• 0 Posts
  • 106 Comments
Joined 3 years ago
cake
Cake day: July 12th, 2023

help-circle

  • and security on pages is useless if you are logged in.

    We’re already talking the least of security problems (IE the device being physically confiscated).

    In ross’s case which hurt him more do you think, the fact that his system probably had logs of what he installed… or the fact that it was taken while he was logged in as administrator to the silk road? and it supposedly contained a journal… not system logs, but activities that he specifically wrote out detailing his daily activities.

    The point again is someone gaining physical access to the computer itself, while you are literally in the process of doing things that you don’t want known about, what you are currently working on is 100x more valuable to the thief, feds or whatever, than any of the low level stuff that the logs are likely to be recording.


  • You posted this same silly thing about 3 days ago.

    anyway why isn’t the advice “encrypt your drives” instead of “disable all logging”.

    I mean your own examples are like the least serious problem.

    Who is logged in and when? So we’re talking a multi user system that’s clearly hosting a lot… that’s kind of important for an administrator to be able to track who is logging in when, to know if something goes wrong.

    Package manager logs what’s installed. well duh, what’s the scenerio that this is even a factor? I don’t want big government to know I had, qbittorrent or whatever? There’s no program that’s likely installed via apt that’s illegal to have.

    So yeah in short, stuff that’s vital if you ever need to troubleshoot, useful in general, almost unthinkable to imagine situations where this is a problem (at least in situations in which someone has your user account, or root access to your system for these to be the high priority.

    On the whole the idea there is like.

    “If someone steals your car… they could also steal the car users manual”.


  • Just switch to physical pen and paper…

    Wait, CRAP, did you know that a pysical notepad logs every pen stroke? not only on the paper it’s written, but it puts traces onto the next page as well.

    Sure it’s not sending it to others… but if the police cease the notepad they can recover everything currently written in it, and possibly even some of the pages that were torn out from the indentations on the other pages.


  • Did they actually honor it? I recall quite a few people tricking AIs into like, saying they will sell a car for $1, but the company not honoring it.

    Or is it likely just car salesman negotiation tactics… IE the matress is actually inflated 75%, AI is given a hard minimum of how low it actually can go, but obviously instructed to do everything possible to close the sale but at the highest price the user will be willing to pay.

    Holy frick, actually that sounds like the real hell now that I think of it. Will AI bring haggle pricing to online stores. We have to spend 20 minutes trying to give a story to an AI to get the best price on, something… which of course will then lead to someone developing an AI for shoppers trained to haggle with these for them. End result we burn up an ocean, with 2 AI’s making up bogus stories about how badly they are suffering.



  • I guess my point is federated services, at least prior to a world where they become mainstream, are only particularly good if

    1. You have a group of people all willing to use them together (IE Matrix, Friendster etc…), Join as a group don’t expect to find other specific individuals.

    2. If you do want to meet people, you are looking for pretty broad categories encompass millions. IE on lemmy you can certainly find an anime community, you won’t find an active jujitsu kaisen community.

    Anyway so my point on things like Dating, Linked In etc… those topics are likely to be the last to have a hope in the federation, because their services on their own, require users, but more importantly those users have to be localized (IE dating sites need, both a high volume of users, and those users need to be in close geographical proximity, and have some reasonable male to female ratio, and then have some level of common interests). A linked in needs… job seekers, and companies/head hunters. Of which you can’t expect companies to put in resources without a large userbase… and you can’t expect the userbase to grow without company usage.


  • Is there even really a function for linkedin without… well what it is? The last people to adopt new and open source tech are… corporate executives, and to my knowledge the whole point of linked in is, a psudo job hunting web page, with some social media pages as a secondary (of which people are only going to be posting “work hard” and “I work hard” kind of messages because… well they’d never post something that might make them less attractive to employers.

    I guess the point is, what’s the use of an open non corporate controlled linked in? I can convince a handful of friends to maybe join a facebook alternative to make it useful, Lemmy certainly is an ok reddit alternative, at least for the equivelant of bigish communities, and mid sized tech communities.

    Things I don’t see working in federation, are things that you are looking for… well people that aren’t going to switch for you… and most importantly people geographically close to you. Companies aren’t going to use their HR members time searching for people on a niche career site, dating sites are likely lost causes because… well no matter how bad the sites are… a dating site where most people are 300 miles away from the nearest compatible person isn’t going to be of much use, and job seekers don’t have the luxury of moving before the companies they want to work for go.



  • I mean DNS is always the issue… but then that’s kind of the double edged sword as well isn’t it?

    Conceptually 4 options come to mind.

    1. DNS as current - weakness domain name changes or DNS outages or poisoning

    2. IP address - Issues, migration etc… some instances may need to move services etc…

    3. SSL private/public keys - probably the strongest I’d imagine. only real weakness I can see is… 1. it has no ability to find a server, and I guess if a server is hacked and it’s private key is stolen, federated servers would not be able to spot the imposter.

    I do think 3 might be the strongest option. I don’t know anything on how lemmy etc… works. I’d imagine a strategy would be, When A and B federate with eachother, A records B’s Domain name, IP, and public key (and B gets A’s as well), if DNS goes down attempt recorded IP. If neither work wait for an incoming connection and if the new connections public key matches an existing public key, it assumes the identity.

    But as far as the user side I don’t really know. Obviously we can only match users as their domains. I can’t imagine how I could find you again with gammaray@sh.itjust.works when sh.itjust.works domain is unregistered.




  • I mean to me one of their huge red flags is their advertising. IE my big never using nord, was one of their commercials where basically it was voicing a guys vacuume, smart TV and Alexa, and vacume etc… talking about him behind his back. Which then the narrator is “Your devices are all talking about you behind your back, get nordvpn to protect yourself”.

    That and many more were just blatent misrepresentation of what a VPN can and can’t do. (point being, in the real world… everythings running https or some level of encryption. If your devices are compiling information, it’s via their connection to their services. Of which a vpn isn’t going to do jack to protect you from.

    Also a lot of shady things still within there, 2019 they had a major data breach, Many complaints on their service auto renewing.

    you can get a summary of a lot of parts of it with https://windscribe.com/vpnmap

    (site catalogs data breaches, complaints etc… with VPN services).




  • I feel like googles just used it’s monopoly so strongly to make everything be chromium.

    Looking at stats counter.

    Chrome - 75.45, edge 9.55, safari 5.37, firefox 4.32, opera 2.13, brave 1.17.

    so… in short of their listings, 88.9% are chrome based… safari being the largest non chrome based browser. Firefox being the only other one with enough userbase to even get on the list.

    My only guess is that google’s made their services a big enough pain or enough favoratism that even microsoft decided they didn’t want to try and work around it.

    To which I also have to note, how few browsers aren’t chromium… IE Brave, Vivaldi etc…

    I’ve started using zen browser myself, but I find it kind of odd that there’s so few firefox based browsers… which is something that I’ve found kind of baffling… considering I haven’t really found any negatives in using zen for about a year… Google’s always been, a huge threat to preventing adblockers etc… for years, is it just a lack of ideas of what to add to firefox.




  • I mean to me honestly… I hate stories in MMOs. Because to me they seem to greatly hurt… well the MMO portion of the games.

    IE the point of an MMO is, about meeting real people playing together etc…

    Stories tend to lead to things that IMO harm them… first and foremost, quest chains, In the old days of ragnarok online, Everquest etc… You find people, you group together and kill things to level up. Generally speaking they usually had huge ranges that you could work together on… Often in the points of like 50-60 hours… you could take 5 days off, and when you come back join up with the same friends you ran with before you left.

    Quest chains on the other hand… oh sorry I played for 30 minutes while you were having lunch, I’m on quest 6 of the chain… you’re only on 2 now… you’ll need to solo I guess.

    In addition I don’t find quests immersive, under the raw concept that, MMOs can’t be immersive. The defining requirement of an MMO is… the world can’t change because thousands more people need to do exactly what you just did. I remember WoW used to drive me crazy because the NPC would be thanking you for killing all the werewolves in his garden, while you can see the werewolves respawned right behind him as he’s thanking you, and of course as you are walking out from killing the big bad of the region… you’re getting begged by people to come help them kill the same big bad.

    I love MMOs… but I can’t help but feel like the desire for story… is drastically harmful to the whole concept of them. Because there’s 2 key problems… Most people can’t be the stand out legendary best guy… with thousands of players, and the world can’t change.

    But yeah that being said I kind of looked at new world as a potential game to fit the itch that I’ve had for years… of an MMORPG that actually was group based, working together as a team like the old days… but amazon owning it basically made me say nope… and looks like that part alone was a good reason not to.