Skip Navigation

dan

@ dan @upvote.au

Posts
0
Comments
1082
Joined
3 yr. ago

Aussie living in the San Francisco Bay Area.Coding since 1998..NET Foundation member. C# fan https://d.sb/Mastodon: @dan@d.sb

  • Deleted

    Permanently Deleted

    Jump

  • It doesn't necessarily need a click - it can be triggered by a keypress too (eg at my workplace we have a few internal pages where you can press a keyboard shortcut to copy a shortened URL for the current page).

    It has to be something the browser considers a user interaction, meaning the user has expressed an intent to perform the action. That's usually a button press or keypress.

  • Deleted

    Permanently Deleted

    Jump

  • but it can place text into the clipboard.

    Only as the result of a user interaction, for example by pressing a button.

  • Deleted

    Permanently Deleted

    Jump

  • I set up voice recognition

    This feature is extremely insecure now that there's several AIs that can replicate voices. If a scammer calls you and you say a few words (like if you say "hello" and "sorry, I think you've got the wrong number"), a recording of that can be enough for them to replicate your voice.

    This happened at my workplace. An attacker got into someone's Schwab account by calling Schwab support and successfully getting past the voice verification, and attempted to transfer $100k (from a recent stock sale) out of their account. It took a bit of effort but they managed to get all the money back.

    Schwab sent out a bulk email to everyone at my company saying they're improving their security as a result, but I'm not sure if they've actually improved it. They're still promoting this insecure feature.

  • Deleted

    Permanently Deleted

    Jump

  • Except for the fact that a lot of less tech savvy people will fall for it.

  • Android apps are blocking sideloading and forcing Google Play versions instead

    Jump

  • I kinda understand it from the bank's perspective... They need to reduce risk which is why a lot of banking apps check if the phone is rooted (if it's rooted, how can you be sure that a malicious app with root access isn't patching the app in memory and redirecting transfers to a different account?)

    Having said that, I really don't think they need to restrict it such that the app can only be installed through the Play store, as long as the app is properly signed and uses certificate pinning to prevent MitM attacks.

  • Meta’s AI is scraping users’ photos and posts. Europeans can opt out, but Australians cannot

    Jump

  • Public posts only... Not private posts. Honestly, if you ever post anything publicly on the internet (on any site, including here on Lemmy), you should assume it's going to be used for all sorts of things.

    I have no doubt that Lemmy posts are part of the data being ingested into AI training. Lemmy and other Fediverse apps are extremely easy to scrape since anyone can subscribe to a Lemmy community, Mastodon account, etc with ActivityPub and get all new posts and comments pushed to them. Don't even have to actually scrape anything.

  • Android apps are blocking sideloading and forcing Google Play versions instead

    Jump

  • Android already has other apps stores, like F-Droid.

  • Android apps are blocking sideloading and forcing Google Play versions instead

    Jump

  • GOG model

    wut? The main selling point of GOG is that games purchased from them are DRM-free.

  • Android apps are blocking sideloading and forcing Google Play versions instead

    Jump

  • So people that only have a computer and not a smart phone can't do those things at all?

  • Navy officer lost job for secretly installing internet on warship to check social media

    Jump

  • it took the Navy months to find it.

    I'm surprised they didn't hide the SSID... It's likely nobody would have even found the network then.

  • Lexar unveils the world's first SD cards made of 316 stainless steel

    Jump

  • it’s called CCA for what should be fairly obvious reasons.

    CCA Ethernet cables are literally the worst. The wires are much more brittle so it's much easier to break the cable just by bending it a little bit, and since the resistance is significantly higher, they can't go as far as regular pure copper cables, and you can't use them for Power over Ethernet (they'll overheat).

    People buy them to save money since they can be a lot cheaper, but often end up having to re-run a lot of the cables in the future. Better to just buy the high quality cables from the beginning. "Buy once, cry once" as the saying goes.

  • The $700 PS5 Pro doesn’t come with a disc drive

    Jump

  • Some enterprise software used to (or maybe still do) use USB dongles for licensing... I'm honestly wondering if games are going to move that way too. Given the fact that practically every game needs a launch day patch, why even have a DVD/Blu-Ray if instead you could just have smaller, more reliable USB dongles? I suspect that in the next generation or two of game consoles, we'll no longer see discs at all.

  • The $700 PS5 Pro doesn’t come with a disc drive

    Jump

  • I've still got my original installers and CD keys for Unreal Tournament 99 GOTY, Need for Speed Underground, Trackmania United, and a bunch of others, and even some DOS games, so there's at least some of us that keep the installers. I have a few of them on USB hard drives I've collected over the last 25 years or so... I really need to move them onto my NAS. :)

    I used to buy directly from the publisher though. Some of them still have working download links, for example Ubisoft/Nadeo still have a working download link for Trackmania United even though it's nearly 20 years old now.

  • The $700 PS5 Pro doesn’t come with a disc drive

    Jump

  • How do you know Windows will keep compatibility in 20 years?

    I didn't mention Windows anywhere in my comment? GOG has Linux versions of games too, for games with Linux ports.

    plenty of titles on Steam come without DRM because DRM is optional

    That's true - for the DRM-free Steam games, you can just keep a separate backup copy of the game files. They usually run fine without Steam installed.

  • The $700 PS5 Pro doesn’t come with a disc drive

    Jump

  • build a steam library that you'll have 20 years from now

    How do you know that Steam will be around in 20 years?

    Use GOG instead. The DRM-free game installers will outlive Steam :)

  • The $700 PS5 Pro doesn’t come with a disc drive

    Jump

  • Or, in other words games you actually own

    Newer games rarely have the entire game on the disc. Usually there's mandatory patches that must be downloaded to play it. I've seen games where there's only a few hundred MB on the disc while the whole game is maybe 15 or 20 GB.

    This means you don't really own the game, since if Sony (or Microsoft or whoever) take down the downloads for the game, you won't actually be able to play it any more.

    Essentially your choice is between a physical license key (the disc) plus a download of the game, or a digital license key plus a download of the game.

  • Deleted

    Permanently Deleted

    Jump

  • Because you don't need to have significant experience or rent a VPS in order to do that, and I can respect that

    I'm not saying you have to self-host... You could still use something that's open-source and remotely hosted.

    Sentry (error logging and bug reporting system) is like this for example. They have a hosted plan, including a generous free plan for open-source projects, but Sentry itself is open-source.

  • Deleted

    Permanently Deleted

    Jump

  • Not that the functionality does not exist (p2p, literally) but if my grandma cant receive the family pictures its not basic.

    What about encrypted messaging apps? Maybe your grandma can't figure out Signal, but she could probably work out how to use WhatsApp (which uses the same encryption protocol) given how popular it is in some countries.

  • Deleted

    Permanently Deleted

    Jump

  • discord on FOSS projects

    I don't understand why this was even a thing to begin with. FOSS projects using non-FOSS platforms is kinda weird, especially platforms with unclear financial situations like Discord.