Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)C
Posts
2
Comments
633
Joined
3 yr. ago

  • Definitely, which is why i suggested hosting the image + js on a CDN. Keeps brand awareness, and lets the CDN take the brunt of any malicious activity. with a bit of code-golfing, the data served by Anubis directly prior to POW could be a few hundred bytes, without impacting its functionality.

  • The http one? Boost kinda handled it by going to the website, but the ! way seems better handled.

  • Thank you! I was really struggling, there was about 10 edits trying to get it right

  • If you hold the number it can't get recycled into distribution. Signal does fall back to MFA codes over SMS from memory (I've recovered the signal account for my grandma, as I own the number), so anyone who controls the number controls the account.

  • I'm more thinking along the lines of getting a cheap sim, signing up for signal and them letting the plan lapse and the number is released for use again. And then someone buys a new plan, but gets the recycled number. Not sure how realistic that is as a risk vector though.

  • Charitable explanation: by allowing people to use WhatsApp/signal etc without holding onto the sim card, it opens them up to risk that someone else gains control of the phone number, and can then take over that account.

    But that doesnt really require that the number stays in the same phone, just under the same persons control. Periodic SMS code check-in would be sufficient.

  • This is just a gateway drug to a trebuchet.

    I bet you'd love it if we were all launching 90kg objects over 300m away.

  • I dunno that is true, nothing in the docs indicates that it is explicitly anti-CDN. And using a CDN for a static javascript resource and an image isn't the same as running the entire site through a CDN proxy.

  • A HTTP get request is a few hundred bytes. The response is 28KB. Thats 280x. If a large botnet wanted to denial of service an Anubis protected site, requesting that image could be enough.

    Ideally, Anubis should serve as little data as possible until the POW is completed. Caching the POW algorithm (and the image) to a CDN would also mitigate the issue.

  • Tempmail is no signup as well.

  • And no one who deals with Jira is at all surprised.

  • The packages still exist, you can install them, its just not by default. Their argument for splitting is that they can be updated independently, but that doesnt explain why the h264 plugins aren't just included by default.

  • Arch split out the h264 decoders from vlc, and its not installed by default, so last time I needed to use it, it didn't work. No idea why they did that.

  • Yeah, it was how my family transitioned to digital TV. USB tuner stick + windows media center. And then MS killed it.

  • Did you give diesel orm a go? It is fairly mature at this point.

  • If you want a media box, windows used to be a really good option. Back when windows media center was a thing. Not so valuable now though.