<drakonis__>
mysql seems to have hit a big development rut
<gchristensen>
eh?
<eyJhb>
Drakonis__: pretty much everything. And each worker contacts the server every 45 secs, which does a bunch of requests which also read from the DB, and does some writes in-between
<eyJhb>
Drakonis__: thinking of going with MariaDB
<drakonis__>
yeah okay dont do that
<gchristensen>
yeah sqlite isn't good at that
<drakonis__>
sqlite is a embedded sql engine, it isnt built for that task
<eyJhb>
Just didn't think I was hammering it THAT much
<eyJhb>
Because most of the time, it is actually only reading
<gchristensen>
"6.0 How To Corrupt Your Database Files"
<eyJhb>
gchristensen: What if we enjoy that?! :(
<eyJhb>
I should really sleep soon, and look at it tomorrow instead..
<eyJhb>
2AM is not when the best ideas comes to you
<colemickens>
interesting. sometimes I get diffs in a readme when I don't expect it from a script. The diffs are from lines like "ab" and "a-b" being rearranged.
<colemickens>
I wonder if it's related to using nix-shell or it with --pure and some env var that affects bash's sort order for "for * in dir/" constructions.
<gchristensen>
globs are not stable
<gchristensen>
gotta sort
<colemickens>
til. thats the second one today, thanks for the cacert tip too
<colemickens>
oh bash, of course I can't just replace * with $(ls -v) because of spaces. woo
<gchristensen>
lol
<gchristensen>
globs often return in inode order
<clever>
colemickens: in what context?
<clever>
colemickens: and why does the order matter?
endformationage has quit [Ping timeout: 245 seconds]
<aleph->
samueldr: Yah I'll give it a look
<aleph->
Will have to grab some extra ram
drakonis has quit [Read error: Connection reset by peer]
drakonis_ has joined #nixos-chat
rardiol has quit [Ping timeout: 265 seconds]
<aleph->
Think I'll finally set up a mail server tomorrow
MichaelRaskin has joined #nixos-chat
ctp has quit [Ping timeout: 252 seconds]
ctp has joined #nixos-chat
ixxie has joined #nixos-chat
<ixxie>
heya folks
<srhb>
bitwarden vs. lastpass: Go! (Alternative title: Should I bother to migrate to bitwarden because I'm frustrated with input field shenanigans in lastpass?)
ixxie has quit [Ping timeout: 265 seconds]
<MichaelRaskin>
Apropos of nothing: funny that the Munich SSC meetup seems to end up with two Nix users out of single-digit number of participants (this afternoon to evening is the next one)
<MichaelRaskin>
(SSC being Slate Star Codex, a pretty interesting blog by a psychiatrist interested in a lot of diverse science topics)
<ar>
srhb: lastpass annoys me with its input field shenanigans; no experience with bitwarden
<srhb>
ar: Yeah, same here. Trying bitwarden out now, so far it seems really good.
<eyJhb>
aleph-: but does pass have a nice web integration?
<aleph->
Plugins for chrome/FF
<__monty__>
aleph-: Do you happen to use a mac?
<aleph->
Nope
<ar>
aleph-: the company i work for uses lastpass for shared credentials
<aleph->
Ah
<ar>
aleph-: i use pass for the ones that aren't shared
<__monty__>
There's also approaches like MasterPassword if you want your passwords synced everywhere without syncing. *Caveats apply.
emily has quit [Remote host closed the connection]
emily has joined #nixos-chat
<aleph->
Git and pass is best imho
<aleph->
Nice and easy for me
<joepie91>
derived password schemes are considerably less secure than storage-based password systems
<joepie91>
as you basically remove one of the two factors
<joepie91>
(you no longer need to obtain the password DB)
<gchristensen>
and rotation ...
<__monty__>
Making it available online removes the same factor though, no?
<joepie91>
considering that human passwords are generally not very secure, and that's why we're using password managers in the first place... something that deterministically derives passwords from a master password is not a great idea security-wise :)
<joepie91>
__monty__: if you make it public, yes
<__monty__>
Yeah but internet almost equals public unfortunately.
<joepie91>
no, it really does not
<joepie91>
I mean actually public
<joepie91>
as in, anyone can freely access it
<joepie91>
the category of attackers that's the most dangerous for derived-password schemes is the category of attackers that opportunistically tries random phrases and words to get results
<joepie91>
ie. not a targeted attack
<joepie91>
which means that they are very unlikely to have a copy of your password DB, even if it's stored on a server running a 5-year-out-of-date version of Tomcat that has missed 20 critical security patches
<aleph->
Hmm, might have to write an article on reproducibility for ACM Queue
<aleph->
That might be fun
<__monty__>
I'm not sure the targeted bit is really so important. LastPass et al are pretty juicy targets. And we don't have to worry about the transferring all over the place of the password DB even.
<__monty__>
Also, for generated passwords, isn't finding out a person's name and the name they use for a site targetting too? This info doesn't go over the network at any point so you'd have to rely on guessing or looking over their shoulder, no?
<__monty__>
Hmm, and wouldn't 2-factor regain the possession factor?
<samueldr>
I think that's the most likely explanation for all the "why isn't XYZ working?"
<adisbladis>
I've mostly looked at telephony on halium/sailfish/gemian
<samueldr>
I'll know more once I get to it :) there are a few more things I need to get going beforehand
<adisbladis>
And it seems pretty straight forward
<samueldr>
yeah, my thousand foot view of it looks like it shouldn't cause too much of an issue
drakonis has joined #nixos-chat
<samueldr>
though this is also the reason I needed a few different "vintage" of phones to work on, validate assumptions with those closed source components
kraem has quit [Quit: outta here]
kraem has joined #nixos-chat
<gchristensen>
woot it works with siri and also Emily's phone
<adisbladis>
w00t
<adisbladis>
That's pretty cool
<__monty__>
What's the deal with sailfish? Is it *actually* open source? I never found an actual repository or tarball of the code when I was curious.
<gchristensen>
I wanted to do something with LoRa and mqtt or zmq, but got too bogged down in to the details and then that was like 4 months ago
<adisbladis>
__monty__: It's not
<adisbladis>
It's built on top of Nemo (Mer)
<adisbladis>
But the entire UI is nonfree
<adisbladis>
Also the compositor sucks for running non-sailfish apps, they lack some extension used by gtk, so no gtk apps work
<adisbladis>
And no xwayland
kraem has quit [Quit: outta here]
<adisbladis>
They've done a lot of good for running normal glibc linux on phones, but I don't see it as a platform that will survive
<adisbladis>
When there are good real free software alternatives
<__monty__>
I guess they liked the idea of apple's open base, proprietary UI?
<__monty__>
I.e., get help for the hard part, keep the part that makes money closed.
* gchristensen
should get a distance sensor and hook it up to prometheus
<samueldr>
sensing distance of?
<samueldr>
the house in front? see if it's getting closer? :)
<gchristensen>
maybe something simpler like a reed switch would be fine, but for detecting if the garage door is open or not
<samueldr>
probably better that way
<adisbladis>
gchristensen: Wouldn't a microswitch be better?
<gchristensen>
not sure, I don't want to get too close to the moving parts
<gchristensen>
anyway, back soon
kraem has joined #nixos-chat
kraem has quit [Client Quit]
kraem has joined #nixos-chat
drakonis_ has quit [Ping timeout: 240 seconds]
<aleph->
Welp there goes setting up my mail server
<aleph->
Not sure I can get a reverse dns zone
drakonis_ has joined #nixos-chat
<tilpner>
aleph-: Hosted with a residential ISP?
<aleph->
Yarp. Might need to upgrade to a business account
<aleph->
Which meh. I'll just rent a vps for mail then
<tilpner>
aleph-: What's your motivation for hosting at home?
<aleph->
Eh I just like having everything with me
<aleph->
Which isn't great in a HA concept. But then this is just mail, media and a blog.
<aleph->
Nothing fancy :p
<tilpner>
aleph-: A VPS forwarding traffic to your server at home keeps most of the advantages of hosting-at-home
<aleph->
True. I could do that
<tilpner>
And would likely be cheaper than whatever your ISP would ask
<tilpner>
Mine wants €6/month for a static IPv4 address
<aleph->
Ha!
<tilpner>
But you can get VPS' for less than half that, and those can additionally be used as servers
<aleph->
I need to jump up $70~ for a business account to get a static
<tilpner>
I'm already on a business account
<tilpner>
(Was cheaper, because no phone)
<aleph->
Ahhh
<aleph->
Yeah I'm just debating if I even want to add the $60 for solely a static ip
<tilpner>
Definitely not
<aleph->
That just doesn't seem worth it
<tilpner>
But €3/month and a little added complexity gets you one
<aleph->
Eyep
<eyJhb>
aleph-: I run everything at home with a VPS which forwards the traffic
<eyJhb>
Because I am on a NAT network. It works great. Just using OpenVPN for it
<aleph->
Yeah I'll just setup wireguard
<eyJhb>
SHould suffice, I originally went with OpenVPN because that is what pfSense supported, and I wanted to forward all my LAN traffic
drakonis_ has quit [Ping timeout: 276 seconds]
drakonis_ has joined #nixos-chat
endformationage has joined #nixos-chat
MichaelRaskin has joined #nixos-chat
<eyJhb>
gchristensen: I think I found my mistake regarding the SQLite error yesterday
<eyJhb>
And I really hate myself...
<samueldr>
your database GUI tool had it open?
<eyJhb>
Nope, not at all. I just completely ignored Golangs connection pool, that is required to use, otherwise everything turns to **** :/
<eyJhb>
I was just using *DB object, which is a nono when doing concurrency work
<eyJhb>
Guess that would help with SQLites performance as well, using the libs in the correct way.. But still think it might die
<eyJhb>
But hey, while I am at it, I think I will add support for multiple DBMS, in a somewhat simple way. Currently have my server spinning up a MySQL server up, which it manages itself. Yay
<eyJhb>
But I need to fix my circle dependency now...
<__monty__>
Add postgresql support : >
<eyJhb>
__monty__: the syntax is pretty similar, right?
<__monty__>
You mean SQL?
<__monty__>
For the most part as long as you keep it simple, afaik.
<eyJhb>
Basically my way of adding support for multiple things, is having a lookup table with the queries each should execute (if it is sqlite do this, if it is mysql do this), and having a initial setup specific
<eyJhb>
I only have like a single place, where it becomes "complicated", which is on duplicate things
<eyJhb>
But at some point, I should add joins etc. because I am doing some stupid queries atm.
<__monty__>
Sounds like it's time to implement a relational algebra API with seperate SQL backends.
<__monty__>
; )
<eyJhb>
__monty__: I considered it! But no, I think I should keep it simple :p
<pie__>
cuckoo sandbox, which admittedly is developed by one guy, good on him, used to depend on a version of setuptools 10 major versions behind latest because reasons
<eyJhb>
Ohhh I remember that !
<pie__>
*by like one guy
<eyJhb>
That sucks...
<pie__>
whats spf
<eyJhb>
My goal is to at some point, being close to only having standard tools/libs in this