4oo4

I love these so much, there are so many cool geometrical patterns and the colorization makes everything look very psychedelic. They also make amazing desktop wallpapers, I think the majority of mine come from here.

Interestingly, all the submissions of circuits dropped off after 2009.

https://www.nikonsmallworld.com/subjects/circuit

I'm thinking that has to be because features shrank too much with process nodes to be able to take a photograph without something like an electron microscope, since the rules require light microscopy only.

CoD has a history of being very selective about what parts of their games are realistic.

https://www.youtube.com/watch?v=ttjSaW-lSNQ

Yeah it looks OK for me, using Firefox on Android.

Yeah he is. Wow, totally misread that, that makes a lot more sense.

Never expected the GCHQ to come out against this.

    In a paper titled Chat Control or Child Protection?, to be distributed via ArXiv, Anderson offers a rebuttal to arguments advanced in July by UK government cyber and intelligence experts Ian Levy, technical director of the UK National Cyber Security Centre, and Crispin Robinson, technical director of cryptanalysis at Government Communications Headquarters (GCHQ), the UK's equivalent to the NSA.

Is that also why this is a civil suit and not criminal charges under the CFAA?

Related:

- https://www.mintpressnews.com/twitter-hiring-alarming-number...

- https://www.mintpressnews.com/national-security-search-engin...

- https://www.mintpressnews.com/nato-tiktok-pipeline-why-tikto...

- https://www.mintpressnews.com/meet-ex-cia-agents-deciding-fa...

That's totally fair and valid. I don't need root a lot of the time, but the one use I do depend on is network blocking via hosts like AdAway allows. If I understand correctly the GrapheneOS alternative is running a local VPN to accomplish this?

That doesn't suffice for me since then I'm limited by Android only allowing one VPN at a time and would then have to choose between having adblocking or hiding my public IP. Yes, I can (and do) use a custom DoH like NextDNS for blocking as well, but I also like having a static hosts file so I have a baseline blocklist on my phone itself. However that's just my personal preference, any of those approaches are valid.

Having the ability for logcat would be nice too, since I depend on that to audit apps and track down strange bugs occasionally.

My main defense in limiting my attack surface is just not installing very many apps in general, and preferring apps from F-Droid that are as simple as possible and offline only, or that are connecting to a self-hosted service that I control. Which I'm sure helps but is obviously not as thorough as Graphene's hardening.

Verified boot is an awesome feature though, I think the ideal for me would be using my own custom keys to have verified boot, so I can include and sign whatever I want in my ROM. Though, I know there are the hardware backed keys you can't change and at that point I'd essentially just have my own custom ROM. I might just be spoiled from what I get with the Pureboot firmware on my Librem laptop and being able to verify firmware with my own GPG key.

I also think it's awesome that we have enough privacy-focused ROM choices on Android to be having this discussion :)

Yeah, I'm impressed by all the enhancements like this that GrapheneOS put the work into. However I can't see myself using them because of their stance towards rooting. I strongly disagree that a user having full administrative access to their phone is something intolerable when it's accepted on a desktop or laptop. With Magisk I get a similar security barrier to sudo or UAC with biometric authentication to use su, and I can't really trust my phone unless I have full visibility. I understand their reasoning but the whole point of flashing a custom ROM is that I'm in control.

That being said, it's a shame that LOS doesn't borrow more from Graphene.

Looks great but I'm a bit turned off by the lack of keyboard. I know I could just use a Bluetooth or USB wireless one but I think part of me fetishizes having something like an iPad with software I don't hate.

I'm curious whether this is an AOSP or Google Play Services thing, and whether de-Googled LineageOS would also be affected.

EDIT: Looks to be AOSP according to this https://issuetracker.google.com/issues/249990229?pli=1

For anyone that's upset about this, don't focus on the SMS vs. Signal messages UI distinction giving as the primary reason.

That's something a simple UX change could improve and does not justify something so radical. There's probably another reason they are doing this, these are my best guesses:

- Feature parity between Android, iOS and Desktop

- Moving towards Signal accounts tied to usernames instead of phone numbers

- Developer resources (unlikely, since this feature has existed since the beginning and probably requires less maintenance than other features, but I'd pay for a subscription if they kept it)

Whatever the real reason is, make them say so, the reason given is extremely flimsy. If they go through with this it will put lives in danger for people like activists, journalists, and anyone crossing a border who depend on their SMS messages being encrypted at rest (despite SMS not being end-to-end encrypted in transit). Using Signal instead of a different SMS app also prevents other apps from reading your SMS messages. Test this out - switch your default SMS away from Signal and sign into an app requiring SMS verification, and that SMS is probably readable by the app without any interaction on your part.

Cue the Apple-ish response of them saying they're listening while not taking any of their users' valid concerns seriously at all. Very disappointed in them.

Shame on me for not keeping up with this, has anyone transitioned off it already, and if so, what's your deployment like and what did you go with?

I find it strange that the numbers for Chrome and other Chromium browsers are so different. When someone finds a Chrome vuln, is it standard practice to test against other Chromium variants?

What a great band, there's a lot we'll never know about them, but I think it's crazy that I at least have a definitive answer about Mizutani being alive up until 2019, because pretty much everything you'd read said that he was so reclusive no one knew. I'm happy that he lived that long and really sad that he didn't get to live long enough for a revival.

I won't even pretend to understand their music, and the bootlegs are of varying quality, but there are some definite gems. In addition to the songs mentioned in the article, this is a great one especially for people that aren't that into noise music:

https://www.youtube.com/watch?v=-CwD6iPwQeA

Here are a couple of their better bootleg albums:

https://www.youtube.com/watch?v=87VuE5rC5EU

https://www.youtube.com/watch?v=JnlBgRpT7oo

Yep, that's exactly what I do with mine. I only used Stadia to play Cyberpunk 2077, the rest of the time I used it with USB for Steam games. I think this oversimplifies the work needed to use it over Bluetooth, the wireless capability was actually the controller using WiFi to talk to Stadia directly, and then some fancy predictive input algorithms to help deal with latency. It only knows that custom WiFi HID and regular USB HID to speak controller events.

So it's not just a matter of turning it on, you're essentially rewriting a huge piece of the firmware to make that happen. This is an excellent case for open sourcing the firmware code though, even if that doesn't happen someone will probably reverse engineer it.

Not necessarily, I've had good luck with DNS blocking my Roku at least. I was surprised since I expected it to have hardcoded DNS. I'm sure that Chromecasts are propbably hardcoded to 8.8.8.8. It's probably not possible or easy to do with a consumer router, but if you had a Linux router (or something enterprise-y), you could do a NAT rule similar to this to force something to go to your own DNS server:

    iptables -A PREROUTING -s <IP of device> -d 8.8.8.8 -p udp -m udp --dport 53 -j DNAT --to-destination <IP of custom DNS>:53

I hope the NextDNS privacy blocklist for Roku can deal with these.

Really curious what someone with a legal background thinks of it, from reading this the judge actually misquoted and completely distorted the decisions he quoted to support this, probably on purpose.

https://www.techdirt.com/2022/09/16/5th-circuit-rewrites-a-c...

Part of me would like to think that is enough to get it struck down given how sloppy it was. However it would also not surprise me at all if there was some feat of mental gymnastics that would allow it to be upheld either.

I use both lxc and docker and have uses cases for both, I think it really comes down to how stateful something is or how lazy I feel about writing a Dockerfile. I had a really hard time with learning lxd and really only got into using lxc without the daemon.

One trend with docker that I personally don't like is that a lot of projects prefer docker-compose over regular Dockerfiles (though some of them support both), and this leads to a lot of bloat with how many containers it takes to run one application and duplication where each app will need its own database, redis, webserver, etc. containers.

That's not a problem when you are at the scale to need that kind of orchestration and have the resources to run that many containers, but personally I would rather have one database host that all my containers can talk to and one reverse proxy/webserver to make them accessible to make better use of resources and get better density on one host.

One downside with lxc is that there's been some fragmentation with the image creation side of it, I had been used to using lxc-templates for years, which are just shell scripts for bootstrapping and configuring your container and pretty common between distros. I found a bug with creating containers for the latest version of Alpine that I fixed, and only then did I find out that lxc-templates are deprecated and essentially unmaintained, and that now distrobuilder is the preferred way to build lxc containers, at least per Canonical. That seems to be another Canonical-ism, since the distrobuilder docs say that snap is the only way to install it unless you build from source, so that's a huge no from me, and I also didn't feel like learning the yaml config for it.

I was actually considering moving my docker daemon into an unprivileged lxc container like the article mentions, but haven't gotten around to it.

That reminds me of Auto Brewery Syndrome:

https://www.palmpartners.com/auto-brewery-syndrome-body-prod...

It's interesting that those that are diagnosed don't have driving restrictions like people with epilepsy since they are actually intoxicated by it, but that might just be because it's so rare that most people don't know or refuse to believe it exists. They'll have it the worst if this actually gets mandated and deployed.

Really looking forward to being convicted of a DUI for using mouthwash just before leaving the house. I'm pretty sure orange juice can do it too.

The clothing choice is that of the interviewee, not the interviewer. If you approached the interview subjects on the street, they'd probably be wearing the exact same thing, since you're probably referring to the sex workers he interviews. He's not telling them to dress a certain way to get a reaction, he really just wants the interview subject to show what their lives are like. The way the interviews work is that the interview subjects walk in off the street and they just start talking.

The clothing isn't the issue, since there are lots of other videos on YouTube with women wearing less, that aren't (yet) problematic, so it's not the sexual content itself as much the context surrounding the sexual content. Corporate America prefers a Disneyfied version of reality, and anything that falls outside that they try to banish. They will tolerate sexual content as long as it promotes consumption and aligns with capitalist thinking.

Consider this Jay-Z song Big Pimpin', which glorifies the objectification of sex workers and women in general. Contrast that with Soft White Underbelly which humanizes the same types of people.

https://youtube.com/watch?v=Cgoqrgc_0cM

Even though this is dealing with very similar subject matter and the women in it are wearing far less clothing, it will probably never be demonitized. Why? It's encouraging consumption and promoting the idea that being wealthy means you get to have lots of happy sex with women that will let you objectify them, because of your money. Also Jay-Z's wealth means he's more important and the rules apply to him differently (if at all).

Whereas Soft White Underbelly is showing a more sad and complicated view of sexuality and the objectification of human beings, one that doesn't promote consumption and glorification of wealth. Someone might watch that and realize that a sex worker selling their body for money isn't really that different than someone destroying their body working in an Amazon warehouse, or other jobs that require physical labor, and an idea like that is threatening to Corporate America.

I'm not singling out hip hop, but rather that's a song that's so misogynistic that even Jay-Z himself has disowned it:

https://www.republicworld.com/entertainment-news/music/jay-z...

This is a huge loss, SWU is one of the best creators on YouTube and I've been really moved by some of his interviews. Pretty much all the creators I follow on YT are either self-censoring or not posting videos anymore, because of this nonsense. Kudos to him for continuing the work, I didn't know that his proceeds went back to the communities he's portraying so I definitely will be making a GoFundMe donation.

Agreed, I think that's the most compelling reason why they should implement RCS.

The reporter had a huge missed opportunity not to bring this up. If you want to have adults peer pressure each other with emotional manipulation to buy your product, that's disgusting, but fine, you have the right to do that. However there's a huge ethical line that gets crossed when that's done to children. Teaching kids and teens that brand loyalty is necessary to maintain friendships and an identity is extremely toxic and stupid.

Valid URL != Someone serving that URL

This mostly makes sense except the 3rd and 5th `http://`, unless those are supposed to be grouped together?

    http:// (scheme)
    http:// (user)
    http:// ??
    @http:// (hostname)
    http:// ??
    ?http:// (parameter)
    #http:// (fragment)

Will buy a beer for the first person that demonstrates how to serve that URL.

Well said, very pernicious indeed. Absent corporate emails saying Visa knew 100% that Pornhub (who very much is culpable based on what we know) was hosting child porn and chose not to do anything about it, this is a really specious argument. As far as I know nothing like that has been presented as evidence.

What we have so far is the opposite, that they in fact did something when they had an idea that Pornhub was hosting illegal content. That should indemnify them, rather than make them liable. I'm really curious to see what evidence they present for this, since what we know so far seems absurd and backwards. Victims do deserve restitution but that should come from PH, who 100% knew and lied and profited.

I hate that payment companies are defacto internet morality police but it's not surprising that things like this in part force them into that position.

Very true. Everyone at the very least deserves a basic greeting and acknowledgement, but it's unrealistic to expect anyone on the job to socialize at length.

Especially if that person was just berated or humiliated by someone "important" on a power trip, extremely stressed by the job, or is preoccupied with personal issues that you have no idea about.

I've been in that position before.

I think privilieged people that don't have the same kind of stressors in their life that working class people frequently have, can then scoff when that person doesn't have the time or energy for a conversation, as if they expect those beneath them to entertain them with conversation in addition to their job duties.

It's surprising how much taking 5 seconds to say "Hi, how's it going" can improve any interaction.

Agreed, this looks awesome but that's a non-starter for me. I'll admit that I hate using OAuth for logins in general and prefer to keep all my accounts separate. However, I'd easily settle for Github/Gitlab for authentication, since I get that managing authentication can be a pain.

I don't remember exactly which sites, but I run into the problem every so often with a handful where I'm prompted to change my password according to vague guidelines that say I usually need special characters, without saying which ones it accepts.

I change my password with something randomly generated by my password manager, and the site accepts it, and as far as I know I'm good to go. Then next time I try to log into the website, it doesn't accept the password it previously (falsely) accepted before, and I have to reset it again and play the guessing game of what special character it didn't like. Madness.

This might be why, it's using TCP instead of UDP?

    sudo ufw allow 1701/tcp
    sudo ufw allow 9001/tcp

https://github.com/H-M-H/Weylus#running