sneak @sneak@sneak.berlin

youtube now marketing censorship as a feature

the difference between me and erdös is that i don't get $500 at the end of february

it's sort of astounding how stupid people are

https://twitter.com/Lukewearechange/status/1486427354385813504

does node-pre-gyp (used by sqlite3 to download precompiled binaries) do hash verification?

if i were the nsa/cia and wanted to backdoor infrastructure, i'd have a thing built into s3 (cia is a large aws customer, mind you) that allows me to selectively serve backdoored binaries into node process space via the mapbox-node-binary bucket.

yeah it's the sqlite3 package, when running "node-pre-gyp install --fallback-to-build".

node-pre-gyp http GET https://mapbox-node-binary.s3.amazonaws.com/sqlite3/v5.0.2/napi-v3-darwin-x64.tar.gz

guess it's downloading the precompiled sqlite3, and not the node binary.

for years, for reasons that have been unclear to me, doing an "npm install sqlite3" or "yarn add sqlite3" (or perhaps sequelize?) fetches a precompiled node binary from an s3 bucket called mapbox-node-binary. mapbox must be paying a small fortune in bandwidth for this bucket.

being able to nope out of the typescript safety zone with 'any' periodically is handy. for some reason i don't have the same readiness to use interface{} in go, even though it's the same thing.

what are some of the best places to buy used books that aren't amazon?

imagine being this disconnected

https://unbound.social/@insurgentem/107726703664061135

why aren't there nightlies of ungoogled-chromium?

You like boats but not the ocean. You go to a lake in the summer with your family up in the mountains. There's a long wooden dock and a boathouse with boards missing from the roof and a place you used to crawl underneath to be alone. You're a sucker for french poetry and rhinestones. You're very generous. You're kind to strangers and children.

this is totally insane.

https://www.nytimes.com/live/2022/02/02/world/covid-test-vaccine-cases/global-virus-restrictions-us-states

interesting - apple software updates fail if you block all trustd internet access (which makes OCSP freshness checks fail)

the pandemic in the USA is pretty much the worst it's ever been. hospitals are more full than at any other point, more people are dying than at any other point.

throwing parties and gatherings right now is utterly irresponsible.

if you use protonmail, electronmail is a great gui client. it bundles the app stuff locally so it only talks to github (update check, disableable) and the api endpoint. you can tell it to only communicate with the api endpoint via tor, too, which is sweet.

well that certainly was a rabbithole

https://github.com/NixOS/nixpkgs/blob/master/pkgs/applications/misc/HentaiAtHome/default.nix