Caleb Hearth

Development of programming languages by corporations is not something I object but, all of the stuff told about Oracle here is correct. They're not a nice entity unless you pay money to them and they're greedy. They always want more. Also, their hardware can fail in strange ways and they'd shrug it off. I've met with some nice people who migrated from Sun but they all say that the terms they work are draconian. I like Java too but, developing a nice language doesn't make Oracle good. Don't get distracted [0]. > I guess the "community" would love to keep using Java frozen in version 6. Python doesn't stop. C++ doesn't drop. Even brainfuck doesn't stop. It'd have prevailed. OpenJDK is one fruit of the project. After removing patent encumbered image processing stuff, OpenJDK just took off. Yes, it's still part of Oracle in a sense but, OracleJDK is compiled from OpenJDK, not vice versa. Again, don't get distracted [0]. [0]: https://calebhearth.com/talks/dont-get-distracted

Reminded me of the tech in this https://calebhearth.com/dont-get-distracted

Relevant blog post someone threw last time something like this got posted: https://calebhearth.com/dont-get-distracted

Yeah, one side is using phones, the other - signal detection system to launch drone strikes[1]. [1] https://calebhearth.com/dont-get-distracted

> I'm going to tell you about how I took a job building software to kill people. But don't get distracted by that; I didn't know at the time. — Caleb Hearth 1. https://calebhearth.com/dont-get-distracted 2. https://www.youtube.com/watch?v=UBdBoWAtLNI

I feel like the primary use case for such a technology is manipulating and profiling people over video chat, maybe even autonomously. Hiring managers, HR, landlords, and police are obvious customers. The response I anticipate will be "But this will help doctors over telehealth and stuff!" - Please see https://calebhearth.com/dont-get-distracted

Can you explain how https://calebhearth.com/dont-get-distracted applies to the potential response you described? I don't get it.

There are not enough ethics courses being taught in schools and universities. https://calebhearth.com/dont-get-distracted

>I’m going to tell you about how I took a job building software to kill people. >But don’t get distracted by that; I didn’t know at the time. Caleb Hearth: "Don't Get Distracted" https://calebhearth.com/dont-get-distracted

For today's lucky ten thousand, this essay was previously featured on HN https://calebhearth.com/dont-get-distracted Don't get distracted

moto g15 in hand, deguggled as much as possible right out of the box, no guggle accounts or big tech apps, bank through a browser, but there is defintly a lot of outright fraud as to bieng able to turn off google apps, it is an arcane procedure to turn off notifications, insisting that nothing will work without "play store" installed, though it is clear that going to a linux phone will become the only way to avoid adversurvielance security and tracking from taking over my device completly. keep in mind that our techno facist elite did provide the "intel" that led to ICE bieng sent to a particular area code in minaipolis, where they executed a mild mannered chearfull poet, who's last words, somehow knowing, were, "i dont hate you". "tech" is central to whatever comes next https://calebhearth.com/dont-get-distracted

Don't Get Distracted https://calebhearth.com/dont-get-distracted

This sounds like Caleb Thompson's "Don't Get Distracted" talk. - https://calebhearth.com/dont-get-distracted - https://www.youtube.com/watch?v=cz7r_gZhYyA

Neat, I didn't even know you can sign git commits with SSH! Seems to be a pretty new feature too; [1] claims it's from November 2021. [1] https://calebhearth.com/sign-git-with-ssh

You'll need to re-upload your public SSH key as a signing key for the signatures to be shown as verified. https://calebhearth.com/sign-git-with-ssh#github

GitHub just needs support for SSH-based commit signing. https://calebhearth.com/sign-git-with-ssh

I feel that trying to make SSH keys short-lived is becoming more painful each year because there's an increase of tools that use SSH keys for purposes other than SSH logins. For example, age [1] encrypts files with SSH keys, agenix [2] does secrets management with it, Git can now sign commits with it [3], and even ssh-keygen can now sign arbitrary data [4]. All of these become useless the moment you start using short-lived keys. [1]: https://github.com/FiloSottile/age [2]: https://github.com/ryantm/agenix [3]: https://calebhearth.com/sign-git-with-ssh [4]: https://www.man7.org/linux/man-pages/man1/ssh-keygen.1.html

Sorry, I had missed this. The format is [gpg] format = ssh [user] signingKey = key::SSH-PUBKEY In my case, since I have an ssh-ed25519 key, it is [user] signingKey = key::ssh-ed25519 AAAAC… You can pretty much copy the `.pub` key and paste it after `key::` (instructions like the ones at https://calebhearth.com/sign-git-with-ssh will show this without the `key::` prefix; according to the latest git documentation, the non-prefixed SSH key format is not preferred, as the `signingKey` value can be either a raw SSH public key, a GPG key ID, or a path to the signing key). One thing of note that I haven’t checked to see if it matters. I have the matching `.pub` key in `~/.ssh`, but I don’t think that is making a difference. I do remember having some struggles getting it sorted out at the very beginning, but I didn’t take very good notes of what different things I tried.