i_am_not_a_robot

@i_am_not_a_robot@discuss.tchncs.de
0 Post – 198 Comments
Joined 1 years ago

Docker Swarm encryption doesn't work for your use case. The documentation says that the secret is stored encrypted but can be decrypted by the swarm manager nodes and nodes running services that use the service, which both apply to your single node. If you're not having to unlock Docker Compose on startup, that means that the encrypted value and the decryption key live next to each other on the same computer and anyone who has access to the encrypted secrets can also decrypt them.

Code pulled from GitHub or NPM can be audited and it behaves consistently after it has been copied. If the code has a high reputation and gets incorporated into bundles, the code in the bundles doesn't change. If the project becomes malicious, only recently created bundles are affected. This code is pulled from polyfill.io every time somebody visits the page and recently polyfill.io has been hijacked to sometimes send malicious code instead. Websites that have been up for years can be affected by this.

1 more...

Built bundles are not affected. The service is supposed to figure out which polyfills are required by a particular browser and serve different scripts. Because it's serving different scripts, the scripts cannot be bundled or secured using SRI. That would defeat the purpose of the service.

“This kid who is not getting any kind of real consequence other than a little bit of probation, and then when he’s 18, his record will be expunged, and he’ll go on with life, and no one will ever really know what happened,” McAdams told CNN.

“If [this law] had been in place at that point, those pictures would have been taken down within 48 hours, and he could be looking at three years in jail...so he would get a punishment for what he actually did,” McAdams told CNN.

There's a reason kids are tried as kids and their records are expunged when they become adults. Undoing that will just ruin lives without lessening occurrences.

“It’s still so scary as these images are off Snapchat, but that does not mean that they are not on students’ phones, and every day I’ve had to live with the fear of these photos getting brought up resurfacing,” Berry said. “By this bill getting passed, I will no longer have to live in fear knowing that whoever does bring these images up will be punished.”

This week, Republican Senator Ted Cruz, Democratic Senator Amy Klobuchar and several colleagues co-sponsored a bill that would require social media companies to take down deep-fake pornography within two days of getting a report.

“[The bill] puts a legal obligation on the big tech companies to take it down, to remove the images when the victim or the victim's family asks for it,” Cruz said. “Elliston's Mom went to Snapchat over and over and over again, and Snapchat just said, ‘Go jump in a lake.’ They just ignored them for eight months.”

BS

It's been possible for decades for people to share embarrassing pictures of you, real or fake, on the internet. Deep fake technology is only really necessary for video.

Real or fake pornography including unwilling participants (revenge porn) is already illegal and already taken down, and because the girl is underage it's extra illegal.

Besides the legal aspect, the content described in the article, which may be an exaggeration of the actual content, is clearly in violation of Snapchat's rules and would have been taken down:

  • We prohibit any activity that involves sexual exploitation or abuse of a minor, including sharing child sexual exploitation or abuse imagery, grooming, or sexual extortion (sextortion), or the sexualization of children. We report all identified instances of child sexual exploitation to authorities, including attempts to engage in such conduct. Never post, save, send, forward, distribute, or ask for nude or sexually explicit content involving anyone under the age of 18 (this includes sending or saving such images of yourself).
  • We prohibit promoting, distributing, or sharing pornographic content, as well as commercial activities that relate to pornography or sexual interactions (whether online or offline).
  • We prohibit bullying or harassment of any kind. This extends to all forms of sexual harassment, including sending unwanted sexually explicit, suggestive, or nude images to other users. If someone blocks you, you may not contact them from another Snapchat account.
1 more...

I looked it up before posting. It's illegal in 48 states, including California where most of these companies are headquartered, and every state where major cloud data centers are located. This makes it effectively illegal by state laws, which is the worst kind of illegal in the United States when operating a service at a national level because every state will have slightly different laws. No company is going to establish a system that allows users in the two remaining states to exchange revenge porn with each other except maybe a website established solely for that purpose. Certainly Snapchat would not.

I've noticed recently there are many reactionary laws to make illegal specific things that are already illegal or should already be illegal because of a more general law. We'd be much better off with a federal standardization of revenge porn laws than a federal law that specifically outlaws essentially the same thing but only when a specific technology is involved.

China is simultaneously destroying the environment for profit and investing too much money in green technology?

A distinctive feature of purchase subsidies for BEV in China, however, is that they are paid out directly to manufacturers rather than consumers and that they are paid only for electric vehicles produced in China, thereby discriminating against imported cars.

That's an interesting way to spin subsidies on the production of electric vehicles. Why would China pay companies in other countries to produce cars?

Are they going to officially allow third party apps at all? The stock app is terrible, and not just because of excessive, unskippable advertising and bizarre restrictions around background play. When you search for anything, at least half of the results are completely unrelated to what you searched for in an attempt to increase user engagement metrics. It keeps trying to get you to watch shorts in its bad TikTok clone. Sometimes it recommends unrelated shorts with disturbing thumbnails in the middle of your search results. It keeps autodetecting that the video quality should be 360p on a connection easily capable of 4k, and resetting back to 360p at the start of every new video. The UI for live streams puts things on top of other things that are more important.

7 more...

Bluesky is not decentralized. It's promised to be decentralized but I wouldn't be surprised if they never allow open federation.

13 more...

Poaching? Didn't Twitter drive out or lay off or fire nearly all their employees? You can't get rid of people and then complain when they go work for somebody you don't like.

3 more...

What a non-story. The username, profile picture, posts from profile, and post interactions are all required for displaying the content that the Thread's user has subscribed to. The IP address is required for connecting to the service to retrieve that content. Facebook doesn't get any more access to your data than necessary nor do they get any more access to your data than anybody else. This is just fear mongering.

11 more...

I'm pretty sure "threadiverse" means Lemmy/Kbin which have threaded conversations, not Threads.

My favorite is when IT deploys software that replaces all the links in your e-mails with https://example.com/phishing/YiCdMdsY so you can't tell whether the e-mail is phishing or not, frequently sends you very obvious fake phishing e-mails that interrupt your work by going straight to your priority inbox, and punishes anyone caught clicking on phishing e-mails. Then HR sends out e-mails that have all the indicators of low effort phishing and you're supposed to click on those.

6 more...

Are people in this article really suggesting that the 100% emoji is racist? You can never get a perfect score or agree with anything again because a small number of people have used that number to mean something else and now somebody will interpret it as a hate crime.

At first they were arguing that somebody writing "shit" in an exaggerated way, and the occurrence of two other numbers and an elongated asterisk were Nazi symbols, and they could be, but the only evidence is that somebody said they thought it was too many coincidences. I don't know enough about the circumstances to say it is or isn't intended that way. Management apparently thinks it isn't. But saying multiple people reacting "100%" to a message they agree with means they're all using the number 100 as a sign of white supremacist solidarity is ridiculous. What else are they going to do? React with the "OK" hand? No, the ADL also decided that one is racist. React with thumbs up? No, younger people have decided that one is rude.

16 more...

There is already a standard, we'll known method for putting a business card on paper that doesn't require electronics: QR codes.

7 more...

This sounds like immature project drama. I've seen it before where there's a large, professionally maintained product and people make forks to add small changes and then different forks start fighting with each other over because it's their features and they don't want other forks to incorporate them. You should probably just avoid Floorp if possible.

Why now? Other people have been profiting off of your Stack Overflow answers for years. This is nothing new.

9 more...

They say they won't block apps because of their content, but that they will protect users that use too much energy, which seems like a loophole for blocking emulators and alternative browsers.

It's not so simple. If my parents stopped buying iPhones, they would need to replace their watches, their TV streaming device, their car chargers, and all their apps. You can't expect normal people to collectively switch from an ecosystem designed around lock-in.

3 more...

The five year policy is for ChromeOS, not ChromiumOS. ChromiumOS-based devices may have more or less support.

2 more...

It's the number one change in the patch notes.

"Unalived" sounds like something out of 1984.

Astronomical, even.

New action items have been assigned to you:

  • Remedial cybersecurity training (4hr): due by Mar 22
1 more...

I can't because my instance blocked Threads. I guess it's time to find a new instance.

4 more...

Isn't this just Reddit with more steps?

If the machine supports up to 32GB RAM, it probably only has the hardware for 32GB RAM. Maybe it only has 25 address lines for RAM.

Would it though? It's just vans on tracks instead of roads.

It's not going to be more energy efficient with individually powered cabs. It's not going to be more convenient unless your origin and destination are near a station. It's not going to be more time efficient because of the extra distance getting to and from tracks and because you aren't going to drive highway speeds in tiny self-balancing cars on old rails, especially when passing cars going the opposite direction. It's not going to be more cost efficient because it's more total moving parts requiring maintenance per person per trip.

It sounds like they are solving the problem of turning around only for terminal stations. This might make sense for trains that carry many people, but if you're making cars on tracks there is no good solution. If you need to spend money on a system that turns the cabs around, then you either spend more money installing those systems at most stations or you spend money maintaining cabs that are driving around empty. Either way, cars on roads are cheaper.

They say it's good for people who don't want to wait for public transit, but they don't say how this solves that problem. With public transit, you know when the train will be there. With this, unless they have a way for the cabs to wait at the station without blocking other cabs going the same direction, you have to wait for a cab to come and you can't time your trip to the station around when the cab will be there. Maybe they have one? It would be a disaster if you wanted to get on from near the middle and needed to wait for either a cab that has already been vacated to come or for a cab to come all the way from the start of the track.

2 more...

This whole document is disturbing. Apple tries to frame it as all about protecting users by removing their choices and skimming profits. They even start including e-mails from users begging Apple not to let them use their expensive phones.

Tax increases are passed on to the people. Tax cuts are passed on to the wealthy. I'm American so I should know.

World of War Warcraft is also unplayable at noon on Tuesdays. It's an uncommon enough time that the servers might be down for maintenance. They could do a better job explaining that if that's the case, but it's early access.

This is close to the real problem. If the NSA is able to buy it without a warrant, that means it's effectively public information about you that is collected and published without your consent (regardless of what it says deep inside a privacy policy that you are forced to accept to continue). If that information is useful to the NSA, then it shouldn't be legal for that information to be collected without benefit to the user or sold at all, aggregated or not.

If the common wire is broken, maybe depending on how the headphones are wired you will hear the difference between left and right instead?

1 more...

Well less than 30 minutes at a time is good because the Vision Pro battery only lasts around two hours and you can't swap batteries without turning it off.

You can do a lot of things with the Vision Pro that you can't do with other headsets, but I don't understand why anybody would want to manage their calendar events in VR, and it seems like there are a lot more things that you would want to do with the Vision Pro that you can't. If it were really an AR device like a modern Google Glass it would make sense, but with that form factor and a battery life of two hours it can't really become part of you like that.

8 more...

Freedom of speech? Yes and no. The government has freedom of speech, but American TikTok clones do not. If TikTok users are successfully forced to use YouTube Shorts instead, they'll get stuck with YouTube's censorship and content control for corporate friendliness and user engagement. People like Elon give "free speech" a bad name, but it is actually a problem if for most people "the internet" is controlled by a small number of big technology companies and those companies use their positions, intentionally or not, to suppress ideas and control public discourse. TikTok users will still need to use words like "unalive" on platforms owned by American corporations.

Constitutional protections for your home and property? Not really. Many people are renting and protections for renters vary by state. Property can be stolen by police through civil asset forfeiture.

The opportunity to improve your socioeconomic standings, ie The American Dream, is largely a myth. Recently, the poor get poorer. Real estate values and cost of living are climbing much faster than wages for those at the bottom. If you're at the bottom, it's even more difficult than usual to get the four year degree and years of prior job experience required for many entry level positions with better pay.

America has legal slavery enshrined in the constitution. If somebody is convicted of a crime, they can be sent to private prisons to do slave labor for somebody else's profit. This disproportionately affects poor people and minorities.

You don't actually need DDNS. If your provider has an API you can update your addresses using the API. https://kb.porkbun.com/article/190-getting-started-with-the-porkbun-api

We tried nothing and we're all out of ideas.

Who would have thought that their truck would need a $5000 extra to be usable outdoors? Who buys a truck to keep it indoors?

Formerly in business website formerly known as Twitter.

So what if he doesn't talk to them? The protocols and code are available for anyone, and instances are open for federation. Facebook could, without any sort of consultation, deploy their own instance of Mastodon with their own fork of the code and keep all their changes to themself. If they're going to do it anyways, it'd be better to work with them on it.

13 more...

Microsoft has a real branding problem with messaging services. First they had Skype and Skype for Business and now they have Teams and... Teams. They're completely different products and don't interoperate. This is almost certainly for the home version of Teams.

It's not even a good name. Who thinks of their friends and family as teams?