HN user
What I meant was, you are cloud-hosting (assuming not CE) the part where the non-anonymised PII is sent to [as opposed to sanitised coming out of] and processing it; and in addition the only provider supported is one subject to https://en.wikipedia.org/wiki/CLOUD_Act
I'd be interested when that happens. Not a fan of CF/lambda-only, prefer cloud agnostic deployment possibilities.
Have you gotten any legal review re: GDPR or passing user analytic data through a proxy in a non-EU area?
Is there a way I can host CE on Docker, Serverless, or similar without AWS's "infinite cost" model?
Is there an easy way to deploy this to my own infrastructure, possibly via k8s or docker containers - no aws?
If you wish to use my music for commercial purposes (online advertisements, podcasts etc), you will need to purchase a license
This clearly makes it not CC-BY. Maybe CC BY NC?
They should get absolutely nothing at all until after payment, what the fuck.
eBay practically permanently bans everyone involved if you dare take conversation offsite on normal items.
HTML5 geolocation if you ever click allow even one time can granularly identify location based on where you are. It sends nearby MAC and correlates this to wardriving-equivalent scans. You do not need to be connected to wifi.
My non-invasive way for basic security - nothing sent to third parties at all; no blocking of VPNs other than the usual anti-bruteforce stuff:
- GeoIP server side; trigger MFA (email a confirmation code) if country mismatch. Anything less is too granular unless you have some good reason for it, people moved to cheaper places during the pandemic, mobile connections geo horribly wrong when NATed
- Drop a random unique cookie (long-lasting) on the client; if this cookie is not present and valid/signed prompt for MFA
- Give the user an opportunity to revoke all logged in sessions
Yes, but only you can access them and it will take several hours.
Here: https://support.mozilla.org/en-US/kb/share-your-camera-or-sc...
It is a pliable in-game object, you can throw someone's screen, resize it, etc.
It works well past 10 users on very high powered mobile. Less so on cheap phones.
It's really more that you are spraying high volume websocket and webrtc data continuously while doing realtime 3D/WebGL - you are practically running a full game at this point.
The sellers are usually $1.99-2.99 for this.
99%+ of them are all terrible. Think jQuery 1 written in 2020 with hundreds of useless includes, over 50 web fonts loaded simultaneously to frontload on the feature list while providing nothing of value.
Are ODOH resolvers by any disjoint partner available yet? The only one I see is the CF-owned and run one.
Discord already doesn't need geoip, since they just direct you at wherever the server location (that you chose) is
CSGO relatively heavily suppresses "user maintained" community servers, the entire experience from onboarding to client launch prioritses the Valve-run official matchmade servers for casual/competitive/etc and any special game modes.
Server browser is a hidden afterthought behind a dropdown.
Not parent, but have seen this before, or some competitor/pissed off outed person/partner in crime/etc hands it to anticheat team.
Private cheats usually require being vouched in, sometimes with ID scans, sometimes physically shipping you hardware.
I appreciate that you are trying to do this with respect and hope you succeed.
I've done both sides (largely MMO-stuff as a kid), and for me, I'm done dealing with all this invasive garbage, and just spin up a fresh EC2 GPU instance when I want to play something, and simply don't play the games that choose to disrespect and abuse players to the point of not even allowing GPU passthrough (I can somewhat understand banning emulated GPUs; have dealt with people farming referral accounts a hundred at a time each queuing for games at <5 FPS).
I'm guessing this is a mix of attestation and inspecting what they actually do instead of just blindly checking the certificate and that the signature is verified? I'm curious how well executed that works when it comes to less well behaved anticheats (like Riot's Vanguard generally stays hands off, but GameGuard will immediately heartbeat a "ban me" and intentionally cause a bluescreen to cause you to "lose any data collected by your debugger" when it notices it's being looked at).
This type of BS is super common in Asian countries/published MMOs and a bit less acceptable in the west (you still have EAC and battleye, but at least they make an attempt to use TLS?)
Another insane example: xigncode has long since advertised a feature that the game developers can remote control into your PC like VNC. I don't know whether any developer has chosen to actually enable it, but the fact that they push it as a feature is some serious clown-egg-face.
I'm going to point out that if you want to go down this route, it is insufficient to just check that the base drivers are untampered with and signed by Microsoft or whatever vendor still.
You now maintain a list of potentially vulnerable drivers that can be used as a jumping off point (such as virtually every motherboard RGB or fan control system), and ban users that have these or hard-disable them at boot. There are some games that have caused machines to overheat by disabling cheat-jumpoffable fan controllers.
On top of that, you effectively have to maintain a whitelist of acceptable drivers, because cheat vendors are registering limited companies by the thousands (only $20 in the UK), getting an EV/codesigning cert, and signing their own drivers. Higher end cheats cost enough to offset this, and there might be less than 5-6 people using a particular certificate. Some of the people behind these also release vaguely-useful legal tools signed with the same certificates to get a large install base for them so they don't stick out.
That being said, IMO as a player, this is invasive as hell, and you should not be crawling through my flash drives, identifying my mouse, killing LogitechMacroSoftware.exe, etc. I'd rather you just collect snap/targetting/click timings server-side and run anomaly analysis on those rather than digging an asshole into my computer.
Also, now I have 5 different "kernel anticheats" running 24/7 simultaneously, half of them are horrifically written and known-insecure, and the other half need to figure out how to not explode spectacularly when the broken half tries to probe and kill it.
Korean MMOs are particularly bad for this and when forcefully uninstalled might permanently destroy disk access, make Windows non-genuine and deactivate it, and send all their data over plaintext (no TLS) with a bizarre, homegrown "encryption" method that is trivially breakable to a bare IP somewhere.
With KMMOs as an example (many of these reward you for staying logged in, have daily rewards, and similar; the game itself is fairly low resource when minimised), GameGuard and HackShield and XIGNCODE constantly have slap-fights where they bluescreen or flop over or die if you try to run multiple of them simultaneously and they try probing and killing each others' services for trying to tamper with themselves. It's like that ridiculous "what happens if three programs all try to demand Always On Top for their window", except give all of them heavy weaponry. These also have severe NIH syndrome for things like homemade shitty crypto and plaintext everything.
Yes, this is the big problem. Indie games usually run just fine in wine and don't do anything too advanced and just work out of the box; your biggest problem is probably going to be them installing stuff into weird places or directly onto C:\gamename.
The rootkit, driver signing enforcement, driver ACLing of anything it doesn't like, vulnerable drivers, all forms of emulation detection, failing any of those = permanent ban is a whole other problem.
Many desktop apps behave this way, yes. Anything from a major tech co should at least
I do need a significant amount of cooling when doing GPU-heavy things.
The slide is just as, if not more invasive as recaptcha in terms of privacy, cross-site tracking and fingerprinting.
openapi/swagger
After initial sideloading of the new firmware (unsupported IIRC, you're on your own), you can grab the RTSP credentials and disconnect the camera entirely. It is usable as an offline IP camera after that. No cloud, just give it LAN access only.
Before this there was no non-proprietary way to access.
There are unmarked affiliate links in this oddly disorganised list.
my assumption was the first and last letters of their brand
for 3, this is normal, tiktok sends everybody a lot of sexualised content