Even as a tool it lacks predictability / reproducability. If I give instructions to download a paint program, start a new canvas of 1920x1080 and use the gradient tool to go from red to green, you’re going to get the same result every time. If I instead told a class of students to ask an AI to generate a red to green gradient on a 1920x1080 canvas, the results would not be consistent.

I use AI, but it is a tool with flaws.

Taxes and maintenance wouldn’t be included in the mortgage. A new roof is expensive, so are HVACs, floors, etc. These things will need to be replaced. A rule of thumb is to budget 1% to 4% of the total house value per year. For a 400k house that could be up to $16k extra per year, or $1333 more per month than your mortgage. Those costs for maintenance and taxes don’t go towards paying down your principal so they aren’t directly gaining equity. With the rent and invest option, the investing is the counter to equity. When you sell your house you usually pay a realtor commission. There are a lot of factors to include when seeing if rent & invest is better than mortgage & buy.

That being said, I prefer to buy. I don’t plan on moving anytime soon.

Security Now https://twit.tv/shows/security-now

Every week there will be news topics, sometimes there are deep dives into technical topics.

https://github.com/zacharyreese/DualQRCode

Yeah, why would a house built before 1930 - 1977 need any updates during that period, seems sus?

But Wonder Woman and Steve hadn’t been invented yet either and they seem to work…

https://xkcd.com/2827/

soon

“I refuse to say anything without another lawyer present.”

that… actually works…

They didn’t say how fast it stopped rotating and whether the moon flew out of orbit awhile back.

Bog if true!

I’m considering Zulip

https://zulip.readthedocs.io/en/latest/production/install.html

Do note, because it’s using email, the recipient and sender are not private, along with the time, and probably the relative size of the messages.

The specific content of each message should be private as long as the encryption is done well. I haven’t looked at it so I don’t know if it implemnts safeguards to verify who you’re messaging with (besides using the email address) and I don’t know if it uses PFS (Perfect Forward Secrecy) to protect against a key getting compromised.

https://github.com/rsmsctr/vaultwardenGuide

It doesn’t cover backups though. It uses Caddy instead of NGINX, and it uses DuckDNS to point a subdomain to your private IP address of your Vaultwarden server, so it will only be accessible in your LAN.

Maybe surprisingly, it is actually a technique to limit interruptions, specifically because you are only working on your current task for 25 minutes. It makes it much easier to not switch tasks in the middle because your next time to switch tasks is less than 25 minutes away. For example, if you’re in a task writing a report and you remember that you were supposed to send an email, you write down the email task to do later and don’t worry about it because if it’s important than you will pick it for your next pomodoro. This allows you to stay focused on the report you’re writing for this pomodoro.

I’ve been researching zero-trust for my homelab recently and I’m considering OpenZiti instead of Cloudflare since I think it can all be self-hosted. The BrowZer from OpenZiti is especially interesting to me. The fact that I’m behind CGNAT is a hurdle though.

It ends up being a lot like FIDO or Passkeys but without having to store a separate key for each site. Each key is derived from your master key and the domain so they are all unique, to prevent tracking, but you still don’t have to save a separate private key blob for each site. There is also a recovery key built into the spec so that if your master key somehow gets out, you can use your recovery key to prove you’re the real person and regain your account to change the signin public key.

What about SQRL?

https://www.grc.com/sqrl/sqrl.htm

I would somewhat agree, except for things like tension or mysteries in movies which spoilers can ruin sometimes. It can remove unique experiences where you wouldn’t know a characters motivations, or not know if a character will survive. They can also ruin some comedy setups where surprise is part of the humor.

Something that always bothered me about that episode.