• 6 Posts
  • 142 Comments
Joined 9 months ago
cake
Cake day: October 20th, 2023

help-circle

  • Not sure if google is particularly different but the way this works for the other services is basically low energy bluetooth scanning coupled with the phones providing their location*. So basically all the devices on that scanning/spy network periodically ping/listen for nearby devices/trackers. When it finds one, it sends a quick message to the servers with that phone’s location and the ID of the tracker. Get enough of those pings and you can triangulate the position of the tracker pretty precisely.

    Which… is why this fundamentally does not work with “hacker” solutions that allegedly emphasize privacy. Because you just don’t have enough devices listening. This was painfully obvious with tile back in the day and is still an issue with Samsung in some countries.

    *: Via a combination of gps, cell tower, and wifi network scanning. The less obvious part of that being wifi networks which is the majority of how interior positioning works.


  • I mean… bluetooth is literally broadcasting your position (sort of/it depends on the implementation). It is not at all a stretch that you should turn that off if you care about privacy. Same with not scanning for what wifi networks are available or even pinging GPS satellites (because that leaves a log). Hell… cell tower logs are a treat for cops/TLAs for a reason.

    Aside from that? Good for you. If you actually follow through on that I can respect it. My point is more that this particular solution seems like the worst of all worlds.

    Either you are demolishing your battery with regular phone homes to a server you hopefully control or you are relying on a push via SMS and the hope that you lose your phone somewhere you havea reception. And you still only have YOUR phone and YOUR network to track it which has significant drawbacks if you travel.


  • If people truly change their lives and focus on it, you can do a lot. But it does not take much, at all, to become compromised to one degree or another and people vastly underestimate the amount of redundancy. Or even the impact of a sibling or partner or even friend.

    Instead, the common case is people will tweak one small aspect and think that does anything other than inconvenience them. Or, worse, they’ll watch a youtube and decide to put EVERYTHING through their vpn which… defeats the purpose because they are still one easily collated set of profiles/cookies that can trivially reveal that “Fred Smith in Afghanistan” is really “Fred Smith in North Carolina”

    Which is why my approach is that there is data I very much want to protect and data I know I can’t. So I focus on understanding the former while doing what I can with the latter.

    And something like this? There are probably specific niche use cases for this. But it is a product/service that fundamentally requires aggregated data. And, depending on the implementation, it is going to fuck with your battery hard.



  • I guess. But it is really going to depend on where you live and just how frequently it does dial home.

    My personal use for these networks is luggage tags. But a friend lost her phone on a hike a few years back and the find my phone stuff was more or less useless due to poor reception and ever dwindling battery.

    The real benefit is the low energy bluetooth magic and OTHER devices to do the phoning home. Because maybe I have shit reception but someone hiking a hundred feet away has good reception and updates the ping.


  • Took a bit to figure out what it was even claiming to do

    When enabled your phone constantly sends e2e encrypted your location to the server where you can than access it from a webbrowser.

    God no. Just take a hatchet to my battery and be done with it.

    Also: Until a month or two ago, sure. But google finally got their shit together-ish and set up a tracking network the same as apple and samsung. And that is what you are sacrificing your privacy for. Yes, you give Big Tech tracking information… that they already have. In exchange you can actually have peace of mind of knowing your luggage is in the same airport or even where you parked. And you can’t really self-host a crowd-sourced network.





  • There is.

    2FA. No, not the fucking “we’ll send you an SMS” bullshit that is increasingly used to just highlight an active phone number for spam purposes. Proper TOTP with the code backed up to a proper service (bare minimum, Bitwarden)

    Someone can steal your password and even your email account (unless you TOTP that too…). They still can’t get into your account unless you are an idiot who gets tricked into providing the 2FA key.

    In a perfect world? Have your TOTP credentials in one encrypted database/Bitwarden account and your passwords in another. In reality? Just use a trusted service. I used to be a big fan of Keepass but protecting that with a yubikey (or similar) is a huge mess.


    The recent push for passkeys (?) is a nice-ish middle ground. People don’t need to understand how to paste a TOTP code into Bitwarden but they still need to approve a login. That said, I hate it since so much of it is dependent on a single device that can generally be opened by just applying REDACTED to the screen and doing REDACTED to narrow down the lock code significantly.




  • King under the Mountain always rubbed me wrong. They hit right at the tail end of “wow. kickstarter is awesome” and right before people realized how many DF-like colony sims there actually were. And then their kickstarter survey, for a key with no add-ons, required an insane amount of personal information. I think they claimed it was for VAT but saw a few “ask a lawyer” threads that pointed out that was nonsense and could have been done with a checkbox.

    And the super duper secret publisher right around the time interest was spiking because of DF-GUI was more than a bit sketchy

    I dunno. I know that it is hell out there for indie devs (not so much in 2021/2022 but…) but all that combined with the game never feeling like more than a “unity school project” REALLY raises a massive number of red flags. Probably just a single kid in over their head and trying to act like a “real” studio but… yeah.

    Still, good to see it was released as open source and here is hoping the fanbase that glommed onto this can carry it forward.




  • This is actually a really bad idea.

    At “best”, your server is a resistive heater. Aka “a space heater”. Except that your server also has hardware designed to convert power into negative temperature (you know… fans). So you are at a lower efficiency than the space heater in the corner.

    Also? Computers aren’t meant to run all that hot for all that long. Yes, the safe margin for hardware is a lot higher than people would think. But if you want this to make a meaningful difference you are going to be running REAL hot for extended periods of time. Because you don’t need heating when it is warm outside. You need it when it is cold and you are already going to be fighting a low ambient temperature.

    The reason this works for larger data centers and specialized installations is that they are designed with this in mind. You generally either have direct water cooling of the racks (plural) or you have “water cooling” of the server room itself. With the water then being recirculated amongst the radiators in the building itself. And… those are quite often borderline “scams” because they don’t actually keep the building all that warm in the winter (as discovered during The Pandemic when the lack of body heat from human beings caused issues for a lot of hybrid office/data centers) and they mean more HVAC costs to keep the building cool during the summer.

    Which gets to the other aspect. Are you going to change all your fan and cooling settings on a weekly (or even daily) basis? Because maybe you want to get right up to thermal throttling during the winter because the ambient temperature means that heat will “dissipate” fast. But during the summer or even a warm winter day? You are turning your server room into the kind of inferno that even Tom Cruise has someone else deal with.

    Don’t get me wrong. Having a chonky and inefficient PC is great for late night gaming in the winter when you should have gone to sleep hours ago and your zone is already set for the “nobody but the cat is in there” setting. But, even at the datacenter level, it is not a good replacement for HVAC. And, as a lot of us will attest: Summer is when you grab the Steam Deck or go downstairs and use the xbox.


  • Honestly? I think you are getting hung up on approaching this from the T9 perspective.

    Take a look at the mechanical keyboard community. Most people are sane and looking at TKL or even 60% layouts where most buttons people actually use on a keyboard are represented by dedicated keys. But there are some real sickos who go for fully minimalist layouts where they have closer to 20 or even 10 keys. And those are the leyouts where you heavily rely on different layers so that “A” might actually be “Button 1 with modifier X and Y” whereas B is “button 1 with modifier X”. Basically people took the logic of dvorak and went to an insane degree. It is terrifying and it is beautiful.

    And that has the same issues that mapping to a gamepad would. Some people are going to be able to internalize that in a timely fashion. Others are going to spend months using typing tools online to train themselves. And the rest of us are going to say “nope” and move on.

    In terms of how to have a better steam deck keyboard? I think there is a lot of room for someone to go full keeb-pill and take advantage of the physical buttons. I would 100% watch that youtube video, maybe throw a tip in a tip jar, and then have a new appreciation for the touchscreen keyboard the next time I have to enter my Warframe password. But I still think that if your game is heavily reliant on having a keyboard… it isn’t a Steam Deck game. And that is fine. I am not going to play DCS on my Steam Deck. One of these days I probably will futz around with streaming X4 though.


  • T9 I think is an example of how to map a large input space (keyboard) to a small device (gamepad). But it mostly thrived in a way to convey meaning to a numeric string (1-800-COLLECT, for example). But the people who actually used it for SMS/beepers were few and far between and we were so reliant on auto-complete/predictive language during the flipphone era. This is why it was the era of “oh, so and so texted me. Let me call them back”

    largely for the same reason that even a lot of “keeb” enthusiasts increasingly acknowledge that going below a 60/65% for a programmer or a 40% for a writer is… of very questionable utility. Some people have the brain pathways to learn completely different keyboard layouts and can keep 4 or 5 layers worth of keys in their heads and write straight up fortran with a 13 key keyboard, Just like how some people can learn a new spoken/written language in a few weeks. Most people can’t and they basically just “ruin” normal keyboards for themselves.

    As for hacking the gibson: Actually the vast majority of media depictions involve basically a keyboard/touch screen strapped to a wrist (that IS what a deck is). So if you really want your daily driver to be something with serious security issues due to how the lock screen is implemented… that is how you get your Count Zero on.

    But that really is the issue here. You and I are discussing how you would map an actual keyboard to the steam deck. That isn’t what is being discussed here (careful, you too will get blocked (OH NOES!!!) because you didn’t give proper respect to a blog post). This is mapping an RPG/roguelite from old school curses input to a gamepad/touch screen combo. Which, as I said, is a fundamentally “wrong” idea. In large part because the vikeys/vimkeys solution of a lot of classic roguelikes/lites was a way to provide gamepad like controls with just a keyboard.


    As an aside: My brain is blanking on it (it might actually have been the Steam Controller), but I remember an on screen keyboard that actually used analog sticks and felt like a weird hybrid of t9 and the god awful ps3/4 on screen keyboards. Something like you hit a button to bring up the keyboard and then move your analog stick toward a cluster (forget if they were nested or not) and buttons to pick the options. Was very much in that “This is cool as hell but my brain is not gonna learn it” category.

    As for the touch screen: I also really dislike it (hence hedging my comment above). But I do wish more games, particularly the complex ones, would take advantage of it. Let me tap the inventory bag to open up my inventory rather than switching to interface mode and sticking over to it or having a dedicated button that could be a different skill. Stardew Valley’s Steam Controller layout (I forget if it was official or community) was awesome in a similar way because you would get context touchpad menus to quickly navigate the interface. But the problem is that it becomes a device specific layout and gets almost no usage.


  • Mate. If all you want is an echo chamber then don’t post on a message board. That is a blog post with the comments turned off.

    And I did read your blog post. I didn’t watch your podcast so, deep apologies if that offended you somehow. And I still think you are doing what a lot of developers did during the 00s when “console ports” and “optional gamepads” were the big thing in PC dev space. You are trying to adapt an existing control scheme with radically different inputs rather than acknowledging what controls you actually need.

    That is WHY Caves of Qud is such an amazing steam deck experience. That is WHY stuff like Stardew Valley on the Steam Controller are still looked at so fondly. And that is why so many other games never “feel right”. Because devs are trying to map a gamepad to a keyboard (hello Dark Souls) or an analog stick to a mouse cursor (fuck you Bungie and Ubi) or a keyboard to a gamepad.

    Hell, we still see it with a lot of the CRPG, Strategy Games, and RTSes that devs try to make work for a gamepad. Very few get it “right” because it is a really hard challenge. And why Dragon’s Age increasingly became basically a Divinity 2/Oblivion style game rather than a “real” CRPG like DA:O was.