vaylian

Obligatory https://fy.blackhats.net.au/blog/2024-04-26-passkeys-a-shatt...

It's a shame, because WebAuthn is really great technology. But tech companies are botching the rollout.

I also wonder how Nostr is useful here. The central idea of Nostr is that it's a lot harder to deplatform people, because a user can publish to several independent relays. Buzz is self-hostable, which removes the risk of deplatforming.

Are there upsides to using AI? Yes. Are there downsides? Definitely yes. And the problem is that most people ignore these downsides. Either due to ignorance, or because they got too used to using AI that they don't want to go back. AI is not just a tool, but a mechanism for dehumanization. Not because it replaces humans, but because it replaces human interactions, which have made us so successful as a species.

You are right. Steve Jobs also used the opportunity to destroy Flash. But my point still stands: Most web sites weren't developed with the mobile form-factor in mind until a while later.

Web sites optimized for mobile weren't really a thing when the iPhone launched. That's why apps shined on smart phones. Web designers did eventually catch up with the <meta-viewport> hack but the trend towards apps was already too established at that point and people thought that you need an app to use a service.

Hard disagree on the conclusion. I agree that the commission and the council have made very unfair moves and it's justified to call them out for it. But we have also seen that the parliament (except for the EPP) was for the most part eager to listen to what people had to say about chat control.

I'll be voting anti-EU in future I think.

You shouldn't go that far. Simply don't vote for the EPP (https://en.wikipedia.org/wiki/European_People%27s_Party_Grou...) in your country. They are the driving force behind this. Other parties have mostly voted against this (depending on the country)

Neat. What is the primary use case for this dialect?

The lisp curse: https://www.winestockwebdesign.com/Essays/Lisp_Curse.html

The APIs have been there for ages

True. But my impression is that the whole TPM ecosystem is poorly documented. Maybe I just don't know where to look. But to me TPMs are still mostly a black boxes that prevent me from installing Linux unless I disable secure boot.

To benefit the most from security, you need to understand what the security mechanisms can and cannot do. And I feel that there is no good explanation out there to get starting with playing around with TPMs. If you already work at a big tech company, then you can probably find a mentor who might even have contributed to the TPM standards. But if you don't, then it seems to be really hard to properly learn how TPMs can be used.

Could you elaborate on why this is so evil?

I think you have a fair use-case when you think about corporate machines, that are not personal devices. However, the more this type of remote attestation is used, the more likely it is that politicians will also require it on private machines, because "we have the technology". And then you won't be able to run any software that you want, because it could potentially be used for serious crimes like pirating music.

You are completely right! Do you want me to write these markdown files for you?

</irony>

Different news source. But same topic.

Thanks. Please note that your link doesn't work with the tor browser.

Bonferonni correction is relevant when you calculate multiple p-values. Most statistical tests are used with a p-value threshold of 5% to reject the null-hypothesis. But because you are repeatedly testing, the probability for false positives increases and that is why you need to decrease the threshold and make it harder, to obtain a p-value below that threshold to declare a significant result.

You typically use the Bonferroni correction when making general statements about a statistical relationship. You wouldn't use it for checking if a particular image shows illegal content. If you kept testing with your image classifier, your significance threshold would need to be continuously lowered and you would asymptotically reach zero.

Relevant XKCD: 882

You are correct in that both option 1 and 2 are possible. For end-to-end encrypted messages only option 2 is possible. The content will be scanned directly on your own device and the data will be sent to the authorities without your knowledge, if the software detects something suspicious. This is called client-side-scanning.

For example:

(cons some-value my-list)

If my-list is nil, then the above expression will result in a list containing only the element some-value. Otherwise it will be a list starting with some-value followed by any other values that have been previously in my-list.

Probably a stupid question: But where do you get (refillable) ink for this printer from?

TIL that Firefox has less than 5% market share. When and why did people stop using Firefox?

--

Submitted from Firefox

I recall hand-wringing on the difference between popups and modals in our webdev shop.

I hate modals even more than pop-ups. There are valid reasons to use either, but in most cases they are a form of abuse.

Thank you for the expanded explanation. But it doesn't really explain how we should help and what you hope to achieve with our help. A bit more targeted information would be appreciated. You seem to be doing important work, but it's difficult to understand what you want from us.

Can you elaborate?

Prepare to laugh then. Most EU politicians don't have a clue that these systems exist.

And they will continue to ask for data, that they don't actually need like phone numbers and home addresses.

If privacy is outlawed, only outlaws will have privacy.

People fall through the cracks of the system. You suddenly can't use a digital service any more, because it requires you to use a specific technology that you can't obtain, even though you are old enough. You might be a refugee, you might be someone with special characters in their name or you might be someone from a country that simply doesn't provide recognized digital certifications. Or you might want to run a rooted operating system on your phone or computer.

No. The Unity script reference and documentation probably did not have a license that required you to attribute the original source.

I think my favorite thing is the `…` operator. Go check it out.

I appreciate your enthusiasm. But three dots are really hard to google. Can you provide a link?

What about the graphics processing capability? I see there are some modules with a GPU on them. Are they good enough to run 3D games that were released in the last 5 years?

I'm also happy with older games. I just don't know how powerful these GPUs are.

If we are all subject to the same monitoring and there are no exceptions, that would be fair.

Not everyone is an exhibitionist. Some people thrive when they are very public about their life. Some prefer a much more private life.