Comment on
Crypto Bros Report Burning Eyes and Skin at Bored Ape Bacchanal
Did they accidentally buy UVC sterilization tubes instead of the relatively harmless UVA party lights?
Comment on
Crypto Bros Report Burning Eyes and Skin at Bored Ape Bacchanal
Did they accidentally buy UVC sterilization tubes instead of the relatively harmless UVA party lights?
Comment on
The three million toothbrush botnet story isn’t true.
First thing I was asking is the model of toothbrush that supposedly got hacked. AFAIK there are no mainstream electric toothbrushes with onboard WiFi. Both OralB and Philips use Bluetooth for their smart functionalities.
If the story was about smart ovens or washing machines I would have believed it.
Comment on
More than $35 million has been stolen from over 150 victims since December — ‘nearly every victim’ was a LastPass user
Reply in thread
Yes, if you write the decrypted file to disk, it could be recovered. Deleting files only removes the file system entries - it does not wipe the content.
Use a local password manager. KeePass (use the KeePassXC variant on Linux) is the most popular choice. If you prefer a command line tool, pass (passwordstore.org) is an option.
Comment on
What happens after a Spotify account ban?
Spotify does not have the power to lock your credit card or paypal account. Account bans might happen and I have seen E-Mail screenshots of people who got banned. I am not sure if they would take down an entire set of family accounts.
If you care about the content of your Spotify account (playlists, listening history) you should not use it for piracy. Just create a new one. If you are fine with 160kbps OGG files, you dont even need a paid account.
Do not create Spotify accounts with trash mail addresses, they may work at first and get banned the next day (happened to me after I created some accounts for scraping their API).
You can also export all your Spotify data as a precaution (GDPR export from the account page, they send you an email with a link to a zip file after a couple of days).
Comment on
What Manifest V3 means for Brave Shields and the use of extensions in the Brave browser
It might be worth setting up a seperate Chromium extension store independent from Google
Comment on
Unpowered cargo gliders on tow ropes promise 65% cheaper air freight
Reply in thread
And the weight. A recreational glider weighs about 600kg. They want to build one that carries 3 and later 10 tons.
If a recreational glider crashes into a house, it usually does not cause a lot of damage except to the pilot, see here:
https://www.tz.de/welt/niedersachsen-segelflugzeug-stuerzt-wohnhaus-zr-2446316.html
Now make that thing 20times heavier. There is a reason drones are regulated by weight class.
Comment on
How does RSS work under the hood?
RSS feeds are XML files which contain a list of documents hosted on the internet (articles, audio/video). The feed entries contain basic metadata (title, date, author, summary) and a link to the original website (or audio/video file in the case of a podcast).
Feed readers send a simple web request to the website hosting the feed, downloading it if it has changed since the last update. The content is then combined with other feeds and displayed. This way you can have a personalized news reading experience without needing to create an account at a a central provider or open every individual site.
Alternative YouTube clients use RSS feeds provided by YouTube (example: https://www.youtube.com/feeds/videos.xml?channel_id=UC2DjFE7Xf11URZqWBigcVOQ), but they are only used to update subscriptions. All other requests (search, watching videos) are handled by the same web interface as the YouTube desktop application. Fetching the RSS feeds is a lot faster than opening the channel page, so the RSS featuee allows you update 100 or more channels in a few seconds.
The way podcast ads work is either just like YouTube sponsorships (the podcaster gets paid by a company to speak an advertisement themselves) or they are dynamically inserted by the podcast provider (these are the interrupting ads). Since most podcast apps dont store cookies, there is no way to track users and personalization is done only via the IP-based location and topic of the podcast. RSS-based podcast players have no way of directly reporting back playback telemetry. The server hosting the podcasts can only count the number of downloads/playbacks. So there is no way to count the amount of watched ads when using a RSS-based podcast player like AntennaPod or Kasts. Note: this does not apply to podcasts on Spotify, Apple Music or similar platforms. These platforms absolutely track your listening activity. I have no idea whether this affects ad/sponsorship earnings.
Comment on
Monaspace - Microsoft presents a new font family for code
Will they replace Consolas in Windows with this one or is it a GitHub-only-thing?
In Consolas the characters 1 and l look very similar, making the font unsuitable for coding and terminal use, so it would be good if they replaced it with something else.
Comment on
Most to least common 4-digit PINs
Reply in thread
Pin codes are great for quick access if you have a lockout mechanism after 3 failed attempts and it is impossible for an attacker to get the hashed code. It is only secure if you pick a pin that cannot be guessed in 3 attempts like your birthdate but that applies to any password.
Thats why they are used for credit cards, SIM cards or Bitlocker drive encryption. The hashed code never leaves the secure hardware so you cannot circumvent the lockout.
Even a 16digit numeric code, which I guess is the upper limit of what you can remember and quickly input, would take just a couple of days to brute force if the attacker does get hold of the hash.
Comment on
Alternative Printer Uses
Reply in thread
No, that temperature would damage your screen. The professional hot plates for phone repair are typically set to 85-90°C. With a heat gun you may need to set a higher temperature since you are only heating up part of the phone and it cools down again during the process. My printer (Prusa MK3) with PCB heater can go up to 120°C, so it looks perfect for the job.
Comment on
OnePlus Open hype building campaign officially starts with a first look video
Reply in thread
I think they covered it with black foam, because they do not want to reveal what camera they use.
Comment on
Inside the AI Porn Marketplace Where Everything and Everyone Is for Sale
Reply in thread
The main issue of this would be public defamation, i.e. wrongfully portraying someone as porn actor which might destroy their career. You cant really do that with written or drawn fiction.
But for that the pictures would have to be photorealistic, which is not the case just yet. But the tech is going to improve plus the generated images could be further manipulated (i.e. add blur/noise to the image to make it look like a bad phone picture).
Comment on
Review: Framework Laptop finally gets an AMD Ryzen config—and it’s pretty good
Reply in thread
Do they now have additional USB ports on the back side? Or do you refer to having USB modules plugged in?
Comment on
Potential pitfalls in exposing Jellyfin server to the internet through reverse proxy?
Web applications may have vulnerabilities that allow an attacker to run code on the host system (Remote Code Execution). Famous example would be the log4shell vulnerability.
If you want to expose your server to the internet, you have to make sure you are not suffering damage if an attack like this occurs.
Comment on
*Permanently Deleted*
Reply in thread
They do publish some open source software like Whisper TTS. Their core products are all proprietary though.
Comment on
Guide to Removing DRM From Amazon Kindle E-Books
Reply in thread
DeDRM extracts the keys from Adobe Digital Editions. So you need to have Digital Editions installed (use a Windows VM if you are another OS) and added the E-Book to the library.
Comment on
How does RSS work under the hood?
Reply in thread
One important thing if you are building a RSS application is that the server should support conditional requests (the If-Modified-Since header). This way, a client does not have to download the entire feed on every update. It simply sends the last update date with its request and the server returns an empty response if the feed is up to date.
There are some applications (for example YouTube) which dont support this, resulting in higher-than-necessery data usage, especially on mobile.
Comment on
Is Backblaze a reliable provider?
Reply in thread
You dont need a second computer, just replace the drive with an empty one.
Comment on
NASA Plus Streaming: "our new ad-free, no cost, family-friendly streaming service unlocks our Emmy award-winning live coverage, embeds you into our missions through new original video series"
Reply in thread
No, it is Notepad++ and it is called like that because it is written in C++.
Comment on
Jellyfin 10.9 Coming Soon!
Reply in thread
Just star the project on GitHub. They have a feed on the startpage where you'll get notified of releases.