dual_sport_dork 🐧🗡️

Progenitor of the Weird Knife Wednesday feature column. Is “column” the right word? Anyway, apparently I also coined the Very Specific Object nomenclature now sporadically used in the 3D printing community. Yeah, that was me. This must be how Cory Doctorow feels all the time these days.

  • 1 Post
  • 136 Comments
Joined 3 years ago
cake
Cake day: July 20th, 2023

help-circle





  • Ooh, a Celeron N4000. I will see you, and raise you this piece of shit we have at work:

    My boss bought this as one of those Black Friday “deals” for about $99 USD. The sticker on the bottom doesn’t seem to reveal its manufacturing date but I believe this model was released in 2018. Really, it’s just a netbook in all but name.

    We use this specifically to drive a walk-around barcode scanner in our warehouse and the software we have to use on it is Windows only. It’s tiny and still somehow gets stellar battery life, and it’s deliberately so cheap as to be disposable so when the day inevitably comes that it gets smashed, no one will care.

    With Win10 IoT on it the thing actually runs tolerably for our intended use case, which is the aforementioned barcode bleeping and nothing else. And at least yours there has a 1080p display; this one is only 1366 x 768 so doing practically anything else on it is excruciating anyway. What amuses me the most about it is that with only 29 gigs of usable storage there literally isn’t enough left over to run Windows updates. I have this thing as ruthlessly pared down as I can get without creating a custom Windows installation or something and for the big updates, you have to attach an external USB drive to it.

    I can’t fathom trying to run Windows 11 on it. Fuck all that noise.




  • Every dipshit with a freshly minted MBA thinks they’re going to go and disrupt the appliance industry by putting it online and snatching it out from under all those antiquated local dealerships run by out of touch old men who can barely operate a computer. They think they’re going to go from zero to nationwide tomorrow, and they’re so smart because nobody’s thought of it before.

    It turns out that dealing with the final mile with appliances is killer, and extremely difficult logistically. That makes the entire operation much more expensive than anyone thinks at first glance. Not just in terms of raw dollars and cents paid to disinterested common carriers to move your product from A to B (who also won’t install the stuff or even bring it inside your customer’s house) but also in damaged and returned products and angry screaming customers who will be initiating credit card chargebacks all the time whenever anything goes wrong.

    All of those little local dealerships have had decades to figure out how to move a refrigerator from their warehouse to your kitchen and how to remediate the situation if it all goes pear shaped on delivery day, and all of them only service their local territory for a reason. The further you stretch without some physical presence in where you’re stretching to, the more impossible it becomes to control the logistics.

    So yeah, that’s probably in no small part why your fridge would have been so expensive. Amazon is among the latest figuring this out the hard way, and you can’t just slap a refrigerator or a stove in a bubble mailer and dump it on somebody’s front porch.



  • And the ultimate outcome of that was, at one point Google enacted some kind of API change which necessitated Samsung to push out an update to remain compatible, otherwise all of your Google enabled features such as the calendar syncing, email, etc. would stop working. Samsung claimed to be developing a patch for this, and ultimately pushed out an update to… only some of their models. For the others, their response was literally just, “We recommend you buy a newer refrigerator.”

    Yes, this actually happened.

    But since that was going on for ten years ago now, information about it on the Internet is a trifle difficult to find because the search results have largely been overshadowed by Samsung’s more recent smart fridge fuckup. Grand.

    Never buy a Samsung appliance.



  • In my case the pattern appears to be some manner of DDoS botnet, probably not an AI scraper. The request origins are way too widespread and none of them resolve down to anything that’s obviously datacenters or any sort of commercial enterprise. It seems to be a horde of devices in consumer IP ranges that have probably be compromised by some malware package or another, and whoever is controlling it directed it at our site for some reason. It’s possible that some bad actor is using a similar malware/bot farm arrangement to scrape for AI training, but I’d doubt it. It doesn’t fit the pattern from that sort of thing from what I’ve seen.

    Anyway, my script’s been playing automated whack-a-mole with their addresses and steadily filtering them all out, and I geoblocked the countries where the largest numbers of offenders were. (“This is a bad practice!” I hear the hue and cry from specific strains of bearded louts on the Internet. That says maybe, but I don’t ship to Brazil or Singapore or India, so I don’t particularly care. If someone insists on connecting through a VPN from one of those regions for some reason, that’s their own lookout.)

    They seem to have more or less run out of compromised devices to throw at our server, so now I only see one such request every few minutes rather than hundreds per second. I shudder to think how long my firewall’s block list is by now.






  • I run an ecommerce site and lately they’ve latched onto one very specific product with attempts to hammer its page and any of those branching from it for no readily identifiable reason, at the rate of several hundred times every second. I found out pretty quickly, because suddenly our view stats for that page in particular rocketed into the millions.

    I had to insert a little script to IP ban these fuckers, which kicks in if I see a malformed user agent string or if you try to hit this page specifically more than 100 times. Through this I discovered that the requests are coming from hundreds of thousands of individual random IP addresses, many of which are located in Singapore, Brazil, and India, and mostly resolve down into those owned by local ISPs and cell phone carriers.

    Of course they ignore your robots.txt as well. This smells like some kind of botnet thing to me.



  • Another in a long line of messing with user interface things on updates, without any prior warning to the user. And if you even get a changelog at all on the update prompt it’s always just vague bullshit like, “Bug fixes and usability improvements,” without explaining what those “improvements” are supposed to be.

    In unrelated news, the last major update on my Moto G changed the incoming call screen from swipe up to answer, swipe down to reject to swipe left to answer, swipe right to reject. What is this, fucking Tinder now? And don’t come at me about the “gesture” setting in the dialer app options, either. Yes, I am aware of it. The only options listed there are now “horizontal swipe” and “single tap to answer.” Why any rational individual would want to inflict the hell that is the latter option on themselves is unknown to me.

    This kind of horseshit is why boomers and old people are terrified of updates and drive us IT nerds up the wall by perpetually ignoring and dismissing them. Because when you change the user interface choices people are used to behind their backs and without warning, as far as they’re concerned you just broke their device.

    Cut it out.