Skip Navigation
Is Privacy Worth It?
  • Well, that was extremely long winded way to say "depends on your threat model". Which it does.

    So nothing new under the sun.

  • EA SPORTS WRC is adding EA anticheat, breaking another game on Steam Deck / Linux
  • In conclusion, Fuck EA. End of message.

  • What is cake day called on Lemmy?
  • Cake day here as well

  • The fediverse won’t succeed at putting up a #Stackoverflow substitute and that’s a problem?
  • I think what we mainly lack is people asking questions, not a particular set up of tech.

  • I would maybe like a smart watch, can you help me decide?
  • So your requirement with cellular calling (eSIM) is already fairly restrictive and depends on which market we're talking about. Where I live (.se) you get to choose between Apple and Samsung and since Apple was out of the question, you're stuck with Samsung.

    Not entirely sure if your second requirement with long battery life can be fulfilled. You'll be charging the watch every day, probably more often if you take calls on it.

    There's some rumors that Garmin Forerunner/epix will get eSIM support, but that will be also carrier dependent.

    These wearables are pretty complicated high end devices, I wouldn't really give them to elderly parents who stuggle using a normal mobile.

    I think it might be better to look into other tyoe of devices like pager systems from caregivers, if you're worried about health issues.

  • Windows is hell, i need to do something
  • I thought it was funny as well. Sometimes FOSS communities are so very uptight, we should relax a bit.

  • Windows is hell, i need to do something
  • Yeah, well just go ahead and see if it works for you now. I doubt much has changed, but some bits are probably more polished these days.
    Most distros support some kind of LiveCD, so you can try it out without having to reinstall your machine, it's painless and quick to evaluate before you take the plunge.

    zenbook duo pro

    A quick search reveals this. Might be helpful. https://davejansen.com/asus-zenbook-duo-and-fedora-linux/

  • An amazing footage was captured during a Total solar eclipse
  • Looks like AI wrote the article

  • Novel attack against virtually all VPN apps neuters their entire purpose
  • I also don’t get much value out of the statement that “every” OS except Android is vulnerable. Do they really mean all other OSes, or just what would come to mind for most people, i.e. Windows, macOS, Linux, iOS? What about the various BSDs for example?

    It's a DHCP manipulation attack, so every RFC 3442 compliant DHCP implementation implementing option 121 would be "vulnerable" (it's not vulnerability though). Android apparently doesn't implement it, so it's technically impossible to pull off against Android device. There might be others, but I'd guess most serious server/desktop OS'es implement it.

    The title isn't misleading at all, even though the "neutering their entire purpose" is a bit of a click-bait. This doesn't affect ingress VPN at all.

    It's an attack that uses DHCP features (according to RFC).

    It's a clever way to uncloak egress VPN users, therefore it does have privacy impact since most of us use VPN for purposes of hiding out traffic from the local network and provider and there's no "easy" fix since it's just a clever use of existing RFC.

  • Novel attack against virtually all VPN apps neuters their entire purpose
    arstechnica.com Novel attack against virtually all VPN apps neuters their entire purpose

    TunnelVision vulnerability has existed since 2002 and may already be known to attackers.

    Novel attack against virtually all VPN apps neuters their entire purpose

    Pulling this off requires high privileges in the network, so if this is done by intruder you're probably having a Really Bad Day anyway, but might be good to know if you're connecting to untrusted networks (public wifi etc). For now, if you need to be sure, either tether to Android - since the Android stack doesn't implement DHCP option 121 or run VPN in VM that isn't bridged.

    11
    Researcher says China's "onslaught of cyberattacks" poses significant risks to Taiwan’s national security and democratic processes, warns that "these tactics can be replicated elsewhere"
  • These attacks range from phishing attempts to sophisticated malware intrusions. Website defacement attacks and Distributed Denial of Service (DDoS) attacks are often seen during significant events

    ...

    And these tactics can also be replicated elsewhere. Other countries worried about the impact of cyberattacks and disinformation campaigns on their elections and democratic institutions should be paying attention.

    These tactics are already being replicated elsewhere. This has been the normal Internet background noise for years. This is not news.
    However, just as in 2014 when Russia was preparing for Crimea annexation, the amount of targeted (cyber and kinetic) escalated. Same again before Ukraine invasion. That's what we should be paying attention to - not everyday "millions of cyberattacks" or hybrid misinformation war - those are already happening. and should be handled as basic boring Internet hygiene.

    We should be building resilience against targeted pre-invasion cyber. We should be building ways to take down drones, we should be building robust satellite communication networks so we don't have to rely on kindness of tech billionaires. We should find more robust ways of navigating because GPS is too easy target.

    In short, we should be learning from the Ukraine conflict, which is the first (and currently only) real live theater for cyberwarfare.

  • Here's the horrifying Real sound of Apollo 1 Disaster in 1967.
  • Knowing history, that's a one tape I have no intention of listening. RIP the crew and all other early space flight pioneers who perished pushing the boundaries of our planet.

  • Removed
    Can someone explained what hexbear is?
  • Those were not unmoderated. Just radically differently moderated.

  • Removed
    Can someone explained what hexbear is?
  • Lemmy instance with "radical" moderation. Sort of like old SA/goon forums, 4chan etc.

  • Where do the rural homeless near you live?
  • I was about to type this exact thing. We have some homeless of course, people always fall through the cracks - but for the most part, the local government provides for basic needs, shelter, food, money and (in due time) housing. Winter is harsh, you don't really survive living "in the nature" in rural areas.

    Summer months often see homeless in the form of "Roma traveling beggars" or the "Irish asphalt/garden workers" who live out of caravans, tents or just back of their cars, but they migrate to southern Europe when winter comes.

    But yeah, we pay a fuckton of taxes to have a social security network that catches people who are down on their luck. It's not perfect, but it's something. People don't have to live without food or roof over their heads.

  • "Disable adblocker"-thing on YouTube is back
  • I guess it's time to update uBlock Origin lists.

  • What does your todo list / project management / productivity setup look like?
  • I mean.. why would people downvote you for that?
    I have a todo.txt which I update. If I need to "be mobile" I just stuff some notes into Signal note to myself.
    During meetings, I still take notes with paper and pen, because that's much faster than digital notes.

  • Reflecting on the firefish/calckey "moment"
  • Yeah, as a beehaw user, I'm pretty familiar with the situation. I'm not going to re-hash the whole thing here (and I don't represent the instance), but let's just say PR's for features were offered, but not accepted. Discussion was attempted but it resulted in Lemmy devs asking beehaw to fuck off - so that's the end of that.

    There's an alternative being tested. I believe we're going to Sublinks, but there's still active development going and sizeable migration. So we're still here. For the time being.

  • Purchase Advice: Linux Laptop

    My current Dell XPS 13 has been my trusty old companion for the past 4.5 years and I'm very happy with it. Inevitably, the battery isn't what it used to be anymore - it won't reach full charge anymore and discharges in 2-3 hours of normal use (webrowsing, coding etc).

    I could replace the battery, but at 4.5 years, I guess it's time for an upgrade.

    My general requirements:

    • Good Linux support
    • Portable (13-14")
    • Great battery life
    • Good keyboard
    • A nice screen that doesn't have too much glare
    • At least 16Gb RAM / 1Tb SSD

    This is my work machine so I'm not especially budget-sensitive. Durable build would be awesome, I travel quite a lot and it gets banged around in my bag. I work in cybersecurity and do coding, so it doesn't need "content creator" features. The less "bells and whistles", the better. I'd love a microSD-card slot. I think I'd melt of happiness if it also has a HDMI port. I don't game on this machine (except chess.com, lol) , so don't really need gfx performance. I don't need touchscreen or 2-in-1 functions. Reasonable mic/cam - but I think that's pretty much given on a modern high-end laptop..

    I'm thinking I'm probably going with new Dell XPS 13 or some ThinkPad variant, but I'd be happy to hear some suggestions and experiences (both good and bad) of recent purchases from the community.

    Ps. Framework/System76 don't ship here. Unfortunately. I'm stuck with the big-corpo brands.

    1
    None of these people exist, but you can buy their books on Amazon anyway
    conspirator0.substack.com None of these people exist, but you can buy their books on Amazon anyway

    Once you find one author with an AI-generated face and potential AI-generated books, Amazon will helpfully direct you to more

    None of these people exist, but you can buy their books on Amazon anyway

    Our AI-generated future is going to be fantastic.

    Archive link, so you don't have to visit Substack: https://archive.is/hJIWk

    44
    Their Songs Were Stolen by Phantom Artists. They Couldn’t Get Them Back.
    www.nytimes.com Their Songs Were Stolen by Phantom Artists. They Couldn’t Get Them Back.

    Bad Dog, a group from D.C., was forced to take a crash course in streaming fraud, a shadowy realm that costs musicians $2 billion a year.

    Their Songs Were Stolen by Phantom Artists. They Couldn’t Get Them Back.

    Non-paywall: https://archive.is/mWKBz

    7
    0xtero 0xtero @beehaw.org

    Glorified network janitor. Perpetual blueteam botherer. Friendly neighborhood cyberman. Constantly regressing toward the mean. Slowly regarding silent things.

    Posts 5
    Comments 125