flotzam

That seems like the right direction, but even for 20 kg bags I don't know how to evaluate Chinese suppliers of bulk foodstuffs

Are there companies who take care of the sourcing + importing + QA for retail veggie protein brands? Some actor in the supply chain just before flavoring is mixed in

Or skip the middlemen and buy whey protein isolate directly from a dairy/creamery, in bulk: https://old.reddit.com/r/Supplements/comments/16r3xjt/psa_i_...

I wonder if there are similar upstream sources for soy, pea, or rice protein isolate?

IMO it's better to think of a directory as "containing" only the named references to inodes. Other directories on the same filesystem may contain other named references to the same inodes ("hard links").

The inodes themselves are more like free floating anonymous objects independent of any particular directory, and might not have a named reference at all (O_TMPFILE; or the named reference was deleted but a file descriptor is still open; or orphaned inodes due to filesystem corruption or someone forgetting to fsync the directory after creating a file as masklinn pointed out - e2fsck will link these in /lost+found). This is also why chmod appears to affect other hard links in different directories: Because it actually modifies the inode (file permissions are recorded in that), not the named reference.

They probably wouldn't sell terminals straight to Brazilian customers but rely on resale to keep their hands clean.

I'm not sure how feasible first finding and then fining/arresting owners would be. The proposed VPN fines were seen as outrageously disproportionate.

Just how important are the ground stations in Brazil? (I don't mean the end user terminals.)

If Starlink will basically continue to work well enough if those are seized, it seems like the obvious next steps are going to be crypto/stablecoin payments and a focus on small form factor terminals like Starlink Mini that can bypass customs.

It can be looked at as cognitive defense. I don't want a hostile ad/surveillance system to charm me with relevance.

Unbearably sweet though! I tried BioMin once and worried that using it long term would burn out my taste receptors

FWIW, "It won't be supported by GrapheneOS. (...) Bluetooth still has to be configured and enabled by the OS to make it work that way."

https://discuss.grapheneos.org/d/11520-android-find-my-devic...

> 10 cents

0.2 cents on Anti Captcha, 0.179 cents on DeathByCaptcha

The noise is annoying per se, but also: stealthy != illegitimate. For example think of trying to document something abusive going on around you, and being betrayed by "your" tool.

More fundamentally, it's just not a tool's proper place to second-guess if its wielder is doing something illegitimate. You should be technically able to use your general computing device to launch a doomsday weapon if you so desire, even though that's ethically and legally frowned upon.

So fix your backend to exempt Tor visitors from those measures, if it's really all due to hallucinating clusters of abuse from a network where abuse categorically does not appear in clusters of the kind that your backend is attempting to detect.

To add an exemption for proton.me: The list of Tor exit IPs is public. For the .onion: That's loopback traffic from the tor daemon running on your own load balancer or wherever you've put it.

As usual, GrapheneOS disables this kind of anti-user restriction:

https://github.com/GrapheneOS/platform_frameworks_base/commi...

Uh huh.

And what suspicious thing about the network would you be detecting for Tor Browser users arriving on the .onion? Their network is uniform as far as you can tell, and you are blocking them from opening either a free account without an invasive verification method (non-disposable email or phone) if it works at all, or a paid account without an invasive payment method.

For Tor users arriving on proton.me, what sense is there in saying "There's a surprise in every 100th exit node! If you cycle through enough of them maybe you too will be allowed to open an account anonymously!" Not treating them as equivalent to .onion visitors is a you problem.

> It takes a while for the Bitcoin transaction to come through, which is why we the process is the way it is.

By not allowing this payment option at all in the signup flow? Removing what would be the only way for Tor users to sign up to your service anonymously without beating lottery odds. Just use any normal off-the-shelf checkout page that waits for however many transaction confirmations you want! (Let's not even get into the lack of privacy coin support, e.g. Monero. For a privacy focused service, Bitcoin L1 only is substandard in 2023.)

Meanwhile, whenever people are concerned about user data being handed over to the authorities again, you counter by pointing out the supposed Tor support: https://web.archive.org/web/20210906132309/https://protonmai...

I'm not saying you are a honeypot. I'm saying you've cultivated such a careless indifference to data minimization that you've become indistinguishable from one.

As always when people post this, I just tried it with Tor Browser, and, as always: "No verification method available"

Did you access the .onion with something more fingerprintable like Brave?

Proton forbidding anons from opening free accounts might be necessary for anti-spam/deliverability. But even paid accounts?

"They accept cryptocurrency, but only for existing accounts - after you've already doxxed yourself" (during the initial signup flow, where this payment option has been removed)

This looks very bad to me.

"I did not use the privacy focused email service for my conversations with criminals because I wanted to sell classified material without being surveilled. I used the privacy focused email service to make it easier to catch these criminals, because it's very very surveilled! A reliable source once told me this. No you can't meet her, she lives in Canada^W undisclosed location. Not guilty, your honor."

Yes, Proton is hostile to Tor even though they deceptively market themselves as anonymity friendly: https://news.ycombinator.com/item?id=37174259

It's a stark contrast to Tuta, which allows anonymous account creation with Tor Browser if you pay with cryptocurrency (Monero or Bitcoin, via their partner ProxyStore) and doesn't require a whitelisted verification email address or any other data.

Is there a seedbox provider with preconfigured I2P connectivity?

No you give them the Blu-ray and the USB drive

Gifting only the USB drive makes more sense for a nice movie collection like in the linked Twitter thread

Why not use MakeMKV to remux it for them, from the fragile and DRM-infested Blu-ray into a sane .mkv on a USB drive that they can plug into the back of their TV: https://nitter.net/turtlekiosk/status/1709057325170905363

The Pixel 7 Pro only has one eSIM chip too, which you're using with the MEP (Multiple Enabled Profiles) feature:

"This feature allows devices to have dual SIM support using a single eSIM chip, which can have multiple SIM profiles and can connect to two different carriers at the same time." https://source.android.com/docs/core/connect/esim-mep

Generally yes for stock OS. I like that GrapheneOS doesn't give a shit (and they don't have to, because they're not selling phones):

"Wireless alerts are fully optional since GrapheneOS adds a toggle for the otherwise mandatory presidential alert type. This is particularly useful in Canada where the government abuses the system and sends every type of alert as a presidential alert to stop users from being able to opt out of weather and amber alerts." https://grapheneos.org/features

I was saying "flagged" (note the italicization of the last three letters) in comparison to the news article's use of "flags". Of course this HN post should not be flagged, and I agree that a disruptive false positive by first-party AV (which Microsoft only corrected after several days) is newsworthy.

flagged, past tense:

https://forum.torproject.org/t/torbrowser-12-5-6-no-longer-f...

"With the latest signature database (1.397.1910.0), tor.exe is no longer considered a trojan by Windows Defender."

Not to defend the practice but I think the intent is to allow scraping (or API access) only by the price comparison site but not by competitors. (Why wouldn't the competitors then just scrape the price comparison site? Because that site also has anti-scraping measures in place...)

Neat. As an employee, or as a visitor? Like throwing the ceremonial first pitch at a baseball game? :)

"A phone number is sufficient to password reset a Twitter account even if not used as 2FA"

This sucks because Twitter will sometimes force you to link a phone number to the account if it doesn't like your VPN or whatever

Nice, thanks for the links! (I don't own one, sorry)