Godtycklig lagstiftning kommer att leda till övergrepp. Den 8 november träder en ny bestämmelse i kraft som gör det möjligt att ta tillgångar med brottsligt ursprung från personer som polisen anser är kriminella. Egendomen behöver inte kunna knytas till något konkret brott eller brottsvinst för att kunna tas i beslag och förverkas.
blog.zaramis.se/2024/11/05/god…
Petition on the implementation of an EU-Linux operating system in public administrations across all EU countries
Home | PETI | Committees | European Parliament
Main page of the Petitions Portal. General information, most recently uploaded petitions and further links to procedural pages. Further links to the European Parliament website.www.europarl.europa.eu
like this
falseprophet, Someplaceunknown, MaiteRosalie and LPS like this.
reshared this
Tech Cyborg, 🍉 دانیال بهزادی and LPS reshared this.
China and Cuba: Advancing the socialist cause and building a shared future - Friends of Socialist China
The close fraternal friendship between China and Cuba was reaffirmed in a recent visit of a delegation of the Communist Party of China (CPC) to the socialist Caribbean island, led Li Shulei, member of the Political Bureau of the CPC Central Committee and head of the Central Committee’s Publicity Department. The delegation was in Cuba to attend the sixth joint theoretical seminar between the CPC and the Communist Party of Cuba (PCC), which was held on October 23, with the theme, “Advancing the Socialist Cause and Building a Shared Future.”
China and Cuba: Advancing the socialist cause and building a shared future - Friends of Socialist China
The close fraternal friendship between China and Cuba was reaffirmed in a recent visit of a delegation of the Communist Party of China (CPC) to the socialist Caribbean island, led Li Shulei, member of the Political Bureau of the CPC Central Committee…Friends of Socialist China
like this
Dessalines likes this.
Search for MH370 to restart based on ‘credible’ proposal, says Malaysia
Search for MH370 to restart based on ‘credible’ proposal, says Malaysia
Marine exploration company Ocean Infinity is seeking a US$70 million fee should the wreckage be found.Lu Wei Hoong
Manjaro distribution is introducing a system for sending telemetry about the system
The developers of the Manjaro Linux distribution, built on the basis of Arch Linux and aimed at beginners, announced the beginning of testing a new service MDD (Manjaro Data Donor), designed to collect statistics about the system and send it to the external server of the project. The author of the MDD intended to enable telemetry by default (opt-out), but the decision has not yet been approved and, judging by the objections of some developers and users, it is likely that telemetry will be offered as an option requiring prior consent of the user (a request to enable telemetry is proposed to be added to the greeting interface after the first download).
The report includes data such as host name, kernel version, desktop component versions, detailed information about hardware and drivers involved, screen size and resolution information, network device MAC addresses, disk serial numbers, disk partition data, information about the number of running processes and installed packages, versions of basic packages such as systemd, gcc, bash and PipeWire.
The sent data is stored on the project server in the ClickHouse database and visualized using the Grafana platform. The IP addresses of users are not stored, and the hash from the /etc/machine-id file is used as the system identifier.
Аccording to the code github.com/manjaro/mdd/blob/ma… sends everything.
like this
bizarroland likes this.
reshared this
Tech Cyborg reshared this.
enable telemetry by default ... MAC addresses, disk serial numbers
Another reason to not use Manjaro. Just use Endeavour instead.
Edit: I'm not against telemetry pre se. I have the KDE feedback enabled for example but that was opt in and sends no unique data.
When?
Edit: I misread, though it said "trust" instead of "distrust"
That time they ddosed the AUR is an example. Incompetence is reason enough for me.
EDIT: manjarno.pages.dev/
They've let TLS certs expire on multiple occasions. They've made the decision to enable the AUR in the default installation, which can cause conflicts with out-of-date dependencies because of the delayed release schedule compared to Arch. They've shipped software on their stable branch that included unmerged upstream code. One of their developers temporarily broke Asahi Linux.
I don't hate the project, but I can't trust the developers and management.
They’ve let TLS certs expire on multiple occasions.
And they told their community to set their clocks back. As a workaround, it will work but all your created and modified data will have the wrong timestamps.
He's also a contributor to Asahi Linux. One of his MRs changed the build options that somehow caused it to (IIRC) use mainline Mesa instead of the branch that is specifically modified to work on ARM.
(edit) Aussie linux man:
It's not only his fault, but mostly.
Another reason to not use Manjaro. Just use Endeavour instead.
Endeavour could be useful if it's your first time running an Arch-based distro and you're looking for software/configuration suggestions. Otherwise, Arch Linux is fine by itself and it doesn't have telemetry
I don't think anybody would say otherwise. Both Manjaro and Endeavour mean to make Arch more appealing to users who aren't comfortable with command line configuration.
Endeavour has arguably done better than Manjaro, but yeah. They're just some configs on top of a system that does very well on its own.
Ad firm money.
Maybe I'm just cynical, but my first instinct when I see stuff like this is they have a secret contract with an advertiser and are selling this information.
I tried Manjaro last year and I hated it.
Something about the distro would lock up my PC, it would freeze from time to time.
I disabled the standby/sleep function, but allowed my monitors to go into standby. But if I left my PC for an hour or two my screens would not wake up, different types and brands.
I had so many issues with Manjaro and while speaking with a friend I told him I had moved over to Nobara but he was still on Manjaro. But then a few weeks later he mentioned he was running Nobara. Seems he also ditched it.
This may be illegal in EU if they don't use opt in. ~~Even then it may be illegal for under 18 year olds to collect MAC addresses and disk serial numbers, as those can potentially be used for identification.~~
The data is anonymized, and the IP is NOT stored. So I'm not sure this violates GDPR?
From the code we can see the machine ID is anonymized, sending only a SHA256 checksum.
def get_hashed_device_id():
# Read the machine ID
with open("/etc/machine-id", "r") as f:
machine_id = f.read().strip()
# Hash the machine ID using SHA-256 to anonymize it
hashed_id = hashlib.sha256(machine_id.encode()).digest()
# Convert the first 16 bytes of the hash to a UUID (version 5 UUID format)
return str(uuid.UUID(bytes=hashed_id[:16], version=5))This makes it somewhat a nothingburger IMO.
like this
Th4tGuyII likes this.
That's not anonymous, that's pseudonymous.
What is the point of this? The machine-id already looks to be some unique random number, so you're calculating another unique random-looking number from that, might as well use the original number.
You can't glean any useful information from a unique random-looking number that would help with developing Manjaro. You can't calculate any statistics from that. The only use is tracking.
Edit: And as mentioned in my other comment, reversing the MAC SHA by brute force is trivial, so that one at least (and possibly the other hardware serial numbers they collect) shouldn't even be considered pseudonymous.
because it’s possible to connect to natural persons.
That's debatable, and is only based on the claim that it's just a 24bit decoding that can be brute forced. I don't know for a fact that it's true that it can be boiled down to 24bit.
I checked my own /etc/machine-id, and the folder doesn't even exist, so what exactly is supposed to be in it IDK. And yes I use Manjaro.
I edited my comment on your other reply and by my estimation, calculating every SHA256 of all MACs ever potentially issued takes less than 89 seconds on an RTX 3090.
I also think MACs are (or should be considered) personally identifiable information, since there is potentially a paper trail back to the person who bought it. Plus MACs are not secret information, it's broadcast on the LAN and for wireless modules over the air in the immediate vicinity (though some systems will randomize wireless MACs for privacy reasons). Privacy-unfriendly software has been known to collect MACs (even from other devices on the network and in the vicinity), so there are already databases connecting MAC addresses with other data.
calculating every SHA256 of all MACs
Yes but because I don't have the folder it reads myself, I can't see what actually encoded. Are you sure /etc/machine-id is ONLY the MAC address?
- users can be identified
- probably Opt-out (still in discussion)
Two nogos combined makes nonogogos. Why do they need host name, MAC address and disk serial numbers? Why can't people set how much they want to send in, like KDE Plasma does? Will the data be shown to the user before its send in? Steam does that perfectly (show data and its opt-in) and that is even a proprietary application. Telemetry is okay if its done right, without user identification, opt-in and not hiding whats sent, preferably in multiple levels of what is being send.
I used Manjaro before and switched to EndeavorOS because I was not happy. Now I am. Manjaro can't stop being stupid (not the users, I'm not attacking any user here, only the maintainers or developers of Manjaro).
like this
dhhyfddehhfyy4673 likes this.
The way I read it, the developer wanted opt-out but it's likely it will be opt-in. I'm find with opt-in and vehemently against opt-out for telemetry.
I would prefer the information was statistical only. Rather than hostname (making the assumption they only want hostname to be able to somehow separate the data to follow changes over time), a much better idea would be some kind of hash based on information unlikely to change, but enough information that it would be unlikely possible to brute-force the original data out of the hash. So all they know is, this data came from the same machine, but cannot ID the machine. Maybe some kind of unique but otherwise untrackable unique ID is created at install time and ONLY used for this purpose and no other.
So this seems to me to be perfectly anonymous.
I'm not aware that Google claims they collect data anonymously, on everything where you are logged in.
So that's a false equivalence.
The report includes data such as host name, kernel version, desktop component versions, detailed information about hardware and drivers involved, screen size and resolution information, network device MAC addresses, disk serial numbers, disk partition data, information about the number of running processes and installed packages, versions of basic packages such as systemd, gcc, bash and PipeWire.
That's insane
like this
dhhyfddehhfyy4673 likes this.
Yeah, my only concern here was if it was opt-out. That'd be bad.
Now I completely understand the developer on this. This is useful info to have to help decide future changes/features and general direction, but balancing the right to privacy means this kind of data provision should ALWAYS be opt-in. Microsoft, you hearing me here?
Why?
Let me put the question back to you. How do think the uniquely identifiable information will help them improve Manjaro?
Do you think they’ve got a Russian satellite and will track down your HDD serial number from space?
No.
There’s lots of benefits to telemetry.
As I basically said, if you bothered to read my comment.
I said elsewhere, I hope this is just some way to track changes over time per user.
But they need to take an anonymous hash of some non changing data or create an install id that is used for this and nothing else (e.g it identifies a unique user but not the person or hardware behind the user).
Too much identifying info is just pushed around like we shouldn't care, it's become a real problem.
The first three octets of a MAC specify the manufacturer of a NIC chipset. That could come in handy for driver debugging.
Manufacturers and firmware versions of storage devices? You can make the argument; perhaps it would have helped figure out the SSD firmware bugs years ago.
But stuff like whether or not you have video capture card or your current system temperature stats? Nah.. that's getting into "identifiable information as toxic waste" territory.
Yeah, so take the vendor and device id and be done?
Why should they need my unique ID/MAC?
Unique enough with the other hardware IDs
And still, absolutely no reason to go further then the first octets, to have the vendor and device
Or am I missing something?
And I'm currently a happy user of Manjaro since years. But this stuff really isn't what I want to have on my system ...
Just defining the threat model of hardware addressing, as it stands.
I don't agree with them sending more than the first half either.
MAC addresses are 48 bit, and half of that is just the manufacturer. So 24 bits really, and those bits aren't random, I think manufacturers just assign these based on some scheme, like a serial number. Point is you could easily reverse the SHA by brute force.
You can't calculate any useful statistic from a hash so literally the only use this would have is some sort of tracking.
Edit: I just looked up some data and I found someone using hashcat on an RTX 3090, which looks like it can do almost 10000 million SHA256 hashes per second of salted passwords (which are longer than 48 bit MACs, so MACs should be faster). 2²⁴ is 16.8 million, so it'll take about 1.7 ms per vendor. I found a database with (all?) 53011 vendor ids:
>>> 2**24 * 53011 / 10000 / 1000 / 1000
88.93769973759998Yup, 89 seconds. You can calculate the SHA256 of every single MAC ever potentially issued in 89 seconds on a bog-standard 3090.
Debian popcon is opt-in, first of all.
Q) What information is reported by popularity-contest ?A) popularity-contest reports the system vendor [1], the system architecture
you use, the version of popularity-contest you use and the list of packages
installed on your system. For each package, popularity-contest looks at the
most recently used (based on atime) files, and reports the filename, its
last access time (atime) and last change time (ctime). However, some files
are not considered, because they have unreliable atime. For privacy reasons,
the times are truncated to multiple of twelve hours.[1] i.e. the dpkg Vendor field, see dpkg-vendor(1).
So no fucking MAC addresses and machine-ids and harddrive serial numbers and stuff.
They only want package statistics, the point being to have statistics about the popularity of packages, mainly so they can be prioritized for the CD/DVD isos. You know, information that actually has a use, not hardware identifiers that can only be used for tracking purposes.
this would have is some sort of tracking.
It's right at the top of the announcement, that it's mainly for more accurate stats on unique users.
It's not that I think this is a good idea, because I don't, but some people are blowing it out of proportions. Especially since this isn't at all decided. Which I seriously doubt it will.
You don't need this to count unique users. You could just assign a random number on install or whatever. Or even more simply, just run the thing once per month, should be accurate enough. Do they expect the software to just randomly spam duplicate reports? Don't write it that way.
Best case they don't care about collecting minimal data and don't understand that hashed MACs are easily reversible. So incompetent fools with no sensitivity to privacy.
Maybe this should be Manjaro's tagline: Not purposely malicious, just grossly negligent and ignorant.
You could just assign a random number on install or whatever.
Funny, I thought the exact same thing.
hostname? MAC address? serial numbers? does "partitionx data also include names and GUIDs?
why would they need these? what is wrong with them??
NGL on pretty much any install, I'd end up looking up pros and cons of every filesystem AGAIN...
... It's BTRFS now. Simple. Easy. Lol
But it was a lotta research to reach that conclusion. So yeah I get that newbie apprehension!
I've defended Manjaro many a time, despite the mistakes they've made. The main reason for this, Manjaro is the most stable Linux distro I've used.
However, the main reason I ditched Windows as my primary OS was telemetry (and bloat). If Manjaro introduce this, it absolutely must be opt-in.
I actually contribute to the Steam hardware survey as I want to ensure Valve, but more so hardware manufacturers, are aware desktop Linux systems for gaming and creative work are viable. But it's my choice to contribute.
If Manjaro don't implement this as an opt-in then I'll be installing Arch. It will be a pain to configure my software again but needs must.
I mostly used Ubuntu based desktop distros and frequently had issues with the 6 monthly update cycle. Problems with Fedora too. I have not had a single update issue with Manjaro. I often have different distros running in VM's and whilst Arch has been the most reliable, most are not.
I also setup loads of Linux servers in my I.T. job that I used to have, so I have plenty experience.
The bottom line is Manjaro desktop has been ridiculously reliable for me. Therefore other peoples hate of it washes over me and is meaningless.
Yeah, besides some Nvidia driver problems, Manjaro was stable for me as well
Have chosen it, because it was fast to setup and the base configuration wasn't too of far off my liking
But, by now I'm considering to switch
data such as host name,
Okay why do they need to know that? Why do they need to know if the computer is called "Melissa's Laptop" or "Workstation 15, Internal security division"? Seems like this kind of data could if stolen be misused and it has minimal legitimate purpose IMO as anyone can put anything as host name and while in organizations it often corresponds to use it doesn't have to for individuals. Someone could call their machine "Mack's Porn Rig" and they only use it for doing banking and a little coding.
kernel version, desktop component versions, detailed information about hardware and drivers involved, screen size and resolution information,
This all seems legitimate enough, this would be helpful for understanding the hardware their users run on and targeting features or bug fixes.
network device MAC addresses,
Not great but there is an argument for it, they could just grab and send the first 3-4 octets which would give them the info they need on manufacturers without getting uniquely identifiable data that along with some of this other stuff is concerning for fingerprinting.
disk serial numbers,
Okay, what the fuck. Why do they need disk serial numbers? What possible use is there for that. Those are used for warranty claims and could be used as part of uniquely fingerprinting a computer and person. Not cool.
disk partition data,
This is vague enough. I guess one could choose to see this as just info about partitions in use say if there's also an NTFS partition that looks like a Windows install that would be useful but on the other hand data encompassed within a partition could also nefariously be read as allowing them access to all your data. Partition layout, partition labels, and file systems used on disks available to the system would be a clearer way to put this and erase any doubt.
information about the number of running processes and installed packages, versions of basic packages such as systemd, gcc, bash and PipeWire.
All this is also fine just technical data stuff.
I used to love their branding, but they keep doing crazy things that would clearly alienate the userbase that's left...
Israeli attacks have killed 151 emergency workers in Lebanon
The World Health Organization (WHO) says emergency medical services in Lebanon have reported 201 attacks over the past year following the hostilities between Israel and Hezbollah.
The attacks have resulted in 151 deaths and 212 injuries, it said.
The violence “is hindering the rescue and relief efforts, and ultimately contributing to high death rates,” it added.
Medics in Lebanon have accused Israel of directly targeting them in attacks that rights experts say amount to war crimes.
LIVE: Israel targets hospitals, tents across Gaza, keeps pummeling Lebanon
Israeli forces attack last functioning hospital in north Gaza as its month-long siege of the area kills 1,300 people.Mersiha Gadzo (Al Jazeera)
like this
SuiXi3D and Dessalines like this.
Release LXQt 2.1.0
The LXQt team announces the release of LXQt 2.1.0, the Lightweight Qt Desktop Environment.
Through its new component lxqt-wayland-session, LXQt 2.1.0 supports 7 Wayland sessions (with Labwc, KWin, Wayfire, Hyprland, Sway, River and Niri), has two Wayland back-ends in lxqt-panel (one for kwin_wayland and the other general), and will add more later. All LXQt components that are not limited to X11 — i.e., most components — work fine on Wayland. The sessions are available in the new section Wayland Settings inside LXQt Session Settings. At least one supported Wayland compositor should be installed in addition to lxqt-wayland-session for it to be used.
There is still hard work to do, but all of the current LXQt Wayland sessions are quite usable; their differences are about what the supported Wayland compositors provide:
- Labwc provides the most stable session, is very lightweight, neat and configurable, and has an extremely helpful and responsive team.
- Perhaps the most complete Wayland session is provided by KWin when extra KDE packages are installed. For now, it is the only Wayland compositor that supports LXQt Panel’s desktop switcher and LXQt Power Manager’s settings for turning off the monitor (see the Wayland Wiki for the latter).
- In additon to Kwin, fancy effects are also provided by Wayfire and Hyprland, the latter being one of the 4 tiling WMs to choose from.
Anyway, the best result is achieved by installing the latest stable version of the chosen Wayland compositor. Wayland users need to get familiar with Wayland counterparts of some X11 tools and the configuration of the compositor. They may use X11 apps through XWayland, but using apps that work directly on Wayland is the best choice. Also, see the Wayland Wiki.
like this
rem26_art likes this.
reshared this
Tech Cyborg reshared this.
FOSSCOMM 2024: 9 && 10 November 2024 University Of Macedonia
Democratizing Social Media Networks:
🚀 #Fediverse, #Lemmy, #Mastodon, #Pixelfed and many other #Decentralized #Federated Networks have significantly democratized the sharing of information through #ActivityPub .
📅 On Saturday, November 9, 2024, at 15:30 (Athens Time), I will be presenting “Welcome to Decentralization” at FOSSCOMM 2024, hosted by the University of Macedonia! 🇬🇷🇪🇺
🗓️ Agenda and Streaming Links:
🔗 2024.fosscomm.gr
Fediverse at FOSSCOMM2024 🇬🇷🇪🇺
Democratizing Social Media Networks:
🚀 #Fediverse, #Lemmy, #Mastodon, #Pixelfed and many other #Decentralized #Federated Networks have significantly democratized the sharing of information through #ActivityPub .
📅 On Saturday, November 9, 2024, at 15:30 (Athens Time), I will be presenting “Welcome to Decentralization” at FOSSCOMM 2024, hosted by the University of Macedonia! 🇬🇷🇪🇺
🗓️ Agenda and Streaming Links:
🔗 2024.fosscomm.gr
Vänstermedia på sociala medier. För vänstertidningarna är Facebook, X och Instagram de viktigaste sociala medierna som de flesta finns närvarande på. Minst betydelse av de jag undersökt har Bluesky, Fediversum (Mastodon) och YouTube.
FFmpeg devs boast of up to 94x performance boost after implementing handwritten AVX-512 assembly code
Unfortunately, due to the complexity and specialized nature of AVX-512, such optimizations are typically reserved for performance-critical applications and require expertise in low-level programming and processor microarchitecture.
FFmpeg devs boast of up to 94x performance boost after implementing handwritten AVX-512 assembly code
AVX-512 can benefit the average Joe, it appears.Anton Shilov (Tom's Hardware)
like this
originalucifer, Beacon, Get_Off_My_WLAN, AGuyAcrossTheInternet, KaRunChiy and dhhyfddehhfyy4673 like this.
reshared this
Tech Cyborg reshared this.
There is an issue, though: Intel disabled AVX-512 for its Core 12th, 13th, and 14th Generations of Core processors, leaving owners of these CPUs without them. On the other hand, AMD's Ryzen 9000-series CPUs feature a fully-enabled AVX-512 FPU so the owners of these processors can take advantage of the FFmpeg achievement.
Intel can't stop the L.
As for the claims and benchmarking, we need to see how much it actually improves. Because the 94x performance boost is compared to baseline when no AVX or SIMD is used (if I understand the blog post correctly). So I wonder how much the handwritten AVX-512 assembler code improves over an AVX-512 code written in C (or Rust maybe?). The exact hardware used to benchmark this is not disclosed either, unfortunately.
like this
Get_Off_My_WLAN, AGuyAcrossTheInternet, KaRunChiy and Th4tGuyII like this.
like this
AGuyAcrossTheInternet and Th4tGuyII like this.
Relevant section:
Intel made waves when it disabled AVX-512 support at the firmware level on 12th-gen Core processors and later models, effectively removing the SIMD ISA from its consumer chips.
like this
Th4tGuyII likes this.
like this
AGuyAcrossTheInternet likes this.
Absolute madness. I cringe at the thought of making modern x86 asm code.
Great work!
nice.
can usually get a pretty good performance increase with hand writing asm where appropriate.
don't know if its a coincidence, but i've never seen someone who's good at writing assembly say that its never useful.
for sure, its perfectly reasonable to say "this tool isn't useful for me"
its another thing to say "this tool isn't useful for anyone"
from the article it's not clear what the performance boost is relative to intrinsics (its extremely unlikely to be anything close to 94x lol), its not even clear from the article if the avx2 implementation they benchmarked against was instrinsics or handwritten either. in some cases avx2 seems to slightly outperform avx-512 in their implementation
there's also so many different ways to break a problem down that i'm not sure this is an ideal showcase, at least without more information.
to be fair to the presenters they may not be the ones making the specific flavour of hype that the article writers are.
yes, as i said
from the article it’s not clear what the performance boost is relative to intrinsics
(they don't make that comparison in the article)
so its not clear exactly how handwritten asm compares to intrinsics in this specific comparison. we can't assume their handwritten AVX-512 asm and instrinics AVX-512 will perform identically here, it may be better, or worse.
also worth noting they're discussing benchmarking of a specific function, so overall performance on executing a given set of commands may be quite different depending what can and can't be unrolled and in which order for different dependencies.
Whomever wrote this article is just misleading everyone.
First of all, they did this for other kinds of similar instruction sets before, so this is nothing special. Second of all, they measure the speedup compared to a basic implementation that doesn't use any optimizations.
They did the same in the past for AVX-2, which is 67x faster in the test where avx-512 got the 94x speed increase. So it's not 94x faster now, it's 1.4x faster than the previous iteration using the older AVX-2 instruction set.
It's barely twice as fast as the implementation using SSE3 (40x faster than the slow version), an instruction set from 20 years ago....
So yeah, it's awesome that they did the same awesome work for AVX-512, but the 94x boost is just plain bullshit.... it's really sad that great work then gets worded in such a misleading way to form clickbait, rather than getting a proper informative article.....
Even more ridiculous since a 1.4x performance increase is already incredible news for anyone who makes regular of this.
If someone found a software optimization that improved, say, blender performance by 1.4x people would be shouting praises from the rooftops.
Indeed, it's a very nice boost, and great work, but this clickbait nonsense is just so stupid....
And i'm really bothered how it's just parrotted everywhere... Doesn't anybody wonder "94x faster is like.... really a LOT.... that can't be true"
Mohammed Abu Warda — serving 48 life sentences — enters 23rd year in Zionist prisons
Mohammed Abu Warda — serving 48 life sentences — enters 23rd year in Zionist prisons
Mohammed Attiya Abu Warda, Abu Hamza, 48 years old, enters his 22nd year in occupation prisons today, 4 November 2024. A resistance struggler with the Ezz el-Deen al-Qassam Brigades, he was seized …Samidoun: Palestinian Prisoner Solidarity Network
Striking New York Times tech workers ask people not to play Wordle or other NYT games
Workers are striking after trying a failing multiple times to negotiate fair pay, standardize Remote/Hybrid options, and other basic rights. The strike comes the day before election day.
I guess fingers crossed at the NYT that the election website doesn't tip over from too much traffic....
Striking New York Times tech workers ask people not to play Wordle or other NYT games
New York Times tech workers are on strike and asking people not to play its games, like Wordle or Connections.Nicole Carpenter (Polygon)
like this
Beacon, Lasslinthar, Chozo, massive_bereavement and SuiXi3D like this.
There are alternatives that are arguably better.
You can play the exact same puzzles as on the NYT site without giving them your traffic. There are archives of their puzzles that you can play for free. If you like connections, go to connectionsunlimited.org/. For wordles, go to wordlearchive.com/. Just Google for archived versions of your favorite games.
Then there's also other publications that have puzzle games live this. For example, as I like the mini crosswords, there's a student publication, The Observer, that has these mini crosswords too: fordhamobserver.com/category/f…
Supporting the tech workers at NYT doesn't mean you have to give up your daily game addiction
brainbashers.com/puzzles.asp
reshared this
Tech Cyborg reshared this.
Send lets you share files with end-to-end encryption
How is this possible if the only thing that is shared between sender and receiver is just a link (that is provided by the website)?
How can we trust send.vis.ee/? Who are they?
Wiki End-to-end encryption:
> The messages are encrypted by the sender but the third party does not have a means to decrypt them, and stores them encrypted. The recipients retrieve the encrypted data and decrypt it themselves. Because no third parties can decipher the data being communicated or stored, for example, companies that provide end-to-end encryption are unable to hand over texts of their customers' messages to the authorities.
You don't have to trust the server.
like this
xep likes this.
The recipients retrieve the encrypted data and decrypt it themselves
Ok, but how can the recipient decrypt it if he doesn't have the key? The only thing that's shared is the URL and if the key is in the URL, well, I don't know what's the use for it since the server knows it.
Not that I will do it (I can't, I can't read that code), I'm just curious.
The fragment of a URL is not sent to the server, so that's where such platforms usually store the key. That's also the way cryptpad does it. You can thus share the URL and with it the key.
Of course, you still need to trust the platform. The sourcecode link at the bottom of the page links to github.com/timvisee/send who forked from mozilla/send and links back to the web page.
How it works: I don’t know about this service in particular, but usually the shared contains the encryption key so like this: example.com/files/file_id/encryption_key or something similar
As for trust: This appears to be a individual, so you will have to just trust it when using the public instance. However, since it is FOSS, you can audit the code and spin up your own instance
spin up your own instance
Absolutely. If you're at all worried about sending files through third party sites, set up your own. Provided you trust your own security skills, of course.
I would certainly be more interested in having an install under my own domain than using some rando's that I don't know.
How it works: I don’t know about this service in particular, but usually the shared contains the encryption key so like this: example.com/files/file_id/encryption_key or something similar
But if the key is in the URL, that's provided by the server, where's the utility of the encryption since the server knows it and so does everyone that has the URL?
So the trick is to use the #fragment part of the URL, that is not sent to the server.
Of course the JS one downloads from the server could easily upload it to it, so you still need to trust the JS.
If so, the page could be trysted (if vetted).
In theory, yes. But if you follow the link and that leads to downloading the JS and running it, you're already too late inspecting it.
And even if you review it once (and it wasn't too large or obfuscated via minification), the next time you load a page, the JS can be different. I guess there could be a web browser extension for pinning the code?
The only practial alternative I know of is to have a local client you can review once (and after updates).
I this is the most effective search I could find:
https://www.google.com/search?q="Mozilla's+Firefox+Send"
Not great for a product that is not Mozilla's Firefox Send!
addons.thunderbird.net/en-US/t… this add on can be pointed at any send instance, so long as the instance isn't too diverged from the popular fork or Mozilla's original project.
The Thunderbird team has talked in the past about bringing Mozilla Send back as more of a feature for Thunderbird files embedded in emails, hence some of the work that's happening off and on by Mozilla themselves in the original project, some of which has been merged into the project this post is about.
John Mearsheimer: "I won't vote for the Democrats because of the genocide in Gaza. I think the Biden administration is complicit in the genocide and genocide is a red line for me."
- YouTube
Auf YouTube findest du die angesagtesten Videos und Tracks. Außerdem kannst du eigene Inhalte hochladen und mit Freunden oder gleich der ganzen Welt teilen.www.youtube.com
John Mearsheimer: "I won't vote for the Democrats because of the genocide in Gaza. I think the Biden administration is complicit in the genocide and genocide is a red line for me."
- YouTube
Auf YouTube findest du die angesagtesten Videos und Tracks. Außerdem kannst du eigene Inhalte hochladen und mit Freunden oder gleich der ganzen Welt teilen.www.youtube.com
Dessalines likes this.
So just like in 2016 with Bernie or bust, these asshat are giving away their vote for Trump basically.
I understand their complaint, but c'mon.
☆ Yσɠƚԋσʂ ☆ doesn't like this.
So you have no red line.
In 2028 when Harris is exterminating everyone in the immigration detention camps you'll vote for her because Republicans are worse.
A Kamala win basically signals to the oligarchy that as long as there's a Trump or worse, they can use fear to excuse any atrocity. It moves the US deeper into fascism. If mass atrocities and genocide aren't a redline, then what is?
Anybody who starts trying to justify voting for these ghouls simply exposes themselves as being utterly morally bankrupt.
Dessalines likes this.
Dessalines likes this.
PM Ishiba adviser's 'revolution' comment on Jan. 6 attack stuns U.S.
PM Ishiba adviser's 'revolution' comment on Jan. 6 attack stuns U.S.
Kawakami calls for 'independent' foreign policy and reduction of bases in interviewStaff Writer (Nikkei Asia)
☆ Yσɠƚԋσʂ ☆ likes this.
As Millions Starve in Gaza, Israel Terminates Agreement With UNRWA
cross-posted from: lemmy.ml/post/22154941
Jake Johnson
Nov 04, 2024
As Millions Starve in Gaza, Israel Terminates Agreement With UNRWA
"Restricting humanitarian access and at the same time dismantling UNRWA will add an additional layer of suffering to already unspeakable suffering," said the U.N. agency's commissioner-general.jake-johnson (Common Dreams)
like this
Lasslinthar and SuiXi3D like this.
Dariusmiles2123
in reply to Jure Repinc • • •theshatterstone54
in reply to Dariusmiles2123 • • •Stephane L Rolland-Brabant ⁂⧖⏚
in reply to Jure Repinc • • •just an idea, it could be based on #NixOS , if I remember well the project was partially funded by European Research or Opensource funds.
Please correct me if I am wrong on the fundings, I say this from distant memory.
EDIT: it was just an idea, as it is not the most user-friendly distro out there...
Linux reshared this.
jonne
in reply to Stephane L Rolland-Brabant ⁂⧖⏚ • • •lil_tank [any, he/him]
in reply to Jure Repinc • • •enkers
in reply to lil_tank [any, he/him] • • •Honestly, in a managed environment, there's not really much learning to do. All the hard part of learning Linux is dealing with system issues, or when shit breaks. In corporate land, you've got IT staff for that.
The biggest hurdle would be learning libre office, but considering the average white collar level of mastery of MS office is pretty poor, the basics really aren't that different in LO.
like this
HeerlijkeDrop likes this.
Handles
in reply to enkers • • •Exactly, for the pencil pushers it's going to be a transition from one desktop and office suite to another. Hardly "learning Linux".
I see more of a challenge on sys admins and department IT support who may have gotten comfy giving mostly Microsoft product support.
andrew_bidlaw
in reply to Handles • • •I see it generating less work for the helpdesk than Windows currently does. Linux can hardly brick itself without root while Windows can and has a lot of bloat and problems occuring on random on identical PCs. It also works fine on HDD and with less than 8GB of DDR3 RAM, so older hardware won't become garbage that quick. And since users aren't yet familiar with any Linux, there is a 5 year lag between deployment and when average users would start to dig in settings and customization parameters fixing\breaking things themselves like they do on their home machines.
It's investing in your own working future.
technocrit
in reply to Handles • • •daniskarma
in reply to lil_tank [any, he/him] • • •sibachian
in reply to lil_tank [any, he/him] • • •lil_tank [any, he/him]
in reply to sibachian • • •r3dw4re [null/void]
in reply to lil_tank [any, he/him] • • •The Ramen Dutchman
Unknown parent • • •They're already putting out a petition so they're not wholly against the idea of an EU-Linux.
Also, this has been done before by other governments, like parts of the UK's and many Indian governments.
I think it'd be a big step, but a doable one and for the better.
Why do you compare it to destroying and rebuilding one of the EU countries, if I may ask?
Cyborganism
in reply to Jure Repinc • • •They could call it Eunux!
Oh...
like this
KaRunChiy and HeerlijkeDrop like this.
Samsy
in reply to Cyborganism • • •Eubuntu.
Or Keubuntu, the KDEU spin.
N0x0n
in reply to Jure Repinc • • •like this
Someplaceunknown likes this.
Fisch
in reply to N0x0n • • •like this
falseprophet and Someplaceunknown like this.
Mihies
in reply to Fisch • • •elucubra
in reply to Jure Repinc • • •Handles
in reply to elucubra • • •It would make so much more sense to fund existing Linux development than making a new distro, tbh.
If the EU changed to Linux systems and donated the same amount back to open source development as they currently pay for Microsoft licenses, that would make a hell of a difference.
like this
falseprophet, HeerlijkeDrop, Th4tGuyII and Someplaceunknown like this.
andrew_bidlaw
in reply to elucubra • • •I don't know how it works with a frequently updating OS. In my mind beaurocrats can become asses about certifying one exact version they inspected and then making users afraid that open source community can inject the next version with viruses and they can't be sure it's okay too. Ah, and making each certification a paid service and somehow fucking it up.
In Russia there are like two projects of local Linux with custom wine that you can buy just like other software, certified by FSB for sensitive business (I believe them being the first pieces of software to get it except specific cryptographic stuff), but I feel the reason it's getting adopted and certified is because there are some nepotism and illegal connections with money not really changing pockets.
QuazarOmega
in reply to elucubra • • •bazingabrain [comrade/them]
in reply to Jure Repinc • • •kaugman
in reply to Jure Repinc • • •0x0
in reply to Jure Repinc • • •Focus instead on enforcing standards' compliance so i can open a
.docxwith any program and be usable anywhere.Then focus on enforcing FOSS software in public services but don't bother with a "european linux distro", that's just a waste of resources. There are already a great deal of distros around. Considering geopolitics i'd go with SuSe or some other EU-based distro.
Handles
in reply to 0x0 • • •For sure, but ¿por qué no los dos?
Completely agree with your other prioritisations.
like this
Th4tGuyII likes this.
ShortN0te
in reply to 0x0 • • •That's an impossible task. Not even Microsoft manages that. Do not want to count how often i used libreOffice to repair or convert an older MSOffice file so it can be opend with modern Versions of MSOffice.
Once there was a 500MB Excel Sheet with lime 500-1000 used Cells, opened and saved it to.a xlsx file using libreOffice and reduced it to a few MB while still being fully functional.
like this
Th4tGuyII likes this.
⁂ Jnk ∞ 📎
in reply to ShortN0te • • •like this
Th4tGuyII likes this.
ShortN0te
in reply to ⁂ Jnk ∞ 📎 • • •rottingleaf
in reply to 0x0 • • •OOXML is Microsoft's proprietary format it itself doesn't implement consistently.
Either you meant OpenDocument or you meant that you want a magic wand.
0x0
in reply to rottingleaf • • •Papamousse
in reply to Jure Repinc • • •Just use Debian, it has old root, stable, still being developed, it's the base of various others distro that "enhance" it (sometimes badly).
Debian.
I'm using MX Linus AHS, based on Debian, BTW.
MonkderVierte
in reply to Jure Repinc • • •ptman
in reply to Jure Repinc • • •sibachian
Unknown parent • • •sibachian
in reply to Jure Repinc • • •like this
Someplaceunknown likes this.
rottingleaf
in reply to sibachian • • •FollowingTheTao
in reply to rottingleaf • • •like this
Someplaceunknown likes this.
Domi
in reply to FollowingTheTao • • •like this
Someplaceunknown likes this.
NutWrench
in reply to Jure Repinc • • •like this
Someplaceunknown likes this.
theshatterstone54
in reply to NutWrench • • •Alsephina
in reply to Jure Repinc • • •like this
Someplaceunknown likes this.
HiddenLayer555
in reply to Alsephina • • •like this
Someplaceunknown likes this.
Breadhax0r
in reply to Jure Repinc • • •Mihies
in reply to Jure Repinc • • •InFerNo
in reply to Mihies • • •privsecfoss
in reply to Jure Repinc • • •Someone mentioned that M365 is properly not legal. Guess what, it isn't.
The EDPS (European Data Protection Supervisor) investgated the EU-Commissions' use of M365 and found it to be illegal in march 2024. EPDS gave the Commission until December 2024 to, among other things, stop transfers of Personal Information to third countries in M365 outside the EU. Which of course made the Commission sue the EDPS. And MS to do the same..
So M365 is NOT legal to use for any Public Institution in the EU. Unless the Controller make Microsoft change their DPA, contract etc. Kinda like MS did for the Dutch government after the dutch firm Privacy Company made an in depth analysis of M365 and found numerous illegal processing etc.
Fun how Microsoft was made aware of how they acted illegal, and changed it - only for the Dutch Government...!! The rest of their Customers still have the illegal DPA, terms etc... Also fun how it is Common knowledge and IT-departments still choose to use M365, and move as much as possible there from more privacy and security oriented services.
EDP
... show moreSomeone mentioned that M365 is properly not legal. Guess what, it isn't.
The EDPS (European Data Protection Supervisor) investgated the EU-Commissions' use of M365 and found it to be illegal in march 2024. EPDS gave the Commission until December 2024 to, among other things, stop transfers of Personal Information to third countries in M365 outside the EU. Which of course made the Commission sue the EDPS. And MS to do the same..
So M365 is NOT legal to use for any Public Institution in the EU. Unless the Controller make Microsoft change their DPA, contract etc. Kinda like MS did for the Dutch government after the dutch firm Privacy Company made an in depth analysis of M365 and found numerous illegal processing etc.
Fun how Microsoft was made aware of how they acted illegal, and changed it - only for the Dutch Government...!! The rest of their Customers still have the illegal DPA, terms etc... Also fun how it is Common knowledge and IT-departments still choose to use M365, and move as much as possible there from more privacy and security oriented services.
EDPS investigation into the Commissions use of M365: edps.europa.eu/press-publicati…
My point? EU-Linux is a fantastic idea! 🙂
OsrsNeedsF2P
in reply to Jure Repinc • • •mlg
in reply to Jure Repinc • • •mindlesscrollyparrot
in reply to Jure Repinc • • •Well, what better way to embrace FOSS than dismissing the efforts of all the existing distro maintainers? Welcome to the community, guys. Good luck building your cathedral next to the bazaar!
How about they instead work together with the distros and create a way of certifying a distro as gov-ready?
like this
Someplaceunknown likes this.
anamethatisnt
in reply to mindlesscrollyparrot • • •They say nothing about their distro having no upstream. If they make a distro based of Debian/Arch/Fedora I don't see that as dismissing their efforts anymore than Nobara/SteamOS/Ubuntu/Mint does.
I rather they enforce their requirements on their own spin then try to force existing distros to implement said reqs. They should obviously donate to the foss community when using the technology the community maintain though!
Maroon
in reply to mindlesscrollyparrot • • •Does Ubuntu "dismiss" Debian? Or Manjaro "disregard" Arch?
An EU-backed and funded distro released under the GNU license would mean that the government can now fund developers and maintainers to have a distribution that will comply with privacy and security requirements.
mindlesscrollyparrot
in reply to Maroon • • •How much of Ubuntu's funding goes to supporting debian? I actually don't know.
I don't, for example, see Ubuntu listed here: debian.org/partners/
mindlesscrollyparrot
in reply to mindlesscrollyparrot • • •mostlikelyaperson
in reply to Jure Repinc • • •OsrsNeedsF2P
Unknown parent • • •utopiah
in reply to Jure Repinc • • •