Spyke

Replies

europe

Comment on

In bid to curb immigration, France to scrap birthright citizenship in Indian Ocean island of Mayotte

Reply in thread

It's true that this is coming from the right-wing french politicians. But it has nothing to do with immigration to mainland France though (read the article).

The situation in Mayotte is explosive: only a third of the adult population has a job, and 34% are registered as unemployed. You also have one inhabitant out of two coming from abroad. You have shanty towns growing everywhere. And in the past years, there has been a surge in violence between gangs, kidnappings etc... causing some inhabitants to install roadblocks in protest against the governement inaction. It's effectively blocking the island, along with its economy, worsening the problem..

This looks like a desperate attempt to please the pissed locals to lift the roadblocks. So calling that a move to make sure the island's inhabitants don't go to mainland France is cliché and missing the whole context. This does not make the decision less controversial though. Nor useful...

privacy

Comment on

Cryptographers Just Got Closer to Enabling Fully Private Internet Searches

Reply in thread

Actually, to make it with cryptographic guarantees is pretty hard... I know of at least one university professor in the PET (Privacy Enhancing Technologies)/cryptography space who spent quite some time on his startup to develop such a search engine. In the end it all fell apart because of one the mathematical assumptions being unprovable. This is just one example but I guess it illustrates pretty well why we've yet to see a cryptographically secure/private search engine as a product!

europe

Comment on

In bid to curb immigration, France to scrap birthright citizenship in Indian Ocean island of Mayotte

Reply in thread

Mayotte's is part of overseas France, so I guess you are talking about mainland France?

So yes it may be the case for some of the island inhabitants, who as French citizens can travel to mainland France. Surely and understandbly some do, but reading the press this isn't really part of the debate. At the same time, these citizens are also the ones installing the roadblocks and demanding these changes. Mayotte is also the French department where Le Pen's right-wing party got the highest score (42.68%!) during the presidential 1st turn, so that's not entirely surprising.

My point being, putting it under the scope of "this is mainland France government who wants to discourage immigration to mainland France" is wrong. A more accurate summary could be "this is mainland France governement giving in to demands of Mayotte inhabitants to discourage immigration to Mayotte".

france

Comment on

Quelles bonnes idées ou pratiques avez-vous observés à l'étranger et qui n'ont pas encore été adoptées en France ?"

Je suis fasciné par les prises électriques Suisse. Bien plus compactes que les nôtres, ils t'en mettent 3 sur un mur quand on n'en met qu'une, et ça change la vie !

Sinon dans la catégorie transports:

  • en Suisse tu peux payer pour ton trajet sur une seule app, tous les réseaux des villes/trains etc sont reliés.. T'as même des téléphériques !
  • dans la même veine, tu peux dans l'app de transport, "badger" au début et à la fin de ton trajet, et il te facture automatiquement en fonction de tes abonnements etc..
  • plus une plainte qu'autre chose, je ne comprends toujours pas pourquoi à Paris tu ne peux pas utiliser la CB pour badger à l'entrée et à la sortie de tes trajets. La majorité des capitales que j'ai pu visiter ont ça, pour le tourisme c'est un grand plus !

Comment on

Malicious PyPI Package "automslc" Enables 104K+ Unauthorized Deezer Music Downloads

Reply in thread

I agree the article isn't super clear. Reading it twice, it seems that the user credentials are exfiltrated to the C2 server (only the screenshot implies it), which definitely would be malicious.

Also a possible interpretation could be that the package advertised "just" some automations (e.g. export playlists to m3u?) and getting music metadata, whereas it was actually downloading musics locally unbeknownst to the user. Then exfiltrating the music back to the C2 server, effectively using the package's users to mass pirate musics without exposing the pirates directly. That would indeed be malicious, especially if the package did not advertise any content downloading.

But for the last paragraph I'm extrapolating on the few info this article gives without making much sense..

EDIT: from the original article here https://socket.dev/blog/malicious-pypi-package-exploits-deezer-api-for-coordinated-music-piracy it does not seem that the musics are downloaded on the user systems then extracted to the C2 server, but rather all that's necessary to build the download urls, including tokens tied to the victims' account.

Comment on

Lemmy users what are some things translators do that absolutely infuriate you ?

Reply in thread

We have the same principle in French with (so learning Ihr in German was easier!), but frankly this is a reason why I prefer working in an english professional setting. Some people, generally older, get offended if you ever use the 'du' with them. But some others will want to look shill/younger and will get offended or mock you if you use 'du' with them. So yeah, using "you" to talk to the queen, my boomer customer or my nephew makes it so much easier!

Comment on

Authelia Docker Image outdated?

There hasn't been any release since a year either, the last one being 4.37.5 https://github.com/authelia/authelia/releases

But you can have a look at the github milestones, 4.38.0 is in the work and hopefully will be released sooner than later https://github.com/authelia/authelia/milestone/17

Regarding security: a quick browsing in the project's issues, filtering by area:security did not show any flaws being reported since the last release. But there may have been undisclosed vulnerabilities the project's dev are working on fixing for the next version. My personal non-professional non-legally-binding opinion is that it looks fine, so I do keep it running on my server.