Scion9066 · HackerTrans

il y a 5 moisdiscuss

I just provided a more direct link but yeah it is just proposed at this point. The age assurance part appears to be substantially similar (very similar verbiage) to the bills that have already passed in California and Colorado though so I guess we'll see it again in a few weeks or months at this point.

Scion9066

il y a 7 moisdiscuss

There's already models specifically for things like identifying players in Counter-Strike 2, including which team they're on.

Someone has even rigged up a system like that to a TENS system to stimulate the nerves in their arm and hand to move the mouse in the correct direction and fire when the crosshair is over the enemy.

We are definitely already there.

Scion9066

il y a 8 moisdiscuss

There are some things regular distros can't/shouldn't do, like including codecs still under patents, matching proprietary Nvidia drivers with the correct kernel version, proprietary firmware for game controller adapters, the launching of Steam Big Picture mode as the default UI, etc.

Scion9066

il y a 9 moisdiscuss

I believe it's: sanm LucasArts SANM/SMUSH video

Scion9066

il y a 9 moisdiscuss

Popped in that context means hacked. Like in the same usage of pop in "popping a shell".

I do not think he meant it as any kind of physical/death threat.

Scion9066

il y a 9 moisdiscuss

The domain that the verifier (the site trying to authenticate you) is at is part of the cryptographic process. If the domain doesn't match (ie you're at a phishing site) then the results of the cryptography won't be valid for the actual correct site, only the phishing site (which gets the phishing site nothing it can use).

Scion9066

il y a 10 moisdiscuss

It's been supported by qBittorrent since 4.4.0 released in January 2022 when built with libtorrent 2.0. The official docker images still use libtorrent 1.2 though as that is the default.

Probably not a dealbreaker for most but it might be hindering Bittorrent v2 adoption.

Scion9066

il y a 10 moisdiscuss

qBittorrent put out version 5.1.2 over 2 months ago:

  > Wed Jul 02nd 2025 - qBittorrent v5.1.2 release
  > [...]
  > qBittorrent v5.1.2 was released.
  > SECURITY: It contains security fixes for the WebAPI, Rss and Search modules.

Scion9066

il y a 10 moisdiscuss

Lack of a tagged stable/release version with libtorrent 2.0 for one.

Scion9066

il y a 11 moisdiscuss

ID.me is actually a private company.

The US government does have login.gov though.

Scion9066

l’année dernièrediscuss

Bluesky feeds are still server-side (due to needing to process all of the available posts to generate the feed) but at least you can choose which ones to use and people can make their own, which is an improvement over a single app-provided algorithmic feed.

Scion9066

l’année dernièrediscuss

The distro package in question here is a Fedora-specific Flatpak, not the Fedora-specific RPM distro package version. From my understanding, it is missing things like patented codecs which then causes bug reports to be filed with upstream, OBS, instead of the ones responsible for the package, Fedora.

Fedora has its own Flatpak repo as the default instead of Flathub (which has the official OBS package from the upstream developers).

Scion9066

il y a 2 ansdiscuss

That's if he had gone with the delay mechanism built into the law if there was a plan to sell it in the works. This is just ignoring the law.

Scion9066

il y a 2 ansdiscuss

I think their point was that it's less phishable from the perspective of needing the attacker to try logging into the site with it in realtime instead of being able to just store the password for some later time. The needed concurrency makes it more difficult (if only slightly).

I'm curious though why you don't think TOTP or similar are good against credential stuffing though, would you be able to expand upon that?

Scion9066

il y a 2 ansdiscuss

From my understanding, it didn't scan all of the files on the device, just the files that were getting uploaded to Apple's iCloud. It was set up to scan the photos on the device because the files were encrypted before they were sent to the cloud and Apple couldn't access the contents but still wanted to try to make sure that their cloud wasn't storing anything that matched various hashes for bad content.

If you never uploaded those files to the cloud, the scanning wouldn't catch any files that are only local.

Scion9066

il y a 2 ansdiscuss

A law by the government requiring proactive scanning of photos would in fact make the whole situation worse in the US because there would need to be a warrant if the government is requiring the scan. As long as it's voluntary by the company and not coerced by the government, they can proactively scan.

Scion9066

il y a 2 ansdiscuss

A passkey is a synced, discoverable WebAuthn credential. While many implementations protect the private keys with additional security measures like secure enclaves or TPMs, it's not required. If you want to use an implementation that doesn't use those types of lock-ins, even when they're there to protect your credentials, you can. Multiple software-only implementations exist.

comments