Readit News logoReadit News
rigid commented on Ngtop – Request analytics from the Nginx access logs   github.com/facundoolano/n... · Posted by u/facundo_olano
iamcreasy · 2 years ago
What is the simplest solution to access nginx log? Could it be setting an endpoint(behind simple user/pass) that echos the content of the log?
rigid · 2 years ago
a decent syslog daemon will stream it anywhere you like
rigid commented on Their bionic eyes are now obsolete and unsupported (2022)   spectrum.ieee.org/bionic-... · Posted by u/ColinWright
EmilioPeJu · 2 years ago
If they could open it, send pictures and send dumps of its firmware, I'm sure there would be people around the world curious enough to reverse engineer it, and with that knowledge available, they could (at least potentially) get some support.
rigid · 2 years ago
you mean, something like a new FOSS project called "OpenEye"? :-)
rigid commented on Gh-dash: A beautiful CLI dashboard for GitHub   github.com/dlvhdr/gh-dash... · Posted by u/robenkleene
kbd · 2 years ago
More than "not bad", Textual is probably best in class for TUIs atm, but I wish Python had static builds! Even Javascript can build executables now with Bun!
rigid · 2 years ago
> I wish Python had static builds!

while unusual in the "python world", there are more or less well supported ways: https://www.askpython.com/python/examples/compiling-applicat...

i'm sure go will support dynamic linking aswell sooner or later

rigid commented on Gh-dash: A beautiful CLI dashboard for GitHub   github.com/dlvhdr/gh-dash... · Posted by u/robenkleene
pdimitar · 2 years ago
OK, that is going straight to my "random statement of the day" collection:

"I don't like static builds"

~ rigid@HN

--

Some things really catch me off-guard.

rigid · 2 years ago
They suck to maintain.

I love the fact that you can just update one single openssl lib and all installed apps use the updated version after a restart.

Static builds have their legitimate use-cases so maybe change that to "mandatory static builds". (iirc go support for dynamic linking is worked on and will become stable eventually)

rigid commented on Gh-dash: A beautiful CLI dashboard for GitHub   github.com/dlvhdr/gh-dash... · Posted by u/robenkleene
oefrha · 2 years ago
Funny that Go is top notch in the TUI space thanks to Charm while the GUI landscape is absolutely abysmal (Wails is the only thing that’s okay).
rigid · 2 years ago
https://textualize.io for python isn't bad either. (In case you don't like static builds like me.)
rigid commented on Telegram has launched a pretty intense campaign to malign Signal as insecure   twitter.com/matthew_d_gre... · Posted by u/eatonphil
noirscape · 2 years ago
F-Droid uses a package maintainer-esque process where the maintainers of F-Droid can intervene and prevent an update to an app from reaching users if it's deemed to be malicious or to add anti-features.

It's of particularly high need on mobile since popular apps, even those who were originally FOSS, are sold to scummy publishers who fill it with ads and subscription schemes (oft called anti-features, since removing them could be seen as a feature in and of itself), ruining the original. You can't really trust mobile app devs because the track record is downright awful. Recently that happened with the "Simple" collection of apps, where the Play Store version got filled with junk but the F-Droid maintainer froze the version and marked the apps as outdated since nobody could conceivably want the new versions.

Of course, that strokes poorly with developers who a. don't want to deal with potential third parties in their distribution chain rejecting their updates or b. are planning to add anti-features to their apps later down the line. With signal, I'm gonna guess it's mainly a; the Play Stores checks and balances are much less invasive than the sort of thing an F-Droid maintainer might check for. (As I understand it, Google Plays checks mostly are anti-exploit and keyword scans.)

rigid · 2 years ago
> where the maintainers of F-Droid can intervene and prevent an update to an app from reaching users if it's deemed to be malicious

That sounds like a feature you want when using FOSS.

Imagine distros wouldn't have been able to intervene quickly and malicious xz would be still deployed through their channels just because the authors want to.

rigid commented on Telegram has launched a pretty intense campaign to malign Signal as insecure   twitter.com/matthew_d_gre... · Posted by u/eatonphil
CorrectHorseBat · 2 years ago
Their problem is that F-Droid releases are signed by F-Droid, not by Signal. This way F-Droid could potentially insert a backdoor in an update.
rigid · 2 years ago
That's not true tho. f-droid supports (true) https://f-droid.org/en/docs/Reproducible_Builds/ for quite some time now. Those are signed by both, f-droid and the author.
rigid commented on Telegram has launched a pretty intense campaign to malign Signal as insecure   twitter.com/matthew_d_gre... · Posted by u/eatonphil
kuschku · 2 years ago
Signal's definition of "reproducible" meant for quite a while "download this binary docker image and build Signal inside of it". I don't know if that has changed since.

Signal rejects F-Droid for a different reason, though: They only want to distribute through channels where they get download statistics and control update rollouts.

rigid · 2 years ago
Hm f-droid provides privacy friendly https://fdroid.gitlab.io/metrics/ for some time now.

I'm not sure what sort of "control" they have over the Play Store compared to f-droid, but I'd rather have a trusted 3rd party do the building transparently and verifyable.

rigid commented on Telegram has launched a pretty intense campaign to malign Signal as insecure   twitter.com/matthew_d_gre... · Posted by u/eatonphil
yreg · 2 years ago
rigid · 2 years ago
Signal has reproducible builds for android now? Why not f-droid then, too?
rigid commented on Show HN: A simple 2D fluid and gravity simulation with WASM and WebGL   aestuans.github.io/blob/... · Posted by u/aestuans
mentos · 2 years ago
or shake the phone

Is the accelerometer data available?

rigid · 2 years ago
yep. android 13

u/rigid

KarmaCake day119October 24, 2023View Original