Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)Z

Zetta

@ Zetta @mander.xyz

Posts
1
Comments
279
Joined
3 yr. ago

  • Deleted

    Permanently Deleted

    Jump

  • I'm in AZ, I think y'all are so dumb for doing that(not that any of you have a choice). I don't want to live anywhere that fakes the time. The days change throughout the year, they get shorter and longer , it's natural, get over it.

  • Forced age verification is comming sooner than we thought.

    Jump

  • Yes, even persistent isn't really an account. It's just a encrypted portion of the drive to store files between boots.

  • What search engine do you guys use?

    Jump

  • 4get, I self host an instance

  • An upcoming California law requires operating system providers to enforce basic mandatory age verification

    Jump

  • Appreciate your explanation!

  • An upcoming California law requires operating system providers to enforce basic mandatory age verification

    Jump

  • Good thing this will be unenforceable for open source software, or at least things can be forked if they are maintained by bigger companies that need to comply.

  • How do you effectively backup your high capacity (20+ TB) local NAS?

    Jump

  • Same, my unraid server is over 40 tb but I only have ~1.5 tb of critical data, being my immich photos and some files. I have an on site and off site raspberry pi with 4tb nvme SSD for nightly backups

  • Apple brings age verification to UK users in iOS 26.4 beta - Users who don’t verify their age may not be able to download or purchase apps.

    Jump

  • Open source software like GrapheneOS is the only software you should ever trust to not be government spyware.

  • New rule for filesystem developers

    Jump

  • Oh my god it's so cringe, I can only imagine what the prompts are like.

  • Deleted

    Permanently Deleted

    Jump

  • Nature is cruel, and that includes humans in general. I feel like that's a known fact

  • Rules are for hoomans

    Jump

  • Haha I am sadly quite far from you. They are all well fed atleast

  • Rules are for hoomans

    Jump

  • I have ~5 polydactyl community cats in my neighborhood, use to be 7. I've adopted one of them, and another that is bonded with it that isn't poly. My dad adopted one of the poly's as well. If anyone wants them we have free polydactyl cats out here.

  • Republican mayor caught on camera sniffing his TEEN STEPDAUGHTERS PANTIES

    Jump

  • The guy was charged with voyeurism. From my quick googling, it seems like the laws say to be charged you have to be spying on someone or recording/photographing them, so I still don't see how this is against the law, but it's obviously gross.

    Edit, I guess this is probably the part that he's charged with so maybe makes sense.

    "The elements of voyeurism under R.C. 2907.08 require proof beyond all reasonable doubt that the defendant:

    (A) for the purpose of sexually arousing or gratifying the defendant committed trespass or surreptitiously invaded the privacy of another to spy or eavesdrop upon another person;"

  • House committee advances bill to ban chemtrails

    Jump

  • A large portion of people are stupid, it's sad

  • Password managers are less secure than promised

    Jump

  • Bitwarden with a vaultwarden docker container on my home server. Access over a VPS.

  • Senator Mark Kelly says he will 'seriously consider' running for president

    Jump

  • You're getting downvoted, but I agree. Sadly, I don't think a woman will win the presidential election in the U.S. for at least another decade or two. Too many sexists, and subconscious misogyny

  • Western Digital runs out of HDD capacity: CEO says massive AI deals secured, price surges ahead

    Jump

  • Broadly speaking, yes, and it'll keep going until they run out of money. However, I think there is a very small chance that one of the companies is able to make a breakthrough probably with a different kind of architecture than our current LLMs that does get us to models that make genuine discoveries and breakthroughs.

    Very unlikely though.

  • Western Digital runs out of HDD capacity: CEO says massive AI deals secured, price surges ahead

    Jump

  • I'm pretty sure the massive buildout is for training new models not for compute power for end users. Their justification is they need more compute to get the superhuman level intelligence AIs that they have been claiming. So if that pans out their probably gonna be fine, but seems unlikely that'll pan out how they want it to

  • Discord/Twitch/Kick/Snapchat age verifier: age verifies your account automatically as an adult on any website using k-id

    Jump

  • The details on how it works from the website for those reading this chain.

    "how does this work

    k-id, the age verification provider discord uses doesn't store or send your face to the server. instead, it sends a bunch of metadata about your face and general process details. while this is good for your privacy (well, considering some other providers send actual videos of your face to their servers), its also bad for them, because we can just send legitimate looking metadata to their servers and they have no way to tell its not legitimate. while this was easy in the past, k-id's partner for face verification (faceassure) has made this significantly harder to achieve after amplitudes k-id verifier was released, (which doesn't work anymore because of it.)

    with discord's decision of making the age verification requirement global, we decided to look into it again to see if we can bypass the new checks. step 1: encrypted_payload and auth_tag

    the first thing we noticed that the old implementation doesn't send when comparing a legitimate request payload with a generated one, is its missing encrypted_payload, auth_tag, timestamp and iv in the body.

    looking at the code, this appears to be a simple AES-GCM cipher with the key being nonce + timestamp + transaction_id, derived using HKDF (sha256). we can easily replicate this and also create the missing parameters in our generated output. step 2: prediction data

    heres where it kind of gets tricky, even after perfectly replicating the encryption, our verification attempt still doesn't succeed, so they must also be doing checks on the actual payload.

    after some trial and error, we narrowed the checked part to the prediction arrays, which are outputs, primaryOutputs and raws.

    turns out, both outputs and primaryOutputs are generated from raws. basically, the raw numbers are mapped to age outputs, and then the outliers get removed with z-score (once for primaryOutputs and twice for outputs).

    there is also some other differences:

    XScaledShiftAmt and yScaledShiftAmt in predictions are not random but rather can be one of two values It is checked that the media name (camera) matches one of your media devices in the array of devices It is checked if the states completion times match the state timeline

    with all of that done, we can officially verify our age as an adult. all of this code is open source and available on github, so you can actually see how we do this exactly."

  • 'What a great way to kill your community': Discord users are furious about its new age verification checks — and are now hunting for alternatives

    Jump

  • Same here, been hating on Discord from day one since you are the product with free services.