axby @ axby @lemmy.ca

See https://alexbarry.net/ for projects I'm working on, and contact info.

---

Read more

Posts

5

Comments

83

Joined

2 yr. ago

Moderating

---

Rimworld is probably one of my favourite games. I highly recommend it to anyone who is interested. This new expansion also seems really cool, I copied two points from the steam description that stood out to me (spoiler warning! Even the steam description has a spoiler warning before these. Hopefully most lemmy clients support spoiler tags):

spoiler warning

spoiler warning (I notice connect on Android doesn't yet support spoiler tags)

spoiler warning

(end spoilers)

That being said, I’ve only played the base game so far, and I think I’ve always played on the difficulty that is just one above peaceful, and I found it really hard near the end. But I’ve never bothered with killboxes, and I keep my colony wealth high I guess, I like to hoard food, silver, and everything. I also build floors (some people skip them to keep their wealth low). Perhaps I should have added: raid strength depends on your colony wealth (I think).

Does anyone have any tips for actually reaching the end game event? (Please use spoiler tags! I know a bit about it, but I think many people like to be surprised. Put :::spoiler some text that shows before users expand your spoiler before and ::: at the end.)

Awesome, thanks! It's nice to hear a perspective that is different from the mainstream. I've also been limited by my PC for a while, but I've upgraded since I last tried it, so hopefully I'll have more luck this time.

TL;DR: I may be mistaken about how playable it is, I'll have to give it another try. Thanks for the reassurance. I haven't tried it myself in many years, and have only relied on articles like this to hear about the progress. Perhaps I'm biased since the comments always love to hate on Star Citizen and few people are defending it. RE single investor: if everyone who paid money for it was happy then yeah there would be no difference. But I think a lot of people paid money expecting a longer gaming experience within a few years, and instead it's taken a long time and they're still focusing a lot on cosmetic things rather than gameplay and content. IMO gameplay and content should be the top priority, and cool visual stuff can come later. But if piracy/mining/exploring planets/missions can actually provide ~10 hours of enjoyment without being seriously hindered by bugs, then I'm totally wrong and should update my comment.

Thanks for the info, perhaps I should update my comment. It was barely beyond a tech demo when I tried it so many years ago, but it does seem like it's added a lot since then (and I've only learned about it after digging in more today). I've seen some comments in this post that said there isn't much to do besides walk around and look at stuff, which matches my experience many years ago, but perhaps it's not really accurate anymore. Some articles have talked about piracy and mining actually being viable as ways to make money to get a better ship. If those are enjoyable and not severely limited in content and so buggy that progress is hard, then I'm totally wrong and can maybe say that 10 years later my return on investment is adequate :) , and maybe in another few years there will be even more content and give me something more like ~10+ hours of enjoyment.

I know people who play several hours a week and say they’re having a great time. There’s definitely a full game in the alpha, but it’s far from polished or finished.

This is actually really reassuring to me, I'll have to give it another try.

Every person I know who’s spent money on star citizen seems happy with their RoI.

Perhaps the people you're talking to about it now are somewhat skewed towards people who still enjoy it for what it is now. I've almost forgotten and wouldn't think to mention it to most people, but I paid $40 for it around 9 years ago, because a friend mentioned it to me and it seemed like such an amazing idea. It showed so much promise, the racing seemed fun and complex, and later I tried Squadron 42 and felt like I could see the vision coming together. But then after not trying it for a few years, I keep hearing more of the same thing: new cool superficial feature, but still lacking in significant enjoyable gameplay. I am actually kind of scared to try it again and be disappointed in the lack of content.

I realize too that Squadron 42 is apparently a fairly long and mostly finished experience? That alone might be worth $40, though I do think 10 years is a little long to wait for that. I'll concede that they do seem to be delivering on some of the hype, it just takes way too long, and I'd rather they prioritize on something simple but playable for long periods, versus cool immersion and fancy animations and concepts.

Perhaps a lot of the people who enjoy it now enjoy the kind of role playing aspect of getting in a ship with friends and walking around exploring? I would enjoy that somewhat too, every few years, almost like a really advanced VR chat, I guess. But my friends have lost interest in this due to the never ending development cycle. And I would hate to be the one to say "hey guys let's try this out again, it's way better now", and then have everyone be disappointed when someone gets stuck in a wall or the content seems really limited.

Anyway to summarize: perhaps I'm wrong, maybe the game is worth $40 now and I've just been biased from people loving to hate on a game that they haven't even tried. I'll have to give it another try.

I agree with you for most games, people are picky and don’t understand the challenges. But this game solicited donations 10 years ago, people bought into the vision, and they were wildly successful, I think they raised $600M, which is like the most money any game has ever raised?

And despite that, 10 years later, it’s still mostly just a tech demo (edit: perhaps I'm wrong? Maybe there is $40 worth of playable content. See discussion in child comments, I haven't tried this myself in many years, out of fear of being disappointed again). They are focused on adding cool but superficial animation things, rather than just making a fun playable experience.

If they were focused on making a fun playable (but possibly buggy and limited) game then it would be different. But instead they seem to be chasing random superficial features like projecting your face from your web cam onto your character. It feels like they are not seriously committed to making even an early access game in a reasonable timeline.

If this project was funded by some billionaire who wanted to spend 30 years to make the most amazing MMO ever with a ton of never before seen features, then that would be fine. But instead normal people chipped in $40+ to fund this game, and the developers don’t seem to be prioritizing actually making a fun playable game. It’s barely beyond a tech demo even 10 years later (edit: maybe this is not completely accurate). It is reasonable to assume that the management of this project does not care about making a playable game, they can work on whatever fun features they want, they’ve already made a ton of money.

edits: perhaps I'm wrong about the state of the game. I haven't tried it in a while. I'll have to give it another try.

This would have been so exciting like 9 years ago when they first released the FPS thing. I would also be excited if they said the game is fun now, instead of some random superficial animation thing that probably doesn’t add much to the gameplay.

I love the idea of this game, but even after a few years I lost hope. I can’t believe it’s still in development like 10 years later. Does anyone know if it’s more playable now? They had some ship racing and the FPS thing before, why haven’t they just thrown together a basic world yet?

Edit: it sounds like they have thrown together a basic world. Maybe it’s worth another try now? Can you have fun for more than a few hours and actually accomplish meaningful stuff?

Also pre boiling the water helps. I used to find it tasted burnt, but now I like it.

Aeropress is less of a hassle to clean, but I do like the taste of moka pot coffee when I have time. Chemex (pourover) is for my daily cup though.

thanks, how did you do this? Did you just download it and add a background yourself (and upload via lemmy) or is there some cool markdown/lemmy trick?

I was going to say that I was on my phone and couldn't do that, but I guess I probably could have. (edit: also I forgot that Lemmy even supports image uploading, let alone that I could link to it) I mostly just wanted to see if Lemmy supported the embedded image markdown syntax of ![description](URL to image). (It does!) I found online that some markdown variants support adding CSS at the end of the image, but it doesn't look like lemmy supports them.

Pictures are worth a lot of words:

Edit: unfortunately this is unreadable on my Lemmy client due to its transparent background and my dark mode. If there’s some way to add a white background by editing the markdown in my comment then I’d love to hear about it.

I hadn’t heard of it, here’s wikipedia:

GNU Taler is a free software-based microtransaction and electronic payment system.[3][4] Unlike most other decentralized payment systems, GNU Taler does not use a blockchain.[5] A blind signature is used to protect the privacy of users as it prevents the exchange from knowing which coin it signed for which customer.[5]

Looks like this is the official website: https://taler.net/en/index.html

It seems interesting. I’ll have to read more about how it works.

You may know this, but my understanding is that they randomly stop either to do another delivery on a different app, or to get gas/etc. (edit: I don’t think this justifies it to the customer, hence why I’ve stopped using these apps. I do have some sympathy for the driver, I have heard that the companies incentivize them to maintain a streak and take fewer breaks between drives, and somehow it seems like long unnecessary pauses aren’t penalized (perhaps because they’re hard to distinguish from traffic))

I haven’t used delivery apps in a while due to cold food and outrageous prices.

To clarify on this: even the people who use gibberish as their password and don’t store it and rely on password resets via email are actually somewhat safe if their email is also highly safe. Maybe their password strategy for CRA implies they don’t take their email password security seriously either… but still, my point is just that “at least as secure as your email” can be an incredibly high bar if you do it right

Yes but you’re free to use an email provider which also supports security keys, which gmail and proton mail* do. I understand that the CRA needs to accommodate the average person who doesn’t care about security, but I think everyone in this thread appreciates when they also cater to people who care deeply about security and are willing to use strong unique passwords in a password manager and security keys or at least TOTP.

* it seems like they require keeping TOTP enabled because their mobile apps don’t support security keys. Meh.

This may sound like a wild fantasy to some, but the US IRS seems to have some partnership with ID.me which supports security keys. But I’m impressed that the CRA supports TOTP before major banks so maybe this could happen.

Granted they also have separate logins for state income tax and California is… well let me just say that I’m grateful that the CRA doesn’t force you to reset your password every 4ish months. (California state income tax (FTB?) does).

Ah, I hadn’t heard of the SSL issue, thanks for sharing!

I’ve noticed that Tangerine only allows for a 6 digit pin, but I think they might also allow for a security question and SMS 2FA? I started signing up with them and gave up when they required a Canadian cell number (I hadn’t yet switched due to high costs, but recently they’ve become surprisingly reasonable—ignoring roaming) and I saw the 6 digit pin password requirement.

I think it was also BMO that a friend told me required a maximum 8 character password until very recently?

Anyway overall, thanks for reassuring my suspicion: I should just pick one of the banks and not let “perfect” (or even “decent”) be the enemy of “almost adequate but not great”.

Thanks, I suspected this (I only see “authenticator app” when I log in on a new device or periodically, but I wasn’t sure.

Related: for finance related services like Questrade, I’ve stored my TOTP keys on a U2F key, Yubico in my case. Besides the hassle of managing physical keys, is there any drawback to this approach? I’m slightly worried I’ll lose all my keys in a house fire or something, but I assume there’s a recovery option.

Unfortunately I think this is the norm with big banks in Canada, and it is similar to a credit union in the US from when I briefly lived there. Security seems to be a second priority to people losing access (presumably only briefly, since they have brick and mortar locations everywhere).

Wealthsimple and Questrade seem to support TOTP but I’m not sure if you can still bypass it with SMS. I don’t think so but I haven’t dug into it.

I’ve used CIBC before and they also seem to require keeping SMS 2FA enabled. Also they send me fraud alerts over SMS, “respond Y to authorize this suspicious transaction”, and I’m dreading the day where I have to enable roaming while travelling just to send a text. They send push notifications through the app to login on a new device though, so maybe in 10 years they’ll do it for transaction approval too.

Also aside about TD: is there really no way to download a CSV file of all your transactions? My partner uses them and I think we were limited to 18 months, and may have even had to download each much separately (luckily I can use use a program like cat to workaround this, but that seems like a pain for most people). CIBC has irritated me in a lot of ways but I think I can download transactions from back to 2012 when I first opened my credit card, maybe earlier.

Do you or anyone know about other big banks? My partner and I are looking into a joint account and I want to be able to download all transactions to CSV. Ideally we could get TOTP only (no SMS 2FA) but I’m not counting on it.

Thanks, I edited my comment. No idea how I missed that it was 30 seconds for all this time. It looks like my own TOTP codes are even 30 seconds so I don’t know what I was thinking.

It looks like you may be able to disable SMS 2FA entirely? It’s unclear to me (edit: if this is a viable option):

Can I stop getting Short Messaging Service (SMS) messages for CRA's Multi-factor authentication?

Yes. You can text "STOP" to 27223 or reply "STOP" to the message containing your one-time passcode to stop receiving SMS messages to that telephone number in the future. However, it is important to note that CRA's Multi-factor authentication (MFA) service is mandatory and a passcode is required to sign in to the CRA's sign-in services. Texting "STOP" will prevent your telephone from receiving an SMS message with your passcode in the future. Without the passcode, you will be unable to access the CRA sign-in services using this option and will need to choose an alternate MFA option to use. This option applies only to Canadian telephone numbers.

I’ll probably leave it enabled anyway just in case (given that I only log in to CRA once per year or so), but I applaud the potential of relying on TOTP only, and not allowing SMS 2FA as a “back door”.

Also big pro is that they allow third party TOTP apps instead of making their own like TD and even Steam (bundling it into their main app).

Not OP but I wanted to read more (edit: about CRA’s approach to TOTP, before getting the chance to try it myself), I searched and found this: https://www.canada.ca/en/revenue-agency/services/e-services/cra-login-services/multi-factor-authentication-access-cra-login-services.html#toc3

What is a third-party authenticator app?

A third-party authenticator app can be installed on an app enabled mobile or desktop device to be used for MFA. The app store offers many free third-party authenticator app options to choose from. Users will need to download an app that is compatible with the CRA sign-in services.

Using the app, the user scans a QR code with a mobile device when prompted. If unable to scan the QR code the user can manually enter the setup key the CRA provides into the app. The app will now be set up and the user will not have to complete this step again.

The app will then generate a 6 digit Time-Based One-Time Passcode (TOTP). When signing in to the CRA sign-in services users will be required to enter a one-time passcode provided by the app. For security, the app will generate a new TOTP every 30 seconds.

Edit: This is awesome, I’m so glad I can switch away from SMS 2FA on yet another service (and such an important one). But I am curious about a few things, see below.

Some thoughts:

• (edit: my bad, I thought 60 seconds was more common but I checked my other TOTP and they seem to be 30 seconds) why is it 30 seconds instead of 60 seconds? I’m pretty sure every other TOTP I’ve seen is 60 seconds. What is the benefit of this? Someone has 30 fewer seconds to read the code over your shoulder and log in on their device?
• TD offers a passcode generator app, but it seems like you can’t disable SMS 2FA, so if you’re worried about SIM jacking then you are out of luck. Presumably they’re worried about people losing their device with the TOTP secret, but I usually back that up on multiple devices and have recovery codes. I think all the big banks are similar. Edit: I’m curious to know what CRA does, but I’m away from my PC right now.
• nit: the previous login requires you to re enter the code from SMS 2FA or the grid thing every 8 hours I believe. But most other services seem to let you persist a cookie on the device for 30 days or so, presumably because cookie theft isn’t a huge risk, and because entering your password alone is enough to prevent other people with access to your computer from accessing your sensitive CRA account

Anyway, sorry for the negativity. This is a great step and I shouldn’t focus on negative things. I just hate how accounts I don’t care much about like Facebook (and formerly Runescape) accounts seem to be more secure from malicious logins than my bank and possibly CRA accounts.