HNHacker News
TopNewBestAskShowJobs

OmarAssadi

347 karma · joined August 5, 2021

email: 5110bfa2 ~АТ~ cafebabe.sh
submissionscomments
OmarAssadi··on X-Ray Audio: The Documentary (2016)
While planning a little gift for a friend, I came across «рентгениздат» (seemingly more commonly "roentgenizdat" on the English internet rather than the expected "rentgenizdat" transliteration)—essentially homemade/bootleg records made from X-ray films during the Soviet Union—and thought it may be interesting to some readers, especially those of you with an interest in piracy, music trackers, etc.

Similar discussion:

- <https://news.ycombinator.com/item?id=10724639> (2015)

- <https://news.ycombinator.com/item?id=20221047> (2019)

Similar stories:

- 99% Invisible: 'Bone Music ' (2015) <https://99percentinvisible.org/episode/bone-music/>

OmarAssadi··on ZLibrary domains have been seized by the United States Postal Inspection Service
Thank you, really! Maybe I am just in a weird mood, but that made my day, as strange as it might sound.

I don't think people, in general, are anywhere near as vocal and explicit about the things they appreciate compared to the things they actively hate or that frustrate them. And I think this applies even more so in careers and hobbies like tech where people don't seem to think of the things you make as consumable or creative in the same way they do with others (e.g., movies, videos, music, and other art); my personal experience has been that if someone is reaching out, it's—more often than not—to let you know about an issue or complaint.

So, thanks, it felt nice! And thanks for the reminder; I should let others know the same more often too.

OmarAssadi··on ZLibrary domains have been seized by the United States Postal Inspection Service
Oh, interesting, cool! I appreciate the advice -- I am definitely not making use of all of the features.

And thanks for the software! I've been using it on all of my non-Apple devices for a while now. And my mom has been using it on their computer for a fair bit as well. It's been a total lifesaver on a couple of occasions and streamlined a lot.

OmarAssadi··on ZLibrary domains have been seized by the United States Postal Inspection Service
It's a little under $0.12 per kWh here. I haven't gotten around to putting up a meter on it since fully completing it, but in the past, with a bit over half the drives + all of the ram and everything else, it was peaking a bit over 400w -- I'd guess like +- 700ish right now?

So, give or take, with a stupid build like mine, here, it's like .7 * 720 * $0.118 = ~$60.

Another thing to note is that mine stay spinning instead of idling for much lower energy consumption, cause I've always read that the stop-start cycle is what really tends to kill the drives.

I think it could be a lot more affordable/justifiable with:

- fewer, larger drives (6-8TB each?)

- fewer, larger DIMMs (16-32GB each?)

- perhaps slower, more energy-efficient drives (5400rpm?)

Also, I have seen some of the Atom C2750/C2758 boards for fairly cheap here.

If you don't need an absurd amount of RAM/PCIe/CPU, that could be a good option to save another bit of power.

> and my house is poorly oriented for solar panels unfortunately.

And yeah, same, unfortunately. Ironically, despite being in Florida, I barely get any sun; my entire neighborhood is filled with massive trees, lol.

I'd still like to look into solar at some point when I've got more time & money, though. It's been awful the past couple of hurricane seasons because of the trees -- something always seems to fall and cause a bunch of damage, so I'd like to cut down a few of the scary ones anyway (I am sorry trees!)

OmarAssadi··on ZLibrary domains have been seized by the United States Postal Inspection Service
It'll depend on where you live and what your goals are. If you have free-time to tinker and enjoy that kind of thing, you can build something very fast and reliable and prevent e-waste by building your own storage server with used parts on the cheap.

If you're in the United States, electricity is cheap enough that you can pick up much older SAS drives for really low $/TB cost and have it be worthwhile.

For example, I bought a used Supermicro CSE-836 [1], which is like a 3U server chassis with 16 hot-swappable drive bays and a backplane of some sort.

The backplanes vary, but mine came with the BPN-SAS2-836EL1. I paid $300 in total for the chassis itself, backplane, dual power supplies, heatsinks, etc, along with a Supermicro X9DRi-LN4F+ [2] and two Xeon E5 2660 V2s as a bundle from someone in the 'ServeTheHome' classifieds section [3]. From there, I picked up a load of HGST 3TB 7200rpm SAS2 drives on eBay for about $10 each from a recycling company. And then 192GB of DDR3 ECC memory from the same place for about $80.

I also grabbed a couple less-than-production-ready 3.84TB U.2 NVMe drives on eBay for a little over $100 each.

I think if I were to do it again, I'd have gotten slightly larger, newer drives. These are all totally fine, but I started seeing ~6TB drives for about 3x the cost per terabyte, which would pay itself off quickly with the energy reduction. The other reason is that I ended up going a little overboard; I have about 56x3TB drives right now, which is a lot more than 16, so I needed to get a couple of JBOD expansions to put them in, each of which were like $250 -- if I had gotten fewer, larger drives, I'd have had another $500 to work with & be saving on energy.

Another thing I'd have done differently is get fewer but larger sticks of memory. I have a really nice amount of RAM right now, but the energy consumption with 24x8GB isn't worth the upfront savings compared to getting 16 or 32GB DIMMs.

All the storage is in OpenZFS on Linux. The 56x3TB drives are configured as 7 RAIDZ2 vdevs, so 2 drives each are for redundancy, and 6 for actual usable storage. This leaves me with a bit over 100TB of usable space. And the 3.84TB U.2 drives are mirrored and act as a "special" device (lol, literally what they are called) [4] to automatically store small blocks and ZFS metadata.

I am sure I could have done a bunch better, but, so far, everything has been lightning fast and reliable.

I am using ZFSBootMenu [5] as my bootloader. It's cool since it is basically a tiny Linux distro that lives in your EFI and comes with a recent version of ZFS, so you can store your entire OS, including your actual kernel and such in ZFS, and you can enable all sorts of ZFS features that GRUB doesn't support, etc.

This is nice because, since the entire OS is living in ZFS, when I take snapshots, it is always of a bootable, working state, and ZFSBootMenu lets me roll-back to a selected snapshot from within the bootloader.

The Supermicro board has a slot for a SATA DOM [6], which is sort of like the form fact of an SD card. I picked up the smallest, cheapest one I could on eBay for like $15 and use that to store my bootloader. I did this so that my tiny 128GB SSDs that I use for my OS could be given to ZFS directly for simplicity instead of having to carve out a small boot partition, etc.

All in all, I'm probably out about $1750 for >100TB usable, redundant, fast storage, and a decent bit of power for virtualization and whatever else. It costs me like $50ish a month in electricity because of all the drives and DIMMs. But I was already paying 65 euros a month for a 4x8TB server from LeaseWeb to use as a seedbox, and ran out of space, so it's been worth it, even with my dumb decision to use 3TB drives.

[1]: <https://www.supermicro.com/en/products/chassis/3u/836/sc836b...>

[2]: <https://www.supermicro.com/products/archive/motherboard/x9dr...>

[3]: <https://forums.servethehome.com/index.php?forums/for-sale-fo...>

[4]: <https://www.youtube.com/watch?v=QI4SnKAP6cQ>

[5]: <https://zfsbootmenu.org>

[6]: <https://www.supermicro.com/products/nfo/SATADOM.cfm>

---

Edit: Also, figured it'd be worth mentioning, but the way I got the chassis+motherboard+cpu bundle for such a decent price was by posting my own thread. So, if anyone reading this is broke like me and not finding anything suitable, that is an option.

You won't always find exactly what you're looking for if you just browse around. But I've always had good luck explaining my situation, my budget, my goals, and someone tends to have stuff they don't need.

eBay seems to be pretty useless right now for the chassises (chasses? chassi? I give up) due to memecoin Chia miners. Forums are your best bet if you don't want to pay scalper rates.

OmarAssadi··on We need a replacement for TCP in the datacenter [pdf]
In addition to QUIC, KCP [1] is another reliable low-latency protocol that sits on top of UDP that might be interesting. And unlike RFC 9000/9001 (QUIC), encryption is optional. I haven't really seen it mentioned much outside of primarily China-focused projects, like V2Ray [2], but there is also some English information in their Git repo [2].

[1]: <https://github.com/skywind3000/kcp>

[2]: <https://www.v2fly.org/en_US/>

[3]: <https://github.com/skywind3000/kcp/blob/master/README.en.md>

OmarAssadi··on Tesla engineers were on-site to evaluate the Twitter staff’s code, workers said
I haven’t seen much info regarding their setup, aside from the bits about Pants and Bazel.

Are those actually the upstream repositories, though? And is it known how they interact with them?

Google has Copybara [1], which allows portions of a monorepo to live outside as an entirely separate repository without the need for things like Git submodules. It supports synchronization of histories, pull requests, path and file transformations, etc.

In that sense, something like Copybara would allow them to, relatively, easily open source those bits, receive outside commits, and then sync the changes back to the monorepo.

[1]: <https://github.com/google/copybara>

OmarAssadi··on Apple Reports Fourth Quarter Results
I'm not in the yearly upgrade cycle, but I do tend to replace mine every few years.

In terms of speed, ever since the OnePlus One I bought back in like ~2014, I can't think of a time I have been unhappy with the raw performance of a phone by the time I go to upgrade.

Battery life is also not something I usually use as justification for a replacement, as I am fine going with a third-party place or doing it myself, depending on the complexity—the one exception was when I woke up to such a swollen battery while I was traveling in Russia that the screen fell out; it was such a mess and at such an inconvenient moment that I just bought another phone for the time being.

Rather, there is usually some sort of other nicety that is finally compelling, or circumstances force it upon me.

My example will seem silly given the fact that the solution is one to a bit of a manufactured problem in the first place. But despite the fact that Vivo, Xiaomi, etc., launched the first in-display fingerprint sensors almost five years ago, Apple still insists on Face ID. Normally, this works fairly well and doesn't bother me too much, so I keep my absurdly long and inconvenient iPhone password as I am rarely entering it when I have it on me.

However, when the COVID-19 pandemic hit and everyone began masking, good lord, it made me stop wanting to use my phone at all outside. It was so ridiculously inconvenient entering 30 characters each and every time I wanted to check anything at all, especially since I have my boomer-esque 45 wpm typing speed when I am using my phone.

Apple, multiple years late, finally released their feature to unlock your phone while wearing a mask. But it requires an iPhone 12 or newer.

This is an example of a scenario where even though I'd probably have been happy with an iPhone X, XS or 11 otherwise, the newer device still becomes very compelling.

(also yes, I know they let you unlock your phone while wearing an Apple Watch, but I don't want to have to have one just to use Google for 30 seconds while outside)

Of course, the true solution there is probably not to buy yet another iPhone but rather a device that respects you, but everything is a tradeoff, and at times, I need an iOS device specifically, etc. It is what it is, but I am locked into this ecosystem for the time being ;-)

OmarAssadi··on Google added HEVC support in Chrome
This'll be long-winded excitement to talk about the weird little community, but I think a lot of that depends on the circles you run in and the content you consume.

There is surely a lot of low-effort GUI handbrake encodes online. But most of the """well-respected""" piracy groups put a surprising amount of effort into filtering and such to correct artifacts, both due to the compression and due to the source material itself.

A lot of these people are using tools like VapourSynth with a variety of scripts they've put together and x264 or x265 directly rather than ffmpeg. The scripts themselves are typically Python, but often rely on loads of native modules. You can see a couple of guides about some of the processes they perform:

- <https://silentaperture.gitlab.io/mdbook-guide/introduction.h...> (all video content)

- <https://guide.encode.moe> (anime-focused)

And some links to the kinds of filtering code pirates write for movies/tv/anime:

- <https://git.concertos.live/OpusGang/EncodeScripts> (MANY VapourSynth and AviSynth scripts for both live-action content and anime)

- <https://github.com/Beatrice-Raws/encode-scripts>

And while not directly related to the encoding side of things, but if any of that is interesting, in addition to the encoding side of things, pirate fansubs also get pretty complex, particularly for anime since, unlike the unstyled SRT subs most people come across for foreign movies online, anime fansubs tend to use ASS [1] subtitles with lots of styling to accomplish things like cleanly replacing Japanese text in a letter someone is reading or adding non-distracting subtitles for background text (e.g., signs on buildings, etc) [2].

To do a lot of that, though, these subtitles often pack fonts into the video container to allow the media player to render things as expected without resorting to "hardsubbing" (i.e., pre-rendering the subtitles into the video itself)—which is one of many reasons container formats like Matroska (MKV) is so popular in those communities.

An interesting thing to see come out of that is that I have noticed some fansubbing groups move to proper build tools, like Gradle, to automate portions of their workflows. As an example, SubKt, a Gradle plugin, allows them to essentially have CI/CD for their subtitling projects by doing integrity checks on the fonts, linting the subtitles/fonts to ensure the selected fonts actually have glyphs for all the text, templating and merging so that different team members can work on things like the script/timing while another does styling, and then packaging and publishing tasks to bundle everything up into an MKV at the end and upload the result to torrent sites.

If any of that is interesting, here are some links to SubKt + some real-world finished projects making use of it:

- <https://github.com/Myaamori/SubKt>

- <https://github.com/Kaleido-subs/Joshiraku>

Regarding 'why' AV1 and other codecs like VP8/VP9 or VVC haven't really been used:

1. Many of the private trackers have fairly strict rules in terms of standards (e.g., due to lack of hardware support, perceived differences in quality, etc., many don't allow <4K HEVC encodes at all, except in edge cases like when a streaming platform releases a new show in HEVC-only), so individual encoders and groups aren't always free to use whatever codecs they please.

2. Many seem to find x264 easier to tune for certain types of media than x265, and even more so compared to AV1 and others.

3. Many seem to believe that insert codec tends to produce worse results in certain circumstances or for certain content, so they will stick with x265 (or even x264 for the same reasons)

4. Many find that, to truly achieve the same picture quality produced by x265, compression ratios often end up much worse than people claim, and thus the significant slow-down in encoding speed and loss of hardware support is not worth the minor reductions in size.

#4 is likely the most common reason, as it was/is the same with those who prefer x264 over x265; HEVC video is definitely not "half the size" if you want it to look comparably good. And so, especially in the past with older hardware, it simply wasn't worth the tradeoffs; it's worth remembering that, in the case of piracy groups which distribute over P2P networks, no one is paying AWS and co. exorbitant amounts of money per terabyte of data transferred.

These sites run off of 'free' bandwidth provided by users and cheap unmetered servers from companies like Hetzner, OVH, LeaseWeb, etc -- saving 10-30% in bandwidth often is not worth it at the expense of doubling your encode times (or significantly worse than doubling, in the case of AV1 and VVC) and alienating the people watching on older hardware.

EDIT:

Also, I figured it'd be worth noting as well that RE: my points on encoding speeds and such, while hardware decoding may help adoption in the piracy communities, I don't foresee hardware-accelerated AV1/VVC encoding making much of a difference in the near future; even today, virtually none of these groups use solutions like NVENC for HEVC due to the fact that the software HEVC encoders produce better results (so pirates that encode such content typically have just come to accept the slower encodes now that good CPU compute is much cheaper than in the past).

---

[1]: <https://en.wikipedia.org/wiki/SubStation_Alpha>

[2]: <https://streamable.com/d21iq> (this is genuinely a toggleable subtitle and not something baked into the video!)

OmarAssadi··on Ask HN: Why does Albanian data get so easy leaked?
Not sure quite what the rules are in other countries and other states, but to properly graduate high school in Florida with all the right credits to go to university, you need to take a foreign language. This would typically be Spanish. But depending on the school, other options may be available (at my school, French and, for a little while, Japanese).

But I think the big problem in the English-speaking world is not the lack of mandatory languages, or the almost intentional ignorance that I feel like many people perceive [from Americans, at least]. Rather, it’s just not all that necessary, pragmatically speaking.

I am Arab, I grew up in the U.S., I went to university in Russia, and my roommates were from China. I feel like all four groups have similar reasons for their difficulties with other languages.

While, of course, learning any language is useful, and there’s always something interesting that you would miss out on otherwise, there is such an absurd amount of stuff available in English. And so many people you can communicate with purely through English. For better or for worse, it’s not quite like being from Iceland or Estonia, where the total number of people you can communicate with in your native tongue is fewer than the population of Chicago.

When I think about my friends who are shockingly good at English, the people who not only understand the rules well but also the culture and could pass as a native speaker, at least over text, they are people who had a serious motivation to learn—like my friends from Lithuania who grew up on English-only games, like RuneScape, as kids and needed to have some ability to speak if they wanted to play.

If anything, I’m less surprised that English speakers tend to be so not-fluent than I am that Chinese speakers are as “fluent” as they are.

OmarAssadi··on Copyright infringement in AI art
Good points!

As an example, as a hobby, I am interested in things like anime video compression and such. Two of the most essential sites for me in terms of resources and information have been almost entirely Chinese. And while they appreciate and respect the international users, at the end of the day, they can’t translate each and every single forum post into English or any other language that someone may need.

And also unfortunately, I don’t have the time yet to invest in learning the language enough to use those sites without assistance. Instead, I rely heavily on things like Google Translate, Yandex, and DeepL. They’ve been totally essential to the point to where a major pain point for me with my preferred browser (FireFox) has been a lack of native MT support (until very recently, which has been nice for Russian and stuff, but I’m still waiting for Chinese support in Bergamot).

Similarly, while I studied in Russia for a while, I’m not a native speaker, and my skills aren’t what they used to be now that I’ve been out of the country for a while. There is a lot of interesting stuff on the Russian internet (Habr, RuTracker, various articles, etc.) that I only really have the level of convenient access to that I do because of MT.

I don’t think it’s all sunshine and rainbows, certainly, as with stuff like DALL-E 2, but it definitely provides a lot of people real value and happiness. Hopefully, humanity will figure out how best to balance the positives and negatives of AI services like these.

I see that both sides (lol, sorry) of this often take pretty hardline stances on “art is art; there is no difference” vs. “these are just copy-pasting people’s hardwork and can’t actually create anything themselves”. I think the value is sort of indisputable, but I worry about how it’ll affect people’s livelihoods — e.g., after playing with DALL-E 2, I think it is totally capable of replacing things like stock photos a large percentage of the time (not always, of course, but it definitely can sometimes).

I’m of the mindset that you should be able to remix, adapt, copy, etc, virtually everything in an ideal world. Maybe I am just entitled, I don’t see why I should have to waste the man-hours recreating or reverse engineering something simply because of a license incompatibility, for example.

Similarly, I don’t see why I shouldn’t be able to transform or straight-up copy and distribute someone else’s art if it provides people with happiness. As an example, talking about anime earlier, I think things like fansubs can provide lots of additional value to people by either providing more natural translations or through extensive typesetting that companies tend not to do because it is not “necessary”. For example, those familiar with the show Bakemonogatari are probably aware of the extreme amount of dialogue displayed exclusively visually, with rapid flashing cards and such. While I think the official subtitles don’t get enough credit 99% of the time, that is a prime example where fansubs which go in and actively mask over the text on the screen and replace it with the viewer’s native language is very helpful. However, despite the value these things provide, it is copyright infringement.

Rationally, I understand that the emotional and protective side of people exists, but at the same time, I don’t “understand” it; I want people to use my stuff — I want people to be happy with their limited time on this planet. In that sense, I think the emotional argument for copyright does not appeal to me.

That being said, pragmatically, people need jobs. We live in a society where you must work. A society where you have bills to pay, groceries to buy, and fees for schools and hospitals. Stripping away copyright protections entirely for things like this would hurt a lot of people right now. And I am really curious how this’ll all turn out in court when the majority of these datasets are trained on things that they have no right to be using.

Will we be in a world where you can essentially bypass all copyright protections by throwing everything into TensorFlow before feeding the computer a little prompt? Or will we be in a world where many of these tools are crippled to the point of uselessness? Or will we be in a world where companies just accept that sometimes someone will take them to court and settlements will just be another business expense?

Aside from the economic issues, if I’m going to be writing some Adderall-infused essay right now, I figure I may as well rant about the other two.

The first of those is biases; while I have always been aware of this problem, it was very evident after playing with DALL-E 2 this past week. The datasets seem to be very European-centric (US, Canada, NZ, AU, etc included in that). There were a number of things that I could not get it to generate correctly or would produce wildly different results based on the prompts I fed it.

As relatively minor, silly example, while I had no trouble getting it to produce white-washed movie posters for by asking it for “Netflix live-action adaptation of Dragon Ball Z”, I couldn’t get it to do the same for India and Bollywood. I am sure someone who has spent more time doing “prompt engineering” than I have could possibly get better results, but the point still stands in the sense that it seems to like to produce what Americans & Europeans are more exposed to.

Another example is, just ignorantly guessing, the way things are weighted — e.g., I wanted to have it produce art in the style of shows like Tatami Galaxy, The Night Is Short, Walk On Girl, and things like the album covers for Asian Kung-fu Generation. All of those listed are done by Yusuke Nakamura. However, perhaps rubbing salt in the wound for artists, I was unable to get the results I wanted by asking for things in Yusuke Nakamura’s style. Instead, I had much better results by using “Yuasa Masaaki”, the director of Tatami Galaxy and The Night Is Short, Walk On Girl. My only guess here is just that Yuasa is a more common occurrence in text, at least in terms of the English internet.

In that sense, I worry that these tools will not only replace people, but they’ll reinforce existing cultural and societal biases even more so than we already do on our own now.

Further compounding issues like that is the censorship and filtering on OpenAI; virtually anything political, violent or sexual is not currently allowed (and may never be? I figure no company wants to be associated with the potential PR disasters that come with it, like Microsoft’s Tay). This is extra problematic given how important all of those things are in art. I worry that we will lose artists and have fewer people pushing the boundaries of art.

And ironically, for a society that criticizes countries like China so fervently for censorship, we rely so heavily on giant capitalist companies which self-enforce much of the same censorship, helping further enforce the status quo and restricting marginalized minorities. I am not a fan to say the least, despite understanding the potential for violent speech, propaganda, etc.

Anyway, that’s the end of my long-winded 6 AM phone rant. Apologies for any weird formatting or incoherent thoughts!

OmarAssadi··on Rufus: Microsoft is blocking Windows ISO downloads
I don’t hate GitLab, and I do appreciate the open-core aspect of it and the competition. However, despite its popularity for businesses, I think GitHub, for better or for worse, is unquestionably the best choice in terms of reaching people (for most projects, at least; the benefits of GitHub may be less relevant or even negatives for certain projects, like particularly niche privacy/freedom related ones, or alternatives to GitHub or completely different version control systems).

I’d also like to note that GitLab has a number of the same possible concerns in the sense that it is not completely opensource, libre, and standard. There are paid features and features that are specific to GitLab that people rely on.

Perhaps things like SourceHut or CodeBerg (gitea) are better examples from that perspective. And I think those often fit the few projects that actively benefit from not being on GitHub due to those factors and the platforms’ views aligning more with potential contributors, etc.

For personal, private use and such, Gitea has been what I have used for years. I find it has fit my needs better than GitLab, but I would still be hesitant to use it for much else, other than internal repos as a company, etc.

edit: it only occurred after hitting submit that you might’ve been saying that GitLab itself is popular and successful despite not being on GitHub, not that GitLab brings the same benefits/negatives of GitHub. I’ll leave this post as is, though.

OmarAssadi··on Tell HN: Apple products come with ungrounded plug in India
While many on HN likely consider it pretty gauche, to say the least, to be racist towards certain minority groups whose struggles Americans tend to have more awareness of, I do still see the subtle—and not-so-subtle—racism and prejudice regularly, especially when it comes to Asian groups, be it towards Arabs, like myself, Indians, Chinese, and many other people. So, I get the frustration.

However, that said, even if you intended for others to take your comment rhetorically rather than genuinely transphobically, to highlight how bad what the other person said sounds to you, I think it’s misguided at best; trans people get attacked enough as is, and I don’t think there is any need to bring imageboard slurs [1] into the mix to get the point across.

I don’t mean for all of that to come across as “virtue signaling” to distract from the original problem of racism by solely focusing on the transphobic language. The reason why I’m not ripping the parent comment apart or flagging it is that I interpreted it completely differently; I didn’t take it to be subtle racism toward Indians, as if they need to be “fixing the problem” (of not understanding the actual level of danger?), but rather that because Apple is seemingly so uninterested in addressing the issue, sarcastically, they should ship plastic laptops instead. Maybe this is too generous of an interpretation? I don’t know. But yeah, worth considering the other possibilities.

[1]: tbh, I’m not sure if we can refer to verbs as slurs or if they are solely nouns. I can’t actually think of another similar verb to compare (Maybe this is my wordcel moment). You get the point, though.

OmarAssadi··on VLC media player banned in India
Do they not also ever request blocks on particular IP addresses? A lot of collateral damage happened due to blocking whole ranges from AWS and such when Russia was trying to ban Telegram.
OmarAssadi··on New Intel chips won't play Blu-ray disks due to SGX deprecation
I disagree about it being “not much better”; with Blu-ray, even without SGX, you can still rely on software like AnyDVD, MakeMKV, DVDFab, etc., to clone and decrypt the media. It’s “easy” for general consumers with $50 to burn on an LG WH14NS40, or similar, to backup decrypted copies of even UHD Blu-rays and then stream them locally with something like Plex, Jellyfin or Kodi. Pair that with backups and something capable of correcting corruption, like ZFS, and you’ve got incredibly long-term access to the media that you own.

Whereas when something streaming-exclusive is removed from whatever platform, you typically have no choice but to accept that it is gone or rely on piracy. Services like Netflix often make use of Widevine and restrict playback of full HD and UHD content to devices with Widevine L1 support.

While it is possible to decrypt L3 content using relatively accessible keys, such as the ones from browsers like Chrome, not only has this historically had a much higher barrier to entry, you won’t be getting the decent-quality versions. In order to do that, you’d need either some sort of exploit or insider-access at a manufacturer to get L1 decryption. They will invalidate known abused keys, so piracy groups tend to be very quiet about where and how they’ve managed to decrypt certain content.

All of that is also assuming that you’re willing to make illegal copies of content from streaming services and that you’ve thought enough about it ahead of time to do so prior to removal. And, of course, not to mention that the content available to L1 devices is often still significantly worse quality than what is available on Blu-ray (e.g., typical Netflix 4K streams are 15Mbps while 4K Blu-rays are usually around 80Mbps).

Anyway, I hope all of that didn’t come off too fanatical or ranty; I am just a bit passionate about the subject! I get where you’re coming from, and I do think it is disappointing that even physical media has so many restrictions in place.

That said, while I don’t like the DRM on Blu-ray and DVD, I think we shouldn’t be quite so pessimistic about physical media. It is not libre in any sense, and I recognize the cost of buying each and every single thing you enjoy is too cost prohibitive for the average person, I would be really sad to see this sort of thing eventually die off entirely. I think despite the annoyances, these discs are still really important for enthusiast viewers, people in remote/rural areas, and longer-term preservation.

OmarAssadi··on Facebook gives data to Nebraska police prosecuting teenager for abortion
But the same concept of “basically an adult” does not apply to other things, generally.

For example, places without Romeo and Juliet laws punish couples where one is barely adult for sleeping with someone who is nearly an adult. Young couples are also regularly charged with manufacturing/possession/distribution of child pornography in those cases too. And people also aren’t getting to buy alcohol when they are 20-years-and-364-days-old either, etc.

There is a lot where the system treats adulthood and rights as a black and white thing, yet grey when someone wants to make an example out of a child.

OmarAssadi··on I Stopped Reading Hacker News Comments
Incel terminology is so horrible to try and explain. But yeah, for anyone confused, basically any word can be affixed with -cel (from celibate) and it “works” — e.g., numbercel, wordcel, gymcel, heightcel, narutocel, ycombinatorcel, etc.

Typically these would’ve been used by the incel community to describe why someone is an incel (e.g., “heightcels” supposedly being too short to be attractive and so on). Now, I see the terms being used not only unironically by actual incels but also ironically, usually on the fairly leftist/chapotraphouse-adjacent parts of twitter and such.

https://www.vice.com/amp/en/article/pkpqzb/ok-wtf-are-wordce...

OmarAssadi··on The Story of Mel (1983)
I’m surprised I haven’t seen this linked yet, but Bryan Cantrill of dtrace, Sun, lawnmower, Joyent, etc, fame gave an amazing talk for Monktoberfest 2016, titled “Oral Tradition in Software Engineering”, which features The Story of Mel [1]. Highly recommend checking it out — there are loads of little gems and stories like this throughout.

All of his other presentations are great too and definitely worth a listen if you like this sort of thing [2]. A couple of my favorites are “Fork Yeah! The Rise and Development of Illumos” [3] and “Debugging Under Fire: Keep your Head when Systems have Lost their Mind” [4].

[1]: https://youtu.be/4PaWFYm0kEw?t=644

[2]: http://dtrace.org/blogs/bmc/2018/02/03/talks/

[3]: https://youtu.be/-zRN7XLCRhc

[4]: https://youtu.be/30jNsCVLpAE

OmarAssadi··on Anime retailer Right Stuf has been acquired by Sony/Aniplex
Woke propaganda? I haven’t seen an absolute ton of anime, but I’ve got nearly 200 items on my list, and I don’t think I’ve watched anything that could qualify. What are you coming across that I’m not?
OmarAssadi··on Instagram gets worse with dark patterns lifted from TikTok
Not to totally dismiss any concerns, but most IRC servers support TLS. While not end-to-end in the sense that the server can read all of the messages, encryption is available. And in the case of IRC, with the most common use case being channels for particular communities which often need moderation, I don’t think the fact that the server can read the chat is a big issue. I wouldn’t advocate for it as a way to privately and individually communicate with people one-on-one, but I think it’s pretty okay for what it is.

The nice thing with IRC, though, is that by not being one massive centralized entity where all channels in existence reside, you’re not depending on one particular network in the same way you might be dependent on services like Discord. You can run your own server for your own community where you can set your own rules and manage everything the way you want to.

IRCv3 also has SASL [1]. And more rudimentary forms of authentication have been around for ages on most servers.

[1]: https://ircv3.net/specs/extensions/sasl-3.1

OmarAssadi··on Xz format considered inadequate for long-term archiving (2016)
Not to sound like the usual evangelist, and I am sure everyone has already thought of these points, but regarding RAID-10, is that the best call?

My thought process is that the majority of modern hardware/software RAID solutions don’t do error correction properly. And even assuming something that does actually do checksumming and such semi-properly is employed, I think if we are talking tens or hundreds of years from now, it’ll be nearly impossible to find a compatible hardware card should the ones in use die.

I’m aware it already sucks trying to build a project six months in the future, let alone six or sixty years, but perhaps something purely software-based that does care a ton about integrity, like ZFS, would be the best bet in terms of long-term compatibility of a hard-drive storage solution.

So long as the drives can still be plugged into a system, any system, and even if OpenZFS eventually drops backwards compatibility with the version used to create the pool, it’ll likely still be possible to virtualize whatever version of Linux/BSD/Illumos is compatible with that particular version of ZFS and then import the pool.

OmarAssadi··on GoodbyeDPI: Deep Packet Inspection circumvention utility
Yeah, I've come across your tool a few times before and seen the default lists. Really useful stuff, by the way!

Interesting, though. I had heard talks about introducing proper government-level filtering -- I think after the Telegram/AWS/etc blocks in, like, 2018 (?), but I wasn't aware of anything actually going into effect.

If you've got time to answer or link me anything, I am a little curious. How are the TSPU boxes setup? Are these provided by the government to different datacenters/IXs or at some sort of higher level than that? And are they currently just used to filter additional out-of-registry domains/IP addresses or do they also filter the semi-public, known blacklist? Is there anything like the unofficial Chinese gfwlist that tries to maintain a list of the out-of-registry stuff?

I haven't lived in Russia in a little while now, but when I was last there, although virtually every residential ISP enforced the government list, a number of the domestic server providers weren't, so a good option for low-latency and keeping a Russian IP address was just renting a gigabit VPS from the city next to me and using it as a proxy server.

OmarAssadi··on A chess robot in Moscow has broken the finger of its human opponent
I'm unsure which angle you're coming from with your comment, and I don't mean to assume, but I wouldn't blame the parents. And certainly, I don't think it is reasonable to expect a seven-year-old to understand the risks well.

Many people have gotten used to these things having pretty high safety standards. I feel like you can't fault them for not knowing the intricacies of how the designers programmed the robot to handle movement and collisions; it's just not something everyday people will have in mind. And as a parent, you'd assume that the chess tournament wouldn't be putting a machine in the room and allowing children to play if they knew it was dangerous.

I wouldn't be fuming with the chess federation either for not necessarily knowing and thinking about it, but I think their response is a bad look; it came off cold to me and like they were looking out for themselves. At the end of the day, they put it there, allowed the visitors to play against it, and something went wrong. Apologize, look into it, fix the problem, and let insurance pay for the accident. Take care of the person who got hurt in your tournament.

OmarAssadi··on GoodbyeDPI: Deep Packet Inspection circumvention utility
For what it’s worth as well, there are other solutions than whole-network VPNs and such.

Personally, I chose to generate a domain list for V2Ray from the Russian government’s blocklist when I lived there [1].

I prefer to do that typically because it avoids the pain of the ever-growing whitelists and it allows me to keep the traffic encrypted in case someone does actually figure out that you’ve bypassed DPI. And if you use something like V2Ray or ShadowSocks, they’ll disguise the traffic much better than something like OpenVPN typically would, making it less obvious to anyone monitoring that you’re using a proxy in the first place.

There’s a load of references and pre-generated lists for different needs if anyone else is interested in doing something similar [2].

(Also, I hope this doesn’t come across as missing the point of the tool — I think it’s really useful and a good solution. I just figured I’d note some others too)

[1]: https://github.com/OmarAssadi/AntiZapret-V2Ray

[2]: https://github.com/v2ray/domain-list-community

OmarAssadi··on New divorce app to help couples split assets in New York without lawyers
I really shouldn’t have clicked the article, honestly. I have become so desensitized to everything on the internet at this point, but something about parents always makes my heart ache so baddddd. I totally struggle to not to insert my own mom or dad. It’s just tragic.

I really cannot comprehend why there is no punishment for things like that.

Sure, was he at risk of the other person grabbing the gun? Probably. But why did he have to unnecessarily bring a firearm into a heated and emotional argument in the first place? What was supposed to happen?

It feels so psychotic to me, like taunting someone with the intention to bait them into their death. Those kids lost their parent for no good reason :(

OmarAssadi··on Are forum platforms dead?
I don’t know, there’s a ton of horrific bullying every time I stumble upon the site. I think you’re downplaying it. And loads of less-than-legal activities, like sharing videos of former porn actresses purely because they’ve tried to scrub their old content from the internet (copyright infringement), revenge porn, etc.

Just as the edgy comments are their “right to free speech”, I think it’s completely fine for XenForo to exercise their right to speech by not providing them service. It’s not like they’ve had their license revoked; they just cannot get support or software updates past when their license expires.

OmarAssadi··on MPC-HC v1.9.22
Totally agree. But while I know mpv’s default setup is not quite what most people would like, where it truly shines is also configurability.

Out of the box, the picture quality is already better than basically any one-click install other than mpc + madVR, and the default subtitle rendering is great for anything that makes use of SSA subs, but if you’re the type that wants to customize everything and use custom shaders and stuff, you can tweak pretty much every little detail [1].

And you can write your own UI for it pretty easily with Lua or JavaScript. If you give “Custom mpv OSC” a search, you’ll probably be able to find something that suits you a bit more [2]. The scripting support in general is great too. There are loads of really useful third-party features that I wish things like Plex would support, like selecting subtitles based on filters [3].

Also worth looking into is “mpc-qt” if you’re a big fan of MPC and want something that feels a bit more like it out of the box. It’s a cross-platform mpv-based player that mimics a lot of the look and functionality of mpc [4]. The screenshots on the GitHub page are of the dark-mode feature, but it does have a near-on 1:1 replica of the classic mpc interface too.

[1]: https://kokomins.wordpress.com/2019/10/14/mpv-config-guide/

[2]: https://github.com/cyl0/MordenX

[3]: https://github.com/CogentRedTester/mpv-sub-select

[4]: https://mpc-qt.github.io

OmarAssadi··on Netflix loses almost a million subscribers
Proper Chrome Chrome on Linux also has Widevine L3, so the same bad situation as Chrome on Windows and macOS. And yes, if you’re not also using Netflix a ton on your TV or something, you were likely overpaying :(

DRM sucks.

OmarAssadi··on Are forum platforms dead?
Kiwifarms, I would assume. You’ll see why if you check out their Wikipedia article.
OmarAssadi··on Netflix loses almost a million subscribers
Netflix uses Widevine DRM, and in short, not very easy. Widevine has three different security levels: L1, L2, and L3, with L3 being the lowest-level.

Things like Chrome have L3 access. There have been tools to dump Chrome’s key and decrypt stuff like Netflix’s content. However, I believe Netflix only serves up to 480p to L3 devices.

For HD and UHD content, you’d need higher access levels, which means you’d need to get the key from some sort of L2-L1 device, like a phone, Smart TV, etc.

There are no public methods to obtain those higher-access keys as far as I am aware; the piracy groups tend not to publicize that kind of thing because that’ll just get the device’s key revoked pretty much immediately and whatever exploit they’ve found will get patched.

← PreviousPage 3 of 4Next →