Spyke

Replies

privacy

Comment on

Very simple way to improve your privacy and security massively.

15-20 years ago, I'd have agreed with you. But apart from a select few news sites and exceedingly rare static sites, what percentage of websites most users use day to day actually function even minimally without JavaScript?

I'm convinced that in practice, most users would be conditioned to whitelist pretty much every site they visit due to all the breakage. Still a privacy and security improvement, but a massive one? I'm not sure.

Very happy to be convinced otherwise.

Comment on

This AI Startup "Copied" an Open-Source Project and Got Half a Million Dollar Funding by Y Combinator

I simply can't wrap my head around the thought process behind launching a clusterfuck like this. Y Combinator probably didn't do their due diligence and simply rode the fading AI Bubble, so I can at least understand how the funding might have been approved.

But actively leaving your $250,000+/year job to team up with some questionable choices to basically fork two OS projects, change the discord links and generate an illegal licence for that shit show, all while proudly stating, publicly, "dawg i chatgpt'd the license, anyone is free to use our app for free for whatever they want. if there's a problem with the license just lmk i'll change it. we busy building rn can't be bothered with legal" when they are made aware of the fact.

This is absolutely insane, sounds like someone was about to get fired and decided to use some personal relations and fresh graduates to somehow successfully cash in one last time with absolutely no regard of even the basics. Pretty wild that those guys even managed to figure out how to found a Startup. Probably asked ChatGPT for instructions there, as well.

games

Comment on

Files For Cancelled Cyberpunk ‘Moon’ DLC Appear Online

Misleading title.

In the string of images uploaded online, we get a look at file repositories, a rough map of the proposed Moon location, and shots of some early conceptual images and set pieces. As the story goes, CDPR originally intended for the Moon to be a featured location in the base game but recognised that it was too ambitious a goal, so they cut the content and instead decided to use it for an expansion – which ultimately never surfaced.

Cyberpunk 2077’s development has officially ended, so there’s no chance this will ever see the light of day.

Comment on

Literally France right now

This is exactly how it's supposed to work in a functioning democracy.

Where ideally everyone, but at least a critical percentage of citizens is educated enough to recognize the pattern of deceit and false, but easy answers to very complex questions from extremist parties.

Where established parties don't feel the need to pander to the votes of extremist parties by cooperating and adapting points pushed by extremists.

Where the average citizen doesn't feel left out by the system and is tempted to align themselves with extremist parties in order to protest the current reality of said system.

Where the system implements safeguards to not allow the system to be taken hostage by extremists.

Would be nice, eh?

lemmy

Comment on

Instance Owners: Do Not Use Lemmy-Thumbnail-Cleaner

Ah. So Lemmy with version 0.19.4+ allows users to set a custom thumbnail URL for a post, which can be set to pretty much anything resembling a valid link, especially a link to another image in the local pictrs db and trigger a deletion of both when a minimum age check is passed.

Also this:

Except that the field allows some funny URLs e.g. https://t.t/;';'%22;...[:%3C%3E?]%27;%20yaba%20daba%20doo, if this is an issue too is not confirmed

Comment on

Stack Overflow bans users en masse for rebelling against OpenAI partnership — users banned for deleting answers to prevent them being used to train ChatGPT

Reply in thread

It's not shared for public benefit, though. OpenAI, despite the Open in their name, charges for access to their models. You either pay with money or (meta)data, depending on the model.

Legally, sure. You signed away your rights to your answers when you joined the forum. Morally, though?

People are pissed that SO, that was actively encouraging Mods to use AI detection software to prevent any LLM usage in the posted questions and answers, are now selling the publicly accessible data, made by their users for free, to a closed-source for-profit entity that refuses to open itself up.

Basically the same story as with reddit.

Comment on

Die AfD und die CDU sind Wahlsieger. Die Linke ist am Boden. Die Grünen haben massiv verloren. Die AfD ist die zweitstärkste Partei. Was jetzt?

Eh. Dadurch, dass es bei der Europawahl keine 5% Hürde wie auf nationaler Ebene gibt, haben viele, meiner Meinung nach völlig zurecht, Parteien gewählt, die ihren persönlichen Ansichten besser entsprechen als die etablierten Parteien. So wurde z.B., zumindest in meinem Bekanntenkreis, sehr oft Volt anstatt Grün gewählt. Bei Wahlen auf Bundesebene dürften dann die meisten halbwegs vernünftigen Wähler wieder Parteien unterstützen, die eine reelle Chance haben, >=5% zu bekommen, um mit ihrer "verschwendeten" Stimme keinen Extremismus zu unterstützen. Und dass die Linke mit ihrem aktuellen Parteiprogramm von den Wählern abgestraft wird, wundert mich nicht. Gegen Waffenlieferungen an die Ukraine zu sein und der NATO eine Mitschuld zu geben, polarisiert in den aktuellen internationalen Gegebenheiten sehr. Das Fiasko mit Wagenknecht hat natürlich auch einen großen Anteil.

dach

Comment on

Ermittlungen im Darknet: Strafverfolger hebeln Tor-Anonymisierung aus

Reply in thread

Das stimmt bei richtiger Verwendung schlichtweg nicht und es nützt niemandem, wenn man falsche Informationen herausposaunt. Wie auch im Artikel zu lesen, fand die timing attack auf üblichem Wege, gerade fürs deutsche Rechtssystem aber äußerst kontrovers statt:

Zur finalen Identifikation verpflichtete das Amtsgericht Frankfurt am Main schließlich den Provider Telefónica, unter allen o2-Kundinnen und -Kunden herauszufinden, wer von ihnen sich zu einem der identifizierten Tor-Knoten verband.

Bei einer Timing Attack werden, wie der Name schon sagt, Zugriffszeiten und möglichst viele (Meta-)Daten zu bestimmten Paketen statistisch abgeglichen. So kann man auch ohne direkten Zugriff auf die Daten bei ausreichender Datenlage feststellen, wer mit wem kommuniziert.

Hier wurde schlichtweg jeder o2 Kunde in Deutschland erstmal pauschal überwacht, ob er nicht mit einem bestimmten Server Kontakt aufnimmt. Um dem entgegenzuwirken, kann man natürlich erst einmal über einen (no log) VPN Provider gehen, um gar nicht erst zugeordnet werden zu können.

Comment on

A web app to easily transfer your user data from one Lemmy instance to another

Reply in thread

The export/import functionality is, yes. This implementation uses the same API endpoints, but the main reason for this existing:

An instance I was on slowly died, starting with the frontend (default web UI). At least at the time, no client implemented the export/import functionality, so I wrote a simple script in Bash to download the user data, if the backend still works. Running a script can still be a challenge to some users, so I wrote a web application with the same functionality. It's a bit redundant if we're talking about regularly working instances, but can be of use if the frontend isn't available for some reason.

privacy

Comment on

The number of Opsec mistakes this admin made is absolutely insane. I think the average person in this community has better Opsec.

This one is absolutely hilarious.

The guy allegedly knows his stuff from a technical point of view. And yet he searches for very specific info on google while logged in to his personal google account and further links his personal accounts to a forum where he proceeds to advertise his darknet marketplace and to SO where he asks for very specific advice?

This muppet searched for very specific infos on components he wanted to develop on his *personal fucking google account and implemented them shortly afterwards.

He literally panic searched, again, on his personal google account on Google in order to debug his server going down - minutes after the FBI temporally took his server physically offline to grab an image from it.

I expected elaborate timing and traffic correlation attacks, I got a stupid scammer treating his drug empire as a hobby project for his resume. Glorious.