Recent comments in /f/lobby

Reply to comment by AskMeAvoutMyCousins in Friday Free Talk by selver

AskMeAvoutMyCousins wrote

I'm not really sure how long it'll take. I have experience with python but only for analyzing and visualizing data that already exists in big catalogs. Simulation isn't something I have ever done before.

I expect writing the program and getting it to provide useful data will be the longest part. The other parts being 1) obtaining the necessary mathematical and conceptual background and 2) writing the thesis (which I should do in conjunction with all other parts) and 3) preparing for my defense.

The foundational paper I'm working from used MATLAB, which I have only used briefly, years ago, for an undergraduate class. My python experience comes from a previous research project.

2

Reply to comment by hasbrochem in Friday Free Talk by selver

hasbrochem wrote

that sounds really interesting and hydrodynamics are always a bit challenging but not insurmountable.

how long would it take you to setup the framework to build off of to run some simulations? do you normally use python? something else?

1

Reply to comment by AskMeAvoutMyCousins in Friday Free Talk by selver

AskMeAvoutMyCousins wrote

I appreciate the offer and may take you up on it.

The length is just "adequate to fully realize your project." Most in my department are 40-100 pages.

I am computationally analyzing the behavior of ions making up ionic currents in neurons and their effect on the water molecules they are surrounded by during MRI sequences. The mucky math is magnetohydrodynamics.

I have yet to write any code for this. Once I have a framework for how to simulate all that I need to figure out the math and how to turn into python code.

2

Reply to comment by hasbrochem in Friday Free Talk by selver

hasbrochem wrote

gotcha, that's vicious cycle to try and break. if you would like a second pair of eyes on the maths, or even just to bounce some ideas off, as long as it's not functional analysis involving bi-quaternions or octonians, feel free to hit me up (if you're on matrix we can even chat there) and I'm more than happy to lend a hand if you'd like. I'm serious too.

you can at least recognize the problems of why, a lot of people don't/can't when in the same place, so you're one step closer. how long does it need to be? a couple chapters? five chapters? more?

5

Reply to comment by AskMeAvoutMyCousins in Friday Free Talk by selver

AskMeAvoutMyCousins wrote

Motivation/discipline keeps me from working on it. Since I'm not held accountable day to day I put it off over and over.

Another issue is that I underestimated how challenging some of the mathematics would be. It's overwhelming and that prevents me from seeing a good route to completion.

I have also worked myself into an unproductive sleep schedule. I stay up super late, until like 5am. I have to TA around 11am and so after I'm done TAing around 2pm I come home and sleep until like 7pm, then I stay up until 5am again.

4

Reply to comment by hasbrochem in Friday Free Talk by selver

hasbrochem wrote

it's rough being in that position (acknowledging the privilege as well of being there and not having a mind numbing 9-to-5 or similar) and I think just about everyone has a hard time writing a thesis/dissertation. if it weren't for my wife, I probably never would have finished mine. that sucks you missed some of that time (or most of it) but don't sweat it too much. at least not yet. ;)

you find the topic interesting.what's keeping you from writing about it? the structure? motivation?

3

Reply to Friday Free Talk by selver

AskMeAvoutMyCousins wrote

I've spent about 5 hours in the last 5 months on my thesis and haven't told anybody. My committee knows I don't plan to present it until Fall 2019 but they don't know that I've done almost nothing.

I've finished all my coursework so I can't be a teaching assistant after this semester, which means I don't get paid anymore. Because of this I'm moving home. TAing is a great gig where I only have to work about 12 hours a week but get paid enough to live alone in a small apartment. It's set up this way because I'm expected to spend the rest of my week on my thesis. Unfortunately I didn't take advantage of this and have just been bumming around.

I'll have to get a regular job now which means less free hours for my thesis. This makes me afraid I'll never finish it. Moving back with my parents should help in this regard because they can help keep me accountable. The problem is I actually have to tell them how far behind schedule I am.

I want to finish it, the topic is interesting to me and it will help me do the things I want to do with my life. I just can't seem to execute. Thanks for reading.

4

Reply to comment by transtifa in Matrix isn't decentralized by Mango

transtifa wrote

Yeah except owning Signal/Wire's server will do fuck-all to ppl who use it properly because it's not in the trust model. So long as you're verifying fingerprints, your messages are safe. Sure, fuck Moxie but sis.

Matrix isn't the best option out there, and I have a lot of problems with it. But at the same time not everyone is a techie and there needs to be an option people can adopt besides OMEMO over XMPP (as much as I love it).

Two servers being on the same VPS isn't surprising, and safe unless you have a KVM/Xen exploit which would affect any VPS anyway. It's not a conspiracy, it's hardly even an issue. (Although general overreliance on VPSes is absolutely an issue, an issue singlehandedly caused by excessive reliance on server-based computing.)

No software is an excuse for not exercising proper opsec. I'm not defending Matrix as the be-all-end-all, and would never recommend it to someone who needs a seriously robust solution. But that doesn't mean it's shit.

You're misreading me, when I said

A fairly common vulnerability affecting three similarly misconfigured servers is evidence of jack shit.

I was trying to say that we shouldn't assume conspiracy when it could just be coincidence/negligence. (Cock-up before conspiracy, as they say).

And sure, P2P is great, but it's not realistic. I'm not even aware of a P2P encrypted communications platform that has undergone proper auditing and review, that I'd legitimately recommend to people who need robust solutions.

...

And yeah agreeing to disagree is probably what we should do lol. I appreciate you sharing things, and trust that you can be responsible in doing so (ie. don't get caught, and don't unintentionally aid law enforcement in catching others).

2

pearl wrote

There are other real decentralized projects that have no centralized servers, such as Ring (Jami), Ricochet and the good old RetroShare.

Do any of these handle group chats or multiple devices? I want to know how feasible they are for actual use.

And - out of interest, is there any other "serverless" stuff for other applications? I was under the impression most of them rely on some kind of identity server at the least.

1

Reply to comment by Mango in Matrix isn't decentralized by Mango

Mango OP wrote

It's funny how you get so worked up about Matrix. If Signal/Wire/Telegram servers got pwned, they will fall into the exactly same problem as Matrix does, is that centralized communication sucks. And if I have more time to spend, I am willing to own Signal's server just to prove the point to you. I'll fucking make Moxie run for his money. Honestly I don't give a fuck if Matrix is secure or not, because I don't ever use it, and I don't get the hype from anarchist techies who think Matrix is the catch-all for secure communication.

OP has provided absolutely ZERO evidence that these servers are ran by the same person/org.

So funny that you decided to trash me without even looking at information available at public. None of these required breaching the servers to prove. NSlookup shows IP ranges of both domains located in Netherlands. CT-exposer showed they shared certain domains with IP pointed to same provider. Striker and Nmap showed virtual hosts by Weho.st linked to Disroot. Even if they aren't running by the same people, they are still sharing the same infrastructure. And that doesn't take any rocket science to figure out.

I'm dumping the logins from weho.st as we speak. Give me a week to upload the dump online. The truth is I shelled both Wehost and Disroot. I still have access to their backend. I mean I could sell these info on Raidforums or Antichat without problem, there are people willing to pay for them.

I won't doubt your knowledge on these things, but you gotta build experience too. Hacking isn't a game.

Hence I said, putting all eggs in one basket. Lol you should be worry about this problem, yet instead you get worked up toward the messenger who brought news that your favorite IM app isn't a citadel.

THAT MEANS, once the Matrix.org dump (by that alt-right hacker) shows up on RaidForums, we'll know either you or I was right. That, and my dump on Weho.st and Disroot.

A fairly common vulnerability affecting three similarly misconfigured servers is evidence of jack shit.

This right here shows that your knowledge is very limited. A dated vuln doesn't mean they are not common.

I hacked the European Commission with a fucking 30 years old vulnerability, SQL Injection (check my other thread), and it still on OWASP Top Ten most common vuln. I also pwned most ip ranges in Europa.eu using Windows, with a 10 years old SMB vuln called ETERNALBLUE, the exact same vuln that WannaCry managed to fuck the world. That ain't it, Matrix.org evidently was pwned by a 2 fucking years old vuln, SSH forwarding agent hijacking. How are you gonna explain for their sloppyness? That they are just unlucky? You could aim Nmap at random IP ranges and armed with specific NSE script and still discover huge chunks of hosts vulnerable WITH THE EXACT SAME VULN.

Lol even if you hosted your own server it shouldn't be in the trust model. Servers are hard to secure.

The point of this thread is to diss Matrix PRECISELY BECAUSE IT AIN'T DECENTRALIZED. Servers are hard to secure, that's why I enjoy popping em. Y'all can't keep your server safe, I'm gonna serve spam on it ;)

If Matrix was truly decentralized with distributed infrastructure, I won't be around to hack it, I probably finished dumping EU servers by now.

...

I enjoy talking to you, you are a very nice person and well understanding in technology. We can agree to disagree. These posts don't matter and I usually share them for the sake of sharing. I shouldn't even share stuff about pwning Wehost, Disroot or fucking EU. It's one-way ticket to doing life. But I love Raddle, and I care about this site. It's my way of expressing emotions to help the community.

One last thing, sorry for dragging you into this little 'debate' /u/Freux

3