hedgehog

@hedgehog@ttrpg.network
1 Post – 571 Comments
Joined 1 years ago

Your comment makes no sense.

The article you posted is from 2023 and PERA was basically dropped. However, this article talks about PREVAIL, which would prevent patents from being challenged except by the people who were sued by the patent-holder, and it’s still relevant.

1 more...
  • Assembled: 1200 USD
  • Kit: 950 USD

Do you not think it’s relevant to point out that:

  • Only 3.7% of the protests involved vandalism or property damage
  • Only 2.3% of the protests involved any sort of violence (excluding vandalism or property damage)
  • Much of the violence was directed against the BLM protesters
  • Much of the violence was begun or escalated by police (who are supposed to be trained to de-escalate)
  • Much of the property damage and property damage was not linked to protesters

If 5% of the people involved at violent BLM protests were violent and if the numbers above reflected only protester initiated violence, then that would mean roughly 0.12% of BLM protesters (or 1 in a thousand) were violent. But since, as we know, most of the violence was directed against them, that number is probably more like 0.05%, or 5 in 10,000. Obviously that number would be much worse for the actual instigators of most of the violence (police and far-right Trump supporters).

Main source: https://www.washingtonpost.com/politics/2020/10/16/this-summers-black-lives-matter-protesters-were-overwhelming-peaceful-our-research-finds/

Also weird that you say “like 30 people” died when it was more like 10:

  • 8 BLM protesters
  • 1 far-right, pro-Trump protester, who was shot by a self-identified anti-fascist protester who said he had been acting in self-defense
  • the above anti-fascist protester, who was shot by police

Yes, there were like 25 deaths related to political unrest in 2020, but most of those were not at BLM protests. Source: https://www.theguardian.com/world/2020/oct/31/americans-killed-protests-political-unrest-acled

But hey, keep telling yourself that an active, intentionally orchestrated attempt by Trump and his supporters to violently overturn the results of our Presidential election was “basically the same thing lol” as a bunch of people who were protesting police violence and racism.

1 more...

They aren’t. From a comment on https://www.reddit.com/r/ublock/comments/32mos6/ublock_vs_ublock_origin/ by u/tehdang:

For people who have stumbled into this thread while googling "ublock vs origin". Take a look at this link:

"Chris AlJoudi [current owner of uBlock] is under fire on Reddit due to several actions in recent past:

  • In a Wikipedia edit for uBlock, Chris removed all credits to Raymond [Hill, original author and owner of uBlock Origin] and added his name without any mention of the original author’s contribution.
  • Chris pledged a donation with overblown details on expenses like $25 per week for web hosting.
  • The activities of Chris since he took over the project are more business and advertisement oriented than development driven."

So I would recommend that you go with uBlock Origin and not uBlock. I hope this helps!

Edit: Also got this bit of information from here:

https://www.reddit.com/r/chrome/comments/32ory7/ublock\_is\_back\_under\_a\_new\_name/

TL;DR:

  • gorhill [Raymond Hill] got tired of dozens of "my facebook isnt working plz help" issues.
  • he handed the repository to chrismatic [Chris Aljioudi] while maintaining control of the extension in the Chrome webstore (by forking chrismatic's version back to himself).
  • chrismatic promptly added donate buttons and a "made with love by Chris" note.
  • gorhill took exception to this and asked chrismatic to change the name so people didn't confuse uBlock (the original, now called uBlock Origin) and uBlock (chrismatic's version).
  • Google took down gorhill's extension. Apparently this was because of the naming issue (since technically chrismatic has control of the repo).
  • gorhill renamed and rebranded his version of ublock to uBlock Origin.

Have you considered not using the Home Assistant OS? You don’t need to run it to use Home Assistant. You can instead set your host up with some other OS, like Debian, and then run Home Assistant in a docker container (or containers, plural) and run any other containers you want.

I’m not doing this myself so can’t speak to its limitations, but from what I’ve heard, if you’re familiar with Docker then it’s pretty straightforward.

A lot of apps use hard coded paths, so using a subdomain per app makes it much easier to use them all. Traefik has middleware, including stripPrefix, which allow you to strip a path prefix before forwarding the path to the app, though - have you tried that approach?

24 more...

It’s largely the first one, at least according to The Man Who Killed Google Search.

See also the Hackernews discussion and this follow-up article by the same author (with links to an article with Google’s response, summaries of other discussions on the topic, etc.)

It’s not changing the default behavior, so it still has it.

Per the article, they’re introducing a new opt-in feature that a woman, enbie, or person looking for same-gender matches can set up - basically a prompt that their matches can reply to.

I think Bumble also used to prevent you from sending multiple messages before getting a reply, but maybe that was a different app... If they still do that in combination with this feature, then I could see this feature continuing to accomplish their mission of empowering women in online dating.

Terrible article. Even worse advice.

On iOS at least, if you’re concerned about police breaking into your phone, you should be using a high entropy password, not a numeric PIN, and biometric auth is the best way to keep your convenience (and sanity) intact without compromising your security. This is because there is software that can break into a locked phone (even one that has biometrics disabled) by brute forcing the PIN, bypassing the 10 attempts limit if set, as well as not triggering iOS’s brute force protections, like forcing delays between attempts. If your password is sufficiently complex, then you’re more likely to be safe against such an attack.

I suspect the same is true on Android.

Such a search is supposed to require a warrant, but the tool itself doesn’t check for it, so you have to trust the individual LEOs in question to follow the law. And given that any 6 digit PIN can be brute forced in under 11 hours (40 ms per entry), this means that if you were arrested (even for a spurious charge) and held overnight, they could search your phone without you knowing.

With a password that has the same entropy as 10 random digits, assuming no further vulnerabilities allowing them to speed up the process, it could take up to 12 and a half years to brute force it. Make it alphanumeric (and still random) and it’s millions of years - infeasible within our lifetime - it’s basically a question of whether another vulnerability is already known or is discovered that enables bypassing the password entirely / much faster rates of entry.

If you’re in a situation where you expect to interact with law enforcement, then disable biometrics. Practice ahead of time to make sure you know how to do it on your phone.

15 more...

Why? Open source doesn’t mean “cheap” or “at cost.”

Heat is the main killer of LED bulbs. The Hook Up on YouTube did a comparison of several different bulbs and his investigation showed that filament style LED bulbs like the Phillips Ultra Definition ($3.50 per bulb) have a lower peak temp by like 80 degrees Fahrenheit than the standard style (12-24 LEDs in a ring). I recommend trying those out and seeing if you have better luck.

1 more...

I understand that

I’m not convinced

Signal blog post on the topic, with instructions and links to join the beta: https://signal.org/blog/phone-number-privacy-usernames/

How is the accused project designed to circumvent your technological protection measures?

The identified Bypass Paywalls technology circumvents NM/A’s members’ paywalls in one of two ways. [private]

For hard paywalls, it is our understanding that the identified Bypass Paywalls technology automatically scans web archives for a crawled version of the protected content and displays that content.

If the web archives have the content, then a user could just search them manually. The extension isn’t logging users in and bypassing your login process; it’s just running a web search for them.

3 more...

Would those environmental protections have allowed the wall to simply not be built, or would they have just delayed it, costing even more money for environmental reviews, changed plans, etc., when a government shutdown is imminent?

That’s a real question, to be clear, and not one the article answered one way or the other.

1 more...

Did you read the article?

The agency clarified that AI will be used to initiate investigations into 75 of the largest U.S. partnerships that document assets that exceed $10 billion on average.

It will reportedly be used to target hedge funds, real estate investment partnerships, and law firms who may have skirted the rules, amounting to roughly 1,600 taxpayers in total who “owe hundreds of millions of dollars in taxes.”

I assume you’re not using, and have never used, Google (a silly sounding, misspelled math term that sounds like a sound a baby would make), Bing (sillier yet), Yahoo (it sounds almost as ridiculous as “Google” and their early advertising only made it worse), Yandex (what is it, a cleaning product or a search engine?), Baidu (sounds like a name from a children’s show), Seznam (sounds like a sauce), Brave (literally the same name as a children’s movie), Searx (someone tried to be cool by replacing “ch” with “x”… c’mon), or Qwant (bless you!). I’m curious, though… which search engine do you use?

4 more...

This app didn’t get taken down because it was by a “controversial” guy. It got taken down because content in the app encouraged violence and because the app itself was a pyramid scheme (People had to pay $50/month just to use the app, with promises of rewards if they got more people to join).

Google removed the app from their store, too. Yes, you can still probably install it from their website or a third party app store on Android, and yes, it would be great if third party app stores and sideloading existed for iOS (and they kinda do, though they’re very limited) but even if they did exist it would be reasonable to expect every single one of them to refuse to host this app (especially if “hosting” entails accepting payments).

Tate can still host this via the web. He can even build a progressive web app for it. I suspect he’ll run into issues collecting that $50 monthly payment any way other than by crypto, though, since I suspect most payment processors will refuse to work with him.

15 more...

It sounds like your bank is doing MFA (multi-factor authentication) correctly, and that’s a good thing, because it sure would be obnoxious to have to verify all that information just to view your balances, and it’s a higher risk activity to allow someone to transfer funds than to view your balances.

If the dealership didn’t verify your identity and someone else made changes to your lease, would you have a problem with that?

You don’t have to use an authenticator on your phone. You can use a password manager like Bitwarden (their $10/year premium plan, or their $40/year family plan) that supports saving TOTP and auto-filling them from a browser extension (click to copy or you can have it automatically copied to the clipboard after you auto-fill the password). It also supports passkeys and you can avoid getting locked into a single ecosystem that way.

If you’re talking about a stock Android OS on anything other than a Pixel, iOS wins in both regards. Stock on a Pixel, I don’t know that Apple is more secure, but if you’re installing apps via Google Play that use Google Play Services, iOS is certainly more private. Vs GrapheneOS on a Pixel, iOS is less private by far.

6 more...

It’s more like paying the ticket without ever showing up in court. And at least where I live, I can do that.

2 more...

Better than bad is still “better.”

In the game, this happens even when housing is available and affordable - the bug is that the homeless people are wealthy and there are vacant, affordable houses that they can move into, they just choose to be homeless. There isn’t even a markup from landlords, because an update already deleted them.

In real life, the problem is that we still have landlords. Idk why we don’t just delete them like the game devs did.

ACLU, is this really that high a priority in the list of rights we need to fight for right now?

You say this like the ACLU isn’t doing a ton of other things at the same time. Here are their 2024 plans, for example. See also https://www.aclu.org/news

Besides that, these laws are being passed now, and they’re being passed by people who have no clue what they’re talking about. It wouldn’t make sense for them to wait until the laws are passed to challenge them rather than lobbying to prevent them from being passed in the first place.

wouldn't these arguments fall apart under the lens of slander?

If you disseminate a deepfake with slanderous intent then your actions are likely already illegal under existing laws, yes, and that’s exactly the point. The ACLU is opposing new laws that are over-broad. There are gaps in the laws, and we should fill those gaps, but not at the expense of infringing upon free speech.

1 more...

The bill is garbage, but it cracks me up that they think this part is a bad thing:

The bill seeks to … limit developers’ inclusion of personalized recommendation systems, notifications, appearance-altering filters, and in-game purchases for apps used by minors.

Every item on that list has been abused by web/app developers in ways that exploit and/or negatively affect the brains of developing children.

3 more...

You have your link formatted backwards. It should be Vaultwarden, with the link in the parentheses.

This is the first I’ve heard of that, and after searching the most I found was “This was alleged on 4chan but that’s it,” without even a link to the archived 4chan conversation. It’s kinda hard to take a complaint seriously when 4chan is the primary source. Can you share anything more substantive?

Basically every complaint about him that I’ve read is summarized at http://www.badwebcomicswiki.shoutwiki.com/wiki/Ctrl%2BAlt%2BDel, or on (choose your reddit mirror): r/OutOfTheLoop/comments/3v3uau/what_exactly_did_tim_buckley_do_besides_make_a/ and tbh that should be enough on its own for most people to stop reading his webcomics

5 more...

There’s an updated article that includes GOG’s follow-up to that situation: https://www.eurogamer.net/gog-pulls-hitman-from-its-own-store-admits-it-shouldnt-have-released-it-in-its-current-form

Dear Community,

Thank you for your patience and for giving us the time to investigate the release of HITMAN GOTY on GOG. As promised, we’re getting back to you with updates.

We're still in dialogue with IO Interactive about this release. Today we have removed HITMAN GOTY from GOG’s catalog – we shouldn’t have released it in its current form, as you’ve pointed out.

We’d like to apologise for the confusion and anger generated by this situation. We’ve let you down and we’d like to thank you for bringing this topic to us – while it was honest to the bone, it shows how passionate you are towards GOG.

We appreciate your feedback and will continue our efforts to improve our communication with you.

When I meet a dog whose name I don’t know, I often address him or her as “Dog.” Similarly, if I meet a cat whose name I don’t know, I often address him or her as “Cat.” It’s only polite. It’s a generic but polite form of address, like “Ma’am” or “Sir.”

The same goes with a moon. I call it “Moon” because we aren’t yet on a first name basis.

Tell me, OP - what makes you think that you should be on a first name basis with the moon?

2 more...

If you’re using an HP printer, such an attack is feasible because of the chips that they use for detecting ink levels, verifying the manufacturer, etc.. As a result, any cartridge could potentially infect your printer (since potentially an attacker could modify a first party ink/toner cartridge and replace its chip with one infected with malware). As such, the only fully “safe” approach is to modify your HP printer such that it doesn’t connect to these chips at all.

I look forward to HP providing firmware that will prevent the printer from communicating with any ink/toner chips (and that will allow printing to continue unabated, relying on the user to notice that ink levels are low and that new ink is required).

Other people have computers - friends, family, etc.. Libraries, hotel and apartment lobbies, community centers, etc., frequently have them available for free use.

2 more...

Just to be clear, the referenced keys are not for your conversations, but for your contacts, groups, settings, and profile: https://signal.org/blog/secure-value-recovery/ Your conversations are fully e2ee and those keys are stored only on your devices.

Also the “disable your pin” advice you’ve been given is misleading. You should not disable your pin; instead, you should use a secure alphanumeric pin. Disabling your PIN means you cannot enable Registration Lock, which makes you vulnerable to account hijacking attacks, e.g., by SMS interception or simjacking.

6 more...

If you are not a copyright holder, then you are not in a position to make any demands. I find it especially ironic, considering when the GPL was actually violated on multiple occasions, even as recently as a few months ago, nobody ever takes issue with that.

Ironic that he says he understands licensing but doesn’t understand that, if you’re not a copyright holder, you don’t have standing to do anything about those violations. The Violations of GNU Licenses page states that if you see a violation, you should confirm the violation, collect as many details as you can, and then:

Once you have collected the details, you should send a precise report to the copyright holders of the packages that are being wrongly distributed. The GNU licenses are copyright licenses; free licenses in general are based on copyright. In most countries only the copyright holders are legally empowered to act against violations.

I remember reading about someone attempting to challenge that by suing for the rights that should have been conveyed to them by the infringer respecting copyright, but I wasn’t able to find anything on it. I did find references to people who were partial copyright holders being found to not have standing due to not having sufficient ownership to make a claim, though - see the outcome of https://sfconservancy.org/copyleft-compliance/vmware-lawsuit-faq.html

1 more...

There are plenty of internet culture outside Western that still respect ownership, people don't just take random things on internet without permission. Western internet culture =/= entire internet.

Which cultures are you referring to?

In store, it’s hard to tell the difference. They run in a ”Store” / “Retail” mode that amps up the brightness and color saturation to a level that’s often unsustainable (it will damage the TV if you use it in this mode) and that doesn’t translate well to actual content because it’s too vivid.

If you’re interested in understanding more about modern TV technology / which TVs are best, I recommend checking out Rtings and HDTVTest (there’s a site, a channel on Youtube, a subreddit, etc). The former because the reviews are great; the latter because Vincent explains these things well. He talks about specific technologies like types of OLED panels, different LED technologies, different settings on TVs and what they mean, calibration, etc..

To answer your question, though: the more expensive technologies are what cost the most, and bigger versions (starting at 55”) also tend to cost more. Right now the best TVs you can buy are OLEDs - specifically, QD-OLEDs like the Sony A95L. A 55” is like $2500. By comparison, a traditional OLED (or “WOLED”) like the LG C3 is half the price - a 55” is $1300 - and nearly as good. (And a previous gen model, like the C2, will be even cheaper, if you can find one.)

Identifying mushrooms with an ML-based algorithm is a fine idea if you properly design the application to leverage that. As a hedgehog, this is what I would do:

  1. Train my model on a variety of mushrooms, particularly poisonous ones.
  2. When testing the model, test as many mushrooms as possible and take note of what’s frequently mis-identified.
  3. When testing the model, make sure to get a variety of different kinds of lighting.
  4. In addition to the mis-identifications noted while testing the app, maintain a list of commonly misidentified mushrooms - like the hedgehog mushroom and its counterparts - particularly the ones a forager should be most concerned with (meaning the most poisonous ones).
  5. When identifying a mushroom to the user, err on the side of calling it a poisonous mushroom. Consider providing a list of possible matches, with the worst case scenario ones up top.
  6. Include pictures and other information about the mushrooms, as well as regional mushroom lookups for mushrooms that weren’t included.
  7. Don’t include text like “99% confident that this is a hedgehog mushroom” when the 99% figure is an output from your ML model. I know we said earlier to make sure to do a ton of testing and I’m sure you think you did, but you didn’t do enough to be able to say that. At best, reduce your certainty by 25%, then divide that number between the identified mushroom and the lookalikes, making sure to give extra weight to the most poisonous ones. So that 99% certainty becomes at most a more realistic 38% chance that it’s the poisonous lookalike and 37% chance that it’s whatever was identified in the first place.

You might say that this app would be useless for determining if a mushroom is safe to eat, and I agree, but it’s also a better approach than any of the existing apps out there. If you need to use an app to determine if a wild mushroom is safe to eat then the answer is simple: it isn’t. C’mon, I’m a hedgehog and even I know that.

5 more...

Pluto is a planet, though. It’s officially considered a “dwarf” planet, and as “dwarf” is just an adjective, it’s still a planet (just like a short person is still a person). The other 8 new dwarf planets (Ceres, Eris, Makemake, Haumea, Gonggong, Quaoar, Orcus, and Sedna) are also all planets - so we have 17 planets total.

Seriously, though. By the same 3 criteria that Pluto isn’t a planet, Mercury isn’t (as it isn’t in hydrostatic equilibrium).

3 more...

If I’m reading this right, all Canadian renters should start withholding 25% or more of rent in order to protect themselves from this liability. Here’s why:

Not knowing a landlord is a non-resident is not considered a valid excuse.

If that’s true, then it appears a tenant is legally obligated to assume a landlord is a non-resident in the absence of proof to the contrary. And since this is a legal requirement and liability is on tenants, the minimum proof tenants accept should be sufficient to prove that status to the court (or at minimum, to release the tenant from liability).

My first question is: does the Canada Revenue Agency, or any Canadian government agency, for that matter, enable tenant to easily determine the residency status of their landlords for a given month? The article states determining a landlord’s tax residency is difficult, so I must assume it does not.

Ron Usher, long-time lawyer and general counsel for The Society of Notaries Public and visiting professor at Simon Fraser University … [said] “it’s breathtakingly difficult” to figure out if someone is a resident or non-resident.

“We’re talking about tax residency, not physical residency. They could be in San Diego, but they really are a tax resident, so there’s this complication.”

Lawyer Michael Drouillard, … vice chair of Landlord BC and specialist in tenancy law, … [suggests that] To protect themselves, tenants could start asking for statutory declarations from their landlords, attesting to their tax residency status … But the landlord could move out of the country and their status changes, and the tenant doesn’t know.

Would these statutory declarations be sufficient if they were found to be fraudulent? I’m no lawyer, but my guess would be that, given the precedent here, they would not release the tenant from liability to the CRA.

The tenant can only be relieved of this liability if a law / tax code provides that relief or if the CRA provides it. Therefore, in the absence of a procedure that a tenant can follow, the tenant would need to submit the statutory declarations to the CRA and receive confirmation that the CRA accepts them as genuine and further, that if they are found to be fraudulent, the tenant will nonetheless not be held liable.

This would also be true in situations where a property manager who ensures the withholding is handled properly is part of the equation. If the property manager were to improperly withhold these funds, i.e., by embezzling them and then leaving the country, would the tenant ultimately be liable to the CRA? As a tenant, the assumption must be yes until provided assurances by the CRA to the contrary.

As such, it appears that, to account for this liability, all tenants in Canada should start withholding 25% of rent until the CRA releases them from liability for these withholdings. Tenants who have been renting a property for multiple years and who have not received documentation sufficient to eliminate this liability should withhold more than 25% rent - up to 100% - until they have as much withheld as they could possibly be liable for. Of course, once relieved of this liability, the tenant must remit those withheld funds immediately. It’s unfortunate that the CRA has made it so difficult to be certain that you’ve been relieved of this liability, though - I believe it would require a statement by CRA to this effect. E.g., the tenant might be provided proof (verified by the CRA) that withholdings are not necessary or that they have been received for a given year.

To be clear, the portion of rent the tenant withholds is not in addition to rent paid, but is instead of that rent paid, as this liability is first by the landlord. The tenant is simply doing this to protect the landlord and themselves. It is a legal requirement, after all.

I don’t believe an escrow account is required, but tenants should confirm that themselves. My recommendation would be to store the funds in a dedicated high interest savings account.

Also, unless provided assurances from the CRA to the contrary, a tenant would need to resume withholding rent every year. Tax residency status can change on a yearly basis, after all. That’s assuming residency status is determined in advance - if it’s determined after the year is finished, then tenants would be best advised to always withhold 25% of rent and to only remit those funds once they receive confirmation that their liability has been eliminated.

But what about ... new users entering the Apple ecosystem?

What ecosystem do they think people are coming from where they didn’t already have a USB C cable or wireless charger?

EDIT: This refers only to the new Airpods, not to iPhones. iPhones still come with a charging cable.

10 more...

That’s what the plugin they used did.