@demesisx@infosec.pub
@demesisx@infosec.pub avatar

demesisx

@[email protected]

Plutus, Haskell, Nix, Purescript, Swift/Kotlin. laser-focused on FP: formality, purity, and totality; repulsed by pragmatic, unsafe, “move fast and break things” approaches

AC24 1DE5 AE92 3B37 E584 02BA AAF9 795E 393B 4DA0

This profile is from a federated server and may be incomplete. Browse more on the original instance.

demesisx,
@demesisx@infosec.pub avatar

Colin Furze takes oil money.

demesisx,
@demesisx@infosec.pub avatar

I wish you luck… but honestly, it sounds like a lot of painful steps to get the exact same thing that a solid config flake in NixOS would get you.

I use NixOS btw. ;)

demesisx,
@demesisx@infosec.pub avatar

Confessions of an Economic Hit Man

The book provides Perkins’ account of his career with engineering consulting firm Chas. T. Main in Boston. Perkins claims that the NSA arranged for him to be hired by the firm, and that he was subsequently seduced and trained as an “economic hitman” by a mysterious businesswoman named Claudine. Perkins writes that his primary role at Chas T. Main was to convince leaders of underdeveloped countries to accept substantial development loans for large construction and engineering projects, thus trapping them in a system of American influence and control.

demesisx,
@demesisx@infosec.pub avatar

What’s funny is that they want us to simultaneously believe that these are religious zealots that are so dedicated to their holy book that would die to uphold the laws set out in it but they also openly violated one of the major laws (rape) it specifically forbids just to “own the Jews”. If one Hamas member saw another raping a woman, they’d have license from their holy book itself to execute that person on the spot. There’s almost no crime in the world of Islam more severe than rape. Look it up.

Spending a few days with Hyprland made me realize how awesome Gnome is

Don’t get me wrong. Hyprland is great. I like it a lot. It looks fresh, it’s easy to configure and the keybindings are super easy to implement, but it’s also very barebones. Most of the functionality expected from a DE come from external software. Be it a top bar, an app launcher, a notification daemon or anything else....

demesisx,
@demesisx@infosec.pub avatar

I use xmonad as my main WM, so Hyprland would be a very easy transition. I would have switched by now but I just love Haskell

so much.

I’m not talented enough to port Hyprland to Haskell (at least the configuration aspect) but I wish someone wanted to do that. What I like about xmonad is that its core is actually formally verified.

I use Arch BTW. jk

demesisx,
@demesisx@infosec.pub avatar

GHC to Rust:

Lower your flags and march straight back to Mountain View, stopping at every home to beg forgiveness for a hundred years of theft, rape, and murder. Do this and your men shall live. Do it not, and every one of you will die today.

demesisx,
@demesisx@infosec.pub avatar

Motherfuckers PLANTED those too.

There’s Zero chance that Hamas would have stored machine guns and ammo within three feet of a FUNCTIONING MRI MACHINE. There’s zero chance that Hamas labels their power bricks in Latin characters and somehow manages to use type M plugs which are used in Israel but not Gaza.

demesisx,
@demesisx@infosec.pub avatar

I have a Synology NAS too but YSK they’re an absolute shit company who only does well because they’re the only game in town. They used to be great but they’ve started doing some questionable things in recent years with “official” drives and their customer service is SO bad.

Also, they’re closed source.

demesisx,
@demesisx@infosec.pub avatar

Spec-wise QNAP has always at least had parity but where they sucked was customer service. That’s why I didn’t even mention them.

demesisx,
@demesisx@infosec.pub avatar

Government corruption and corporatism that lead to ANYTHING that is in my best interest being locked behind exceedingly impossible profit motives. Citizens United, first past the post, a two party system, capitalism, the CIA, the World Bank: they are all to blame for the life getting less and less enjoyable and more filled with work.

demesisx,
@demesisx@infosec.pub avatar

Paraphrasing: “Aaron doesn’t agree in lockstep with American military propaganda so we added this disclaimer to discredit his near-perfect record of truthful journalism.”

demesisx,
@demesisx@infosec.pub avatar

🇵🇸✊🏼

Proton Mail CEO Calls New Address Verification Feature 'Blockchain in a Very Pure Form' (tech.slashdot.org)

Proton Mail, the leading privacy-focused email service, is making its first foray into blockchain technology with Key Transparency, which will allow users to verify email addresses. From a report: In an interview with Fortune, CEO and founder Andy Yen made clear that although the new feature uses blockchain, the key technology...

demesisx, (edited )
@demesisx@infosec.pub avatar

I’d absolutely use this. I’m glad to see people using this incredibly powerful concept to solve problems that would literally be impossible to solve without it. It is especially encouraging that they used Monero since it has an extra layer of untraceability built-in. Blockchain is experiencing kind of a backlash in public perception, but like tech closely related to it like NFT’s, it is a VERY viable idea that just so happens to be tainted by greed and disinformation.

Voting is another concept that would become unhackable overnight…but would also probably:

A. enable the creation of a CBDC (which would also allow the state to REVOKE ownership of your own money)

B. force a state to pick a technology/crypto of choice (and tip the scales toward that crypto)

both of which I somehow am vehemently against yet moderate a (ghosty) community on blockchain voting. 😅

!blockchainvoting

demesisx,
@demesisx@infosec.pub avatar

What does Monera do?

it is a crypto currency that:

Monero uses three different privacy technologies: ring signatures, ring confidential transactions (RingCT), and stealth addresses. These hide the sender, amount, and receiver in the transaction, respectively. All transactions on the network are private by mandate; there is no way to accidentally send a transparent transaction. This feature is exclusive to Monero. You do not need to trust anyone else with your privacy.

IMO, as a software engineer, leveraging the network effect of Monero was a wise choice. In decentralized systems, the network effect (the amount of unique, separate nodes on a network) is directly correlated to the security of that network. If I were to transact with you in a public place (like a mall food court), you could correlate the presence of other parties in the food court as unique nodes in a network. The more eyes you have witnessing you transaction, the more intrinsic security that transaction has.

Another concept that actually comes into play in cryptocurrency-based systems is that the intrinsic value of that token directly relates to the security of the data in its network. That could be another reason that they chose Monero. Since it already has stable value, it offers a pre-existing and stable security solution.

demesisx, (edited )
@demesisx@infosec.pub avatar

Thanks for lazily puking a couple of reductive, bankster-funded, cherry-picked, neolib rage-bait videos at me. Did you want to discuss this issue or do you want to lazily let the videos do it for you while forcing me to write essays that will be brigaded by the hivemind?

demesisx,
@demesisx@infosec.pub avatar

I have yet to see a software system that is better at preventing voter fraud than humans looking at your government-issued ID at a poll site and humans overseeing other humans manually counting votes.

have you seen any of the research that the US government did on it? Homomorphic encryption enables votes to be both public and obfuscated at the same time. I don’t want to write an essay right now but are you truly up to date on this?

Our current system is by far not a perfect one but removing the ability for governments to i.e. freeze accounts of bad actors is not a boon.

I COMPLETELY DISAGREE. It should be exactly as hard as it is to freeze the cash of bad actors. That’s the point of it. I, of course, happen to be a libertarian socialist/anarcho syndicalist. You happen to be a capitalist. You seem to want be in the camp of “you will own nothing and you will like it” but I just so happen to not trust governments and their decisions. I believe in socialism but have seen it co-opted and destroyed by corruption. Anyway, I don’t think that those same clearly corrupted governments should have the unilateral right to prevent me from attemtpting to claw enough back from their corruption and greed to feed my family.

demesisx,
@demesisx@infosec.pub avatar

I could be wrong (since article is paywalled) but as a DApp dev, Proton probably has a wallet with enough Monero to run this smart contract without anyone needing to add any money at all. So you wouldn’t be getting a Monero wallet in it. It would simply mint an NFT that you could then refer back to for verification that this is the same address that I say it is. It would simply leverage the monero chain every time an account was created and mint that as a unique ID (NFT!).

demesisx,
@demesisx@infosec.pub avatar

If you dislike corruption and capitalists, then why do you like cryptocurrency?

Because properly-implemented cryptocurrencies make corruption impossible. Even the shitty, scammy FTX project had a decentralized ledger, allowing the FTC to quickly and easily forensically untangle SBF’s tangled web of lies and fraud. Even Do Kwan’s TerraLuna hack would have been possible to detect had the project been open source (like any viable crypto project) but regardless of that, it will still now be quite trivial for the regulators prosecuting him and his co-conspirators with fraud.

More learning for those listening in that haven’t already made up their mind like you have: youtu.be/J5xegDJphvc?si=x3tJw9s1c1WL_WNy

demesisx,
@demesisx@infosec.pub avatar

It’s interesting that you can identify cherry-picking on my part but fail to identify it on your own. I merely mentioned situations where fraud (which I didn’t fall for because I follow certain principles about transparency and auditability of the crypto technologies that I prefer) was easily detected because the nature of the technology puts all transactions on an immutable ledger.

What valid criticisms of THE TECH have you offered so far? You’ve simply pointed to situations where stupid people failed to protect themselves from clear frauds then went and used that brush to paint the entire crypto space. You’re not really the intellectual heavyweight you seem to think you are.

demesisx,
@demesisx@infosec.pub avatar

This video only mentions ERC-20 tokens as NFT’s. Are you so ignorant that you don’t realize that Ethereum is not the only crypto currency project? Do you realize that many projects have entirely different tech stacks? Actually, if you wanted to, you could go through my history and find me criticizing Ethereum’s badly flawed accounts model at least 20 times.

I’m not wasting any more time trying to have an intellectually honest debate with a person that blindly writes off an entire class of technologies yet doesn’t even understand beginner level things about it.

demesisx,
@demesisx@infosec.pub avatar

“You drink water and breathe air. Peter Thiel drinks water and breathes air too. Therefore you are just like Peter Thiel!”

You’re a troll. I literally hate Peter Thiel. He is invested in so many technologies that it’s VERY likely that we’re invested in the same tech somewhere. Pretty sure he doesn’t give a shit about Cardano which is the project I develop applications for.

Spreading your investments out is kind of how investing works when someone is a billionaire, dipshit.

Anyway, that’s enough feeding the trolls for today. Have a good night, intellectually dishonest hiveminder.

demesisx, (edited )
@demesisx@infosec.pub avatar

Here’s some easy ways to spot fraud in a crypto project:

  • not open source
  • not decentralized
  • anonymous team (not always a sign of sketchiness)
  • the crypto is locked in someone else’s wallet (not your keys, not your crypto)
  • promises of ROI that are too good to be true (like TerraLunas 20% guaranteed return or the unsustainably high return promised by FTX)
  • not formally verified
  • an actual use-case rather than leveraging buzz-words to sell a utility token (looking at you IOTA and AGIX)
  • initial token allocation is all insiders (Ergo had one of the fairest launches in the whole space, for example so I’d be shocked to see that one be a pump and dump)

I didn’t predict the failure of FTX or TerraLuna but they also didn’t smell right to me because they ticked MANY of the warning boxes above. I’m fairly centered around Cardano ecosystem projects but even in that ecosystem there’s bound to be some fraud. I protect myself by sticking to my gut feeling and using that small checklist. I have yet to be defrauded and I’ve been investing the space since 2017. It’s not hard and I am not Nostradamus but thanks for the compliment.

demesisx,
@demesisx@infosec.pub avatar

Nice. He recognized a good technology. You sound SO stupid.

demesisx,
@demesisx@infosec.pub avatar

But…

The researchers admitted that GraphCast relied on traditional methods to obtain quality data in the first place, and that the ECMWF’s High Resolution Forecast system can produce other types of forecasts that AI cannot yet.

“Our approach should not be regarded as a replacement for traditional weather forecasting methods, which have been developed for decades, rigorously tested in many real-world contexts, and offer many features we have not yet explored,” they concluded in their paper.

“Rather our work should be interpreted as evidence that [machine learning-based weather prediction] is able to meet the challenges of real-world forecasting problems and has potential to complement and improve the current best methods.”

demesisx,
@demesisx@infosec.pub avatar

How exactly is what we have right now any different than feudalism with a few more layers of abstraction?

demesisx,
@demesisx@infosec.pub avatar

NixOS VM’s.

demesisx,
@demesisx@infosec.pub avatar

I just stole someone else’s config that was shared as a neovim flake which I don’t customize at all because I’m scared to open neovim since I can’t seem to close it without googling. 🤣🤣

demesisx,
@demesisx@infosec.pub avatar

This is

by design

What's an alternative to Spotify that doesn't play you the same fucking songs over and over?

I am in an intense love-hate relationship with Spotify. It makes good mixes for me, I have found a lot of great bands that way. BUT IT KEEPS REGURGITATING THE SAME SONGS IN THERE. I know about Song Radios and Artist Radios, so please don’t recommend those. Smart Shuttle doesn’t cut it, either....

demesisx,
@demesisx@infosec.pub avatar

I disagree entirely.

I used the free trial. The algorithm was a whole lot shittier than spotify’s recommendations. It had the same annoying vibe as the regular youtube algo where if you watch one video from Jordan Peterson, you suddenly inherit the feed of an Elon Musk worshipping alt right tech bro.

It was the same for music. I listened to one song as a joke then it stopped recommending good music and just made my whole feed into joke songs. Much like youtube’s algorithm, youtube music algo clearly uses google’s machnine learning tech (which they use for ads too) where it tries so hard to predict what you like without real data, instead preferring to use solely other people’s browsing habits rather than creating a unique profile for that user without it making too many assumptions right off the bat. Perhaps, I’d describe that algorithm as “HIGHLY reductive” when compared to any other recommendatiion algorithm which seem more geared toward slowly discovering the tastes of its users.

demesisx,
@demesisx@infosec.pub avatar

You don’t say?!?!? Of course we’re a target, sending billions in missiles and support to an illegal occupying force that is openly committed to the liquefaction of Muslim children.
Our main export is murder.

demesisx, (edited )
@demesisx@infosec.pub avatar

For anyone confused by the low-hanging-fruit NFT comments that don’t actually talk about what actually happened: The event was in Hong Kong and

here’s my speculative opinion about what the likely cause of the burns was:

UV disinfectant lights, accidentally used by ignorant, budget-conscious event lighting staff.

demesisx,
@demesisx@infosec.pub avatar

The article also came to no conclusion, though they did point to an event that also happened in 2017 where this happened and the culprit was… what I “guessed”. I’m sexy and I know it. 😜

demesisx, (edited )
@demesisx@infosec.pub avatar

Nice. Thanks for the insight.

I work in the film industry side of lighting and we use HMI’s all the time (sometimes without the UV protective glass if the gaffer is a cowboy…). I’ve never really run into this with theatrical/event lights when we do use them…but then again you seem to know about situations like this.

There are so many old gaffers who have cataracts now because of all of those years looking directly into the hot spot of a carbon arc.

You’re probably correctly blaming the board while I think it was Aliexpress lights with actual UV emitters.

demesisx, (edited )
@demesisx@infosec.pub avatar

Learning that Imperative Programming is inferior to Functional Programming for matters that are critical for safety.

demesisx,
@demesisx@infosec.pub avatar

I could go on for a week but here’s some copypasta that mirrors why I wrote this (sorry not to write an essay in my own words). Honestly, there’s a lot more than listed here (like the inherent ability to parallelize any functional code basically out of the box) but let us take a stab at comparing them:

The functional programming paradigm was explicitly created to support a pure functional approach to problem solving. Functional programming is a form of declarative programming. In contrast, most mainstream languages, including object-oriented programming (OOP) languages such as C#, Visual Basic, C++, and Java, were designed to primarily support imperative (procedural) programming. With an imperative approach, a developer writes code that specifies the steps that the computer must take to accomplish the goal. This is sometimes referred to as algorithmic programming. In contrast, a functional approach involves composing the problem as a set of functions to be executed. You define carefully the input to each function, and what each function returns.

Advantages of pure functions

The primary reason to implement functional transformations as pure functions is that pure functions are composable: that is, self-contained and stateless. These characteristics bring a number of benefits, including the following:

  • Increased readability and maintainability. This is because each function is designed to accomplish a specific task given its arguments. The function doesn’t rely on any external state.
  • Easier reiterative development. Because the code is easier to refactor, changes to design are often easier to implement. For example, suppose you write a complicated transformation, and then realize that some code is repeated several times in the transformation. If you refactor through a pure method, you can call your pure method at will without worrying about side effects.
  • Easier testing and debugging. Because pure functions can more easily be tested in isolation, you can write test code that calls the pure function with typical values, valid edge cases, and invalid edge cases.
demesisx,
@demesisx@infosec.pub avatar

I edited my comment to talk about imperative vs FP rather than OO vs FP because FP can actually be OO. What I meant was imperative.

Anyway, in most functional implementations, state is usually handled by a minimal top layer. Functional paradigms are helpful in keeping the complexity to a minimum.

I like to use the functional core, imperative wrapper design style.

demesisx, (edited )
@demesisx@infosec.pub avatar

I like to repurpose that argument and leverage it to argue that sectors that are essential to basic human needs (food, shelter, education, healthcare, infrastructure, utilities including the internet) have no other option than to be socialized. If a sector is properly socialized, they wouldn’t even have the option of being corrupted by profit motives that seek to create artificial scarcity around and withhold goods and services that would otherwise keep a society functioning in a sustainable way.

demesisx, (edited )
@demesisx@infosec.pub avatar

Of course we don’t need them. We don’t need so many things that the ruling class pushes on us like war and austerity.

What we have now is feudalism with a few extra layers of abstraction. Can you picture feudalism without the need for a class of serfs? I’ll give you a hint…on a long enough timeline this humanoid robot serf replacement program produces only two potential outcomes:

  1. countless murdered poor people.
  2. post-scarcity utopia like we see in Star Trek: TNG.

Which one do you think is more likely?

Further thinking on this topic: youtu.be/7Pq-S557XQU?si=SQOhfYjLoy2rt0lw

demesisx, (edited )
@demesisx@infosec.pub avatar

Edit: my below comment was actually wrong. They actually do use git.

Thanks for sharing. What I find most interesting is that Linus is still using the same email-based software development methods for the kernel while the rest of the software engineering world has evolved to use his other invention, git, for that. I’m kind of second-hand embarrassed for those geniuses who have yet to adopt proper version control for (what I’d argue is) the most important project in the computing world.

Here’s a far more nuanced explanation from Spore’s reply to this comment :

Git and Email are not mutually exclusive. In order to collaborate with git, you need and only need a way to send your commits to others. Commits can be formatted as plain-text files and sent through emails. That is how git has been used by its author from literally the first release of it.

demesisx,
@demesisx@infosec.pub avatar

Is this article (and the many sources I see confirming it) inaccurate then?

www.theregister.com/AMP/…/linux_kernel_email/

I’m happy to be wrong if you have any evidence to refute what I’ve written.

Ps. I’m talking about the kernel.

demesisx,
@demesisx@infosec.pub avatar

Thanks for the insight. I’ll edit my comment to point to yours.

demesisx,
@demesisx@infosec.pub avatar

I, for one, was quite ignorant of that fact.

demesisx,
@demesisx@infosec.pub avatar

Interestingly enough, someone actually did release two nix derivations for this software!

search.nixos.org/packages?channel=23.05&show=…

demesisx,
@demesisx@infosec.pub avatar

Fascism is a far-right, authoritarian, ultranationalist political ideology and movement, characterized by a dictatorial leader, centralized autocracy, militarism, forcible suppression of opposition, belief in a natural social hierarchy, subordination of individual interests for the perceived good of the nation or race, and strong regimentation of society and the economy.

To me, it sounds a whole lot like both Biden AND Trump can be considered fascists….especially with this idea of secret military aid to Israel that I’m reacting to here.

demesisx,
@demesisx@infosec.pub avatar

I’d actually argue that Trump comes from the real estate bourgeoisie but I agree on the Biden characterization. Biden never saw an MBNA donor contribution that he didn’t love (like in 2008 when he sold all future generations out for a $250,000 payout from MBNA).

I just don’t see how real estate wealth translates to industry. In general, many of Trump’s areas don’t fully align with the Republican establishment who, in my observation, generally are from real estate, energy, and industry as you mentioned.

Thinking about it more, it seems like real estate has a lot of overlap in both parties.

demesisx,
@demesisx@infosec.pub avatar

Yeah that’s true. They found a cash cow in him, though I’d still consider him an outsider (especially after his political capital has been used up).

demesisx,
@demesisx@infosec.pub avatar

I HOPE it does.

demesisx,
@demesisx@infosec.pub avatar

quit spamming me, bibata pusher!

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • random
  • uselessserver093
  • Food
  • aaaaaaacccccccce
  • test
  • CafeMeta
  • testmag
  • MUD
  • RhythmGameZone
  • RSS
  • dabs
  • KamenRider
  • TheResearchGuardian
  • KbinCafe
  • Socialism
  • oklahoma
  • SuperSentai
  • feritale
  • All magazines
    •