DarthYoshiBoy

joined 1 year ago
[–] [email protected] 4 points 1 month ago* (last edited 1 month ago)

I assume this is a Stargate thing and that there aren't actually that many Skeptical Guide podcasts out there.

I haven't got any dog in the Stargate fight, I've seen the original movie (good) and watched the Richard Dean Anderson TV series (better than the movie) for a while before it just fell off my radar? I'll take your word for it that Stargate Universe is the lesser of the Stargate properties.

SGU in my comment obviously is referring to the Skeptics Guide to the Universe aka, the linked podcast.

[–] [email protected] 4 points 1 month ago* (last edited 1 month ago) (1 children)

If you use a fancy official VPN client from Mullvad, PIA, etc, you won’t need this since most clients already have a kill switch built in (also called Lockdown Mode in Mullvad).

According to the researchers...

The result of this is the user transmits packets that are never encrypted by a VPN, and an attacker can snoop their traffic. We are using the term decloaking to refer to this effect. Importantly, the VPN control channel is maintained so features such as kill switches are never tripped, and users continue to show as connected to a VPN in all the cases we’ve observed.

Killswitches are insufficient protection since the TunnelVision attack never disables the VPN tunnel. The TunnelVision attackers are instructing your physical layer connection to route everything through a node of their choosing rather than killing your VPN connection, and since the VPN connection never drops, a killswitch will never engage. The VPN stays up, thinking it is doing a good job, but in the meantime your network interface has been instructed to route no traffic through the VPN and instead route everything to the location of the attacker's choosing. I have heard that a couple of VPNs think their clients are not vulnerable here, but I haven't seen independent conclusive proof one way or the other yet.

I suspect that your "Solution" also fails to mitigate the issues in TunnelVision because it allows LAN access to the physical interface. In a TunnelVision attack the hostile has to be on your LAN (or rather the same LAN you are on since I suspect that "The coffee shop wi-fi" is the more likely network for an attack like this) already, so if they're going to tell your interface to route traffic somewhere else, in all likelihood that somewhere else will already be in the same LAN you are and their exfiltration will be allowed under your configuration.

[–] [email protected] 5 points 1 month ago

In today's earnings call, EA CEO Andrew Wilson says he has been playing the next Battlefield game with the development team and it will be a "tremendous live service."

"a tremendous live service" said Wilson, "...but a fairly terrible gaming experience." 😁

Honestly, I think he may be right with his statement in so much as he was using Webster's second definition for tremendous.

[–] [email protected] 3 points 1 month ago (2 children)

I've never listened to Rogan*, but I think https://www.theskepticsguide.org/podcasts does an excellent job of talking about current news and science items in an easily digestible format that mostly avoids bullshit while probably filling the same gee-whiz niche that people expect from Rogan? It's a panel, so not a single muscular male host, but I think if your sibling is pursuing Rogan because they think it's helping expose them to new interesting ideas, SGU is a vastly superior route to that end.


*I actually think my only Rogan exposure has been the SGU talking about how he more or less just believes the last thing anyone told him, whatever that might be, which seems... less good?

[–] [email protected] 12 points 2 months ago

The best that the SMS protocol can tell you is whether the message was delivered and even that isn't a requirement. SMS has delivery receipts, it does not have read receipts.

[–] [email protected] 5 points 2 months ago

https://www.patreon.com/Orioto

Might just be a me thing, but this guy puts out a new wallpaper almost every week and they're all amazing. The higher tiers allow you to participate in choosing the next wallpaper, but they're mostly for 1080p, 1440p, and 2160p. Buying in once gets you the whole lot of everything he's done until now.

[–] [email protected] 1 points 2 months ago

No offense to the creators, but the art styles being employed here are wholly inconsistent. I'm certain that there is a load of hard work going into this, but it just seems like one of those Skyrim ENB packs where mods from all sorts of various sources have been thrown together and each of them has a different aesthetic ideal driving them so the end result is a presentation that has really high production quality, but it has like 60 really high production qualities and they don't congeal into a cohesive whole.

All the best regardless, but the DMCA fairy is probably going to leave a letter for them soon. The first rule of Nintendo Fan Remake Club is that you don't talk about Nintendo Fan Remake Club until after you've got a finished product up as a Torrent.

[–] [email protected] 1 points 2 months ago

I don’t have a problem with people who are okay with it getting it.

My apologies if I implied that you did, that was not my intent.

But they aren’t really an alternative to, say, YouTube. [...] I just would prefer to pay for them with money rather than with data.

Sorry, that was my point though, without the tracking, you're not getting YouTube, or most of Google's services as we know them. The Google secret sauce is that they know enough about their users to curate an experience per user. That's largely why competitors to Google services rarely take off, the competitors lack enough individual user knowledge to make an experience that is better than what Google can offer for most users.

The services more or less are what they are because of the breadth of what and how Google knows to shape the experience for an individual, and that's why Workspace accounts still track what they do. Google would be providing their paying customers with a lesser experience if they genericized everything you're interacting with in those content related services due to a lack of learned data and behaviors per user. Which is probably not what the average user wants if I had to guess?

Heck, even paid YouTube Premium still needs your tracking data or it's just going to show you whatever popular rage bait is trending day to day with the general public? Or maybe just an unfiltered firehose of all the hours of nonsense that is uploaded every minute to the platform? I guess you could treat it as a whitebox video hosting site, but where does the money come from if YouTube can't make guarantees to advertisers that their ads will be seen by people who might care about the ad, and how do the content creators make money if YouTube can't get advertisers on board, and who is making interesting content if they have to pay to host it themselves because advertisers aren't paying that cost for them? I think my point is that if you pull the tracking and user knowledge out of the Jenga tower, the whole thing just crashes down.

[–] [email protected] -2 points 2 months ago (2 children)

I actually consider the tracking of my browsing/watching history to be integral to the search experience. It's why when I search for Python, I get results about the programming language and not snakes both in Search and YouTube. Or why Commodore gets me the computer and not naval crap. Or any number of other things that steer their search results towards things in my interests and away from junk I don't care about.

An ad blocker in my browser keeps anything else they're targeting at me through their scraping out of my hair while also blocking a load of what they might learn about me from third party sites, so I'm not terribly bothered what they think they know about me, they're not getting access to the bulk of the stuff I'd consider personal, and the junk they do track is kept so that they can get me results that will matter to me instead of generic crap.

I think there's a general misunderstanding that Google tracks stuff so that they can sell it, when the reality is that they keep it so they know where to target ads (that I never see) and so that they can provide results relevant to my interests so I'll keep coming back to (not) see ads. They don't sell the info they collect, they sell people the ability to run ads against that info. If they were selling the info itself, they'd be killing the golden goose. So long as they're contractually not allowed to look at my mail and files, I'm good with the rest of what they take because it 100% goes into making a better experience for me using their services so long as I'm running Firefox/uBlock.

That said, if you don't want tracking being used to improve your search experience, a Workspace account indeed won't get you 100% away from it. I tried using DDG for a while and I just couldn't hang with it. Its lacking the little dossier that Google has on me made it so that I constantly had to work harder to find what I wanted vs a quick search on Google, and that's what you'd get without the tracking and info collection. It wasn't worth the tradeoff for me, maybe it is for you though?

[–] [email protected] -2 points 2 months ago (5 children)

if I could pay a privacy fee to Alphabet and not be logged and data-mined, I’d do that.

It's called Google Workspace and it's decently nice. You can get a basic business starter account for something like ~$7 per month/per user + whatever you want to pay to register a domain each year. Takes a little bit of know how and you need to do some lifting for yourself that Google would otherwise shoulder for you, but it's pretty nice and has more benefits beyond just the privacy implications, like 30GB of account storage and Google Meet conferencing for up to 100 people without time limits. On the downside, some stuff that needs to track your usage to function properly (Like YouTube video recommendations) just do not work with a Workspace account because they don't track your preferences so they don't have a way to build a recommendation profile for you.

I've been doing it for years now and I appreciate it a lot. In the rare instances when I need to go do something on my old Gmail account it's shocking every time how bad the unpaid versions of Google products have gotten.

[–] [email protected] 1 points 2 months ago

Happened today, and for those with governments that actually regulate (the EU) his AltStore is also up.

[–] [email protected] 3 points 2 months ago

I am so glad, that there is no chance of ever meeting one in my country

Lucky 😆

view more: ‹ prev next ›