mlemapp
Mlem for Lemmy CyberSeeker 4 months ago 100%
Crash while scrolling in feed

Hi all, The following post appears to crash my feed while scrolling: https://mander.xyz/post/13720820 It is a very long text post with some technicals, so possibly a parsing error in the text preview? Thanks! Worked around it by blocking the user temporarily.

12
1
cybersecurity Cybersecurity A root-server at the Internet’s core lost touch with its peers. We still don’t know why.
Jump
technology Technology On self-driving, Waymo is playing chess while Tesla plays checkers
Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearCY
    CyberSeeker
    4 months ago 0%

    So the article repeats, several times, “waymo relies on remote operators”. I don’t think the author knows what “self-driving” means.

    0
  • ukraine Ukraine Ukraine’s Usyk beats Fury to become undisputed heavyweight boxing world champion
    Jump
    cybersecurity cybersecurity Is it possible to use zero knowledge proofs to verify journalism sources?
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearCY
    CyberSeeker
    5 months ago 100%

    Possible? Yes. Likely? Not at all.

    To perform a zero knowledge proof, you’d have to have structured data to support the claim, which most whistleblowers would not have. If a whistleblower already had the hard evidence in hand, e.g., serial numbers and timestamps, they could have just provided those anonymously, and someone could follow up. The problem is, you can’t always get a copy of the hard evidence without revealing your intent to the employer, or at least, other employees.

    Presumably most whistleblowers are making unsubstantiated claims that something happened, or maybe with light evidence. Based on who they are, a journalist or investigator may then elect to follow up and dig up the hard evidence to support the claim. This requires revealing your name and position/relationship to at least one person. Rarely, they would be willing to put themselves out there to provide an affidavit under oath, which itself is not enough to pursue criminal charges (though it could help build a case around intent or willful neglect, or help support a warrant or discovery).

    It’s illegal, but not unheard of, to try to force journalists to reveal their sources, but the same protections are not universally in place if you reported a finding to a company’s internal affairs, for example. But unlike attorney-client privilege, or shield law protections, the risk in signing an affidavit is, as we’ve seen in recent US trials, that records will not stay sealed, and your name will be revealed to the defense and/or public.

    4
  • evs Electric Vehicles MG EXE181 electric hypercar can go 0-62 mph in 1.9 seconds
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearCY
    CyberSeeker
    5 months ago 100%

    The Model S Plaid, MG, Rimac Niverra, etc are increasingly limited by regulations more than anything. Quite literally, they are at the limits of rolling friction for street legal tires, which is why you’re not seeing a lot of variance at the top of the market.

    3
  • security Security A doubt in encryption
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearCY
    CyberSeeker
    5 months ago 100%

    For encryption, the client and server need to share their private keys.

    This is incorrect, for asymmetric (public-private) encryption. You never, ever share the private key, hence the name.

    The private key is only used on your system for local decryption (someone sent a message encrypted with your public key) or for digital signature (you sign a document with your private key, which can be validated by anyone with your public key).

    For the server, they are signing their handshake request with a certificate issued by a known certificate authority (aka, CA, a trusted third party). This prevents a man-in-the-middle attack, as long as you trust the CA.

    The current gap is in inconsistent implementation of Organization Validation/Extended Validation (OV/EV), where an issuer will first validate that domains are legitimate for a registered business. This is to help prevent phishing domains, who will be operating with TLS, but on a near-name match domain (www.app1e.com or www.apple.zip instead of www.apple.com). Even this isn’t perfect, as business names are typically only unique within the country/province/state that issues the business license, or needed to be enforced by trademark, so at the end of the day, you still need to put some trust in the CA.

    18
  • technology Technology Net neutrality is back as FCC votes to regulate internet providers
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearCY
    CyberSeeker
    5 months ago 76%

    So if ISPs are once again Title II common carriers, how can they enforce the TikTok ban? 🤔

    7
  • cooking Cooking I need to figure out how to prepare baby bok choy
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearCY
    CyberSeeker
    5 months ago 100%

    When are you adding the bok choy to your stir fry? I’d wager you’re over cooking it; try adding it much later to the cooking process. It should only take a minute or two at most to cook.

    The greens are also quite bitter, so possibly don’t use all of the leaf.

    9
  • technology Technology Unearthing APT44: Russia’s Notorious Cyber Sabotage Unit Sandworm
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearCY
    CyberSeeker
    5 months ago 100%

    What’s worrying about this report is that it’s coming from Google itself.

    Google just bought Mandiant, one of the leading cybersecurity and threat intelligence firms. Therefore, Google is one of the leading cybersecurity and threat intelligence firms.

    https://arstechnica.com/gadgets/2022/03/google-makes-second-largest-acquisition-ever-5-4-billion-for-mandiant/

    It’s now expected that Google would release this kind of report, seeing as they sell this as an enterprise service.

    Mandiant has previously released this type of report regularly; for instance, they were the firm that disclosed the SolarWinds hack.

    5
  • pulse_of_truth Pulse of Truth Microsoft will limit Exchange Online bulk emails to fight spam
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearCY
    CyberSeeker
    5 months ago 100%

    Probably a good change. Most legitimate bulk email messaging probably goes through a third party service already in your SPF record; surveymonkey, listserv, etc.

    3
  • cybersecurity Cybersecurity CISA Issues Emergency Directive After Midnight Blizzard Microsoft Hits
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearCY
    CyberSeeker
    5 months ago 92%

    For your last two questions, the counterpoint is, if even Microsoft can’t stop a dedicated nation state, how can any other major service provider say they haven’t been compromised?

    The standard now is, assume breach. While unfortunate, the industry average for MTTD is in months. Microsoft was at least good enough to detect it within six.

    Can Broadcom or Palo Alto say the same? Amazon, Google, Apple, Cisco?

    11
  • technology Technology Tesla is reportedly laying off ‘more than 10 percent’ of its workforce
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearCY
    CyberSeeker
    5 months ago 80%

    Agreed, the echo chamber is real on Reddit/Lemmy. Easy to hate on Elon, but people are acting as if the old men leading most other Fortune 100 companies think any differently than he does. You can find the rare exception, but you’ll have a hard time living in modern society without your money filtering up to a bigot somewhere.

    Elon just lacks the filter to keep himself from saying it.

    3
  • selfhosted Selfhosted Best resources to learn more about networking
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearCY
    CyberSeeker
    5 months ago 100%

    Don’t bother with the cert if it’s not your job, but at least look into CCNA Routing and Switching. There are tons of courses available, both in person and online, as well as numerous YouTube videos on the subject.

    See if your local library or community college has an adult education center that provides a course. At some point, you will need to learn subnetting, which is just math, but practice makes perfect, and your life is easier if you have it committed to memory.

    Proper written work is still one of the most effective ways to do this.

    7
  • technology Technology Fairbuds are Fairphone’s proof that we really could make better tiny gadgets
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearCY
    CyberSeeker
    5 months ago 100%

    Why do you think they all opposed right to repair?

    And specifically, right to open repair? They’ll happily send you a $600 TPM-locked biometric sensor, because they would control the market and ROI, but won’t let you buy a $90 alternative from someone else.

    4
  • firefox Firefox Are there any addons as essential as uBlockOrigin?
    Jump
    voyagerapp Voyager Cannot find kbin instances to block
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearCY
    CyberSeeker
    6 months ago 100%

    It doesn’t need to push upstream to your lemmy home instance; it could just be a local filter.

    2
  • technology Technology Citizen Lab: "Not only the Chinese government, but also US-based firms, are complicit in the political and religious censoring of content on China-accessible platforms"
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearCY
    CyberSeeker
    6 months ago 100%

    While true, it’s pretty asinine to hold companies operating in China accountable for complying with Chinese law. It sucks, but they aren’t just going to abandon the Chinese ~cash cow~ market.

    3
  • cybersecurity Cybersecurity Google now blocks spoofed emails for better phishing protection - Source: www.bleepingcomputer.com - CISO2CISO.COM & CYBER SECURITY GROUP
    Jump
    technology Technology New open source GPU is free to all — FuryGPU runs Quake at 60fps, supports modern Windows software
    Jump
    anticorporate Anti-Corporate Movement Reddit shares plunge almost 25% in two days, finish the week below first day close
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearCY
    CyberSeeker
    6 months ago 100%

    Frankly, surprised it was only that much of a drop.

    Earlier this week, Reddit disclosed in a corporate filing that CEO Steve Hoffman sold 500,000 shares, and Reddit COO Jennifer Wong also disclosed that she sold 514,000 shares.

    No, not a pump and dump at all! Totally confident in our ability to execute our fiduciary duties!

    73
  • steam Steam I'm mildly proud of how I categorise my games on Steam and interested to see others' methods
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearCY
    CyberSeeker
    6 months ago 100%

    The games in progress I mark as favorites, I have “Finished” and “Play Next” categories, and I have a big dump category called “Won’t Play”.

    Aside from that, I have some big categories for collections of old games from humble bundles and steam sales, like legacy Myst, Wizardry, or Sierra games, or like Star Wars game collections.

    3
  • news News First Human Patient to Receive a Neuralink Brain Implant Used it to Stay Up All Night Playing Civilization 6
    Jump
    technology Technology Twelve years after the death of Steve Jobs, the cracks are starting to appear at Apple
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearCY
    CyberSeeker
    6 months ago 100%

    NeXT was a mediocre BSD front end and a few interesting Objective-C libraries. Apple’s board of directors pretty much crawled back to Jobs hat in hand after the disasters of Sculley and Spindler.

    15
  • technology Technology Spotting Visual Signs of Gentrification at Scale
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearCY
    CyberSeeker
    6 months ago 100%

    Or, the real sign of gentrification is that the Google Maps car drives by your neighborhood more than once every five years. Guarantee that’s not happening in the projects.

    11
  • technology Technology US sues Apple for illegal monopoly over smartphones
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearCY
    CyberSeeker
    6 months ago 66%

    antitrust law does not regard as illegal the mere possession of monopoly power where it is the product of superior skill, foresight, or industry

    United States v. Grinnell Corp. (1966).

    A market share of ninety percent "is enough to constitute a monopoly; it is doubtful whether sixty or sixty-four percent would be enough; and certainly thirty-three per cent is not.

    United States v. Aluminum Co. of America (1945)

    7
  • buildapc Build a PC Will I need a new PSU for a GPU upgrade?
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearCY
    CyberSeeker
    6 months ago 100%

    The 7800XT (263W) has over 100W higher TDP than the 2060 (160W). It ultimately comes down to what other components you have, but you will be pushing the ceiling on a 650W PSU with the 5800X (105W).

    You are under the limit based on TDP, but during peak loads, may not have enough overhead to not reduce the life of your components. That said, if you have fewer than 4 DIMMs of RAM, and only M.2 SSD storage, you are probably fine.

    Let’s round up and say 75W for Mobo, 32W for RAM, 10W for storage, and 5W for LEDs, you come out right at 500W. Add 20% for thermal overhead, and you’ve got 600W. Very close, but should barely be stable.

    This assumes a reference GPU. An OC edition could easily blow this calculation, but do your own math.

    Definitively, buy a kill-o-watt, fire up a CPU+GPU stress test, and measure power draw at the wall. Add 100-200W to account for the new card, and see if it exceeds 650W.

    3
  • games Games Hades - Available Now on iPhone and iPad
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearCY
    CyberSeeker
    6 months ago 100%

    I was beyond disappointed to see this. I have limited time to fire up my PC at home, so was looking forward to being able to finally play this game, on mobile, during travel.

    1
  • pulse_of_truth Pulse of Truth Dell tells remote workers that they won’t be eligible for promotion
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearCY
    CyberSeeker
    6 months ago 100%

    This is really not the incentive their leadership thinks it is. The top performers absolutely will be eligible for promotion… just not at Dell.

    4
  • technology Technology Grok-1 chatbot code released – open source or open Pandora's box?
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearCY
    CyberSeeker
    6 months ago 95%

    Who cares if the code is open source, or pre-training weights are released? Virtually every Masters in CS student in 2024 is building this from scratch. The differentiator is the training dataset, or at worst, the weights after fine tuning the model.

    18
  • evs Electric Vehicles CATL, the little-known Chinese battery maker that has the US worried
    Jump
    evs Electric Vehicles CATL, the little-known Chinese battery maker that has the US worried
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearCY
    CyberSeeker
    6 months ago 100%

    Which is a trade violation for WTO members.

    Curious to hear more about this. Are you saying subsidized products cannot be sold on the international market? Wouldn’t creative accounting solve this, e.g., buy saying that the subsidized portion is only available domestically, which reduces demand globally, thus lowering prices?

    2
  • personalfinance Personal Finance What are "complicated" taxes that require a professional? (USA)
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearCY
    CyberSeeker
    6 months ago 100%

    How diverse is your investment portfolio? How many different stocks and securities have you sold last year? Were these subject to short term or long term capital gains? Did you rebuy any of those, making the security subject to the wash rule?

    If you have a family, a house, multiple W-2s, 1099s, a retirement account, and a 529, things are still pretty “simple”. TurboTax does not let you use their free file if you’ve traded stocks, but for most other products, even some low volume trading in a brokerage account is considered fairly standard.

    At the end of the day, it comes down to how organized you are, and how much time it will take you to do data entry. Usually, your tax documents have clear headers, and usually, these match up to the fields in the tax application. But not always, and the more documents you have, the more hours it will take, and the more likely you are to run into a speed bump that will cause frustration.

    So, how much is your time worth to you? If it’s worth more to you than the cost of a tax professional, it’s an easy decision.

    6
  • selfhosted Selfhosted What's the deal with Docker?
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearCY
    CyberSeeker
    6 months ago 100%

    Sorry if I’m about 10 years behind Linux development, but how does Docker compare with the latest FlatPak trend in application distribution? How you have described it sounds somewhat similar, outside of also getting segmented access to data and networks.

    2
  • technology Technology You guys should check out the reddit clone I've been working on
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearCY
    CyberSeeker
    7 months ago 100%

    Reddit is not a “big corporation”.

    How big is big? They’re working on a 6.5 billion dollar valuation. Sure, that’s not S&P 500, but that’s not your mom and pop coffee shop.

    https://www.cnbc.com/2024/03/01/reddit-seeking-a-valuation-of-up-to-6point5-billion-in-ipo.html

    7
  • technology Technology You guys should check out the reddit clone I've been working on
    Jump
    games Games Capcom announces salary increase for all employees this year
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearCY
    CyberSeeker
    7 months ago 100%

    For what country?

    In the US, at least, the long term average is 3.10%, including the post-1913 Great Depression and the Oil Crisis/Great Inflation of the 1970s. From 1990-2020, the average has been 2.2%, just slightly worse than the stated goal of current US economic policy, which is to maintain long term inflation at a rate of 2%.

    Meaning, 3% beats inflation significantly more than half of the time, especially since 1990.

    8
  • politics politics House passes $460 billion government funding deal, temporarily dodging shutdown
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearCY
    CyberSeeker
    7 months ago 100%

    This is a full funding plan, for the rest of the fiscal year, for six out of the twelve required funding bills.

    5
  • news News NY Gov. Kathy Hochul sending National Guard members to New York City subways to combat ongoing crime
    Jump
  • "Initials" by "Florian Körner", licensed under "CC0 1.0". / Remix of the original. - Created with dicebear.comInitialsFlorian Körnerhttps://github.com/dicebear/dicebearCY
    CyberSeeker
    7 months ago 100%

    Not cheaper. More likely there is budget available for National Guard resources and things like anti-terror, disaster relief, etc., as opposed to next to nothing for infrastructure improvements and staffing.

    6