For someone not deep-into-security, can someone tell me why "encrypted"/"non-compromised" communication is hard?

Wouldn't a private server that holds conversation in-memory (imagine Dictionary holding U2U GUID-GUID list of 'msg' objs) suffice?
Incoming IP info is disregarded and nothing gets written on-disk ever

Need to erase everything? just reboot the server, it's all in memory anyway

To avoid man-in-the-middle, pre-handshake check cert integrity by exposing the certificate-fingerprint by another endpoint, if the fingerprints match, proceed to switch to websocket
Wouldn't this be wayyyy more secure for actual anti-establishment talks than all the fancy probably-backdoored software that exists today? .-.

Hell it's easy enough that someone could make it go live in a few days, keep it up accessible if you know the IP and port to communicate and close-and-delete when done

So I thought of applying for masters, mainly coz work's been boring af -_- i'm not having Fun. like. at all.

Masters in CS would need a research topic and the one I was/am interested in is "WebRTC", with the topic being tryyyying to figure out a way to hide the actual Peer IPs and come up with a Standard 2.0 of WebRTC or a derivative standard

I was looking into Research Papers already written on WebRTC to get a feel on what's already been attempted or tried
And omfg the word-vomit :v

The whole paper had 0 substance and their "research" was that "we'll encrypt Packets with SHA256 so it'll be secure" like bruh -_-

Did anyone here ever use Alibaba Cloud? How reliable is it? .-.

I was divided between Yandex Cloud and Alibaba Cloud but Yandex doesnt support payment from my side of the world -_- so Alibaba is the last resort :v

if it's super bad though then I might as well buy another server-rack in a DC but imma keep that as the "worst case scenario"

Does anyone else here have coding-fatigue?
Like if someone gives me a problem (BIG or small), I can chalk out an architecture or "oh you can use this-n-this-n-this"

But if you ask me to code it, though it's easy as fuck, I dont want to and will drag it until I gush 2 coffees to force myself to do it.
You give me a junior dev who knows NOTHING and does the typing and I can guide him and make him do it all, but by myself? nah

PS: this only applies to work-code that isnt "fun" per-se. My own projects? no issues at all

My dumbass fucked up a good interview by looking down on the company I was interviewing for unintentionally (:
They outsourced the "core" finance code to a 3rd party B2B provider and I was like "oooooooooh so y'all are only a wrapper? That explains why you didnt do super-crazy background check on me hahaha"

I ended up sounding suspicious af :'v

work-vibing 💪😤 https://youtube.com/watch/...

I was all hyped up coz I WHINED AND BITCHED FOR MONTHS against a 5-6y old B2B company offering, that it's shit n needs to be remade

And they agreed, n only 2 people assigned to it yet, the last chief architect and me

But last guy is old n is the one who made it shit in the first place (we use Windows Tasks in a Windows Server, triggering once every minute to pretend background tasks)

n he doesnt even want 2 branches (: And is still making the same mistakes that made the last implementation shit n it's hard to stop him coz he senior and old

And now I kinda dont care, but have to coz job market's shit
Ffs

Visual Studio's intellisence recommending me NOT to use

ISomeService = new Service() and just Service coz the latter is faster (these are non-DI services)

is giving me a wierd anxiety. I'd prefer to stick to exposing Interfaces just as a convention but the constant💡is killing me :v
//I know the actual performance difference is neglible, but retarded mind still focuses on it even if I dont want it to

did every social media adopt a common AI/ML algo for timeline recommendation or what.

EVERY goddamn platform now recommends posts heavily biased towards the last 5-10 accounts/topics you've interacted with.

I have to manually go delete my history/"saved data" just to get a fresh air of posts every few months.

I miss bit-flags 😪

Has anyone here had a need to use Unmanaged Code, ie C++ interop for the sake of performance on a practical level? (ie, not just coz it's fun)

Im excluding driver or OS level code.
Only Server Side OR User side programs

Coz wouldnt the overhead of talking to unmanaged code overwrite any CPU-time benefits?

Ain't no way 💀💀💀

I spent a whole day trying to debug why the backend would stop sending data after a while (-> it filled up its connection pool)
but after I turned pooling off, there were a number of dangling Client-Idle-Read DB connections
//not using Entity Framework in these N services, it's pure SQL and DB-AccessLayer here

Never happened before, looked up conf, looked up SO
Changed connectionClose to mandatory Dispose
Still didnt work.

long story short. Turns out in 1 of the services, the DataReader to POCO static method, was disposing/closing the READER and not the CONNECTION.

I sent it as tuple instead of 2 separate variables (reader, connection), and the Item1, Item2 got mixed up (:

Totally my fault, and imma avoid name-less tuples from now on like they a plague -.- thats my 2024-resolution

facebook for iOS rn (:

AI is tech industry's fidget spinner
Cant wait to see it go out of fashion.

😩😩😩

Im creating a "settings" functionality of sorts, unique per "account"

Ideally I'd create a new table, FK it with the Accs table with each Setting variable being a column

But im also inclined to just turn it into a JSON and not bother with N columns for it specially since arrays are involved in the settings

Could version it to ensure that if Settings change on code-level, old accs with old settings dont get fucked up

Now this is a pet project so im free to experiment, not bound by high level design documents

What do y'all prefer/recommend? JSON<->Settings Obj or plain old Table/column with FKs

Im trying my BEST to not be judgemental about my boss but damn the code's shit

It's written how a 1st year UGrad would, trying to add as many complicated shits to it as they can to show "see? I know this obscure way of writing code, cool eh"
Like they're ticking off a rubrics

There is no design language, barely any structure. MVC's Controllers go beyond 2.5k lines.
Everything is an Interface but with such horribly designed code, they just add on to the clutter

Oh and it somehow also uses ReactJS inside .cshtml, which was already out of fashion A DECADE AGO.

I was all gung-ho about migrating a .NET Framework 4.x 16-projects-in-1-solution 100+ table 300+ Standard Procedures "project" to a more streamlined Services based architecture with documentation and all

Until I realised the guy who's heading it, has been working on it since 2019-2020

And has kept his job because it's such a mess and no one else knows nor cares about how to navigate through it (:

How do y'all approach media-endpoints?
Specially publicly accessible user-uploaded media

Rn I encrypt the path to the media-
/file and expose it, decrypt on the server (returning a relative file-path) which then fetches the file via File.Read and returns it as-is

I put a cache header and works fine

But something in the back of my mind makes me feel it isnt right

Like, normal endpoints and file-read endpoints shouldnt be in the same backend, potentially affecting each other

But since it's just a fun pet project so Im not paying for a 2nd baremetal server as a CDN/media server -.-

Worst case scenario I use it as-is, but would appreciate hearing other approaches

anyone excited about .NET 8?
Release notes uptill RC2 didnt give me a boner, so I guess it'll be 'ok'

"audio/video playback and recording may be interrupted"
dafaq is Kaspersky trying to protect me from 💀

Ive been working on pseudo-Java (ie some 3rd company's UNDOCUMENTED programming language) that they parse into Java in their backend

It doesnt even support if-else (only ifs and elses) or a boolean combination of False and OR together lmao

mainly a GRPC middleware-language

Given its lack of features (arrays/collections) or documentation, I just had to implement a flag-array using a 0-1 string

Im throwing exceptions unless combined strings equal Lengths and is only 1s

living like in 80s-90s 💀

DOM manipulation using vanilla JS is now "Low-level web programming"? 💀

so the startup I used to work on, that ngl had an amazing product, is on its last legs.
It already was when I was let go coz they couldnt afford a full-time staff anymore but now they cant even sustain 0-staff company (ie just CEO/COO/investors remain)

It got millions of USD as grant in some competetion they won before I joined so both the idea and the product were good

Only thing that sucked was the CEO's attitude and their abhorent marketting skills and priorities

ANYWAY. It's bitter-sweet. Even the most well-made of products can fail just coz of the person-at-top not taking the right decisions at the right time.
And all my nudging could do was delay its eventual collapse

If you move the mouse-cursor to the top-right-most corner on Windows 10, a Win32 program and a UWP app when maximised, highlight and respond to the red-close button

An application made with Windows App SDK, does not. //tested with SDKv1.4, not overriding windows-made title bar
Probably coz of their window-margins with Msft's new found love of rounded corners.

Never thought Windows would be this blatantly horrible. Everything past 2020s Windows 10 has gone downhill. I wonder which top-guy left that lead to this downfall.

Am I an asshole for not wanting to learn infrastructure/AWS?

im sure it isnt rocket science, but somewhere from within, even if I try my body rejects it will every fibre of its being

manual bare metal servers, deployment scripts and firewalls? sure im all in

Containers, k8s tied to nginx on the said server? sure

Entire end to end as long as it doesnt involve AWS? done and dusted

But add AWS/Azure to the mix and I'm oil to water 😪

tried to stress-test an authenticated websocket endpoint (that makes 2-3 DB calls) by opening closing randomly and it crashed after 20-30 times within a few seconds

I was focused on the middleware glitching out, but error was in the DB-Postgres coz of multiple-connections

Even if I increase the upper limit of simultaneous open connections, the problem at-scale will still exist
If I tried to use a static forever-open connection, it errors out coz 1-command-at-a-time per connection

so im constrained on both sides -.-
Either I rate-limit the endpoint in general and force-close open connections or I cache Organisation-level info that rarely changes

this is one of the few times I miss MS-SQL, it can take a beating but still serve without much complains or losing data consistency -_-

why's it so hard to get a windows/linux "software" dev job -_- there's barely any openings and the ones that exist want 5-8+ exp
I want to make GUI software with WinUI or QT for Linux T__T webdev aint fun, im bored of it now

Latest Yandex browser (Chromium based) throws an error if "document.hasStorageAccess()" is called (:
Ie the StorageAPI that allows cross-site cookie access on user-interaction

the iFrame sandbox flags that compliment it, ie "allow-storage-access-by-user-activation" also fails on execution.
Both of these work on Edge/Chrome/Firefox.

I thought Firefox and Chromium browsers are all ive to deal with and im done but NO.
Now within Chromium-based browsers theres differences of API as well?

Kill me.