@cypherpunks@lemmy.ml
@cypherpunks@lemmy.ml avatar

cypherpunks

@cypherpunks@lemmy.ml

cultural reviewer and dabbler in stylistic premonitions

This profile is from a federated server and may be incomplete. Browse more on the original instance.

cypherpunks, (edited )
@cypherpunks@lemmy.ml avatar

What is “the enshitification face”

maybe one of these?https://lemmy.ml/pictrs/image/e2c8fcb2-7ea2-4de7-88ff-c7fd975d2332.png https://lemmy.ml/pictrs/image/8cb77de5-518d-4b6b-bdff-2ef8ef9acaf7.png https://lemmy.ml/pictrs/image/ee7dac5b-a8cc-44d9-85d2-0f46078deb50.png

cypherpunks, (edited )
@cypherpunks@lemmy.ml avatar

(The onlt client that implements material you in a fun and usable way, sync is usable one-handed)

Touchscreen keyboards and their consequences have been a disaster for the human race.

cypherpunks,
@cypherpunks@lemmy.ml avatar

s/browser/spyware/

cypherpunks,
@cypherpunks@lemmy.ml avatar

i am against paying for DRM streaming services, and i boycott apple products, but i must say this is an impressive hacking effort and a well-executed meme about it. 🥂

cypherpunks, (edited )
@cypherpunks@lemmy.ml avatar

Sure, fuck WhatsApp, but Telegram isn’t even end-to-end encrypted most of the time. Their group chats never are, and their “secret chat” encryption for non-group chats must be explicitly enabled and hardly ever is because it disables some features. And when it is encrypted, it’s with some dubious nonstandard cryptography.

It’s also pseudo open source; they do publish source code once in a while but it never corresponds to the binaries that nearly everyone actually uses.

And the audacity to talk about metadata when Telegram accounts still require a phone number today (as they did five years ago when this post was written) is just… 🤯

State-sponsored exploits against WhatsApp might be more common than against Telegram, or at least we hear about them more, but it’s not because the app is more vulnerable: it’s because governments don’t need to compromise the endpoint to read your Telegram messages: they can just add a new device to your account with an SMS and see everything.

(╯° °）╯︵ ┻━┻

Anything claiming to prioritize privacy yet asking for your phone number (Telegram, WhatsApp, Signal, …) is a farce.

cypherpunks,
@cypherpunks@lemmy.ml avatar

4 hours later… yep :(

cypherpunks, (edited )
@cypherpunks@lemmy.ml avatar

you can DIYhttps://lemmy.ml/pictrs/image/9ba59494-9a8a-4f18-a320-455106d2fa63.png

cypherpunks,
@cypherpunks@lemmy.ml avatar

👍

cypherpunks, (edited )
@cypherpunks@lemmy.ml avatar

prefixing it with "# " makes it a heading (larger text).

cypherpunks,
@cypherpunks@lemmy.ml avatar

lmftfyhttps://lemmy.ml/pictrs/image/402b6a43-e887-4ef8-b5cd-023e59d85b98.png

cypherpunks,
@cypherpunks@lemmy.ml avatar

Since he doesn’t mention it in his ‘fantastic’ reporting, OpenSSH 9.6 was released Monday that will patch this attack.

I am tempted to delete this post just for the article’s stupid clickbait headline, but it still will probably cause some people to go update their OpenSSH installs, so… meh.

Anyone who actually wants to know details of the vulnerability should read the website about it which is obviously much better than this article.

Also, since he doesn’t mention it, if on the Internet, the MITM would have to be installed at both end points (client side and server side) to be effective without the patch.

Huh? No. The attacker doesn’t need to be in two places or even near either end per se, they could be located at any fully on-path position between the client and server.

cypherpunks, (edited )
@cypherpunks@lemmy.ml avatar

I’ll assume you’re genuinely unaware

I’m perfectly aware of what Ubuntu Pro is, and the difference between Ubuntu main and universe.

The current meme implies that Ubuntu/Canonical have actively disabled safety/security features in the form of withholding security updates, unless you pay for Ubuntu Pro subscription. The Ubuntu package support hasn’t changed with the introduction of Ubuntu Pro. The packages that were supported by Canonical prior to this are supported the same way today. The packages that were community supported prior to this are supported the same way today. Without Ununtu Pro.

If you think the meme implies that, then surely you must think that the message printed by Ubuntu’s apt upgrade command in the screenshot implies that too, right?

One of the packages listed in this screenshot is libavcodec, which is required by things like VLC (which is in Ubuntu universe, which is enabled by default).

If you think it is perfectly fine for Canonical to do the work to patch that library and then withhold the security update from the vast majority of Ubuntu users who won’t sign up for Ubuntu Pro… we’ll have to agree to disagree.

cypherpunks,
@cypherpunks@lemmy.ml avatar

huh? what is the misinformation here?

cypherpunks,
@cypherpunks@lemmy.ml avatar

I was pretty sure Q-Zar continued to exist well after 1997, so I checked, and yeah, there continued to be Q-Zar locations after the 97 bankruptcy of one of the companies involved.

This location in NY has diversified into Axe Throwinggoogle street view of Q-Zar Laser Tag and Q-Axe Axe Throwing

cypherpunks, (edited )
@cypherpunks@lemmy.ml avatar

Works fine on Sync :,)

It sounds like Sync is either blocking users client-side (which would be confusing, since server-side blocks do exist), or it is trying and failing to add a block server-side but suppressing the server’s error message.

either way, it sounds like a bug.

do you know where the project’s github is so someone can open an issue about it? /s (explanation here on mouseover)

Is there an easy way to stream full bluray disc rips with menus and features over the network to my TV

Most of my collection is just the movie rips of just the video that play fine in Plex or Jellyfin. I’ve got a couple of full disc rips though that have the menus and features and all just like you would if you put the disc in. I can open these in VLC on my computer by choosing the folder....

cypherpunks,
@cypherpunks@lemmy.ml avatar

There is a version of VLC for the Nvidia Shield, but it has a somewhat irritating UI and I don’t know if it can actually read the menus like the desktop version can.

cypherpunks,
@cypherpunks@lemmy.ml avatar

https://lemmy.ml/pictrs/image/3cae2d58-ac07-456a-8277-3589832f0a69.png

cypherpunks,
@cypherpunks@lemmy.ml avatar

this meme using the verb found instead of reached is mildlyinfuriating

cypherpunks,
@cypherpunks@lemmy.ml avatar

If your local censor is not effectively blocking Tor, then you can just use Tor Browser to access lemmy.ml’s normal address via an exit node. Onion services don’t particularly help with circumventing censorship that is performed by the ISP of the user.

Onion services are useful for removing load from the exit nodes (since connections to them don’t need to go through exit nodes) and for having a self-authenticating address that doesn’t immediately reveal the location of the server. However, the location-hiding properties of onion services are not actually very strong at all (note that they used to be called hidden services and mostly aren’t anymore) and should not be relied upon. There are many adversaries who can locate a “hidden” service in a relatively short period of time. So, onion services are only potentially useful for resistance of censorship at the server’s location in the short-term and/or against weak adversaries.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • localhost
  • All magazines
    •
    Loading…
    Loading the web debug toolbar…
    Attempt #