2,822 karma · joined September 19, 2017
Add the fact that it has no advantage over nebula and I stopped using it in a heartbeat.
Bookstack if you dont mind the lack of clients
And the few people who really had that usecase could just use a lightweight container running chromium + guacamole on a nearby server. Okay I'm sure Mighty used cool tech to make it faster than just that (idk how it worked but maybe they were transmitting changed HTML) but at its core the idea was not something normal people and 99% engineers would ever consider. Anyone rich enough to pay for it would just pay for a more powerful machine.
Anyways, they said they have 50% of VC money left and will be using it to create an online stable diffusion thingy which atleast fifteen startups are doing already including stability AI themselves. How can they differentiate ? Can they just use leftover VC money to make a completely different thing ?
> all you need to do is find a pixel 4 or older and you’re golden
Its worse, it works on most Android phones without the latest security patch, not just Google phones.
that would be ideal but self signed + added to trusted store works
> Additionally there are quite a bunch of use-cases where the encryption is not TLS, like e.g. with some WebRTC applications it's not uncommon to have an encrypted channel we could access to a broker server but in that channel E2E encrypted messages are send e.g. using libsodium statically compiled in.
yeah youre right.
In other cases the only options we have are ld_preload to catch encryption lib. If that doesnt work we can still use ptrace to capture syscalls but encryption will be done in userspace so capturing network activity wont help us with encryption.
Like the other guy said, the info we can gather is still useful.
Reverse engineering + modyfing the binary is a possibility too but it gets complicated fast, especially if they intentionally try to protect it. I feel this isnt really an issue with jvm or interpreted langauges but with the others its hard especially if theyre statically linked. C/C++ have good enough decompilers that its still possible, I don't know about Go/Rust tho.
If you want to you can do that with Linux.
Sure you'd need to use the CLI, and a combination of tools but you can pinpoint every packet to an associated process and if you add your self made cert to trusted certs, then you can decrypt TLS as well in most cases.
Searching for "django signals" got unofficial search results on the first page and all the links on the second page (1) are broken.
Searching for "go cobra" gets no official docs at all.
(1) https://search.feep.dev/search?q=django%20signal&p=2
Some suggestions:
- Prioritize github, gitlab, readthedocs, go.dev, docs.rust links
- In github, only parse readme and wiki links. Avoid parsing links that are related to a specific commit hash.
- Python, Rust docs have versions in the url. Can you link them to the latest version instead ?
But anyways, good job !
A programmer can read available but not oss licensed code and learn from it. Thats fair use. If a machine does it, is it wrong ? What is the line between copying and machine learning ? Where does overfitting come in ?
Today they're filing a lawsuit against copilot.
Tomorrow it will be against stable diffusion or (dall-e, gpt-3 whatever)
And then eventually against Wine/Proton and emulators (are APIs copyrightable)
RHEL's docs are simply unparalleled in the Linux world. I only wish search was better, but if required I can download them and use my own search anyways.