bonkmaykr
@bonkmaykr@canithesis.org
48 following, 24 followers
As of tonight, we've completed The Elder Scrolls 3: Morrowind. Very nice game, 9.5 outta 10. Imagine my surprise, thought, when Dagoth Ur did not, in fact, regale me with a racist tirade or read off a chicken Parmesan recipe, but just acted like a fantasy game villain.
Flash cart is still on it's way
Worse things could always happen, but the perfectionist in me is mildly irritated.
@bonkmaykr That's really cool but it sucks that the lid became damaged. I never played a saturn outside a few moments here and there. It makes me sad such a good system failed in the market.
@bonkmaykr Make sure the clock battery isn't dead. Those things are known to fail regularly.
@phnt@fluffytail.org why so much hate towards anubis? I would have thought having some free software against scraping bots would be a good thing (?)
@phnt@fluffytail.org @waifu@mai.waifuism.life If the scraping bots remove the "I" from Mozilla, server operators can easily just block the unique user agent. Anubis isn't "a tool to stop bots", its a tool to verify connections pretending to be a browser are actual users.
And since we are already in this game of slightly changing UA. What if I change it to Moozilla, or Mozillla. How will you match against that now, without manually filtering Mozilla and every legitimate UA that connects to your server away. You simply won't, and if you will, you already aren't the quintessential Anubis deployer.
@phnt@fluffytail.org @waifu@mai.waifuism.life Read the post of mine again. Anubis isn't a catch-all bot filter, its to filter out connection pretending to be a browser. I know the "lmao I can bypass Anubis with this simple trick" is the peak of /g/ hacker mentality, but in the real world everyone already knew this. It is mentioned in the blog post where the guy talks about it. Anubis exists solely to ensure connections that act like browsers to prove they are browsers. If a connection doesn't pretend its a browser, Anubis does nothing,
>Anubis exists solely to ensure connections that act like browsers to prove they are browsers.
No, it exists to prevent scraping by "checking that a browser is valid". Which it does not do at all. It's trivial to change the UA in an instrumented browser.
@phnt@fluffytail.org @waifu@mai.waifuism.life You're having a really hard time reading my posts I guess. I'm sorry for you.
@phnt@fluffytail.org @waifu@mai.waifuism.life
There is no reason to prove a browser is "real" in the normal world.Okay, keep believing that.
you are trying to combat a bot attackCorrect. Sounds like there are reasons after all. Only took a whole sentence to figure that one out.
your mitigation simply has no effectIt appears to have an effect, and not just for my personal cgit. It appears a lot of people are using it because they are seeing a (positive) effect in combatting LLM scrapers with it.
it can be easily bypassedIt can, and that's ok. Because if you bypass it, you become a unique UA that I can just block with any regular UA block in HAProxy. Even if you automate "random" UAs, I can put in a pretty excessive UA blacklist with patterns if I so desire. The entire point is that a connection using a regular browser UA has to prove they are in fact a regular, legitimate browser, because blocking those isn't feasible, because you'd block nearly all legitimate traffic otherwise.
Its not a hard concept I think. I don't know why I have to reiterate the same thing three times for you, but I truly hope this time it'll stick. If not, for the love of Stallman please just cancel your Internet subscription.
Keep living in your clown world.
Here, have a proper solution that got me 0.1 r/s of bot requests instead of 20 r/s on my git server, instead of your half-assed one.
alibabacloud-git-scraping.txt
huaweicloud-git-scraping.txt
google-usercontent-git-scraping.txt
@phnt@fluffytail.org @waifu@mai.waifuism.life Its cute that you only get 20rq/s and think that's the scale of "the real world". As a sidenote, I'm already blocking entire ASs.
@p@fsebugoutzone.org @tyil@fedi.tyil.nl @phnt@fluffytail.org what if I want to only get connections from users and want zero bots reading my sites (that already use JavaScript) wouldn't using Anubis work for me?
@waifu@mai.waifuism.life @p@fsebugoutzone.org @tyil@fedi.tyil.nl @phnt@fluffytail.org Bots can access the site even with anubis, it just takes slightly more computational resources
@earslash@ebiverse.social @p@fsebugoutzone.org @tyil@fedi.tyil.nl @phnt@fluffytail.org I'm guessing that's enough to defer a few of them no? Why do people use it if it doesn't work for this specific purpose?
> Why do people use it if it doesn't work for this specific purpose?
You have been on this feddy verse longer than I have and the answer to this question is the same as the answer to the question of why so many instances continue to block Gab, which has not federated since 2019: retards cargo-cult shit.
@p Mastodon block-lists never get investigated or audited. If you get added to one you're there forever. And, they LARP about things like a "consensus model" for determining block validities---but, they all just blindly copy blocks over meaning that by de-facto they have an engineered "consensus" through unanimity. Mastodon + Mastodon users really are like AI/Borg or something. Their very existence is a Fediverse blight. @earslash @tyil @phnt @waifu
Pete thought (thinks) that Fediverse as a network can't survive a split where basically the Mastodon and the rest divide and are unable to talk to each other.
I think that we are already at that point, or very nearly it, and things continue to be more-or-less the same. What changed over the years is a decrease in shitposting and an increase in politics sperging from poast and alike. Something that Mastodon is already mostly known as.
What scares me more than Mastodon going its own way is GoToSocial and its obsession with privacy on a network solely based on trust. I learned from silverpill that they apparently already have some kind of reply restrictions that make you unable to reply (alá Xitter) and other non-sense like that. Combined with all the authenticity and proof of origin work that silverpill has been working on, I think that this can have a much bigger impact, if it ever gets implemented broadly.
Imagine a Fediverse, where your reply can get effectively deleted, because someone remote doesn't like it and can remove that reply from their representation of a replies Collection, meaning that other server wouldn't know about it unless they specifically federate with you. Now add a function to that, that makes your reply go away even on those servers, because they respect the other remote server. Or imagine a Fediverse where your press "Post" on a reply and you get "replies not allowed", or "your reply awaits approval" back from the remote server.
> Pete thought (thinks) that Fediverse as a network can't survive a split where basically the Mastodon and the rest divide and are unable to talk to each other.
Well, a split between *nodes* it can obviously survive. That remark was about a big split where the devs of various AP implementations can't cooperate with each other and start to deliberately diverge with the intention of making it harder to federate.
> I think that we are already at that point, or very nearly it, and things continue to be more-or-less the same.
Well, GTS still isn't popular.
> What scares me more than Mastodon going its own way is GoToSocial
Yeah, they're obsessed with trying to control information that has left their computers. Akkoma had this problem when it existed.
> they apparently already have some kind of reply restrictions that make you unable to reply
Yeah, this is accurate. I mean, you saw the fedilist blog post, right?
> Imagine a Fediverse, where your reply can get effectively deleted, because someone remote doesn't like it and can remove that reply their representation of a replies Collection, meaning that other server wouldn't know about it unless they specifically federate with you.
Hell is in sight.
@p @earslash @tyil @phnt @waifu @adiz
> Hell is in sight.
does depend on the people though? i don't think NAS or dobbs.town would flip the switch on this kind of functionality to "on". the people who do like this hugbox stuff already import the blocklists and defacto created their own part of fedi - if they want remote permission to post things it's just another way for them to kneecap themselves.
@adiz @phnt @earslash @tyil @p @waifu @bonifartius a lot of the people using bsky are people who hate mastodon because of the shit mastodon instances pull (which you never see around here) but also because of that and "problematic" people on this side of the internet, they want to be in the cool kids club.
If you're not on a instance that blocks, you can feel like Patrick Bateman in the business card scene, able to Link Up (tm) to all the techbros to get yourself a feature because you linked up to the right person and made something foss.
arstechnica.com/gadgets/2022/05/microsoft-open-sourced-the-code-for-1995s-3d-movie-maker-because-someone-asked/
Every time I saw a foone post, it was something weird that I could barely parse. First time I learned who foone was from, I kid you not, an NCommander stream.
@phnt @earslash @tyil @p @waifu @adiz @bonifartius foone is literally a typical "retro tech eceleb" (annoying, half the shits wrong) but formatted for Twitter retweets.
Which is the point about bsky I'm making too, the Twitter "cool kids" crowd moved there when they could no longer do the same shit they did back in the day with zero opposition.
@sendpaws@mitra.pawslut.party @adiz@mtl.jinxian.casa @phnt@fluffytail.org @tyil@fedi.tyil.nl @p@fsebugoutzone.org @waifu@mai.waifuism.life @bonifartius@qoto.org I hate this foone guy since back in his Twitter days
@earslash @phnt @bonifartius @tyil @waifu @p @adiz part of why I'm into PC98 stuff is it repels some of the worst people in that so called community I mean some are into it.......but they seem to have a melty about Japanese video games. Turns out being a ex-$10 forum poster rots your brain and makes you feel some type of way about them.
@mrsaturday @earslash @tyil @phnt @p @waifu @adiz @bonifartius remember if you're an ex "internet hate site" janny, you can wipe the sins away by eating whoppers and big macs
@mrsaturday @earslash @tyil @phnt @p @waifu @adiz @bonifartius "nobody doesn't like me here"
@sendpaws
>fewer people tell me to kill myself here
Didn't BS just experience a sort of cultural disruption when administration decided that people couldn't tell other people to commit suicide anymore? @mrsaturday @earslash @tyil @phnt @p @waifu @bonifartius
@mrsaturday @earslash @tyil @phnt @p @waifu @adiz @bonifartius gonna name this "bsky interactions in irl" .mp4
@mrsaturday @earslash @tyil @phnt @p @waifu @adiz @bonifartius that's to cover the rage hole he punched in his wall after raging on stream
@adiz @mrsaturday @earslash @tyil @phnt @p @waifu @bonifartius does it matter if it's selectively enforced anyhow?
@phnt@fluffytail.org @Inginsub@clubcyberia.co @waifu@mai.waifuism.life so it doesn't solve scraping at all? What's the use case then? I was considering putting it on my server.
@phnt@fluffytail.org @Inginsub@clubcyberia.co @waifu@mai.waifuism.life more than performance I don't want my posts or my users post's to end up being datamined. What would be a good approach for that goal?
You are on a federated network and cannot control how the data spreads beyond your own instance. Posts from your instance show on publicly accessible timelines on other servers and whatnot, where they can be easily scraped without you ever knowing. The best you do, really, is to disable access to accounts, timelines for unauthenticated users on the UI side and that's about it for preventative measures. If Misskey can even do that. That said, completely disabling access for unauthenticated users to posts (threads) might annoy some that might use it to view posts that haven't federated to their instance.
_Treat everything you post like public information (even followers-only posts) and your users should do the same. Privacy barely exists on this network._
I don't have other recommendations beyond checking your logs for suspicious requests (more frequent than they should be to the same endpoint), checking those IPs and if they aren't a legitimate instance, just nullrouting them in the firewall. Putting Anubis on your UI API endpoints might block some scrapers, but using it globally will do nothing since you can still get posts from elsewhere and without a browser user-agent. Otherwise the federating protocol wouldn't be able to work.
but using it globally will do nothing since you can still get posts from elsewhere and without a browser user-agent. Otherwise the federating protocol wouldn't be able to work.
Check this out, here are your public posts even if you would completely disable public access to Misskey's API:
curl -LH "Accept: application/activity+json" "https://novoa.nagoya/users/8ukmmetqq5/outbox?page=true"
How did I get there?
1. https://novoa.nagoya/.well-known/webfinger?resource=acct:sarvo@novoa.nagoya in a browser
2. copy the URL from href field in "0" field in the links array
3. curl -LH "Accept: application/activity+json" "https://novoa.nagoya/users/8ukmmetqq5"
4. find the outbox field
5. curl -LH "Accept: application/activity+json" "https://novoa.nagoya/users/8ukmmetqq5/outbox"
6. copy URL from the "first" field
7. curl -LH "Accept: application/activity+json" "https://novoa.nagoya/users/8ukmmetqq5/outbox?page=true"
8. Profit
Right, ARM is currently king of tablets and such, right?
Them leaving it to 3rd parties seems to indicate they're going all in with "everything is an Xbox!" which is gonna slowly kill and dilute the brand. The best Xbox player could hope for now is that official Xbox emulation is released for free or something, that's be something good for sure
Sony apparently is making a portable PS5. I'm personally unsure of the price of that, that's be insane, did you see how much people whined about the Switch 2? Yeesh. But knowing Sony, they'd probably cut a shitload of corners, like not including a dock, attached controls on the thing so you'd need an external controller and yadda yadda to save as much cost
There's "leakers" around that said it's not quite PS5 powers, it has less memory bandwidth or something, leading to games possibly needed patches, but it does run PS5 binary and... I wonder how Sony is gonna solve this. Indie and smaller games may run, but bigger games could use patches or whatever. But... what about physical owners? This raises a lot of questions and Sony can lose big if they don't get generous here
Essentially it _can_ work, if the people giving you money are real people, instead of a corporation that gives you money based on some arbitrary statistic.
That said, I think that Nostr supporting Lightning and Zaps is also the reason why it's so sterile and nothing interesting than couple accounts comes from there. It's riddled with bots that aim to make revenue from generating garbage with LLMs and farming Zaps. Basically the same thing that killed Xitter. And the only meaningful difference that Fedi has in this case is that creating bots is harder and stopping spam is much simpler.
@phnt @arcana @ergo @thatbrickster also it's harder to be an eceleb here than it is on even bsky
And the algorithm promotes that stuff so much that it always flooded my feed composed of almost exclusively artists and photography. All it takes is a single like made as a mistake and your feed is now complete garbage.
I honestly wish that more people on here posted their photography since both Xitter and Instagram suck for that now. And Pixelfed is mostly it's own bubble that barely federates.
@phnt @arcana @ergo @thatbrickster The problem with posting photography here is you get No Interactions (TM).
Everyone uses Insta because other photographers do, Twitter has been on the decline for a while but it still has people using it.
The problem is, Flickr, just like other has-been sites on the internet, is a perfect example of "And then one day for no reason whatsoever, everyone moved to social media".
I've posted few of my photos on here and the reason always was: "Here, look at this, it looks nice even though my chinese phone takes shitty pictures."
Like this thread turned from a joke post I made into something interesting.
I wanted the intensity of the effect to scale with object movement speed, but I found that keeping track of enough samples to do it smoothly and/or interpolating them was a struggle to do right. Could try again later.
Below is 0% opacity, the displacement factor can be tweaked and is multiplied by a normal map
I think - just a blind guess - that it was done by reserving slots in the palette just for that opponent and then copying colors from the pre-rendered background, but I haven't taken a good look in a debugger to know for sure.
It's like saying the solution to world hunger is to magically conjure free food at everyone's doors, while also calling to euthanize all the hungry people.
At that point, why not keep it simple and just tell me you have masochistic dreams?
He just explained communism. But in a rosy way that covers up the inevitable authoritarianism.
I let him down gently because he was well-meaning, but utterly clueless.
Looking for a gap in the market to fill if you know what I mean.
@bonkmaykr i know @xianc78 was trying to make one and @graf said he'd host it if it ever came to fruition. this was months and months ago, after i had expressed a desire for such a thing to exist where people could upload mods or even entire indie games. any content that was obscene or political would be filtered by default so it would be an opt-in sort of deal.
there is definitely interest.
@beardalaxy @bonkmaykr @graf I was way too busy with work at the time. If I were to restart it, I would use a NoSQL database this time and something other than PHP (maybe NodeJS).
in the WipEout subreddit for example: brand new fans will talk about a new entry or remaster every two seconds, despite all the regular players knowing it's never going to happen, to the point it's become it's own meme. the same hoaxes get posted every week and then people promote bootleg copies of the game on the Xbox store like it's a legit fan project or something.
AS don't make TV like they used to. Why can't we have nice things anymore?
I know Aqua resumed production but that was two years ago and didn't even last a full season.
Dirty benchmark i ran on an HD 4000:
DX8 mode: 37397 calls, 80~ FPS
DX9 mode: 609 calls, 600+ FPS
Still keeping the legacy effects incase of compatibility concerns and as a basis for the backports to use, but yeah if there was ever a doubt before then it's safe to say now shaders are the way to go on PC if I can help it.