters hasn't changed, but Linux users are now blocked, then your premise is flawed.
rekoil · a month ago
I'm sure the number probably changed a bit, but I can tell you for a fact it isn't like cheaters disappeared overnight just because they banned Linux clients.
rekoil commented on Everyone hates OneDrive, Microsofts cloud app that steals and deletes files   boingboing.net/2026/01/05... · Posted by u/mikecarlton
chao- · a month ago
>the only remaining use case for me is a gaming PC

More and more it seems people don't even find it necessary for that.

I'm "the Linux friend" for a lot of my friends, and over the last year-ish a surprising number of them have asked about advice for switching to Linux. I've helped four people attempt the switch, and three out of the four have stuck with Linux so far.

rekoil · a month ago
All the damn developers keep turning off online play for Linux users though... I play two games a lot currently, Apex Legends and Battlefield 6, both block Linux players from online play thanks to their shitty kernel rootkits not supporting Linux.

Apex Legends at least was running fine on Steam Deck prior to november 2024 when they instituted this change, and I can tell you from personal experience it had very little impact on cheaters, which was their excuse for the change (supposedly most cheaters were connecting via Linux clients).

Deleted Comment

rekoil commented on Running Unsupported iOS on Deprecated Devices   nyansatan.github.io/run-u... · Posted by u/OuterVale
rekoil · 2 months ago
Fascinating. Could this method be used to boot iPhone OS 1.0 (or at least 1.1.1) on an iPhone 2G with 16GB NAND maybe?

The oldest iPhone OS that natively boots on my particular one is 1.1.4, 1.1.1 (which is the highest version number where you can trivially escape the OOBE via the emergency dialer) fails to initialise the FTL (flash translation layer), probably because the chip is sufficiently different from that used in the older phones.

It would bring me great joy to be able to relive emergency dialer hacktivation again, but I have lost that particular iPhone 2G, and only have this 16GB one left.

rekoil commented on iPhone Pocket   apple.com/newsroom/2025/1... · Posted by u/soheilpro
fxtentacle · 3 months ago
Awww... I was so much hoping for an iPhone that will fit into my pocket. The 1st iPhone SE was the perfect form factor. But no, Apple's phones just had to grow and grow and grow like cancer ...

In my opinion, the fact that Apple is now selling a bag to carry your oversized phone around in, is an admission that they failed to make phones that are convenient to carry.

rekoil · 3 months ago
I wish the iPhone 12/13 mini had been a few mm thicker for a bigger battery, and had been in the Pro class of devices. As it stands they didn't have a good enough battery to last a day, and most people interested in smaller devices had probably just picked up the new SE that was released just half a year earlier.
rekoil commented on Next Steps for the Caddy Project Maintainership   caddy.community/t/next-st... · Posted by u/francislavoie
christophilus · 4 months ago
> except for the explicit cert

That "except" is doing a lot of lifting, in my opinion. Automatic Let's Encrypt is a big part of why I reach for Caddy. Install, run, done. No cert management headaches. It felt like magic the first time I used it, and now that I think of it, it still does.

rekoil · 4 months ago
Right, in the nginx example above, someone has setup a secondary tool to provide certs at the location referenced, and is also handling renewal of them.

Also, if I want to add another domain that should be accepted and reverse proxied to my application, in Caddy I just do this:

    example.com wp.example.com caddyfreakingrules.example.com {
      root * /var/www/wordpress
      php_fastcgi unix//run/php/php-version-fpm.sock
      file_server
    }
Suddenly not only does my Wordpress site respond on example.com, but also wp.example.com, and caddyfreakingrules.example.com, Caddy will fetch and automatically rotate certs for all three domains, and Caddy will auto-redirect from http to https on all three domains. (Does the ngnix example actually do that?)

Another thing, does nginx with the above configuration automatically load new certs if the ones that were there when the process spawned have since expired? Because not only does Caddy automatically renew the certs, it is handled transparently and there's zero downtime (provided nothing changes about the DNS pointers of course).

Caddy is freaking awesome!

Bonus, if this were your Caddyfile (the entire thing, this is all that's needed!):

    {
      admin off
      auto_https prefer_wildcard
      email hostmaster@example.com
      cert_issuer acme {
        dir https://acme-v02.api.letsencrypt.org/directory
        resolvers 1.1.1.1 1.0.0.1
        dns cloudflare {env.CLOUDFLARE_API_TOKEN}
      }
      ocsp_stapling off
    }

    example.com wp.example.com caddyfreakingrules.example.com {
      root * /var/www/wordpress
      php_fastcgi unix//run/php/php-version-fpm.sock
      file_server
    }

    # This is simply to trigger generation of the wildcard cert without
    # responding with the Wordpress application on all of the domains.
    *.example.com {
      respond "This is not the app you're looking for" 404
    }
Then you'll disable the unauthenticated JSON API on localhost:2019 (which is a good security practice, this is my only gripe with Caddy, this API shouldn't be enabled by default), tell Caddy how to use the DNS-01 ACME resolver against Cloudflare (requires a plugin to Caddy, there are loads for many DNS providers), and then tell Caddy to use appropriate wildcard certs if it has generated them (which for *.example.com it will have).

The result of which is that Caddy will only generate one cert for the above 3 sites, and Let's Encrypt won't leak the existance of the wp.example.com and caddyfreakingrules.example.com domains via certificate transparency.

rekoil commented on Jeep pushed software update that bricked all 2024 Wrangler 4xe models   twitter.com/StephenGutows... · Posted by u/PKop
ryandrake · 4 months ago
The manufacturer must offer updates to keep the devices secure, but it should never be able to force those updates onto already-purchased devices. The choice should always be with the user.
rekoil · 4 months ago
I don't disagree, but if we end up in a situation where users are negatively affected because they chose not to update for fear of shit like this happening, that's not a great position either.
rekoil commented on Jeep pushed software update that bricked all 2024 Wrangler 4xe models   twitter.com/StephenGutows... · Posted by u/PKop
AlotOfReading · 4 months ago
All the electrical steering columns designs I've seen have used redundant sensors (often groups of them) specifically for that reason. The physical steering wheel to the shaft is still a SPOF, but it's also a "dumb" part where the only failure cases are mechanical. Eliminating failures there is straightforward engineering.
rekoil · 4 months ago
Yeah, I should have spent an extra 10 seconds thinking of the problem here and I'd have realised you can have multiple sensors going to different software on one steering column...
rekoil commented on Jeep pushed software update that bricked all 2024 Wrangler 4xe models   twitter.com/StephenGutows... · Posted by u/PKop
ryandrake · 4 months ago
It should be a "right to not have product forced on you." When I buy a device, whether it is a car, a refrigerator, or an application, I want that thing that I saw in the store, as it exists on the store shelf, including the features and capabilities. I do not expect that I am going to maintain some kind of ongoing relationship with the manufacturer where they get to modify my device at their whim over the air.

Manufacturers should feel free to offer updates. If the user feels the tradeoffs make sense, then they should be free to accept updates. But this business where the manufacturer thinks they are somehow entitled to mess around with a product you've already purchased from them has got to end. It's not their product anymore, it's yours.

rekoil · 4 months ago
Problem with that is that if it's an online product then the manufacturer also _must_ provide updates to keep the device secure so that it continues to do whatever they sold you in the first place.

Also, adding features on its own is great, but obviously stuff like what happened here can't be allowed to happen, and those Samsung or LG smart fridges that became advertising boards is obviously also not acceptable...

Easy to call the bullshit out, hard to actually define the responsibilities of a manufacturer in a law.

rekoil commented on Jeep pushed software update that bricked all 2024 Wrangler 4xe models   twitter.com/StephenGutows... · Posted by u/PKop
teraflop · 4 months ago
That's great, but are they also running redundant, independently-developed software stacks? Because software failure seems to be the issue here.
rekoil · 4 months ago
Disregard me, I'm dumb.

u/rekoil

KarmaCake day1172October 15, 2013View Original