• 0 Posts
  • 170 Comments
Joined 1 year ago
cake
Cake day: July 10th, 2023

help-circle

  • A lot of this is a game of probabilities, which I don’t really think we have.

    For instance if a normal human driver, without any automation, can prevent 80% of dangerous situations, but the automation can only prevent 50%, and in those situations the human savety driver can prevent only another 50%, because of inattention, this results in just 75% of dangerous situations prevented and the automation is worse.

    Maybe someone knows the real probabilities, I don’t.



  • I get the sentiment, but in this time and age and with the internet, I think the information most likely to be at risk of being destroyed or censored is the one that is not commonly available, or in the hands of law enforcement.

    A fascist government will more likely effectively prevent creation of new dissenting works, than suppressing existing ones.


  • One notable software business professional interviewed by RBC thought that the West’s decision would “adversely affect the life of the developer community, mutual trust within it, and therefore the quality of the product.”

    It was Russia and other autocracies etc. that diminished the trust by actually financing developers for multiple years to first earn trust and finally introduce backdoors into open source software, as demonstrated by the XZ utils backdoor.

    In open source projects, maintainers need to have some initial trust into each contributor, and let this trust naturally grow with time and contributions. They cannot perform intensive background checks on everyone before accepting a patch.

    While it is easier to uncover backdoors in open source software, there is no good way to defend and prevent against this kind of attack in this type of development process. All open source projects can do is trying to take away some trust from people within higher risk groups. This of course might lead to discrimination.



  • The best “server-side” anti cheat mechanisms online is streaming the game, and I am sure that eventually some talented developers are able to even write some aim bot (or more) for that.

    Competitive games need a fully controlled environment. Doing it online with random unknown people should not be taken as serious as they currently do.

    Alot about video games is not standardized. To be competitive all players should have the same hardware, internet connection, etc. So that it is actually individual skill that is measured, not just the size of players wallet.

    But even then, developing skill takes alot of practice and time, which also, in our current system, can be converted into money. There just is no fair competition here anyway. Still many people believe in meritocracies…




  • Which other trustworthy search engines are there? And I don’t mean some different frontend or a meta search engine like ddg, sp, kagi, searx(ng), etc… that mostly just use googles, bings or even yandex and beidu results?

    Ages ago I configured and hosted yacy for myself, but that was a different time… Are there any real alternatives? With mayor internet companies like cloudflare, social media sites and many others restricting the access to the net and information, searching becomes more and more impossible if you aren’t a huge corporation…


  • The problem is EAs business model for this game. It is free to pay, so EA need to extract money otherwise. They introduce some gamified resource collection and crafting with exponentially rising costs, etc. And hope that gamers circumvent that by buying stuff with real money. Now players don’t all want or can’t do that, and look for alternative solutions.

    So EAs business model drives people to cheat. To cheat them primarily and other players secondarily.

    And because of their business model, they cannot solve the cheating between players by giving them dedicated servers or just let them P2P match, because they would loose control over them and their ability to extract more money.



  • Together with secure boot and your own signing keys, it could be a good way to en/decrypt the a dm-verity secured read-only rootfs. But for the home partition I would probably still want to enter my own decryption key, maybe via systemd-homed. From there you can update the kernel/initramfs and read-only rootfs image and sign them for the next boot.

    This is complicated to set up. Otherwise maybe use TPM as a 2FA, so you still have to enter a pin?








  • So you meant to say:

    I would go as far as to say that Bitwarden’s main competitive advantage and differentiation is that it’s source is available.

    That is not true, there are a lot of other password management software out there where the client source code is either open source or source available. For instance keyguard: https://github.com/AChep/keyguard-app?tab=License-1-ov-file#readme which is an alternative proprietary bitwarden client, where the source is also available. Also the Proton Pass client is under GPLv3.

    I would argue that the main advantage of bitwarden compared to others is that it is open source and has an open source server for self-hosting (vaultwarden). Which of course makes it difficult in terms of business strategy with their VC funding. But maybe becoming a non-profit org and getting money from donors, the strategic funds of EU and other governments, etc. might be an alternative way.