mzajc

Curiously enough, .me's whois record does not list Identity Digital as a contact (as seems to be standard practice with externally-managed ccTLDs, such as .gi), and .me is not listed on Identity Digital's "TLD Portfolio"[0]

On the other hand, all of their infrastructure (registry websites, nameservers, whois server) are hosted on Identity Digital, Godaddy, and Afilias IPs. Does anyone know what the relationship between .me and Identity Digital is?

[0] https://identity.digital/tld-portfolio

This is just an advertisement.

This is great, thanks for the correction! I tried resolving dnssec-failed.org and it does indeed fail with EDE 6 (DNSSEC Bogus). I'm not sure why this hasn't been updated on the info page[0] yet, given that the change is about three months old.

[0] https://quad9.net/service/service-addresses-and-features/

Be cautious with Quad9; their main address (9.9.9.9) has a "malware" blacklist that has misfired several times already: twice for a private torrent tracker, once for gist.github.com, issue was resolved within minutes to hours. They have a non-filtered address (9.9.9.10), but it doesn't do DNSSEC verification. IMO they're too unreliable to be worth the hassle.

"Rent for 48h", and... "Rent until we say the time is up"?

The clause you cited as well as the "Termination" section and the non-commercial restriction make it a non-free license. Besides the direct issues with that, it also means all software covered by this license is unsuitable for FOSS-only distributions like Debian or F-Droid. It's not entirely clear to me if the license is copyleft; derivative works have similar problems if so.

As an aside, Eron Wolf, the billionaire behind FUTO, has some rather... out of touch views[0] on the meaning of open source, and seems very committed to diluting the term to mean something closer source-available by removing the most of the rights granted (as defined by FSF, OSI, DFSG and others).

[0] https://gitlab.futo.org/eron/public/-/wikis/Thoughts-on-Open... - please keep in mind that the RMS quote at the top is taken out of context; he is arguing for more freedom, not less

If the website sees (and possibly stores) the e-mail address, and the government or another party knows who it belongs to, the scheme is anything but privacy-preserving.

I encourage people to read through his proposed WikiProject's page[0] and the related discussion.[1] Important context is also that WikiProjects are exempt from canvassing rules; members are free to notify each other of ongoing policy discussions with the goal of influencing the outcome.

This is usually not a problem, but given how aggressively vague the WikiProject's goals are (eg. "We hope to open Wikipedia up to using more sources" - which?) and Larry Sanger's prior conduct (eg. advocating for whitelisting of sources like Fox News[2]), it seems the real goal was organizing conservative editors. I'm not sure whether the fact that this is not clearly written is deception or trolling, but it's not a good look for Sanger either way.

[0] https://en.wikipedia.org/wiki/User:Larry_Sanger/WikiProject_...

[1] https://en.wikipedia.org/wiki/Wikipedia_talk:WikiProject_Cou...

[2] https://san.com/cc/wikipedia-co-founder-says-site-has-libera...

There's more! On my machine it creates an empty ~/.mozilla/extensions directory every time it starts, and I have no idea why it does that or how to make it stop.

ETA: Turns out ryanmerket is associated with runtimewire.com, and is likely posting this as self promotion.

Please verify your sources; the linked article is unfiltered LLM output. I assume whatever model hallucinated this has confused one person[0] with another[1] because they share the same name, but there is otherwise no indication that they're the same person.

[0] https://scholar.google.com/citations?user=eWow24EAAAAJ&hl=en

[1] https://ironwall-lang.dev/en/about

From Raymond Hill, the author of uBlock Origin:

  Please do not use those online tools which claim to measure how good is your content blocker, they are often flawed.[0]

[0] https://xcancel.com/gorhill/status/1583581072197312512

SteamOS is also an Arch distribution, though I'm not sure how significant the changes are. AFAIK Lutris uses Ubuntu's libraries for better compatibility across distributions, maybe Steam does something similar.

Why is this marked (2019)? Besides the book PDF, everything seems to have been created in a commit 3 weeks ago. The way some things are phrased smells of LLM style as well.

The reply was likely referencing Apple's infamous "You're holding it wrong"[0] rebuttal to design flaw criticism - as in, that's what Apple would say if you contacted them.

[0] https://archive.is/jt9rD

AMD dropped support for Linux on the free plan, not the other way around. Nor is this a Linux problem, because they still allow paid users to run the software on Linux.

As far as what's evident from the support thread goes, this is the closest to a justification given:

AMD expectation is that the BASIC tier licensing level is used for simple, entry‑level needs. While more advanced, production-based workflows are aligned with paid tiers.

Looks like AMD equates Linux to professional use and Windows to simple, entry-level needs :)

I have, and compared to just running Linux it's not very good. For starters, the shared filesystem is incredibly slow, there is no hardware passthrough support out of the box (even for USB), the graphics support is incomplete and there's lots of non-standard defaults like custom kernel images and a custom init. That's on top of all the bugs and horrible error reporting.

It still beats Windows, but given the choice, I'd much rather just use Linux properly and have all of this just work than waste my time fiddling with WSL/WSL2.

if you were on macos

Did they only target macOS? The article mentions macOS a lot, but AFAIK this attack changes the instructions based on the User-Agent. I've seen the exact page with instructions for Windows and PowerShell before.

The hidden risk of attestation none: the user might (gasp) use a libre authenticator!

This same ordeal is why lots of Android software is intentionally broken on non-Google operating systems, and it would be a terrible blow for the web if it worked like that for every website with a login. Passkeys are that future, and it's very hard to take anyone who encourages their use seriously. Encouraging attestation, like here, is even worse.

Please do not needlessly denigrate the poster you're responding to.

It would be written by a human.

From https://news.ycombinator.com/newsguidelines.html:

Don't post generated comments or AI-edited comments. HN is for conversation between humans.

We already have privacy preserving age verification: the website asks for your age (or just whether you're over 18), and lets you through.

There's no issuing party to collude with to deanonymize users, no hard requirement on owning a Google- or Apple-vetted smartphone, and generally no way to identify me besides my choice of random numbers.

You move past that, and people rightfully tell you that your scheme outright breaks privacy, or that it makes too many assumptions or is too complex to easily verify it actually preserves privacy.

The fallback is that you get redirected to a website helpfully demanding you buy a Google- or Apple-vetted smartphone: https://support.google.com/recaptcha/answer/16609652.

You will also see this page if your smartphone is degoogled and you try to open the reCAPTCHA attestation URL in a web browser instead of in Google Play Services.

As expected, they're bringing WEI back under a different name: https://en.wikipedia.org/wiki/Web_Environment_Integrity

ISPs have your contact information, and they can also put up notices on their own website. Hijacking somebody else's website with forged replies isn't "the way they notify you," it's a man-in-the-middle attack, and users shouldn't be trained or encouraged to accept it.

Does it call home?

Absolutely, in heaps. The very moment you start Warp, it sends 5 HTTP requests, (1 version check, 1 LLM model list, 3 telemetry events). The former two go to app.warp.dev, the latter 3 go to warpianwzlfqdq.dataplane.rudderstack.com and include a persistent UUID, your operating system and version, Warp version, and the tracked event name and its properties.

All of this happens before you even see the window. After you're done clicking 'No' to all the SaaS nags, you can turn off telemetry in the settings, but for some reason it gets turned back on when you restart the terminal.

While the terminal is running, it calls home whenever you trip one of the events listed in this 7000-line long file: https://github.com/warpdotdev/warp/blob/d0f045c01bacbd845a63.... Besides all the hosts listed earlier, it also makes requests to o540343.ingest.sentry.io.

All in all, a privacy nightmare.

You've made this comment on 7 unrelated threads already, please stop.

  > Lifespan: 13 Months
  > ...
  > Standard retention (4320 Days)

A tip for Librewolf: you can easily toggle permanent cookie storage for a site through the "Always store cookies/data for this site" option in the shield button menu on the URL bar. This is very convenient compared to vanilla Firefox where you have to add exceptions through the settings.

22,056 is not about 30,000. Per scc:

  Language      Files     Lines   Blanks  Comments     Code
  ─────────────────────────────────────────────────────────
  TypeScript      760    109110    14500      7397    87213
  JSON             41     22056        6         0    22050
  Markdown         56      7150     2086         0     5064
  YAML             33      3965      406       208     3351
  ... and many more with fewer than 1k lines

I don't know. Manually {dis,re}connecting the cable doesn't wake the PC up, but it's too hard to reproduce reliably to tell if having it disconnected makes a difference.