KingMachiavelli

I've though about building a tool to scrape all of these Linux distro specific package changes and bug reports into a common place. It's always seemed weird to me that critical security patches are managed in obscure repos, bug trackers, internal build systems.

I don't mean every open source project needs to use GitHub but some of these home grown tools are just really hard to use. The PHP bug tracker's main page doesn't even have a link to view 8.1 or 8.2 bugs but has one for 7.2.

If people were depositing their money with the Fed then traditional banks wouldn't have (as many) deposits.

How are you getting money into this "FedAccount" does your paycheck get sent directly to it? Do you first send money from another bank? If it's the former option then real banks will have less money to lend, if it's the latter option then it's no different then using Zelle or any other intermediate.

Honestly what you want sounds exactly like what the Fed is building which is a common electronic exchange platform. I agree with the other points in that I hope this is mandatory to some degree.

> If people then want to invest their money, then they can make that choice individually.

I think you're underestimating how much such a service (if it accepted direct ACH from your job) would impact our current banking system. Companies would just bypass actual banks and send all paychecks to everyone's "FedAccount" that would be billions of dollars moved. Money in real banks is lent out, money in a "FedAccount" would/couldn't be (if banks have fewer deposits then they can't get as much money from the Fed). This isn't just adding a minor service for the government to provide, it would be a complete redesign of our monetary policy. A lot of countries wish they could have a banking environment as diverse as the US, it's a huge feature not a bug.

If you're actually interested in why the US banking is so fragmented, it's on purpose and it works very well. The US wants banks to be small to distribute risk and encourage local investment. Small banks and credit unions are much more willing to give small business loans, auto loans, etc. to people/clients with worse credit, etc. These policies only work if small and medium banks have depositors so that's why everyone has a different local bank, etc.

> ...worry about her savings

All deposit accounts are insured up to $250k and (given recent events) unlikely the Fed would even allow any regular persons deposits to be at risk. Essentially, the Fed can't loan or invest like small/medium banks can. The Fed can't go bankrupt so it has no real way to measuring risks when giving out loans which would make it impossible to price loans.

IMO it depends on who ends up being responsible for fraud and insufficient funds. It sounds like FedNow will provide liquidity for instant settlement but the page doesn't make it clear what happens if the sender somehow has a insufficient balance. If a $500 FedNow transaction occurs and a $500 ACH transfer settle on the same day (and the account only has $500), who get's paid and who made the mistake?

With ACH most banks/financial services provide some amount of instant funds but wait 1-3 days for the transfer to complete before providing the full balance. This is very useful since it gives the bank 1-3 days to be alerted of fraud, insufficient funds issues, etc. While ACH can technically be clawed back after 3 days, it's a much more difficult process which mitigates risk by forcing the sender through a lengthy fraud claim process.

Is it this article? https://www.economist.com/leaders/2023/06/22/blocking-the-mi...

Honestly... IMO that analysis is completely misguided and nearly contradictory.

Even if I accept the premise that the merger will (1) increase cloud and game streaming and (2) cloud/streaming games is good for consumers, I would argue it "harms consumers" under the legal anti-competitive and anti-trust arguments.

My argument is that achieving premise (1) via a merger is by-definition anti-consumer because it would strengthen cloud/game streaming outside of actual consumer demand. It's not possible or the place for the courts to decide what consumers "want" beyond high level details like cost, and availability, etc.

There's no rule preventing Activison from licensing it's games to Microsoft's, Sony's, etc. cloud gaming services. If there was genuine consumer demand for cloud gaming, then Activison is in the perfect position to get the best deal from all/any of the existing cloud gaming providers.

> (Article) Subscriptions and streaming have turned the music and television industries upside down in the past couple of decades.

Music, TV, and Film streaming all grew out of independent providers. Really it started with rentals which used the "first-sale" doctrine to even exist - it doesn't get much more independent than buying the standalone product and renting it. The fact that TV/Movie streaming is now fragmenting is causing large amounts of pain and cost for consumers not less. Over the past decade only Music streaming has remained simple and cheap - and all of the major providers here are independent of the record companies.

> It's a flaw with an agrarian diet, not intrinsic to human anatomy.

We don't accept anthropological arguments for any more human anatomy limitations. We have contacts and glasses to correct our eyes and cars and planes to travel farther and faster then we ever could on our legs alone.

I just think compared to the other recurring hygiene tasks, teeth seem to be the most labor intensive and accumulate damage continuously while most other hygiene tasks can be technically be ignored for days/weeks (like camping with no shower).

I would try this in a heartbeat, cavities IME seem to be mostly genetic or per-person microbiome environmental thing. The fact that without daily maintenance our teeth can just rot away to a point where severe infection and/or death seems just like a major flaw we should be trying a lot harder to fix.

The real issue is Sony has many exclusives which gives Microsoft a better case (despite the judge saying it's NOT about Sony).

It certainly harms consumers, so I don't see how the court still approved this especially with the judge's comment against the comparison to Sony. Almost all mergers of this size harm consumers, the fact that it's allowed by default is the crucial issue.

If the FTC still had a spine they would go after all of these kinds of exclusive deals - and not just limited to games.

The film industry was famously broken up such that the production companies couldn't own theaters yet in 2023 that rule (if it still exists) is so weak that most production companies have their streaming service and aggressively pressure theaters into exclusivity Windows.

At the end of the day this only strengthens the trend to PC gaming which only benefits Microsoft and can only hurt Sony. It would only be a minor surprise if Sony joined the Proton/WINE effort with Valve to get around Microsoft exclusives. (Which does help consumers but in a 3D chess kind of way).

QubesOS is very cool but I've always thought it'd cool/better if it was a patchset or repo on top of an existing distro like Archlinux or NixOS. I think that would be useful so you could adopt features from QubesOS individually and swap out different components. For example, it'd be nice to use KVM (QEMU or even crosvm) instead of Xen or build a Wayland based system instead of X11.

Supposedly newer Snapdragon chips should get 4 years of security and Android OS compatibility from Qualcomm. I wonder when that 4 years starts because if it takes a year for phones to use a new chip, then it's still more like 3 years.

https://www.qualcomm.com/news/releases/2020/12/qualcomm-and-...

I think all the Pixel devices had at least 3 years of security updates at least from the US release date. There may have been a few variants that released later in the year so they technically had less.

At least now now with Google's own chips (Pixel 6+) the guarantee is 5 years of security updates but still only 3 of Android version updates.

I'd say almost all, maybe 80-90%. WINE is a pretty great compatibility layer for anything Windows and there's large emulation community for the majority of consoles going pretty far back.

luckily the older and more obscure the game also means it's 'easier' to emulate.

For the largest instances, as long as people are using lemmy in 10 years then they have incentive to exist... People will donate as needed; it isn't terrible complicated or expensive to run an instance.

IME the reason they don't have a "join random" button is that would be bad for smaller instances and a "join largest and most popular instance" would be criticized for showing favoritism and discourage adopting the entire point of decentralized technology. Matrix gets this criticism all the time because they push a default sever in their defacto standard app Element.

As a casually interested user? Just Google what to do because more users will trust the latest tweet or reddit thread more than a FAQ page. You most likely created an email account without going to "email.acme.org" and asking what provider to pick and probably have gone though a few providers without much loss.

A lot of these alternatives allow you to keep track of subscriptions without a Google account and actually show a chronological feed (which IMO is one of the most annoying things about the official YouTube app). For mindless watching TikTok is my default.

For home labs, NixOS is the easy recommendation if you are up for it. It really does just work once you understand it and get over the initial bootstrap of a single machine. I'd say it's easier than k8s and can also manage physical hosts.

So far it's been good, it's a lot faster than my Pixel 5 on GOS. I didn't play with the stock OS much but basic UI for the fold works the same.

It's individual apps that need fold and/or tablet support like I have the use Gboard to get a decent tablet mode keyboard and the Pixel Camera to support the different camera modes.

Overall it's quite obvious that it's really a phone + tablet which means a lot of things work OK but won't handle the 90 degree fold mode (table top) well. Also the tablet UI of many apps (especially FOSS) are unpolished.

The real concern is not the loss of the AOSP apps but the lack of new but mandatory features in AOSP and even more undocumented APIs.

For example, RCS only works with Google messenger and there's no sign of that expanding (unless your Samsung). Even Visual Voicemail which should/is an open standard has a lot of carrier specific code (I think it can still be extracted from the Google Phone app but I'm not sure on the license).

NFC payments (tap2pay) seem to be impossible outside the few blessed implementations and even running those is a cat & mouse game with SafetyNet (now called Play Integrity).

Android is still the most open source mobile OS (that's functional and has real security; mobile Linux doesn't count). But IMO it better remember why people pick it over iOS.

I'm still optimistic, if open standards for the basic functionality is going to survive; it will be on Android.

- Sent from my Google Fold running GrapheneOS.

It'd be pretty simple to enforce sandbox/parental controls for the integrated webview browser.

1. Just limit the webview browser location to the same list as allowed by the parental control.

2. By default limit the webview browser location to the domain first opened by the app i.e locked to a single domain by default.

3. Allow webview browser to be expanded via a regex/pattern list of domains.

4. Limit the number of webview browser location changes so even if you can access a search engine with a global domain allowlist, it would just return to the first page after N window.location changes.

There's plenty of introspection you can do via JS (which is already being used to set/inject that `mm` object), it could even check for certain DOM elements, HTTPS fingerprint, etc. to determine if the page is an "intended" destination for the particular integrated webview browser.

> One notable event occurred in late 2019 when Betelgeuse experienced an unprecedented dimming, leading to speculation about an impending explosion. However, subsequent observations and data analysis revealed that this dimming was likely caused by stellar activity rather than a pre-supernova state.

So probably not during any current persons lifetime. :/

Weird, I didn't notice the actual outage at all except high ping to a non-AWS server/IP on the west coast. Normally the latency is ~85ms, today it has been >170ms. SSH is basically unusable at that latency and even bandwidth is very low (not sure how that could be).

I this it's just ZFS that has that "limitation", LVM and Btrfs just let you mix drives of arbitrary sizes.

The latest consoles are also running mid range cards from a few years ago and are doing just fine. They are running games at medium at lower FPS/resolution than PC so games will mostly continue to target and work well on medium hardware. High end PC gaming is the exception, not the norm.

The Mac audience is not trivial and has deep pockets so as long as porting games is fairly easy the it's an obvious choice.

Pretty cool to see a major company release an completely new product line; the whole portable/phone market has been pretty slow the last few years. This doesn't really compete with anything that already exist - the closest I think is the Simula One which hasn't shipped yet.

Hopefully, this will spur more AR/VR development and open-source/open-computing options will catch up.

What's really strange is Reddit could have a good app because they just bought the most popular iOS client, Alien Blue, back in 2014.

I still can't understand why they would buy a perfectly good app just to replace it.

Wouldn't insurance providers love getting 1 month of premiums with nearly 0 risk of any actual claims?

It says he's been suspended. Do you think that's not actually the case or very significant? I guess it's still strange he was able to empty it and only got in trouble after.

IMO it's due go higher property taxes, the New England states have some of the highest property taxes and high taxes overall which makes land speculation expensive. CA has extremely low property taxes with a loopholes that push the average even lower

Even just a few miles outside NYC, you can get a decent house in NJ for 500K but the property taxes alone will be around 5-10K.

> One of the key assumptions made by nixpkgs, and by many hermeticity-focused projects, is that URLs stay alive and unmodified. They don’t promise that something will always build. They promise that it will build perfectly, exactly as you specified, or not at all. There’s a nice security element to that I guess.

This shouldn't be the case since the main upstream substituter, cache.nixos.org, should have the derivation cached or at least the latest remote source/binary. MS Teams is an exception since it's licensed as "unfree" which likely prevent caching. I think there's a way to mark the remote src of the package as redistributible (if MS allows that) even if the final package/derivation is not destributible.

Since external sources are content addressed, you can always manually add the source file via the `nix store add-file` or `nix store prefetch-file`.

I've never seen a separate plate for bike racks. Technically in many US states, a bike rack could get you pulled over for having a blocked plate but in practice police don't enforce that. The assumption is the front plant is enough but then not all states require a front plate.

The license plate and registration laws in the US are very fragmented. Some states out the registration on the license plate, some on the front or side window, and some are moving to digital only registration.

Essentially with almost no work, you can make proving you don't have a validate plate or registration difficult. You can just print a fake temp tag (paper license plate dealerships use) for a state like Texas but drive around in any other state since they have no way of knowing it's a fake temp/dealer plate.

The amount it could potentially "weaken" protection is likely negligible compared to how much it reduces the burden on the user (unless you consider the risk of having a single exposed password in plain text now means N machines are compromised instead of 1).

Anyway, I'd assume that each LUKS key slot has a unique plaintext salt to prevent a single rainbow table being useful to attack every key slot - the attacker would still have to build a unique rainbow table for each. As long as this is the case then the time to bruteforce a password should be the same no matter how many keyslots or machines use the same password.