Lain

Contributor
  • Content count

    41
  • Joined

  • Last visited

  • Days Won

    4
  • Coins

    150 [ Donate ]

Lain last won the day on May 15

Lain had the most liked content!

Community Reputation

4 Neutral

About Lain

  • Rank
    Lurker

Recent Profile Visitors

65 profile views
  1. Lain

    Will you be getting the new iPhone Models?

    Probably not. I'm really not a huge fan of Apple devices as a whole (Except the 2017+ Macbook Pro and iPads). Android phones are my shit, so if anything, that Librem phone is what I'm after. Or, if anything, a cheap Chinese android phone like the new Xiaomi. But, I am considering getting a new iPad. My Mini 2 is probably going to lose support soon, it's a few years old, and Apple stopped selling the Mini 3, so this one is probably next in line. The Mini was the perfect size factor for me, so maybe I'll get the 4 when 5 gets released. But as far as phones go, nah, cost-efficiency isn't that great.
  2. Lain

    Net Neutrality - Status

    I'm looking from a more economic standpoint, because if people really want their net neutrality, they can protect it themselves without needing laws to do it for them. VPNs, VPSes, I2P and other meshnet protocols exist to evade censorship and stop the throttling of certain services, if the need arises. People just don't seem to know about it, that's all. Since I'm not American, take my opinions with a grain of salt. I'm Canadian, so a bit further North, but net neutrality wasn't protected in the U.S until very recently. With the threat of it being taken away, people are scared but don't seem to remember what it was like in the past. ISPs will not simply up the price on a certain service, like people say they will. It's a simple fact of economics. You know why? Because another competitor can just say "Hey, I won't throttle your Netflix, instead, pay a 3$ premium on your internet plan (while no plans have any form of throttling)' and after only an hour, the ISP that throttles will lose about 80% of its client-base, even if their base price is that three dollars cheaper. Call up your ISP, you can have fun with this one. Tell them you're going to cancel because there is a better plan in your area, or someone set up their own infrastructure and offers a better pricing for the service. Watch as your ISP shakes in rage and offers you a 20% discount on your plan. If they don't, just hang up, you don't need to cancel. You won't even need to have to specify any details about the plan in question, assuming it exists, but this just proves that net neutrality doesn't really have any effect on whatever premium your ISP is giving you. If people were genuinely concerned about the well-being of their internet beloved, they would look into stuff like I2P or Zeronet. The fact of the matter is, they just don't. They can cry all they want, but if you tell them about alternatives to protect their own neutrality, or link them a guide to create a neighborhood meshnet that everyone can use, they'll throw back some snarky comment like 'haha, i'm not a nerd.' They won't even take a minute to read through what it entails, no matter how simple it may be.
  3. I feel about that. But these lackluster changes are happening on both sides, AMD finally decided to step it up and make their performance a bit better, but we still rarely see a 4.0GHz default CPU or higher. Like, I know there are a few 4.2 or slightly above, but we've been at this for years now, why won't it get any better? We're still using x86, just as we did for decades, nothing is really new in that world, aside from ARM changes and the development of RISC-V, which doesn't look like it'll have a wide adoption anytime soon. If anything, I think Nvidia is actually innovating a lot more than any other big tech company, really. They're coming up with all kinds of stuff to actually start bringing new technology to the table. SDKs, new hardware, development APIs, etc. are all being built for regular consumers to get them on board if they have a serious project in mind. Not exactly something to buy just to tinker with, the Jetson products have price tags of a few hundred, but if by hell they don't have power... https://developer.nvidia.com/ I actually stayed at an Airbnb while traveling around Japan, and my host worked at Nvidia, so we hit it off immediately and talked all night about all kinds of technology like this. I think if anything, they're going to be leading the next technological revolution, if you will.
  4. For me, it can really depend on the OS, as I always use Windows for different reasons that any nix. But it'll look something like this: Dev Environments (whether it be runtimes, interpreters, SDKs or compilers Python Ruby LAMP g++ (or other cpp compiler if not already installed) MinGW on Windows Go NASM on linux, MASM on Windows Text editor of my choice (Sublime+VSCode+EmEditor) Git Veracrypt WinDirStat or QDirStat Browser (Iridium, Brave, FF, w3m for nix) Hex Editor (HxD for Windows) Whatever codec packs I need for any media files MPV Music Player (WinAmp for Windows, ncmpcpp+mpd for nix) LibreOffice IRC client (Hexchat for win, weechat for nix) Then, it's usually just installing as I go from there on in. I'm not really a gamer or anything, and although sometimes I do creative stuff, it's not absolutely essential I bloat up my drive any more than it needs to be after all that. My dev environments may change with time as well, like, if something needs Java, I'll install the JRE (god forbid I actually use any SDKs or eclipse though LMFAO). Or, if I decide that I want to play with Windows development, I may install VS Community. I tend to end up installing these later on, usually, because VS is extremely bloated, and JRE is just too slow for me. Graal will change that soon, but for now it's dead to me. For nix systems, I'll also install xorg and pretty window/composition managers, as well as a nice terminal emulator, like rxvt-unicode or termite. I gotta make everything look absolutely perfect, nothing can be even a pixel off. PS: all this isn't necessarily in order, usually my first course of action is to set up the browser
  5. Lain

    Brackets.io

    Actually, no. For anything that requires any kind of testing (scripts, compiling, etc.) I tend to use VSCode because it does have an amazing environment for that kind of stuff, being able to open a shell right in the IDE and type in "python script.py" to test right then and there. But for a few things, notably HTML/CSS/plaintext and sometimes ASM, I use Sublime because the performance is better. I'm kinda sad that it's all closed source, but at least I can fuck them over for that by using a public license key. I used to use Atom as my go-to because the community is so massive and there are thousands and thousands of good plugins and themes. It's really well documented and everything, but I would have horrible memory-leaking issues all the fucking time. If the editor was open for more than an hour, it would start to slow down horribly to the point where it took five seconds for a letter that I typed to appear. But, I mean, javascript, amirite? Electron is shit, and it will stay shit until they finally decide to start optimizing it as much as people try to optimize gcc. Ironically, VSCode also uses javascript, but for some reason I've literally never encountered a single issue with performance. It's also much more lightweight than Atom. It's seriously fast, and open source too Basically, but with extra features that are specific to frontend web developers.
  6. Lain

    Brackets.io

    Ah yeah, remember hearing about this a few years ago (or maybe just one year and my timelines are fucked up.) It's probably the best for frontend devs or designers, tbh, but it stops there. Live preview and a bunch of features really help make your workflow completely smooth (if you care enough to learn them haha.) Only drawback is that it's made for only frontend devs, if you're writing a backend too, you're gonna have to opt for a better editor. Atom does most of what Brackets does (with the help of some plugins) and because it's not limited to HTML/CSS/JS/preprocessors, you're free to write your backend code or play with other languages/frameworks. Also, performance-wise, not optimal because it does use Electron so yeah haha.
  7. Lain

    Purism devices

    I first heard about them from Librem, on /g/, and recently heard the name be brought up on a different darker-leaning forum in a discussion about OpSec where I was being pretty active.
  8. That's fair, the dedi in my basement is running a quad core Xeon and god knows how old it is, but the new EPYC line is also starting to rip into intel as well. The prices are competitive once more, and the performance rivals GOLD. And with the soon-to-be 7nm, we might see Intel really start crying. They also paid off some company to find Meltdown in AMD to try and bring them down, which only made AMDs stock go up again because the severity wasn't nearly as high as spectre and could be solved with a software patch. Can't seem to find the article, maybe my keywords are wrong or Google is being Intel's bitch and hiding the results.
  9. Woah, that name is a mouthful. As I was going about my daily routine, I saw another ad, actually, a link to an article which I'm presuming was some form of advertisement, but it caught my eye because it had the word 'secure' in it. Naturally, I found it without clicking the ad, getting ready to go on another rant about how it's not real security or something, but this was actually different. Kurukshetra is a web framework designed to teach people about writing secure code, and why it's important. It's powered by PHP7 and MySQL, so it's pretty standard as to set it up with a regular LAMP stack. It's open-sourced, you can find it on their github (will drop a link below) so you can make sure it's not botnetting It works just like any other fancy PHP install script, you install it, go to the index.php and you'll be greeted with a variety of challenges to solve, starting from easy and moving up to rather difficult. Of course, the only drawback here is that you actually need to know at least some code (PHP in particular) to be able to do anything with it, it won't teach you the language, only how to use the language safely. But I think it's a fantastic tool to help people who are interested learn about secure code and why it's important to write it. https://github.com/a0xnirudh/kurukshetra
  10. Given protonmail offers plans that allow custom domains for under 10$, I don't really see the need for that much of a jump tbh. Even currently, Premium doesn't offer quite that much as it stands right now, more like basic forum features and a discount (which should be pretty damn big.) There needs to be products available worth more than 60$ a year to make premium viable as it stands, bumping up the price will make that number 180$.
  11. I take being as libre as possible very seriously, and as far as I'm concerned, my last venture is to either get myself some actually libre hardware (or libre drivers for prop. hardware) and change the BIOS on my devices. Bootloaders are almost always proprietary but there are a few open-source ones for specific makes and models of motherboards or laptops. In particular, I'm looking at libreboot because it works primarily for older ThinkPads (which I can get used for under 150$ CAD.) I don't have a ThinkPad yet, probably looking to get one by the end of June, but there's also the problem that libreboot doesn't support EPT, so I wouldn't be able to install, say, Qubes on it. Coreboot does allow this, I'm pretty sure, so that's also an option, but I still need to find some hardware for it haha. So are any of you running open-sourced BIOS or bootloaders? How's the performance and how hard was it to set up? Was it all worth it in the end?
  12. Lain

    Purism devices

    If you don't know what I'm talking about, here: https://puri.sm/ They focus on trying to be as open-source as possible with everything, and keeping a competitive power:price ratio. Have any of you considered getting any of their products? I have enough laptops (like two that I use regularly and another notebook for best portability) but the Librem phone looks pretty fucking sweet. I wouldn't get it anytime soon as my Oneplus 3 still works like new and is faster than most of my friends' phones, but it's definitely a consideration for future purchases. Does libre hardware matter to you guys? Why or why not? Would you mind paying a small markup if it had the guarantee of not being a botnet?
  13. Just have a look at what happened over roughly the last year. >AMD competitive for the first time in like a decade, releasing Ryzen which gets amazing performance >Spectre Hits, Now new Spectre Variants >10nm tech gets fucked up and delayed, AMD now moving to outsource 7nm >Processor prices skyrocketing so no one wants to buy the new 2000$ i9 processors. How far do you think this will last? Will Intel finally have to invent some new arch? Do you think they'll adopt RISC-V to have a safer setup, or are they still too money hungry to use anything that may be even remotely beneficial to any developer or consumer?
  14. I feel like any web related discussion that would pertain to cybersec and the likes would just be classified under pentesting or software sections tbh. But I would maybe recommend using thread prefixes on different aspects of security or discussion. Having too many forums isn't really a good idea because it'll look empty, but easier classification somehow and the ability to differentiate threads would be nice. Or maybe just using the thread tags idk lol.
  15. Roughly a year ago, I discovered my town had both a 2600 chapter and a DEFCON group (both unofficial, but just for fun they use the names and do stuff like CTFs, other discussions and meetups.) We also have a OWASP chapter which is official, but it's like a 75$ membership for a year, and I don't have that much money to throw around, especially if I don't know what they do, or if it's the same as the other two groups. I found them on the subreddit for my town (we do have a rather small one, mostly just ads) and I decided to join them for their meetups. A bunch of really nice people, not everyone is a complete skid but they're also really welcoming to beginners or anyone who even has a mild interest. Are there any groups in your city/town that are related to cybersec, and have you considered joining them? Are you aware of what happens in your area in regards to it? I honestly didn't know about these groups for the entire time I've lived here, only now discovering them a year ago. It's worth having a look into, or if you don't have any and you're sure of it, start the group yourself! Lots of people are simply fascinated with the field and might not have anyone to talk to about it, so it really does help it all grow and you get to make all kinds of friends too.