Skip Navigation

Posts
12
Comments
122
Joined
2 yr. ago

  • I'll second the thrift store suggestion. I picked up a Samsung BD-H5100 bluray player at the local FreeGreek for $5 and it has been nice to just pop a disc in and not worry about all the streaming shenanigans.

    I'd say you might as well look for a bluray player. Second hand bluray discs are some times cheaper than the DVDs and sometimes the quality bump is nice. IMO, 4k bluray isn't worth it. I've watched a few 4k blurays and while I can tell there's a difference I've never felt myself missing the extra quality when watching a normal bluray.

    Another option to consider is an old game console. Anything back to the ps3 has a bluray drive. (Though, not the xbox360, iirc? Also at one point Microsoft forced you to make an account and buy a license to watch blurays, so make sure that's not a thing for any game console you consider.) And I know at least the ps3 had an official remote you could buy so you didn't have to use a controller.

    From a privacy perspective, all your options are the same as long as you don't connect whatever you get to the internet.

  • I've always wondered if something like this would work:

    Take a relatively short bit of wire, make a flat spiral at one end about the size of the button, tape that spiral to the button. Then take the other end of the wire hook it up to a relay with the other end attached to ground (or any big metal object probably). I would imagine then closing the relay is "touching" and opening the relay is "not touching".

    I have no idea if that would actually work, but it seems to me like it should. You just need something to interrupt the electric field above the "button".

  • I just pulled my Bangle.js 2 back out to play with making a better reminder system for myself. It works better than any of the other open source watches I've had with my GrapheneOS phone. The hardware isn't open source as far as I know, but their mobile app (fork of gadget bridge) is, as are all the apps that run on the watch, and (I think?) the watch OS.

  • Check your state or country's laws, you might not even need the contract amended. In the state that I live in any contract clause that tries to prevent you from doing any work entirely on your own time with entirely your own materials is explicitly unenforceable.

    Plus if it's just a small open source library (assuming your employer is sane) it'd be a waste of money for them to even ask a lawyer to write a letter to you, because why would anyone care.

    If you really care about getting it right, you can find a local employment attorney and have them explain your local laws and edit and/or negotiate your contract for you. I did that once, but I felt like it was probably a waste of the $900 I paid. (I mean, it definitely was a waste in that case because that job was a nightmare and it only lasted 2 months, lol.)

  • Before anyone thinks this could be good news for EA...

    The offer comes from a group of investors that includes Silver Lake, one of the world's largest private equity firms, and Saudi Arabia's controversial Public Investment Fund.

    WSJ states that it would "likely be the largest leveraged buyout of all time."

    A leveraged buyout from a PE firm means they've decided EA needs to die and they're going to pick the carcass clean.

  • I've been wanting to play this for years, it seems right up my street, but I've never been able to get it working. No matter how much I fiddle with in-game settings, steam input, or proton, I can't get it to do anything but immediately look down and spin the camera.

    1. Post your actual configs and logs or people will only be able to guess. (Censor any secrets.)
    2. My guess: It's probably your nginx config.
    3. Why are you using 0.19.4? That version is over a year old.
  • Selfhosted @lemmy.world

    Have you tried self-hosting your own email recently?

  • I'm curious, have you used Rust much? Most of those changes just feel like "rust should be more familiar to me" changes.

    Also:

    As Rust 2.0 is not going to happen, Rust users will never get these language design fixes

    Isn't necessarily true for most of your suggestions. Since most of them are just changes to syntax semantics and not language semantics they could be made in an edition.

  • Rust @programming.dev

    things rust shipped without (2015)

    graydon2.dreamwidth.org /218040.html
  • Deleted

    Permanently Deleted

    Jump
  • So what you meant was: this isn’t enough evidence to change my mind.

    No.

    One thing getting more upvotes than another isn't somehow evidence that reddit is manipulating anything. There's no immutible law that the original source of something should naturally get more upvotes than anything else. I find that the opposite is most often the case, even when the re-blogged story is crap.

  • Deleted

    Permanently Deleted

    Jump
  • That is not a repost, this is an other article from ProPublica

    Ah, I just assume that was a slightly different title for the same article. Maybe a mod made the same assumption.

    Are you joking with me? They are using a paraphrased title.

    Well, the first part is. But, I don't know what "munching" means. The second part of the Ars title actually says what it's about. Don't get me wrong, I can probably make a guess. But when you're scrolling social media, I don't think anyone is stopping to think about what a title really means. If it's not obvious at first glace most people are just scrolling by. The Ars title, at least to me, skims as "AI bad" since those are the words anchoring each end of the title, that's probably enough all by itself to get some people to upvote.

    I am really curious, what sort of evidence you want/expect to see?

    Literally anything vaguely conclusive. I'm not saying you should go find more evidence for me or anything. I'm just trying to explain why I don't find your evidence here convincing.

    I suspect that Reddit has more than enough money to be competently shitty. So, if they are doing what you suggest, unless they fuck up or decide they don't care, you might not be able to find solid evidence.

  • Deleted

    Permanently Deleted

    Jump
  • I don't think that shows what you say it does.

    First, deleting a repost is clearly not evidence of any kind of bias.

    Second, maybe Ars is just more popular/trusted? Maybe it's more upvoted because the Ars title is more meaningful, it's super well known that people mostly only read the title.

    I'm not saying reddit isn't manipulating things, I'd be shocked if they weren't. But this isn't really evidence that they are.

  • [email protected]

    Despite the name, in practice it seems to be all about getting away from all big-tech.

  • I agree that would make sense. I think it'll come with time.

    To others, I'm pretty sure what OP is suggesting is just a generic activity pub server that all the various front ends could use.

    I'm pretty sure this is what the original (?) authors of the AP spec intended and that's why they specified a client-server protocol. My understanding is that (almost?) no one uses that API though, they all just specify their own.

  • Have they said that recently? The only definitive comment I remember from them was something along the lines "definitely not in the next 2-3 years" around launch, which was 3 years ago.

    Not saying that means I "expect" it's happening, just curious if you know of anything more recent that says its not happening.

  • It's not even over USB by default. It's an internal binary driver API. The USB part is a custom firmware for the ESP that exposes that api via USB that the people giving the talk wrote because it's useful for pentesting / development of exploits for other Bluetooth devices.

  • I don't think is is a backdoor. At the moment I wouldn't consider this article any more than FUD.

    It's unclear to me if the security company has actually said what the vuln is or not, but if it's what was presented in the slides linked in the article this is at worst something that can be "attacked" from a computer connected via USB (and I'm pretty sure it would also require special software already on the ESP32), where the attack is sending out possibly invalid bluetooth messages to try to attack other devices or flashing new firmware to the ESP itself. It's not a general "backdoor" in the ESP32 itself. At least that's the best interpretation I've been able to make. Happy to be corrected if anyone finds more info.

  • I mean, if it were a backdoor, the one thing you can be sure of is that the people who put it there wouldn't be calling it a backdoor, ever.

    Though, I think it's worth pointing out that the while the security company's blog calls whatever it is a "backdoor", "backdoor" (nor "puerta" (though, I have no idea if that would be translated literally or to something else)) doesn't appear in the the slides. So I'm going to lay that one at the marketing people trying to drum it up into something more impressive than it really is.

  • Huh, that is interesting. Though, that post doesn't seem to have any info about what the backdoor is either.

    Tarlogic Security has detected a backdoor in the ESP32, a microcontroller that enables WiFi and Bluetooth connection and is present in millions of mass-market IoT devices. [...] This discovery is part of the ongoing research carried out by the Innovation Department of Tarlogic on the Bluetooth standard. Thus, the company has also presented at RootedCON, the world’s largest Spanish-language cybersecurity conference, BluetoothUSB, a free tool that enables the development of tests for Bluetooth security audits regardless of the operating system of the devices. [Emphasis mine.]

    Maybe the presentation has nothing to do with the actual backdoor?

    Though, this part later might seem to imply they are related:

    In the course of the investigation, a backdoor was discovered in the ESP32 chip, [...] Tarlogic has detected that ESP32 chips [...] have hidden commands not documented by the manufacturer. These commands would allow modifying the chips arbitrarily to unlock additional functionalities, [...].

    Which, best I can work out, seems to be talking about the information on slide titled "COMANDOS OCULTOS" (page 39 / "41").

    If the "backdoor" is the couple of commands in red on that slide, I maintain what I said above. If it's not talking about that and there's another "backdoor" that they haven't described yet, well, then ¯(ツ)_/¯ we'll see what it is when they actually announce it.

    I fully acknowledge there may be something I'm missing. If there's a real vuln/backdoor here, I'm sure we'll hear more about it.

  • Technology @beehaw.org

    Forum User Returns After 100,000 Hour Ban to Continue the Same Argument That Got Them Banned in 2013

    www.pcgamer.com /games/something-awful-forumite-achieves-posting-godhood-emerging-from-the-void-after-100000-hour-11-year-ban-to-continue-the-same-argument-from-2013/
  • Privacy @lemmy.ml

    Firefox added ad tracking and has already turned it on without asking you

    mastodon.social /@mcc/112775362045378963
  • Technology @beehaw.org

    Quad9 Turns the Sony Case Around in Dresden

    quad9.net /news/blog/quad9-turns-the-sony-case-around-in-dresden/
  • Steam Hardware @sopuli.xyz

    Good Times

  • Gaming @beehaw.org

    The Escapist staff resign following termination of editor-in-chief Nick Calandra

    www.gamesindustry.biz /the-escapist-staff-resign-following-termination-of-editor-in-chief-nick-calandra
  • Selfhosted @lemmy.world

    How can I spy on myself?

  • Selfhosted @lemmy.world

    Web Based Static Site Generator?

  • Technology @beehaw.org

    The First Room-Temperature Ambient-Pressure Superconductor

    arxiv.org /abs/2307.12008
  • Free and Open Source Software @beehaw.org

    Red Hat cutting back RHEL source availability

    lwn.net /Articles/935592/