Live data from Hacker News

Setris – Tetris with Sand Physics

mslivo.itch.io

151–160 of 191 posts

Re: Setris – Tetris with Sand Physics

#155
I watched the demo video but I can't get over using E in the bass in bar 5, where D would normally be expected. (Yes, it should be possible to use chord V11 here instead of IV if you really want, but you would need to fill out the harmony a lot more to make that work, not just the bass line.)

Re: Setris – Tetris with Sand Physics

#156

Earlier quoted context omitted.

I beg to differ. $ firejail ./bin Even the very limited default profile hides things like ~/.ssh and makes the rest read-only (with the exception of ~/.cache and such).

That doesn’t invalidate what I said. It requires going well out of your way (as do other sandboxing arrangements—I never said they didn’t exist), and it’s not a very good sandbox without a fair bit of work. (So maybe you’re blocked from trashing the home directory, but stealing all your passwords and login cookies was always more lucrative than vandalism, so making the rest read-only is small comfort.)

I have no desire to engage in one of those 50 levels deep nested arguments, so this is my last message, but you literally said:

> or makes it at all easy to achieve

firejail makes this trivial. You won't be able to steal anything of interest. Making an easy to use sandbox for desktop applications is the main goal of the project. You could have tried it out before arguing against it in what feels like bad faith.

  $ firejail bash
  -- snip --
  
  $ ls ~/.mozilla
  ls: cannot open directory '/home/foo/.mozilla': Permission denied
  
  $ ls ~/.ssh
  ls: cannot open directory '/home/foo/.ssh': Permission denied
  
  $ ls -lh passwords.kdbx
  -r-------- 1 nobody nobody 0 May 29 14:53 passwords.kdbx
And so on. (The last one is my real password database and it definitely isn't 0 bytes in size.)

Re: Setris – Tetris with Sand Physics

#157

Why doesn't this run in the browser? :( It's 2023 - and no offence intended - but I would rather not download a binary blob from a random Internet page to execute it outside the browser's sandbox. Especially since it looks this game could easily be programmed with WASM and/or vanilla JavaScript.

While you're not wrong about the sandbox aspect, there are people like me who detest doing everything via a browser, and prefer standalone tools. I think it's tragic that I need a browser to do most things.

Re: Setris – Tetris with Sand Physics

#158

Earlier quoted context omitted.

That doesn’t invalidate what I said. It requires going well out of your way (as do other sandboxing arrangements—I never said they didn’t exist), and it’s not a very good sandbox without a fair bit of work. (So maybe you’re blocked from trashing the home directory, but stealing all your passwords and login cookies was always more lucrative than vandalism, so making the rest read-only is small comfort.)

I have no desire to engage in one of those 50 levels deep nested arguments, so this is my last message, but you literally said: > or makes it at all easy to achieve firejail makes this trivial . You won't be able to steal anything of interest. Making an easy to use sandbox for desktop applications is the main goal of the project. You could have tried it out before arguing against it in what feels like bad faith. $ fi…

I haven’t ever used Firejail, but I know a little about it. I understand that Firejail depends on you configuring things for each app, with a mixture of whitelisting and blacklisting. That’s untenable unless the default profile is safe. You said its default profile just makes the home directory read-only; I took that at face value (since I have no interest in installing it to check). If what you said was correct, then I presume that either you must have changed the default profile, or Bash is using a different profile?

Re: Setris – Tetris with Sand Physics

#159

Earlier quoted context omitted.

It would be worthwhile to phrase this more constructively. They built something cool and they want to share it. The author is gaining nothing by posting this, and owes us nothing.

Neither is OP owes anything to author.

Sure, yes.

But, if you're trying to be a decent person you might want to encourage others to keep making cooling things rather than discourage them by saying "this free thing isn't good enough".

Post reply on HN