• 4 Posts
  • 182 Comments
Joined 2 years ago
cake
Cake day: June 7th, 2023

help-circle
  • This is basically me every night. Unless I go to bed at 3am, I usually toss and turn for an hour or more. So, I listen to audiobooks. Nothing heavy, usually just sci-fi or fantasy. Basically cotton-candy for the mind. Unless I have a good lecture going, the Great Courses stuff is soothing. But, that usually distracts me enough that I finally fall asleep. I use a single ear bud in my right ear and set a sleep timer so that the book shuts off after a reasonable time. That usually gets me close enough to sleeping that I can finally get the rest of the way.

    The only downside to this plan, is when you get a really good book, with a good reader and you start getting towards the end of the book. The temptation to go just one more chapter is hard to resist.


  • Overall, love it. We had a hybrid RAV 4 and wanted to move to a larger vehicle. When we discovered that Toyota was releasing a hybrid Sienna for 2021, we jumped at it. We get ~35mpg on average. And we’ve put just a bit over 55k miles on it since we got it. Maintenance has mostly been routine, though we did have an odd issue with one of the sliding doors filling up with water. According to the tech at the service center, there is a drain which was clogged and needed to be cleared. This was likely exacerbated by the fact that it’s parked outside, in a wooded area. So, it sees a lot of leaf litter. And that is one down side, the back hatch can accumulate leaves and crap in the space between the top of the door and the body of the vehicle. Annoying, but you just have to clean it out on the regular. The adjustment rails for the rear seats are also hard to clean, if anything gets in them. So, that can be annoying.

    As for performance, it moves well enough. It’s a mini-van, so you’re not going to beat a small car off the line, but you do get up to speed at a good clip. The turning radius is surprisingly narrow for such a large vehicle. At speed, the vehicle feels stable and handles ok. I’ll also say that the adaptive cruise control is insanely addictive. I’ve been driving in traffic this week and I can go a long time without touching the pedals. I’d also recommend getting to the trim level where you get the backup camera with the false overview of the vehicle, makes parking super simple.

    We mostly use it for routine tasks like getting groceries or taking the kids places. We also go camping regularly and we can pack all our stuff into the back and put the kayaks on top. Its not a vehicle I’d take off road on anything challenging, but it handles unpaved roads ok.

    So ya, we’ve been happy with it and I’d give it a recommendation.



  • One issue you have glossed over is the closed ecosystem of Bambu Labs. Maybe this won’t come back to bite owners in the future, but it’s a risk you take on when you buy a Bambu printer. There were recent concerns that they are moving in this direction. And that you may end up with a very expensive paperweight, if you don’t pay a subscription fee. Most of the other systems are far more open, and don’t put you behind that eight ball. That may not be a risk you care about, but it’s one of the reasons Bambu wasn’t even in the running when I bought a new printer recently. I’ve seen too much enshitification of good products to want to run that risk.


  • Bitcoin is a ponzi scheme with a really long time horizon. In a way, any fiat currency kinda is as well. The difference is that a government backed fiat currency like the US Dollar is backed by the US Government saying “you will accept the USD, or else”. That backing keeps the game running. Bitcoin has nothing like that. The only reason it keeps going is because of speculation, money laundering and the purchase of black market goods.

    So, as long as you can go buy drugs or move money across borders with Bitcoin, it will have value. As long as it has value, some folks will speculate on it. That can keep prices up, right up until it doesn’t. So, as is always the case for speculative assets, caveat emptor.


  • I happen to be a prime example of how bad US Rail is this week. I’m taking my son from near Fredericksburg (the real one), up to Ballston for a summer camp. We have a couple options:

    1. Drive
    • Distance: ~70 miles one way, ~140 round trip
    • Time: 1 hour and 45 minutes one way, with traffic. ~3.5 hours round trip.
    • Cost:
      • 4 gallons (US) of gas @ $3.50/gal: $14
      • Wear and tear: estimate at 0.5 gas cost: $7
      • Parking: $11
      • Total: $32/day
    1. Virginia Railway Express (VRE) and Washington Area Metro (WMATA)
    • Distance: N/A
    • Time:
      • Drive to Fredericksburg station: 20 minutes
      • VRE (Fredericksburg to L’Enfant station) - 1 hour 20 minutes
      • WMATA (L’Enfant to Ballston) - 20 minutes
      • Total: 2 hours one way, 4 hours round trip
    • Cost:
      • Drive: we’ll just ignore this, it’s close enough to zero.
      • VRE: $23.56/person * 2 people: $47.12
      • WMATA: $3.45/person * 2 people: $6.90
      • Total: $54.02/day

    So, for the low, low cost of about 1.68 times the cost of driving, we can take slightly longer to get to our destination and have zero control over our schedule, which makes the actual time devoted to travel considerably longer. We tried the public transit route last year, and it meant leaving earlier in the morning (about 30 minutes) to catch a train to get us there on time, and getting us home around 45 minutes later. And this is right around the US Capitol, which has some of the better transit options. Needless to say, we’re driving this year.

    I really want to be able to take transit, but it’s basically dead in the US. Earlier this year, I needed to go to Boston for work. Catching a train from Washington, DC to Boston meant an 7 hour train ride (using the “high speed” Acela line) at ~$500 round trip. Flying was 1.5 hours and cost ~$300 round trip. Wanna guess which option I used?

    Basically, all of the incentives are stacked against transit options in the US. Except within certain metro areas, driving or flying is always cheaper and faster. Yes, inside those metro areas, public transit can be great. I used to work in Washington, DC and used the VRE I mentioned earlier to get there and then WMATA or the Capital BikeShare to get to my office. That was great, since I didn’t have to drive into DC every day, which sucks big donkey balls. But it probably wasn’t cost effective and wasn’t really time efficient either.



  • I have it on good authority that you currently have a project idea which you can use to pick one (or more) of those paths and start learning. ;-)

    For example user management in studio3T

    Not sure how I missed this on my first read of your post. But, this looks like a fancy front end to making MongoDB calls. That makes life easier, MongoDB has a well documented API and a driver for C#. As an aside, if you want to get really good at PowerShell, getting a basic working knowledge of C# and .Net in general is really helpful. For the lazy (and I always like lazy), there’s even a pre-built MongoDB module on the PowerShell Galley called Mdbc. There is also the Project’s GitHub Page which has a lot of useful info.

    Granted, this path likely means learning enough about MongoDB to create/delete/modify users. But you came here expecting a load of homework, right? Also, this is a good excuse to spin up a docker container running MongoDB and go hog wild breaking the fuck out of it (just call it “research” if management asks). And who doesn’t love breaking stuff?

    I’d also note that you may be able to get some help along the way by capturing the network traffic to the server caused by the Studio3T GUI. WireShark can capture the traffic to/from the DB server and you can read that to reverse engineer some of the calls you care about. Just, make sure you talk to your security folks before you download/install WireShark. If they are worth their salt, they’ll understand an engineer installing/running wireshark, it just makes their day easier if they know the alert is coming first. Assuming the GUI isn’t complete shit, it may encrypt traffic. This can be dealt with by using the SSLKEYLOGFILE environmental variable. In most cases, this results in the TLS keys being saved to a file and that can be imported into WireShark.

    Good luck, and have fun!



  • Theoretically, browsers could even stop from the JS engine from being started for the site in the first place.

    The NoScript extension is basically this. Most of the client side stuff is off by default and you can enable it per-domain. It breaks a whole lot of websites, but often in ways where the main content of a website is still readable. Over time, you can build up a list of “allow by default” domains and most of the web you care about works. Though, you may have to spend a moment or two sorting out permissions when you visit a new site.


  • There are a few options:

    1. Use AutoIT or some similar automation framework. Generally, this is pretty easy and gets the job done. Your security folks may hate you (AutoIT binary hashes are basically all assumed to be malware IoCs at this point),
    2. Depending on how the GUI works, you may be able to reverse engineer the calls made by the application and just make those calls yourself. For a Web UI, you can use something like BurpeSuite or even just the FireFox developer tools to catch the web calls and then modify/replay those as desired. For a console application, it could be trickier, as you may need to either load the software’s libraries (DLLs) or figure out database calls. It all depends on how the user data is stored and updated.
    3. Using P/Invoke you can load several functions from the Win32 API, specifically FindWindowEx and EnumChildWindows to locate the GUI application and any specific form items you want to manipulate (e.g. TextBoxes to fill, Buttons to click). You can then modify properties or send clicks. You’ll probably hate yourself at the end of this project, but you’ll learn a lot.

  • That actually sounds like a reasonable response. Driving assist means that a human is supposed to be attentive to take control. If the system detects a situation where it’s unable to make a good decision, dumping that decision on the human in control seems like the closest they have to a “fail safe” option. Of course, there should probably also be an understanding that people are stupid and will almost certainly have stopped paying attention a long time ago. So, maybe a “human take the wheel” followed by a “slam the brakes” if no input is detected in 2-3 seconds. While an emergency stop isn’t always the right choice, it probably beats leaving a several ton metal object hurtling along uncontrolled in nearly every circumstance.


  • do any of you hate how self-hosting services like photo- or document-management systems, or even a simple rss tool, forces you to sort your stuff out, and put your decades old files in order?!

    What is this “sort” thing you speak of? I don’t sort anything, I have NextCloud syncing my entire photos, videos and documents folders and they are just as messy as ever. Granted, I do go through my photos and videos once a year and dump them in a folder named for the year they were taken. Occasionally, I’ll go hog wild and try to sort some of a year’s photos/videos into folders named after events. Though, that hasn’t happened in a number of years. I setup NextCloud so I could have everything synced to my own server and just forget, not have to deal with labeling my data.

    As for bookmarks. I already keep those in folders; but, I don’t sync those. I use my desktop far more than I use my phone for web browsing. And the types of things I use my phone for (mostly recipes), I just keep bookmarked there.



  • Ya, sadly there is still a lot of useful content in the technical subreddits. So I find myself ending up there via search engines on a fairly regular basis. But, I specifically use the Redirector plugin for Firefox to auto-magically force the use of old Reddit. If I hit the site on my work computer, I’m quickly reminded about why I quit the site.