• 3 Posts
  • 143 Comments
Joined 3 years ago
cake
Cake day: June 11th, 2023

help-circle
  • I learned to shoot before I learned to ride a bike, and I think almost everyone who unintentionally discharges a firearm into another person should be criminally charged.

    • If you can’t consistently avoid pointing guns at people you don’t intend to kill, you have no business handling a gun.
    • If you can’t consistently avoid touching the trigger when you aren’t prepared to shoot or dry-fire, you have no business handling a gun.
    • If you can’t or won’t ensure a gun is unloaded before any further administrative (non-shooting) handling, you have no business handling a gun.
    • If you’re drunk, you have no business handling a gun.
    • If you’re going to argue about whether “nearly an entire bottle of white wine” makes you drunk, you have no business handling a gun.

    It’s a weapon designed to kill things. Treat it like one.





  • The thing that bothers me is that in 2024, polling found a majority of Americans favored Trump on immigration and trusted him more than Harris to do a good job on the issue.

    When I guessed what Trump was going to do about immigration, it looked a whole lot like what he’s actually doing. It wasn’t especially hard to guess because he said what he intended to do. While that’s not a guarantee with a habitual liar, he did have a record of attempting to keep campaign promises.

    What the hell were people who trusted him on immigration in 2024 and don’t like what he’s doing in 2026 expecting?




  • Signal uses reproducible builds for its Android client, and I think for desktop as well. That means it’s possible to verify that a particular Signal package is built from the open source Signal codebase. I don’t have to trust Signal because I can check or build it myself.

    If I don’t have extreme security needs, I don’t even have to check. Signal has a high enough profile that I can be confident other people have checked, likely many other people who are more skilled at auditing cryptographic code than I am.

    Trusting the server isn’t necessary because the encryption is applied by the sender’s client and removed by the recipient’s client.



  • I wonder what an alternate history where Google chose not to become evil would look like.

    What if they had looked at Microsoft’s Palladium proposal and thought, as pretty much everyone outside institutional IT departments did that locked devices with remote attestation was a nightmare scenario best forgotten, refused to build it, and made an effort to prevent anyone else from doing so on top of Android? Safetynet didn’t appear until 5-6 years after Android launched to the public. What if it never did? Android already had enough momentum by that point I don’t think the financial sector could refuse to be on it no matter what risk management said.



  • My dad has cast his own lead bullets. The equipment to do it is inexpensive and commercially available, and it’s easy to come by scrap lead. It’s common for hobbyists to add tin and antimony to adjust the hardness.

    Copper has a much higher melting point than lead, so it would be more difficult and dangerous to attempt to cast it with hobbyist-grade equipment. I’m not sure if casting copper would produce good bullets; a quick web search suggests copper bullets are made by machining or cold swaging. It would certainly be possible to make bullets from round ropper rods by machining them with a hobbyist-grade lathe, but it would be time-consuming.



  • I hold the (possibly mistaken) belief that someone who can program everything from a web browser to a screensaver can, if they so choose, be a good sysadmin.

    I also believe programmers usually don’t choose to be good sysadmins, viewing such work as an annoyance to spend as little effort on as they can get away with, which is what it looks like jwz has done here. Someone with his experience should be self-aware enough to understand who is to blame when that’s what they’re doing.



  • Given his background, I’m certain he can do a good job of being his own IT admin if he wants to. He seems to want some of the benefits of that while having Google do the parts he doesn’t like.

    Google, on the other hand seems to want to drop features that I think it intended to encourage people to migrate from ISP email accounts to Gmail 20 years ago and now sees as cruft and/or security concerns.



  • The whole @gmail.com thing also opens up potential regulatory issues depending on the details of the business.

    It’s a bar.

    I’m probably missing some big detail, but I don’t get why he has his current setup to begin with.

    The post makes it sound like he has a bunch of automation he likely wrote himself on incoming mail, but he wants Google to do some messy parts (spam filtering, archiving, providing a nice client). Google has no reason to want to continue doing that for him and the handful of other people doing something similar.


  • He’s being a bit whiny here. He was having employees use Gmail as a client for his self-hosted POP mail, which is a niche use case that likely has a brittle implementation and doesn’t make any money for Google. Gmail offers a paid product for this kind of use case, but it won’t integrate with the rest of his (likely custom) automation. He wants to self-host parts of the system and have Google do the messy bits, but he’s not their customer and probably isn’t a very good product either.

    He then complains that to self-host IMAP:

    My server is now responsible for storing all of their messages, including all of their spam. It is a vast amount of data. I will have to implement quotas.

    It’s 2025 and that’s a silly claim. A 12Tb HDD costs the same as a couple bottles of booze, and it’s not hard to write a script that clears out spam after 30 days. The other complaints are basically UX.

    Normally saying a small business owner should self-host IMAP and write scripts would be a bit unreasonable, but this is JWZ.