#off-topic-tech

1 messages Β· Page 113 of 1

night girder
#

There was a time when people said it would replace classic gaming.

#

But I cannot see it happen. Maybe exist next to eachother, like handhelds aren't the same as a PC or a console.

twin dew
#

Really only works for very specific game types.
And very large percentage of people gets motion sickness from it if the movement is free.
Etc.

stray badger
night girder
#

And the game; we were on a raft on a river and needed to shoot zombies.

#

so was easy to get motion sick, got it so bad I had to stop and go outside.

#

My first and last VR experience.

stray badger
#

i actually tried to make a VR game once. The development started well. Then i tried to test it. I goofed some code and shot off towards the stratosphere. That ended my time developing vr games

night girder
#

I should pick up my game development again.

verbal raft
#

Here is the true battle of Titans

rapid ether
#

I also got motion sick the first time I tried VR - in a VR Arcade near work before covid. Because I was stupid and went with racing simulator first - colleague crashed into my car and that made me almost vomit. I needed to pause for half an hour but then played arizona sunshine which I enjoyed a lot. I pre-ordered the Reverb G2 for home so that was about 1.5-2 years later?

night girder
#

I also didn't feel comfortable, it was a big hall where everyone was "running around" with VR headset, and then people at the bar could look down into the hall to see us chickens move around and shoot.

rapid ether
#

Got no issues with that, have done worse in public πŸ˜„ I play theatre from time to time... the real thing, on stage, with an audience πŸ˜‰

night girder
#

This is not related to VR, but might also cloud my first experience if you get my drift?

rapid ether
#

yeah sure, I get it, not for everybody... but then again, at home it's just me

night girder
rapid ether
#

I also want to continue fallout 4 vr, had it running quite well on my machine, but the game is even "slower" in vr than in "2d"... and adds another level of quirky to my set up, so I'll re-attempt with the new hardware and whatever HMD I'll buy next year

#

the starwars squadrons I also enjoyed... although I'd very much like to have a longer campaign.... don't have enough friends with enough time for multiplayer

night girder
#

I got 100% on steam for fallout 4 few months ago, the game is clunky even on modern systems.

#

performance drops, bugs, glitches, ... I can't imagine what happens when they add the VR layer to it πŸ˜„

rapid ether
#

yepp.... the power armor HUD on an ultrawide

night girder
#

It's going to be different when games get developed with VR in mind though.

rapid ether
#

yes, but I think it needs about 1-2 more generations/iterations because there is still soooo much vendor-exclusive or specific quirks in there...

night girder
#

Tip; if you see trucks with the back open (so you can enter the back of the truck), be carefull to not get stuck on crates.

rapid ether
#

where the games only work on one specific controller, all others are crap

night girder
#

Tip 2; if you get stuck on crates, there is a console command to make you no_clip so you can fly out.

night girder
#

There is also a VR mod for the game we can't talk about in this channel.

#

It didn't look terrible tbh. But videos can deceive hehe

rapid ether
#

I've seen that, it uses vorpx, right? which itself is a subscription as far as I know... which so far kept me from trying it also for other games..... maybe with the new machine and HMD.
Borderlands 2 VR was also kinda cool for a few minutes, but these WMR <-> SteamVR quirks sometimes take an hour until the game runs properly, because reboots, multiple compatibility layers inbetween etc. and at some point you just want to play something so it's then rather one of the less quirky games...

night girder
#

it uses Unreal Engine Virtual Reality (UEVR) Tool

willow pike
#

i used to get pretty motion sick in VR but a day or two of flying about in google earth cured that for me. now I can't play a game without continuous motion

#

alyx remains the absolute best example

rapid ether
#

alyx was just wow πŸ˜„ stood about an hour on that balcony at the start and threw things around... looked at water in the bottles, drew on the glass....
a few weeks later a friend came by... did exactly the same πŸ˜„

rapid ether
#

there is a backlog of other games and ficsmas to play on the new hardware... and also advent of code

night girder
#

I understand that all too well πŸ˜„

dire igloo
night girder
pure karma
#

thats a 1080Ti and a 2080Ti in that thumbnail right? lmao

stray badger
#

Yup

soft bloom
#

i don't have much spare wires (thin DC ones from old PC, seems like 28awg) , so i am looking to buy one.
but the choice... store i have looked at have various AWG, but it seems to have different purpose
My goal is 12v at 1A, max hopes are for 24V 2A. distance up to 0.3m total.

twin dew
#

AWG## is just wire thickness.
And then there is the max voltage and temperature wire insulation can handle.

soft bloom
#

temperature is not a problem here. and voltage isn't high

twin dew
#

And then how much voltage drop you can handle determines minimum thickness.

soft bloom
#

unless 0.25 will drop like 1V I should be fine by just adjusting the module to compensate

#

so i really don't get how to choose given parameters.

#

there's nothing stopping me from taking whatever cheapest one is

twin dew
#

30cm of AWG28 would be about 0.065 ohms of resistance from the wire itself.

#

30cm of AWG24 would be about 0.026 ohms.

soft bloom
#

so if load is 12 Ohm.... that's practically nothing both cases

#

AWG28 won't burn from 1A, right? πŸ™‚

#

oh wait, that's probably wrong question

twin dew
#

Just about that power loss caused heating.
You know resistance, you know voltage, you know current.
You can calculate how much power is lost in the wire.

#

And that gives how much that wire will heat up.

#

And then from that you kind of can determine temperature rise, and then the limiter is when the insulation starts to melt.

soft bloom
twin dew
#

But on low voltage DC, the limit is usually voltage drop, not heating.

#

Just from resistance and current.

#

So about 0.2V of drop for 3A in that 30cm AWG28.

#

Which would 0.6W power loss, which I would count as excessive, when on battery.

#

Even when 3A on 24V would be 72W

#

So not really, less than 1% loss.

soft bloom
soft bloom
#

wait that doesnt make sense...

#

but idk if i will be brave enough to put 2 12V devices in series

twin dew
#

Cannot be done in that way except.

#

Except with identical loads, which don't use power supplies, but input directly.

soft bloom
#

i feel like i am too lazy to properly think and realize the problem,
but i have somewhat promising idea:
put large resistors in parallel to loads so that their resistance will ensure even voltage distribution without allowing much current to flow through

twin dew
#

Doesn't work that way.

soft bloom
#

i never really practically engineered much in electronics.
our course practice was to simulate some dumb R/S switch on semiconductor
i mean, it was fun, but pretty obsolete tech

twin dew
#

Because you combine resistance and reactance of that actual load and that parallel resistor, and then you get what the voltage drop over that part will be.

#

So high resistance resistor does basically nothing.

soft bloom
#

aka Ohms law doesn't apply all that much to tech like routers?

twin dew
#

And as those two aren't fixed for modern PSU, that is where you get problems.

twin dew
#

So two loads in parallel, and then in series with another load, you need to first calculate the combined parallel equivalent, before you can check what the series part will be.

edgy hazel
#

just signed my work contract les goo

soft bloom
#

well, i meant that these should be that high to make (varying) resistance of load be neglegable enough for voltage to be apropiately stable

twin dew
#

What 12V loads then?

soft bloom
soft bloom
twin dew
#

And if the actual input current isn't exact same, etc, then you get one getting more voltage than the other.
And if the input current varies over time, then you again get changing voltage.

soft bloom
twin dew
#

Absolute nogo.

soft bloom
#

bs or?..

twin dew
#

Does exist with changing load and current, even on DC.

#

Just that on the normal simplified stuff, the load and current don't change.

soft bloom
twin dew
#

But CPU changing utilization will cause current change etc.
And with the devices having switched mode VRM inside them, even when buffered by input capacitors, you can still get differences in current pull in subsecond times from that, and depending on the exact VRM implementation, that kind of two in series is just way to get problems.

soft bloom
twin dew
#

That is just the max current the device will never go over without HW fault.
Not the actual pull in usage.

soft bloom
#

ok, but... right now i have those devices pwoered from same single 12V DC output

twin dew
#

But parallel doesn't care in that way.

soft bloom
#

my mind playing tricks - it imagined them being in series lmao

twin dew
#

Parallel shares voltage, serial shares current.

soft bloom
#

*wired

#

it optimized topology for wire length πŸ™‚

#

so there's double Y, not some |U| thing

#

makes sense

twin dew
#

Parallel doesn't care how it is wired.
Daisy chain is in parallel still etc.

#

Well, the wiring resistance will be serial load to each etc.

#

If you go into nitty gritty.

soft bloom
#

well, it's a Y cable, but it's a pair. so for whatever reason i imagened that connection be wired as series so got confused

twin dew
#

Ah, no that was still pretty simple in the second one too, mixed the second reference to being on right for some reason, and not bottom left.

#

But as almost nothing is purely resistive anymore, the real life is much more complex.

soft bloom
#

Yeah... Rule of thumb is to disregard any model i learned, hehe

#

*until tested

#

It was fun at first, but then it was just math behind radio transmission lines

night girder
#

RIP printer of 9 years.

#

Brother HL-L2340DW with self diagnose restart after 15 minuts for infinity. So the printer is in "cool down mode, I hear the fans spin" but is cold.

#

Something with the spool too "hot" or too "cold" but problem started yesterday and printer was turned of over night.

#

If the machine's display displays the following self-diagnostic messages, follow these steps:
Self-Diagnostic

Cause
The fuser unit does not work correctly.
The fuser unit is too hot.

Action

(For a certain model)
To prevent you from losing the received fax data in the machine's memory, transfer the data to another Fax machine or to your computer before turning off the machine.
Press and hold Power(Power) to turn off the machine, wait a few seconds, and then turn it on again.
Leave the machine idle for 15 minutes with the power on.
twin dew
#

So broken temperature sensor circuit (sensor, wiring, reading electronics)

night girder
#

maybe...

#

So far I read:

  1. restart can fix it.
  2. firmware update can fix it.
  3. hitting the printer a few times with a hard object can fix it (opens circuit).
  4. taking printer apart can fix it.
  5. installing new spool can fix it.
  6. buying new printer can fix it.
twin dew
#

1: if the problem is in that reading electronics part
2: same
3: sensor or wiring
4: sensor or wiring
5: sensor (gets replaced with the heater unit)

night girder
#

Guess what?

#

firmware update fixed it.

twin dew
#

So firmware had gotten corrupted as the NAND lost charge.

#

Making that reading and interpreting step fail.

night girder
#
  • Yesterday: stuck in loop.
  • Turned it off over night to cooldown.
  • Turned it on, problem again.
  • Reset printer. Didn't help.
  • Firmware update; fixed.
#

Question is; for how long is it fixed πŸ˜„

twin dew
#

If the printer had same firmware for that 9 years, and now had problems, I would expect 5-10 years before the same problem repeats.

night girder
#

maybe it was just an issue in the firmware?

#

Because I was just following brothers advice.

#

It's possible that the spool was indeed too hot yesterday (a lot of printing) but that the printer bugged out and stayed in that mode.

#

Regardless of what the sensors were saying.

#

If the hardware (sensor) was giving wrong signal, a firmware update shouldn't fix it. Because the hardware sensor should still be telling the software "the spool is too hot go into cooldown modus".

twin dew
night girder
#

Nevermind, problem is back after printing a few pages.

#

Huh?

#

HL-L2340DW (old one)

#

HL-L2445DW (new one I have my eyes on)

#

Why does it feel like this information is incorrect.

twin dew
#

First is keeping that fuser prewarmed.

#

Second one isn't.

night girder
#

That's a difference of 116x times, meaning new one is 116x more efficient?

twin dew
#

That 58W standby is very high.

#

That 0.5W is perfectly normal for todays electronics when done right.

night girder
#

Official HL-L2445DW specs:

Approx Power
Consumption13,23
Printing: 470W
Printing in quiet mode: 270W
Ready: 43W
Sleep: 3.8W
Deep Sleep: 0.5W
Power Off: 0.08W

twin dew
#

And that Ready lines pretty well with the old ones number.

#

Which is with everything on and fuser being kept warm.

night girder
#

Official for 2340:

#

So seems tweakers was wrong once again...

twin dew
#

So whatever is the source for that first, has changed what it considers "standby".

night girder
#

they used ready as stand-by and deep sleep as stand-by for the other one.

#

"ready" for both machines is 58W and 43W.

twin dew
#

But Ready, Sleep and Deep Sleep can all be considered "stand-by", as in you can just start printing and the device will answer.

night girder
#

"Sleep" for both is 3.9W and 3.8W. "Deep Sleep" is 0.7W or 0.5W. This seems better.

twin dew
#

But with varying delay on how fast that printing starts.

night girder
#

On tweakers.

#

58W vs 0.5W is a big difference. Doesn't make any sense.

twin dew
#

Yeah, and doesn't really make sense to name any of those three as "stand-by"

night girder
#

And when you dig in the specs, you see they used wrong values.

twin dew
#

Because they all are, but at different levels of that.

glass panther
#

thought I'd ask here as I got good recommendations for headphones; anyone have recommendations for a replacement 5.1 surround sound system? movers stripped the connectors off one of the speakers, but I'm not overly attached to that system as it was gifted by a narcisstic asshat of an employer (server went boom, bunch of us had to work over the weekend to get sites restored).

night girder
#

These people aren't newbies.

#

They should know better than this.

twin dew
#

And has been owned by various big companies since 2006.

#

Or just one for the whole time?

night girder
#

not many, it's owned by DPG media atm.

#

DPG Media Group is a Belgian media group.

It's more like a monopoly.

#

They buy up everything, all the competition, just buy it up.

#

But what does that have to do with entering wrong specifications on a tech savy website?

#

All the data I provided is from official Brother website.

#

Just for the older printer I can't find the PDF anymore.

twin dew
#

Race to the bottom.
Where maintaining that kind of data is handled by the cheapest possible people.

night girder
#

Nah, there are passionate people behind tweakers.

#

So when it comes to power usage, L2445DW is barely an improvement on L2340DW

#

Main improvements seems to be:

Memory: 32 MB -> 64 MB
Speed: Up to 27 pages/minute (Single side, Letter size) -> Up to 34 pages/minute (Single side, Letter size)
Wifi: 2.4GHz -> 2.4GHz + 5GHz

#

Resolution: Up to 1200 x 1200 dpi -> 600 dpi Γ— 600 dpi, HQ1200 (2400dpi Γ— 600 dpi) quality

#

Just funny how they make this small incremental upgrades over 9 years. Barely any big changes.

pure karma
#

well after a certain point stuff plateau's and theres also a certain point were something better just isent necessairy

#

over 1 page per second is plenty fast

night girder
#

34 pages/minute is 0.56666666 pages per second πŸ˜‰

pure karma
#

you know what im not even going to correct myself because i dont know how i even managed to screw that up πŸ˜…

night girder
#

it's alright, I can still live with this speed.

#

double sided printing is ofcourse even worse.

pure karma
#

i did 60/34 instead of 34/60 hehe

soft bloom
#

is there a good way to compute coordinates of circle (points on its edge) at equal distance in km from center?
I can easily do it in angular distance, but I need like 400km distance which makes for quite stretched circles even on latitude of like central Europe...

dire igloo
dire igloo
#

And does 400km distance mean distance on the surface or radius of the section (clipping below the surface)

night girder
twin dew
#

Yeah, but that thing basically has two printers, one on each side of the paper.

#

With probably combined fuser.

#

But color laser already has 4 printers in it with single fuser, just all printing on same side of the paper, one after another.

soft bloom
soft bloom
#

if i had to just do it, it would probably be something like rays, and then sort of trial and error distance

dire igloo
dire igloo
#

Coordinates are rather rough because of how unevenly they are distributed over the globe

soft bloom
night girder
#

I actually use my phone to scan documents. It has a special feature that scans the paper itself and makes PDF from it.

soft bloom
#

nah wait that's the same

#

😦 readthedocs is not white listed...

dire igloo
#

Taking a plane to cut off a part of the sphere

soft bloom
#

idk why but my school never taught me how to do something like that. at least i really don't remember. and i was the stereometry guy...

twin dew
#

Because that is the simplest normally used earth replacement?

soft bloom
#

hehe, there's a simpler method that uses perfect sphere

twin dew
#

Ah, it even supports multiple different ones that are used as earth-standins.

#

So it wasn't the simplest, just supports the common ones.

soft bloom
#

you can set ellipsoid params yourself

twin dew
#

But that WGS84 is what GPS etc. use.

#

Where as that GRS80 seems to be most "accurate", but its center isn't in center of earths mass.

night girder
#

Tyson: "So Earth throughout its life even when it formed, it was spinning, and it got a little wider at the equator than it does at the poles. So it's not actually a sphere, it's oblate. It officially is an oblate spheroid, That's what we call it. But not only that, it's slightly wider below the equator than above the equator."

#

I always forget what the "proper" shape name is for our earth πŸ˜„

twin dew
#

Additionally, GRS80 is meant to be a best fit to Earth's geoid while WGS84 is sort of the GRS80 ellipsoid shifted to Earth's center of mass. WGS84 actually was originally meant to be just that, but "refinements" were made to the axis size after a few years of satellite observations to ensure minimal anomalies with Earth's surface/ geoid.

#

That center of mass is important for satellites etc.

#

But not while on surface.

soft bloom
#

but even with that, there's a gap since...
suppose i shoot N rays in lat,lon coords
i can get a good estimate of where on that ray is desired distance
well, it should work, even without even distance between points on these rays

night girder
#

Tyson: "Chubbier is a good word, it's like pear shaped." So, it turns out, the pear-shapedness is bigger than the height of mount Everest above sea level."

#

But then people got tilted at "pear shaped".

soft bloom
#

my display is in lat, lon still. i can't change it

soft bloom
#

Direct or ArcDirect
but still no neat way for just putting in radius and num of points

dire igloo
# soft bloom i don't get what is needed to do it and what will be in results ( i mean, crossi...

This was my idea - but using pre-existing libraries designed for geographics is definitely the better way to go
https://en.wikipedia.org/wiki/Spherical_cap

In geometry, a spherical cap or spherical dome is a portion of a sphere or of a ball cut off by a plane. It is also a spherical segment of one base, i.e., bounded by a single plane. If the plane passes through the center of the sphere (forming a great circle), so that the height of the cap is equal to the radius of the sphere, the spherical cap ...

soft bloom
soft bloom
dire igloo
#

Oh, yeah, r/a/delta in that graphic makes a cone

dire igloo
soft bloom
#

asymetrical nature?..

dire igloo
#

A 400km circle around the North Pole is a wholy different calculation than a 400km circle around some point on the equator

soft bloom
#

oh that

dire igloo
soft bloom
#

that's symmetry to me because 2 poles πŸ™‚

soft bloom
#

every time i read code that does its job i feel like i have been lied to about code style & conventions

pure karma
#

hey Baldur, new update on the laptop it did it again but this time it dident BSOD so i now know exactly the cause

#

its not that anything it is quite literally just that it dosent have enough ram capacity to function

#

memory runs out and then drivers start getting disabled 1 by 1 until windows eventually gives up on existing

#

i also confirmed the keyboard driver is indeed crashing but thats clearly a side effect since it got yeeted and it dident BSOD

twin dew
#

You have done something to disable SWAP completely?
Like many bad SSD instructions tell you to?

dire igloo
#

Coding styles and conventions usually tell you how to do number 2

night girder
#
  1. use CVE tool/linter to find vulnerabilities and fix those πŸ˜„
dire igloo
dire igloo
night girder
#
  1. Write unit tests.
  2. Write system tests.
  3. automate?
dire igloo
#

Definitely part of elegance

night girder
#

elegance hehe

#

some would say it's core.

dire igloo
#

What's the job of a unit test?

#

It's to ensure your code still works as intended after you made changes

night girder
#

No

#

It's meant that the code works as expected.

#

I've worked in teams, we first write the unit test.

#

And then we write the actually code/implementation.

dire igloo
#

But why would you want to know that your code works as expected?
Either because it doesn't or because you expect that it won't.

night girder
#

In the beginning the unit test will fail because there is no code, then you write the code untill unit test works. It's a common practice.

dire igloo
night girder
#

Promoting test-driven developmentβ€”unit testing is a core component of TDD, where tests are written before the actual code. This approach ensures that the codebase is designed to pass the tests, leading to better structured, more reliable, and easier to maintain code.

dire igloo
#

Also: technically speaking you don't need unit tests

night girder
#

I say that it can be core.

dire igloo
#

Also, TDD isn't the only way to do things (albeit one of the most intuitive ones)

#

A software tester walks into a bar.
... Walks into a bar
... Runs into a bar.
... Crawls into a bar.
... Dances into a bar.
... Flies into a bar.
... Jumps into a bar.

And orders a beer.
... 2 beers.
... 0 beers.
... 99999999 beers.
... a lizard in a beer glass.
... -1 beer.
... "qwertyuiop" beers.
Testing complete.

A real customer walks into the bar and asks where the bathroom is.
The bar goes up in flames.

night girder
#

Yup. And the average developer is just a customer.

#

Who pushes code into production without tests, then production goes down, then developer blames the single tester in a 50 man team.

#

Testing is such a strong tool if used properly, it can even make your code more understandable.

dire igloo
#

Crowdstrike intern moment

night girder
#

public void testIfFirstNameFieldCanHandleString(){}

night girder
#

the test name literally tells what the code does.

#

And if you do this for all your features, the tests will just tell the developer what the code is doing.

#

Or you can write documentation.

dire igloo
night girder
#

Or you can use comments. Or JIRA tickets hehe

dire igloo
night girder
#

rofl

dire igloo
#

And use comments to state WHY you're doing that stuff. Not how.

#

The code should tell you the how

night girder
#

so many developers are of the opinion that if you use comments, you doing somethign wrong. Code just be readable.

#

Use proper function names.

dire igloo
#

Yeah, that's bogus

night girder
#

Only time I use comments, is when I do something that isn't normal. So I add a comment to why I implemented that code that's "unnusual".

dire igloo
#

That helps you understand what the code does, but not why it does it

night girder
#

So mostly, ugly fixes hehe

dire igloo
#

According to a survey done by stackoverflow, the average coder believes they are more competent than the average coder.

night girder
#

lol

#

Coding is a means to an end to me. It serves a purpose.

twin dew
night girder
#

"are you a good driver?" hehe

maiden coyote
#

Nope, and I do it for a living

#

If I'm asked if I'm good at my job, my answer is only on some days.

night girder
#

"I do my best" πŸ˜‚ is the most honest answer I can give.

dire igloo
#

"I try to be"

maiden coyote
#

Haven't fucked up yet this month!

dire igloo
#

I'm a lousy coder but damn am I good at telling people they're doing stuff wrong

night girder
soft bloom
#

i honestly think that understandability is often somewhere behind security

#

*in practice from what i have read

twin dew
#

You put in just a thumbnail version.

night girder
#

CVE warnings of dependencies, then understanding the warning and then taking the correct action.

soft bloom
night girder
#

Which, is to me, part of security.

dire igloo
#

I don't think this is sustainable

#

You run out of questions eventually

maiden coyote
soft bloom
night girder
#

but I believe there are also websites/plugins for code repositories that scan your repo for vulnerabilities.

night girder
#

There are also some external ones but I forgot.

soft bloom
mental oriole
night girder
#

because the frameworks I remember, always fail on exceptions. No matter where it happens.

mental oriole
#

idk, that was like 5 years ago.

#

was some java shit

night girder
#

wild...

mental oriole
#

where you can tag that a test should raise an exception

#

fucking idiotic if you ask me.

#

but what do I know...

night girder
#

it should be the other way around;

  • always fail on exception
  • mark with "@ignoreExceptionsForTest" to ignore exceptions and let test pass.
#

Exception testing is not done much, but it has a logic. It shows that you as developer/tester though about the cases for exceptions.

mental oriole
#

I'm happy we don't use exceptions at work πŸ˜„

#

And I prefer return code functions instead.
Forces the user to handle the error right there and now πŸ™‚
Buut we're also doing realtime stuff so exceptions are bad for that.

night girder
#

We used project lombok in our project. It let's you tag and lombok makes the code for you based on tags.

@Getter @Setter public String name = "";

So I don't have to write the methods to set and get the value. But the Lombok also had this one: @SneakyThrows which just handles the exceptions without us writing the code. Man, the lead did not like that.

mental oriole
#

Why...

#

I'm gonna rant... but

#

Just use a public variable

night girder
#

You crazy?

mental oriole
#

I hate getters and setters.

night girder
#

No no no no ... no no no ... nop. nop. nop nop nop.

mental oriole
#

πŸ˜‚

night girder
#

It makes for clean code, it improves readability. And 100 other benefits for getters and setters.

mental oriole
#

Fine if you do more logic when getting the variable I guess... I'm still "against" it to some degree.

night girder
#

I understand, but I was talking professional work environment.

#

Not home/kitchen coding πŸ˜„

#

I always liked baeldung.com. Good website for java + spring related things imo.

jagged snow
#

Otherwise, they're just a pain and I don't use them

night girder
#

that's why we used lombok.

#

so we didn't have to rewrite the same methods/functions over and over. Just add tags.

mental oriole
#

That's why I argue it's bad to use them... because you need a FUCKING LIBRARY TO GENERATE THEM

#

But Me be me πŸ™ƒ

night girder
#

When you have a project with over 1000 files?

#

and 2 teams of 50 people working on it?

#

If we wanted control over setter/getter, we could still write them manually.

#

In the end, the field was still protected as stated in the article I posted.

#

Nobody could interact with the variable by accident, since you need to use setter or getter.

#

There is a whole spring framework that reduces boiler code for Java.

#

Because in the end, they don't want only good code. They also want us to be efficient.

#

That's how we got to the whole ML/"AI" code generation plugins for IDE's.

mental oriole
#

oh boy...

night girder
#

Yup ...

#

Gotta be fast hehe

mental oriole
#

I'm never winning this argument hehe

night girder
#

Honestly, I have nothing against plugins creating boilerplate code.

#

but it has to be boilerplate.

#

Anything other than that, code it yourself.

mental oriole
#

Better than that I guess.

night girder
#

And to be fair, Java has a lot of "you have to write code like this". It's not flexible, forcing developers to follow the boilerplate.

#

And if you have the write the same thing over and over again, for hours, you go a little bit crazy. And as a deleloper you think; "this can be automated".

mental oriole
#

my 3 issues with java.

  1. Everything interfaces
  2. Everything exceptions
  3. We've talked about it.
night girder
mental oriole
#

I don't have an issue with interfaces per say, but when everything is... I do.

night girder
#

Because people got sick and tired of writing the same thing over and over again πŸ˜„

#

But the ML code generation has more to do with "let's see the potential of machine learning and coding".

safe trench
#

me watching this arugment and not understand coding but still being entertained:

mental oriole
night girder
mental oriole
#

Pretty much.

safe trench
night girder
#

I love how it's actually two jokes in one.

#

One dissing that Machine Learning is called "artificial intelligence" and the other that it's just statistics.

mental oriole
night girder
#

Also, if anyone is into physics:

https://www.youtube.com/watch?v=AqwSZEQkknU

Learn more about AI and large language models with Brilliant! First 30 days are free and 20% off the annual premium subscription when you use our link ➜ https://brilliant.org/sabine

In the past few days we have seen a lot of rumours about troubles with AI scaling. In this video, I have a brief summary of recent events, who said what, and why I...

β–Ά Play video
#

I really like Sabine Hossenfelder, but a lot of times it's going over my head.

mental oriole
#

Yup, have to agree πŸ˜„

#

Speaking of "AI" cough prediction models. The hitting the wall is "iirc" (not seen the video) we're hitting the limit where it's getting more expensive to run/train models that can be more accurate in it's working context. And we need a new way of working/ structuring with that kind of data.

night girder
#

Well, OpenAI made a total new model. But haven't released it, because employees rumor that the model is better at certain tasks, but worse at other tasks.

#

and according to video, google and co are reporting the same.

#

So not sure if it's more expensive, or it's a hardware limitation, or a model limitation.

mental oriole
#

Tbh both.

#

because the models get so large, you cannot run them as a user. And I don't want chatty gippity to get my data.

#

so impossible to run them locally.

dire igloo
dire igloo
night girder
#

She hits the nail on the head though; "I am puzzled why these people think this will work, plausible reason is that they need investors" πŸ˜‚

mental oriole
night girder
#

She is poking fun at them because they all ssaid that AI will solve all physic problems.

mental oriole
night girder
#

This is the stuff I am tapping out:

#

🀯

mental oriole
#

The problem with todays AI is that it will just "predict" what the physical model of the world is 😁

night girder
#

I will laugh my ass off if the "AI" bubble really pops.

mental oriole
#

Same πŸ˜„

night girder
#

And that the best the thing will do, is answers on questions on google.

#

or create "art" or "songs" rofl πŸ˜‚

mental oriole
#

noise is art hehe

night girder
#

Ok, finished the video. Verry interesting stuff.

#

And I agree with her.

dire igloo
#

Or any financial bubble tbh

#

Make crypto bros eat shit

night girder
#

Physics is based on data. So far AI to solve physic models etc, it needs to correct data. BUT even the scientists don't have the data yet, so how can AI have it. She gives an example; why did we make a giant particle accelerator (Large Hadron Collider) if AI could have solved this easily? Because AI can't solve it. We need to particle accelerator, to get the data.

dire igloo
#

I love how the bunkbed conjecture was proven false:
Researchers used an AI model and lots of computing time to churn through loads of simulations only to take a step back and solve it with good ol pen and paper maths

night girder
#

Maybe it was better if AI wasn't so hyped up and we approached it with level heads.

#

It's a good start but the future will improve upon it.

#

But hype sells.

pure karma
soft bloom
soft bloom
soft bloom
night girder
#

maybe, not sure. That video popped up in my feed

soft bloom
soft bloom
# night girder maybe, not sure. That video popped up in my feed

Have we discovered an ideal gas law for AI? Head to https://brilliant.org/WelchLabs/ to try Brilliant for free for 30 days and get 20% off an annual premium subscription.

Welch Labs Book Ships December 2024: https://www.welchlabs.com/resources/imaginary-numbers-are-real-high-quality-printed-book-pre-order-ships-dec-9-2024

Welch Labs Posters: h...

β–Ά Play video
#

btw... are there any meta-AI tools?
I mean, like 'ok, we have prediction model that uses natural language - what's next?'
the clsoest thing i found was DSPy

mental oriole
# soft bloom encoding cases in return values is a good option. raising exception is a cheat t...

I'm gonna say this, both ways have it's ups and downs.

  • Return value
    Problem with return value, is that you can ignore it. (god knows what will happen next)
    Unless you're running like a modern version of C/C++ that has a nodiscard tag, so you cannot ignore return values from that function
  • exception
    Ignore it and you crash here and now (which "could" be a good thing)
    You can always claim "Someone elses problem now"
dire igloo
soft bloom
edgy hazel
# soft bloom fireworks

remember when samsung put out an eight hundred dollar phone that could explode in your pocket at any moment we need to bring that shit back

edgy hazel
#

you're asking the wrong questions

tough owl
#

Note 7 my favorite

night girder
#

Exploding Galaxy Note 7 Burns Down Jeep To Ashes

dire igloo
soft bloom
#

it's all plan of israel's intelligence

night girder
# wanton orchid this is extremely wrong

Test-driven development (TDD) is a way of writing code that involves writing an automated unit-level test case that fails, then writing just enough code to make the test pass, then refactoring both the test code and the production code, then repeating with another new test case.

wanton orchid
#

tldr: if you design for a test
it will always be designed to fail around the test

#

it's how you lock yourself into bad designs

#

Also : yes, unit testing is absolutely necessary

night girder
#

You can disagree with TDD, but that doesn't change the fact it exists.

wanton orchid
#

I never said it does not exist

night girder
#

You said what I stated was extremely wrong.

#

While what I said was the literal definition of it.

wanton orchid
#

I said what you are talking about extremely wrong

#

I just came to see messages

night girder
#

All I said is, that's how we developed.

#

And it worked.

#

anyway off to bed πŸ‘‹

tribal kraken
jagged snow
#

Oh that's awesome

tribal kraken
#

That is about $15k for the scanner and robo arm another $15k

#

Would be nice to compare it to machines our resellers have, with similar claimed accuracy

soft bloom
#

But i find that sometimes writing test cases is pretty much like implementing requirements for it, so that when the implementation of the code is there i can just test if it's up to requirements

wanton orchid
# soft bloom It wont be designed to fail around test... That's not the connection

yes it, that you think about it or not, it's how focus and designing work, if you have test in main think, you dont have other around as main purpose, the matter need to stay key otherwise its bullshit design
but I do agree that these "failsafe" coding languages are very well liked because it gives you the ability to code thousands of useless lines that do not give out errors in limited time
"productivity"

wanton orchid
#

but I do understand this is the current bullshit desiging rush methodology for "successful" commercial marketing products that move so much money currently

#

but no wonder our societies are struggling more and more while all this happens,
dont you get that some grounded shit is missing ?

#

it does not actually work

soft bloom
#

business will use whatever brings money

#

and premise of writing tests before actually implementing feature is not one of them

finite ravine
wanton orchid
#

that's why I insist in fucking not confusing these things

#

you need to be fully aware of each
yet each requires different specific skill sets

#

afaik the most obvious of all is regression testing

#

it's the less error prone

#

(and the most valued in production currently)

#

designing is the most complicated one
then comes limit testing
then coding
then production testing
(unit testing is required and include all of them and is a method for testing more than a type of testing)

#

btw implementation documentation and code documentation are again different things respectively

#

and ofcourse interface/application documentation
but that one is tied to product, not dev

finite ravine
#

πŸ˜„

#

the enemy of good tests is often just the management

soft bloom
#

explain limit testing
i was dev in QA and today is first time i hear these two words together

#

i hope that production tesing isn't test in prod lol

night girder
#

Yeah, because that's a best practice, testing in production

#

even better, screw environments. One to rull them all: production.

#

also, lol black friday and tech website goes down.

soft bloom
night girder
#

Not really. But I've heard most of it.

#

Testing is a waste of time. Automation is a waste of time. Environments is a waste of time. Clean code practices is a waste of time.

#

And then they stand crying next to my desk because costumers aren't happy the application is down all day.

soft bloom
#

people want a candy put in their mouth

night girder
#

Just do what makes you comfortable.

#

I think there is a way to still be efficient and have great QA. It's not easy, but possible.

#

You will always sacrifice efficiency for quality. That's the price you pay.

#

And you need to pay QA testers as a company.

#

Because developers think they are above QA testers πŸ˜„ And don't need to do peasant work.

soft bloom
#

some care only about short-term gains. that's where quality doesn't matter as much. but past that... quality has its final say

night girder
soft bloom
night girder
#

in a DAY.

#

And then the blaming started throughout the whole company. The conclussion was: we need more QA.

soft bloom
#

i know company that literally finds cheapest labor across world for QA

night girder
#

So since that day, the company made a 360 turn and started to invest in QA, too late, but not too little. Once QA was good, they fired everyone πŸ˜‚

soft bloom
night girder
#

That's how companies think.

soft bloom
#

bruh

night girder
#

You fix the problem. But after a while you forgot the problem, you see QA as an expense.

#

Then they hit a wall, costumers get angry, they fix the problem again. And repeat.

soft bloom
#

i now think that people who solve problem are value that companies should keep - not the code, not the documentation or tests... people.

#

code doesn't write itself. nor does documentation or tests.
human who solved problem can do it in different language, for new requirements etc

#

unless business is a hungry ethereal being wanting money
it should remember that it's run by humans for humans, and that includes the team

night girder
#

Yeah, tell that to the boss. They don't give a -bleep-

#

They see numbers on papers in colors. Red is bad. Green is good. πŸ“ˆ πŸ“‰

#

If red, start firing people.

twin dew
#

MBAs are taught that people are just interchangeable identical cost centers.

night girder
#

People are a resource for companies. Nothing more, nothing less.

#

Even if you are the best developer, the technical lead of the whole company, doesn't mean jack.

#

If a CEO needs to choose between saving a company and firing one person, decision is quickly made. It's a rational world.

#

If a CEO needs to choose between saving his own ass and letting the compawny go, the decision is also quickly made.

#

They don't give a damn about all the extra hours you've done for the company or anything. You get fired pretty easily.

twin dew
#

But point was, MBA schools teach things that aren't true, and kill companies.
Which leads to stuff like Intel and Boeing.
Where the expensive, experienced people were let go years ago and replaced with new people, and then stuff stopped working because of that.

#

Because the MBAs really thought that straight out of school cheap hires are just as good as the people who had been in company for 20 years.

#

And the resulting brain drain bit HARD

night girder
#

It's all about the πŸ’°

#

experience people cost more than juniors from school. a LOT more.

twin dew
#

For same amount of worktime.
But not for same amount of actual usable work.

night girder
#

we get paid by the hour, not based on actual work.

#

So a company; never thinks like that.

twin dew
#

Yup.
But the profits come from actually accomplished stuff.

night girder
#

Not really.

#

Once everything is up and running, you need to just keep it up and running, at a low cost as possible.

#

If you can manage that, big profit.

#

It happens to games all the time, the games get handed over to a maintenance team.

twin dew
night girder
#

WoW is still making billions as an example but the veterans are gone ages ago.

#

And that game is 20 years old btw.

night girder
#

And that the old veterans left or are fired.

soft bloom
night girder
#

and we know it happened.

#

KSP 2.

#

I think it was Baldur who told me that.

wanton orchid
# soft bloom explain limit testing i was dev in QA and today is first time i hear these two w...

it's not a used terminology because nobody learn to fucking test things correctly and for what sack
you just do "testing" whatever that means for better or for worse
limit testing is similar to coverage testing
but including data integrity control, not only execution pathing/branching control

i.e get all the intrinsic way you system perform and work or does not work anymore
this include internal buffer size checking/testing, loop start and end state and conditions
etc..
let's say you code i<50 for loop
you'll unit test with 49 50 0 1 inputs and check what happens

#

or internal structure size and overflow limits testing

#

like "do I hit this maximum 50000 managed object count, and if I hit it anyway, what happens"

#

the second part is much more important than people may think
because it will show you if you ever confused the system working state for its none working state because of a bug
you will be like "wait it 'works' with 70000 objects wtf, I'm missing something"

#

and it's tightly linked to why unit testing is extremely important

#

you can't assert anything is working reliably if you can't assert each part of it is

#

then production testing
is testing how it behaves and performs with a typical production workload data set
and again assert all the part of it is according to expected AND spec

#

then comes regression testing
which is kind of a "old production" testing
you test for how the typical dataset and limits, typical to current production system (expected to use your newer version), performs compared to what it is currently performing and expected to perform

#

once limit are good, production are good and matching documentation and spec, and no regression is asserted
you are on the clear
good bet you can push it

#

you can't assert regression testing without production testing first, whatever the 'result' is
you can't asset production testing without limit testing first, whatever the 'result' is
and even if all that fails, it's useless because you will need the limit test results for actual debugging

soft bloom
#

i got the thing

wanton orchid
#

load testing is only a part of it
"limit testing" includes :

  • stability
  • load
  • integrity
  • coverage
    but not isolated from each other's (check integrity for each branch, and load)
#

load is also in "production" testing
but not same kind of load

soft bloom
#

and yes, it's not a sphere

wanton orchid
#

I'm aware I may be the only one who is using this testing categorization
but it's the practical one for reasons I explain and others

soft bloom
#

i think i need a brake, i start seeing things...

soft bloom
#

i hate how they are classified classicaly

#

because it's just a mess that makes little sense

#

aside from selling courses

#

it's like they found the least practical way to categorise that is not rising eyebrows

soft bloom
#

I think it looks great with just 16 rays
(yep, it should have filled color inside, not outside...)

#

oh wait, it works fine if i just reverse order of looping through azimuths

soft bloom
#

looks pretty much perfect circle with 3*16 rays

verbal raft
#

i guess AMD drivers arent going to get updated this month

cyan crescent
#

Im planning on making a nas for my family but dont know what program to use. Any suggestions? I kinda want it to be all one system as in my main pc is also my nas but dont know if thats a good idea.

twin dew
#

File sharing is basic part of Windows?
And on anything else, same Windows file sharing server is used (SAMBA)

glossy glacier
cyan crescent
#

Btw, i have 2 18TB Western digital gold HDDs

#

I think they are 18TB, gonna check when i get home

night girder
verbal raft
night girder
#

No?

verbal raft
#

the last update was a whole month ago

night girder
#

So?

#

Don't push out updates just for the sake of pushing out updates.

#

I count 10-12 driver updates for 2024.

verbal raft
night girder
#

So what's the problem? πŸ˜„

verbal raft
twin dew
#

So if 24.10.1 is current, then if two months have had .2:s too, then we are up to 12 now.

night girder
#

24.10.1 WHQL 24.20.19.01 32.0.12019.1028 2.0.317
24.9.1 WHQL 24.20.11.01 32.0.12011.1036 2.0.317
24.9.1 for Polaris and Vega WHQL 23.19.21.01 31.0.21921.1000 2.0.279
24.8.1 WHQL 24.10.37.04 32.0.11037.4004 2.0.310
24.7.1 WHQL 24.10.29.01 32.0.11029.1008 2.0.302
24.7.1 for Polaris and Vega WHQL 23.19.16 31.0.21916.2 2.0.279
24.6.1 WHQL 24.10.21.01 32.0.11021.1011 2.0.302
24.5.1 WHQL 23.40.33.01 31.0.24033.1003 2.0.299
24.4.1 WHQL 23.40.31.05 31.0.24031.5001 2.0.299
24.3.1 WHQL 23.40.27.01 31.0.24027.1012 2.0.299
24.3.1 for Polaris and Vega WHQL 23.19.12 31.0.21912.14 2.0.279
24.2.1 WHQL 23.40.19.01 31.0.24019.1006 2.0.299
24.1.1 WHQL 23.40.02 31.0.24002.92 2.0.294
24.1.1 for Polaris and Vega WHQL 23.19.10 31.0.21910.5 2.0.279

#

So actual 14?

#

Or else 10. (without Polaris and Vega).

twin dew
#

And then there have been several releases that aren't in the normal numbering, as they were kind of "beta" releases of per game drivers.

#

For example 24.10.37.10 preview driver for Space Marine 2 and Black Myth: Wukong

night girder
#

Why do some games get special drivers? And others don't.

twin dew
night girder
#

Did AMD put driver out for Stalker 2?

night girder
#

Or do the developers need to pay AMD some fees or lobby to get support.

#

Seems to arbitrary and mostly aimed at tripple A games.

twin dew
#

When the game devs have worked with AMD in advance?
To get day 1 driver?

No idea what is needed to get that kind of co-operation.

night girder
#

afaik, SF didn't get special update either.

verbal raft
#

here i am preparing to test a whole bunch of stalker 2 perf mods

#

but then

#

the update drops(finally)

night girder
#

Yeah, I was reading patchnotes too.

#

650 different bugs and issues

mental oriole
#

Access violation just screams bad programming.

night girder
#

Also, potential memory leaks... it might be one. but maybe not. we are not sure. we patched it up nonetheless.

verbal raft
#

did we patch it WDKπŸ€·β€β™‚οΈ BUT we know our players will eventually find out:)

night girder
#

Haha, yeah something like that. "Let us know if it helped. Else we change around some more code."

verbal raft
#

but this update should be a step the right way.i'm not that mad either since there is a literal W*R going on over there

night girder
#

I am thinking to buy it but not sure.

#

What's up with the voice actors? Why do they all sound so british?

verbal raft
night girder
#

Oh there is ukrain voice acting.

night girder
#

It's not immersive.

#

Unless there is a reason we speak british, like a UK team went to chernobyl to help the zone out or something. But still the citizens of the zone should have accents lore-wise.

soft bloom
#

a bit of look into how to work with UE5, including Lumen
https://www.youtube.com/watch?v=ds_jC_Nv380
(also looks like they sort of leaked what is being teased in recent community events)

This talk will contain multiple advanced and obscure techniques Croteam has developed for content creation. These techniques will come in useful for technical content designers who want to make their development work easier and game more optimized.

You’ll learn about practical tools for handling Lumen and non-Lumen lighting coherency; how to cr...

β–Ά Play video
night girder
#

I've put well over 40 hours into STALKER 2 this past week, grinding my way through the gigantic open-world survival horror shooter to get my review done for launch day. For all of that time, I played the game with its Ukrainian voice acting and subtitles; after all, it's the native language of the developers at GSC Game World who made it, and it's also the one that makes the most sense for a game set within the Chornobyl Exclusion Zone in Ukraine.

soft bloom
#

it's always more interesting and immersive to hear native voices.
be it The Witcher (Polska), Tomb Raider (Espanol with modern locals and Aztec(?) with older ones) etc
different languages and accents

soft bloom
#

also it's very articulate, which is used for rich and villains

#

and, i am probably digging to deep, the north/central Ukraine is a place where more articulation is used, compared to west, for example

#

I pretty much can't understand people from west when they speak first couple sentences

#

dialects used in Transkapatia are, well, dialects. but even without unkown words there's considerable difference to how it sounds

night girder
#

It's a common feedback about Stalker 2. The voice overs.

#

A colleague of mine, though, has been playing in English, and told me that dub of the game is pretty cheesy β€” an impression I also got when catching bits and pieces of dialogue watching video reviews of the Xbox and PC exclusive this morning. Curious, I booted up the game, switched the voicework over to English, and ran around a base full of NPCs to talk to.

And, uh. Wow.

verbal raft
#

does anyone still compress files with WINRAR/7zip? oh well this is going to take a while

night girder
#

Don't use 7zip.

#

WinRAR or Windows File Explorer seems a bit safer.

verbal raft
#

i'm using WINRAR

soft bloom
#

every time i see winrar i curse

verbal raft
jagged snow
jagged snow
#

I'm a 7z fan

night girder
#

7zip only shows innocent file and hides malware.

#

WinRAR and Windows File Explorer shows both the innocent file and harmful file.

#

When opening our sample combined.zip with 7zip, it will only display the contents of the first archive (pt1.zip), showing only the β€œbenign” first.txt. A warning such as β€œThere are some data after the end of the archive” may appear, but this is easily overlooked.

#

WinRAR, on the other hand, reads the second central directory and displays the contents of the second archive (pt2.zip), including the β€œmalicious” second.txt. This makes it a unique tool in revealing the hidden payload, which attackers rely on when targeting specific systems.

#

Windows File Explorer struggles with concatenated ZIPs. It may fail to open the file altogether or, if renamed to .rar, will display only the β€œmalicious” second archive’s contents. In both cases, its handling of such files leaves gaps if used in a security context.

jagged snow
#

WinRAR is also worse in terms of compression effeciwncy and speed

night girder
#

Posted: November 7, 2024 (so it's recent)

jagged snow
#

Its not a 0-click vulnerability and still requires you manually extracting a malicious archive

night girder
#

No?

#

You double click it; it shows "good content".

#

Bad content is hiding in background to be executed.

#

This makes it a unique tool in revealing the hidden payload, which attackers rely on when targeting specific systems.

verbal raft
night girder
#

**Windows File Explorer and WinRAR: β€œSmoked Out” the Trojan **

On the other hand, opening the same attachment with the built-in Windows File Explorer or WinRAR fully exposes the hidden danger. Both tools display the contents of the second archive, including the malicious executable SHIPPING_INV_PL_BL_pdf.exe, which is designed to run and execute the malware.

jagged snow
#

@night girder I am so confused what you're trying to say

rustic panther
#

Note that this has been fixed already, update 7zip to 24.07 or later

stray badger
night girder
jagged snow
stray badger
#

GSC had to redo all the voice lines when they moved to Czechia

stray badger
#

Cause their voice actors didnt leave ukraine

night girder
#

yeah, it's fixed after a 3rd party company found out.

#

while the other tools didn't have the issue. Because they didn't do dumb dumb stuff.

jagged snow
night girder
#

Literally I am not goign to fight over this.

#

It's your system. Do what you want.

jagged snow
rustic panther
night girder
#

Bro, 7zip dropped the ball.

#

Just face it. Ok they fixed it. Good for them. They had vulnerability.

rustic panther
#

Also, isn't 7z open source?

jagged snow
# night girder OTHER PROGRAMS DIDN'T DO THIS!

Every single piece of software ever written is vulnerable to some sort of attack
Your hardware is fundamentally flawed and insecure
That in and of itself is not a reason to stop using it

rustic panther
jagged snow
night girder
stray badger
rustic panther
#

I think you should contribute to the repo @night girder, since you appear to know better than the current developers

jagged snow
night girder
#

Why is everyone so butthurt?

stray badger
#

Did you know that Windows had a level 10 vulnerablity in the print system!?!

night girder
#

Just because I said 7zip failed one thing that other didn't.

stray badger
#

Windows cannot be trusted!!

night girder
#

It's just facts.

rustic panther
#

I'm not "butthurt", I just want to see you put your money where your mouth is :V

night girder
#

And make your own conclussions.

night girder
jagged snow
stray badger
willow pike
#

the problem is you are demonstrating ignorance about how vulnerabilities are found, reported and fixed

night girder
#

Just quote where I literal said: "I can do this better than the 7zip developers did".

rustic panther
#

Because it's really easy to go "Durrrr they're so stupid why would they ever do that if I were in charge they'd never do that!!!!!" when you don't actually take the responsibility and do better

night girder
#

Get out. That's not this discussion.

rustic panther
#

Nah

night girder
willow pike
#

that is terrible advice

jagged snow
night girder
#

That's how it started. All I said. WinRAR or Windows File Explorer are a "bit" safer.

#

Wait.

#

I said SEEM.

#

So that's even more subjective.

jagged snow
jagged snow
stray badger
jagged snow
willow pike
#

i am afraid you don't get to state an absolute like "do not use 7zip" then get mad when people challenge you on this

night girder
#

I gave you the article. Read. Or don't.

willow pike
#

i read it yesterday

#

i know the 7z code base is unreadable weird shit that's maintained by like two people

verbal raft
jagged snow
night girder
#

πŸ€¦β€β™‚οΈ

twin dew
#

I finally switched to NanaZip (7zip fork with Win11 features etc.) some time ago.

willow pike
#

vulnerabilities happen in all software; what really matters is how people respond to them. if 7z refused to fix the issue, we would have a problem and everyone would be yelling "don't use 7z". this happens quite often with companies that don't understand what a bug bounty is

rustic panther
#

I find it very interesting that you're intent on dying on this hill while also sounding pretty uninformed with the conclusions you seem to be making

dire igloo
#

NIST NVD has 52 entries for WinRAR and 25 for 7zip

twin dew
#

But that switch was for those UI reasons.

willow pike
#

also, if this makes you scared of 7z, i beg of you not to read into the many failings of windows over the decades

verbal raft
jagged snow
#

Database of vulnerabilities & security flaws

dire igloo
verbal raft
dire igloo
#

This should be whitelisted ngl

#

How does one whitelist all .gov sites?

night girder
#

Perception Point security researchers contacted 7zip developers to address this specific behavior of concatenated ZIP files. The developer confirmed that it is not a bug and is considered intentional functionality – meaning this behavior is unlikely to change, leaving the door open for attackers to continue exploiting it.

#

But I am not allowed to question the actions of developers behind some software. Or even question the software itself.

verbal raft
#

also why is every WINRAR VS 7zip benchmark done on some 10year old garbage PC?

rustic panther
#

So please, question the software. But for all our sakes, question the software in an issue report on that software's issue tracker

night girder
#

Doesn't inspire confidence in said software.

twin dew
#

But not stated in changelog in any way,.

night girder
#

The fact a developer said it's not fixable. And now it's "fixed".

twin dew
#

And not in the source extract between 24.06 to 24.07.

verbal raft
#

i think that this is a pretty good compression ratio (but IDK how 7zip would do here)

rustic panther
#

Then I would highly suggest emailing CERT-EU with evidence of a working exploit on those principles on 24.07 or later

jagged snow
#

And remember, lower is better

verbal raft
#

🀯hehe

jagged snow
pure karma
#

how is 15% compression better than 70%?

pure karma
jagged snow
night girder
#

** CVE-2024-11477 Detail **

7-Zip Zstandard Decompression Integer Underflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the implementation of Zstandard decompression. The issue results from the lack of proper validation of user-supplied data, which can result in an integer underflow before writing to memory. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-24346.

I don't think this is even the CVE of that issue. The issue is Concatenation. So not even sure what Ttree is on about.

#

But I don't have knowledge according to Ttree.

dire igloo
#

I'm clueless here. How is concatenation itself an issue?

twin dew
#

7-Zip 24.07
The bug was fixed: 7-Zip could crash for some incorrect ZSTD archives.
So not related to this "multiple archives in same file"

night girder
#

Don't think so no.

twin dew
night girder
#

So, there is no CVE for it. It's not fixed.

twin dew
#

To bypass antivirus checking etc.

jagged snow
twin dew
#

But it isn't really bug to not handle that kind of spec-noncompliant file in way that would read both/all of them.

night girder
#

You can read the article fight or flight. And just do what they do to check it out yourself.

jagged snow
#

I did read the article πŸ’€

night girder
#

It's just putting two zip files together. Both get's extracted, but only one is shown.

twin dew
#

And WinRAR doesn't handle it "correctly" either.
It just shows the LAST concenated file.

#

When 7zip only shows the FIRST.

twin dew
#

And Windows doesn't read it at all.

night girder
#

People at work, open zip, get to see harmless file. Think all is good. And in background there is malicious file ready to get executed.

jagged snow
#

Nothing gets executed when you extract it

night girder
#

So if they can combine that + extra vulnerabilities shit can go wrong.

jagged snow
verbal raft
night girder
#

The malicious executable SHIPPING_INV_PL_BL_pdf.exe is identified as a variant of a trojan malware family that leverages the AutoIt scripting language to execute a range of malicious activities. This trojan is designed to **automate malicious tasks **such as downloading and executing additional payloads, which could include other types of malware like banking trojans or ransomware

night girder
rustic panther
#

Letter, I'm 100% serious when I say that if you think that there's an improvement to be made, the tech channel in a funny factory game discord is the wrong place to discuss it. Please, I implore you to continue this discussion on the 7zip github

dire igloo
#

Yeah and email encryption is unsafe cuz you can bypass it - by attaching html code as MITM that'll send the decoded email to you upon execution.
And it's automatically executed when you enable HTML elements of an email (which you shouldn't anyway)

verbal raft
twin dew
night girder
#

It's a cyber security company, if they warn us for stuff, sorry, but I take them or their word.

#

Hell, I take their word over most words in here.

twin dew
#

7zip doesn't allow you to see that there is extra.
But neither would WinRAR, if you concenated 3 zips, with that payload in the middle one.

#

Or in first one.

twin dew
# night girder Winrar warns.

No.
It doesn't.
It just shows the LAST ZIP in the concenated file.
Which in the specific instance contained the malicious file.

#

7zip works on the FIRST zip in concenated file.
And only the first.

WinRAR only works on the LAST zip in concenated file.
And only the last.

#

Neither shows both in concenation of two zips.

verbal raft
twin dew
#

And if you concenated three zips, first as legit, second as malicous, last as legit, neither would show it.

rustic panther
#

According to this article, the only one that manages to properly get the threat is Perception Point's Recursive Unpacker, which is convenient because Perception Point is also the owner of that blog

twin dew
#

The "Fix" is that antivirus programs that look into archives are updated to check all possible archives in concenated file.

rustic panther
#

Or, alternatively, that (IIRC, I'm not good with zip files internally) the entire CD gets ignored and the unzipping program does all the work done there again just to be sure

dire igloo
# verbal raft i do NOT think the avarage person can tell the difference between a harmaless an...

Reminds me of one of the worst and funniest Luca app security issue - an app designed to track contacts during COVID for events/locations/etc so you wouldn't have to leave your contact data out on the table.

If you tested positive, the local health departments could request the location's present guests from your stay and download the reports as an excel document.

Turns out that you as a user could modify your user data in a way that upon automatic creation of the Excel export, it'd be transformed into a macro that auto-runs.

Developer said it's a non-issue cuz "everyone knows you shouldn't enable macros in Excel"

rustic panther
#

Can't you sanitize that data?

twin dew
#

So what should 7zip do?
Work on all the concenated archives in file?
Against archive format spec?

Which no other archiver does either?

rustic panther
#

Like how do you prevent lil Johnny Macros from popping up if you can't sanitize your input data

dire igloo
night girder
#

Baldur, I get to see all 3 files.

#

merged 3 zips together, unzip and this is what I get.

twin dew
#

Merge != Concenation.

rustic panther
#

Actually, why wouldn't they just throw out a CSV

night girder
#

let me concenate

twin dew
#

Because that writeup is very badly done.
As what WinRAR is doing isn't any better than what 7zip is doing.
Just that the specific malware was written to go around 7zip, but not WinRAR.
And doing it other way would work against WinRAR users, but not 7zip users.
And doing that concenation of three would work against both.

rustic panther
#

Unless Excel automagically manages to extract macros from a CSV file in which case huh

twin dew
#

Merge combines the contents of the three files, into one archive.
It doesn't just slap them bit-by-bit behind each other like concenation does.

dire igloo
#

The whole Luca app was a disaster

rustic panther
#

Yeah but like, what would you use for sending tabular information otherwise if you didn't have the time or space to set something smart up?

#

To me this sounds like they went for the "simple" solution (Overengineered and underdesigned)

dire igloo
#

You gotta understand: the people there weren't smart programmers, they were smart businessmen.
They saw a global crisis and managed to make a huge profit off it

verbal raft
twin dew
#

And only the first file got extracted from concenated file on right-click and extract too.
Like that shows.

As expected when it only deals with that first ZIP header in file.
While WinRAR only deals with last ZIP header.

dire igloo
dire igloo
twin dew
#

Windows ZIP functionality errored twice on the file.

#

When as .zip
And when renamed as .rar, it extracted both.

#

Even when it was zip.

verbal raft
night girder
#

Winrar gives you warning. Like I said.

twin dew
#

So Windows internal ZIP notices both headers, but doesn't deal with it correctly when extension is .zip.

rustic panther
twin dew
night girder
twin dew
#

That was NanaZip/7-zip

night girder
#

Ok, but that's what researchers also said.

dire igloo
twin dew
#

Like the article said.

night girder
#

It can give a warning about extra data.

twin dew
#

Yes, 7zip does that if the first archive doesn't end at the absolute end of the actual file.

twin dew
rustic panther
dire igloo
twin dew
#

WinRAR shows nothing about anything before the LAST concenated archive,.

dire igloo
#

I wouldn't be surprised to hear that they didn't know how csv worked

twin dew
#

So If you concenate 10 archives, WinRAR deals only with the LAST one, and ignores the 9 before it.
7zip deals only with the FIRST one, and ignores the 9 after it, and gives that generic warning.

night girder
#

What does windows explorer do?

jagged snow
#

Breaks

twin dew
#

And Windows would happily extract all 10, on Extract All, if you had renamed it to .rar instead of .zip.

#

And would throw 10 identical errors if still .zip.

#

One after another as you click ok.

jagged snow
#

Man, when did this channel get so much less friendly than I remember it?

night girder
verbal raft
#

wait...what

jagged snow
night girder
jagged snow
#

Because it for a long time has been one of my favorite places on the internet

night girder
#

I miss a few people though. They all left because of it.

rustic panther
night girder
#

Amber dissapeared.

verbal raft
jagged snow
#

And my life got too busy for me to talk here, now I'm coming back occasionally and it just feels pretty hostile

dire igloo
#

Traffic announcer: "we have an idiot driving on the wrong side on A7"
Driver: "ONE?! THOUSANDS!!!"

dire igloo
night girder
jagged snow
rustic panther
#

It's probably gotten a lot bigger

jagged snow
jagged snow
rustic panther
#

I dunno, I think that this place isn't particularly toxic but that's more because there's no randomly throwing slurs around or bullshit like that

dire igloo
#

We're talking Q4 2020

verbal raft
twin dew
# night girder Go read: perception-point.io/blog/evasive-concatenated-zip-trojan-targets-window...

But basically the basic premise in this is faulty:
The writes only deals with concenation of two zips, with the malicious as the second one.

If the malicious was first, 7zip would show it, and WinRAR wouldn't.
Windows Explorer wouldn't change.

And if you had that benign, malicious, benign second time set of three concenated zips, neither 7zip or WinRAR would show the malicious files.
And Windows Explorer wouldn't change.

night girder
rustic panther
edgy hazel
#

I'm kubuntu pilled now

twin dew
#

And dealing with intentionally malformed files isn't something that program should be coded to do, except to not crash or execute code.

twin dew
rustic panther
#

Yeah

night girder
#

Because of hostilities. And people calling them more or less dumb.

twin dew
#

Basically there WAS bug in how 7zip handled malformed Zstd streams, which would crash 7zip, and possibly allow for code execution.
But that is in no way related to the concenated zips thing.

#

Which was fixed in 24.07.

night girder
#

'cat' is not recognized as an internal or external command,
operable program or batch file.

night girder
#

hehe I wonder what OS I am using.

verbal raft
#

am i just stupid or does this just not work

rustic panther
#

I don't know what you're trying to do?

night girder
verbal raft
rustic panther
#

Hm

twin dew
verbal raft
#

oh,wait when i double click it tries to start compressing

verbal raft
twin dew
#

You need to run it once via Start Menu.

#

Now that I checked.

night girder
#

Why did you pick nanazip Baldur?

twin dew
#

And is fully Windows 11 compatible.

night girder
#

What features you look for?

twin dew
#

Unlike main 7zip.

rustic panther
verbal raft
night girder
#

The windows explorer does what it needs to do for me.

rustic panther
#

I've never had any issues with it, but I've never been a poweruser

twin dew
jagged snow
twin dew
#

And no intention for that single dev to ever support that.

night girder
#

So what extra features does nanazip give over windows file explorere zip?

rustic panther
#

Ahhhhh, those that I've registry'd off because I hate them and no program supports them

#

Check, no wonder I'm confused

twin dew
jagged snow
#

I've just gotten in the habit of shift+right click

#

Which gives you the full right-click menu

twin dew
#

7zip was the only thing I ever needed to go into the "full" legacy menu for.

glossy glacier
# cyan crescent 1: around 30TB minimum 2: 24hrs per day 3: very 4: around 6 5: yes

So actually something serious.
If you want 24/7 access over the internet it's probably best to use a dedicated machine.
Next round of questions :
Do you have an old/unused system?
How active will the users be? Just some files here and there or hardcore use?
Do you want DIY or mostly-ready built?
Only file share or other services too?

rustic panther
cyan crescent
twin dew
#

And I hated the way programs added stuff into that legacy menu willy-nilly in the main step, bloating it insanely if you didn't manually edit stuff with third party programs.

verbal raft
verbal raft
twin dew
#

Or see if restarting helps?

glossy glacier
verbal raft
twin dew
#

And I never did try having both 7zip and NanaZip installed at same time, that could also cause issues depending on how that fork is done in backend.

cyan crescent
#

What is the main differences between the 2?

twin dew
#

And they are still pulling in from 7zip github, so I would expect them to keep those changes to minimum if possible.

twin dew
stray badger
verbal raft
twin dew
#

Ok.

cyan crescent
#

Well i dont know which to pick. Not well versed in that department

glossy glacier
#

I'm speaking of main use. Most software supports both

night girder
#

And you installed it with MS store? Lightning?

twin dew
#

I did too

verbal raft
#

MUHUHAHAHUHUHAHAHUHUHAHUAHHAHAUAHHAUHAUHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

rustic panther
#

o

verbal raft
#

Oh,and ignore evreything but the speed

twin dew
#

That it errored out without compressing anything?

verbal raft
#

but i do want to get it working

night girder
#

Seems to work fine.

twin dew
#

Have you disabled Windows Firewall?
Seems to cause install failure for some reason only MS knows.

#

The service for it.

night girder
verbal raft
#

maybe this has something to do with it

night girder
#

subscription active hehe

twin dew
#

This needs to be running during install.

night girder
#

Baldur, doesn't lightning have nanazip installed already?

#

That's an issue that happens during install.

pure karma
twin dew
#

It is running for me, even when it isn't in use.
But Kaspersky doing stupid shit wouldn't be weird.

verbal raft
#

its like 2x speed of winrar

night girder
#

See, nanazip is installed.

twin dew
night girder
twin dew
#

But more likely that Kaspersky is the one blocking the functionality.

night girder
#

App installation failed with error message: error 0x800706D9: While processing the request, the system failed to register the windows.firewall extension due to the following error: There are no more endpoints available from the endpoint mapper. (0x800706d9)

#

If you see that, that's related to firewall.

twin dew
#

If you are just blocked form accessing drive roots inside NanaZip

#

And everything else works.

verbal raft
night girder
#

What is the warning in Kasperky? What does it tell you?

twin dew
night girder
twin dew
#

Part of reason moving away from 7zip too.

verbal raft
night girder
#

And it's integrated into the OS, so more lightweight

night girder
verbal raft
#

uses less RAM and thats all i care about

night girder
#

is it lighter and has SAME coverage as windows defender?

night girder
#

That doesn't make much sense to me. You want a good anti virus.

#

For all you know it doesn't use much RAM because it's not as secure as windows defender.

verbal raft
# night girder That doesn't make much sense to me. You want a good anti virus.

Kaspersky vs Windows Defender: Test vs Malware and Ransomware with 600+ Malware Links. Do you need a 3rd party antivirus or stick to windows defender? This video should highlight some of the differences.

Is Kaspersky safe to use? My thoughts: https://youtu.be/QfSJamWQPnM
Windows Defender vs Ransomware (with offline test): https://youtu.be/ZbYx8...

β–Ά Play video
#

this is the latest file anti virus report:
Event: Object not processed
User: DESKTOP-MLR6QFS\PC
User type: Initiator
Application name: BackgroundDownload.exe
Application path: C:\Users\PC\AppData\Local\Temp\vus123e4.ky2\resources\app\ServiceHub\Services\Microsoft.VisualStudio.Setup.Service
Component: File Anti-Virus
Result description: Not processed
Object type: File
Object name: Microsoft.VC.14.42.17.12.Tools.HostX64.TargetX86.base.vsix
Object path: C:\Users\PC\AppData\Local\Temp\vfshljzp\Microsoft.VC.14.42.17.12.Tools.HostX64.TargetX86.base.7C1DF022FD715FF3098C
Reason: Size

night girder
#

video doesn't show what they have enabled on windows OS.

verbal raft
night girder
#

There is so many things you can toggle on and off now for Windows when it comes to security.

#

oh and this one is also pretty cool I guess:

verbal raft
verbal raft
night girder
#

depends on what you have enabled I guess. Just saying Windows made improvements over the years making 3rd party a little more obselete imo.

verbal raft
night girder