umami_wasabi

@umami_wasabi@lemmy.ml
21 Post – 250 Comments
Joined 11 months ago

pending anonymous user

How about no lock in from the get go?

Missing file I can understand, but how they infect the user with malware? Is it through the BitTorrent protocol, or undisclosed vulnerbility of the Grid Service? The kill chain isn't complete.

P.S. The use of BitTorrent in Korea by service providers is somehow justified IMO given how expensive the bandwidth is which Twitch quit the market.

OpenBao, fork from vault

https://github.com/openbao/openbao

When they mirror it, does they uses a different username? If so I'm totally fine as that's just a fork, otherwise it should count as stolen. Not the project but the name and reputation of the owner.

1 more...

IMO 12 mo is too much. They will wait till the dead line to public the "fix."

6 more...

Parts pairing will do. That's what Apple known for, knee capping consumer rights.

Well. The claim they made still holds true, despit how I dislike this design choice. It is faster, and more secure (though attacks on NAND chips are hard and require high skill levels that most attacker won't posses).

And add one more: it saves power when using LPDDR5 rather DDR5. To a laptop that battery life matters a lot, I agree that's important. However, I have no idea how much standby or active time it gain by using LPDDR5.

I usually take BDRAW, transcode by myself. Or the best quality I can find. Does it look better? Not really. Just the data hoarder inside kicked in. 720p is totally fine.

How many know what even signed commit and build is? For people following a guide they don't even know what Github is for but a nice place to have free programs.

I don't get it. Why I need cloud to run Python scripts which can be done locally? Installing Python isn't hard and MS can bundle it as a library with Office either.

12 more...

That response is quite...hostile?

Someone spent their time to report a bug they found but close it because they didn't pay the dev? Isn't that a kind of contribution?

It is totally acceptable to ignore it but closing the issue with hostility is a questionable practice.

35 more...

"trying"

Nice try, Apple.

A repair bill supported by Apple most likely not a bill I want. It is hard to imagine Apple will loosen it's tight grip.

5 more...

Classic cropo response: No no no. You just misunderstand it. This is what we ment actually.

They "clarifiy" it just because someone found out those shitty terms.

Newspapers. You paid for it, and it still got ads.

I know, digital and printed ads are different.

12 more...

Any company funded by VC with a privacy tag is a red flag.

What? Bitlocker key tied to MS account and mandatory? What's the point of encryption if the key isn't secret any more?

5 more...

Gnome and other desktops need to start working on integrating FOSS AI models so that we don't become obsolete.

I don't get it. How Linux destops would become obsolete if they don't have native AI toolsets on DEs? It's not like they have a 80% market share. People who run them as daily drivers are still niche, and most don't even know Linux exists. Most ppl grown up with Microsoft and Apple shoving ads down their throat, using them in schools first hand, and that's all they know and taught. If I need AI, I will find ways to intergrate to my workflow, not by the dev thinks I need it.

And if you really need something like MS's Recall, here is a FOSS version of it.

3 more...

Actually it is more than a local problem. Since Recall shipped with opt-out, means every computer will have this enabled. Even if you truned it off, the computer on the other end may still capture your data.

Say you said something here, regret about and delete it, but right before a user have Recall enabled see it and can just dig out your now deleted comment. Not good. This applies to HIPAA data or not.

This is essentailly a local search engine that index everything you see and others said in near real time, without repecting robots.txt.

Ads they won't (At least I believe so.) But I won't be surprised that some data harvesting companies have servers set up to collect all the data, aggregate, and sell it. Lemmy is an openly federated platform after all.

1 more...

I don't oppose the idea of battery station, but who owns the battery then? When I bought the car, am I leasing the battery? How about used car?

72 more...

Aka, "not my fault".

That's nice. Let the in fighting begains.

He is sort of right, back in 2019. Even then, IBM PowerPC mainframe are still thriving.

Now, new language with cross compilation with some maturity are here. Major cloud providers now have ARM base machines ready, even designing to their own need.

ARM is in the datacenter market and become a trend.

The only thing I worried about, is the architecture of ARM are too fractured. AWS Graviton might behave differently than Ampere Altra, despite both have the ARM ISA.

3 more...

Or deny that request, and turn the bug to a back door.

This is something I'm unsure of. While I agree that there should be less obstacles to third party app stores, and sideloading, I'm not sure about taking warnings away is a wise choice. Especially when people are comfort and used to no warnings when using Google Play and other equivalents. Most just doesn't do basic digital hygine. A better route is to bring down Google Play from its system app status and become a normal one, and warnings for everyone.

1 more...

With this initiative to open the source code,

The wording is quite evasive. They didn't say directly "With this initiative to open source" but "to open the source code." They do however mentioned collaboration and contribution.

I'm quite confused what license they would use.

If get into smartphones, it became a mega cookie to track every single person, unless it can be deactivated.

I won't be surprise that some SNS will require this soon for uploading media when the adoption is wide enough.

The government's move is in line with a recent policy that has targeted services with end-to-end encryption. A host of encrypted apps were blocked at the start of last year — including the likes of Threema, Element, Wickrme, and Safeswiss — and the government is going after WhatsApp to disable end-to-end encryption, although it isn't clear how that would even work.

This is why GPG is still an important and valuable tool. You can use it on litteral anything and not relying on single point of failure. Paired with steganography no one will know the message even existed. Yet, not many are willing to learn nor support this anymore.

Edit: use of more conservative wording Edit 2: correct spelling

2 more...

Malicious compliances in action. Not that you can't do, but this can tense up the relationship.

FOSS projects must not discriminate the use of the project. Meaning no matter you host it for internal use, or resell the project as a service, they shall be treated the same with the same rights.

1 more...

I believe security threats can be mitigated locally without resorts to cloud.

Actually, one can argue using cloud is less secure because there is a risk of sensitive data leaked out of cooperate network.

2 more...

Why rely on them doing the detective work and just not give 1 more second to think through before hitting that install button? This is basic digital hygiene.

7 more...

Republican FCC Commissioner Brendan Carr said the plan gives "the federal government a roving mandate to micromanage nearly every aspect of how the Internet functions."

IHO, this doesn't affect how the Internet function, at all. Internet doesn't just exist in the US. What it does is manage and governs the access to the Internet, and make it equaily accessible, within US jurisdiction. Micro or not, that's subjective.

It is luck(?) for him the password generator isn't secure back then.

2 more...

If it pass safety standards without all those smart and data collection bs and being reliable for 7+ years with easy part sourcing I might give it a try.

This issue isn't about authoring the script, is about why it needs to execute on the cloud rather locally.

Not ransomware but just ransom to data exfil by a vulnerable API. But paying is still a dumb idea.

4 more...

But are we still paid the same? Otherwise it would be working 2 jobs which one during "weekends". Much worse.

6 more...

I would not give the right of anyone deciding what is good for my privacy, including Apple. This should be a judgement made by myself.

1 more...