piracykills

Would enabling this uBlock option not be perfectly sufficient at preventing this attack?

https://github.com/gorhill/uBlock/wiki/Prevent-WebRTC-from-l...

> barely a historical footnote.

Certainly not for those tinkerer types. Often it's the tinkerer types who are concerned about privacy, and it's those types who install Copperhead OS or XPrivacy, which allows you to deny exactly this kind of thing. Not only that, but it'll let you block all those smaller ways of spying - like unique device IDs being phoned home to 6 different ad, analytics and crash handling services that the silly game you just installed uses.

It's hard for me to imagine using a phone on which I see ads, especially on YouTube, can't background apps like SSH clients, syncthing, even direct IMAP and SIP connections used to be a struggle for people on iOS (still may be?) or run app that Google/Apple have decided are evil piracy tools, like a manga reader or a torrent client manager and search tool. I have friends who even run emulators and use memory editors to cheat at mobile games regularly on their phones... very, very different models. Android is just a lot more flexible for a tinkerer to this day. All this is possible without exploits on most devices, allowed and accepted by many manufacturers.

There's this weird attitude on HN I see frequently where it seems like everything has to be "for the masses" for it to be of any value - tinkering by definition is not for the masses. Android devices probably shouldn't be for the masses, but for tinkerers, they really do pack a respectable punch in my opinion.

You don't need to read a 200-page ToS or live in a libertarian utopia to know what data they have access to and to assume they'll abuse it. A few quick examples:

Don't use Facebook - it's basically a tool for turning any little aspect of your social network into ad revenue. Communicate directly with people you actually value and fuck the rest of 'em.

Don't use Dropbox, their employees have access to all your data, so does someone who breaks in. Encrypt your data before it hits the internet or forget about it.

Don't use a paid VPN service for anonymity, they have your billing data and connecting IP directly and you have no way to verify if they "don't log". Don't trust them. Use an anonymity network which tries its damnedest using technical means to mask those sorts of details.

If you give someone else your data, think not what they can legally do with it, but what they can technically do with it. Write laws all you want, Facebook will still abuse your data to the maximum, attackers will still get access to far too much data, it doesn't help. Personal responsibility is the final solution to the problem. When you give someone data, always assume the worst. Computers have an amusing tendency to tend to make technical feasibility into reality.

> Do you ear often cases of counterfeit money?

Unrelated tangent, but not only do I often hear cases of counterfeit money, I had friends who would counterfeit it in highschool just with a little image editing and a printer. This small scale type of counterfeiting is actually by far the most common type. Won't work against newer plastic-y bills in my country though.

Is leakedsource actually gone?

https://leakedsource.ru seems to be up and running - or is it different people?

I mean, I sort of hate both these and prefer to just download raw data dumps straight from their source. But maybe that is legally questionable?

So where are we realistically with ray tracing? What kind of performance can be expected with modern GPUs?

Seriously hope those guys have a business model. Love that site for keeping everything from important political tweets to ripping paywalled articles...

Not to mention it's also common to include "we can change the terms at any time" - and of course, there's also the fact that this issue in specific has nothing to do with a ToS violation, but with permissions on the parent repository, by relying on them with no backups you're not only subject to their staff's whim, but to the whim of any bugs or "features" in their code.

If you want to take advantage of their infrastructure, that's fair, I understand, but at the very least, run some tooling to backup issues, pull requests, wiki pages, etc on a regular basis.

Even if they have great infrastructure, this article is evidence that they can still take you down at any given moment if they so much as feel like it.

You need those database backups.

I really want to learn and use Rust, but just lack the motivation, especially when APIs turn out to be incomplete - I think the last one I saw was multicast not allowing me to set the send interface.

I guess the main draw for me to any given language is great libraries with great APIs. Python has those, Javascript has those, C++ has those, Rust... not so much yet.

That's a really interesting idea, but can you imagine how incredibly annoying it would be if there were any level of latency? Seems like even a few 10s of milliseconds of latency would make that rather horrible. Especially considering how fast your eyes can dart around a screen, could we even do that today?

The worst part is that they only need to succeed once - if the laws are changed it will become exponentially harder to change them back. So they have every motivation to keep dumping resources at this.

There's a difference between the page for a pirated movie and the front page of TPB.

Where things really get interesting is info hashes. I could right now post a 160 bit SHA1 hash of any content on the bittorrent DHT and you could obtain it simply by tacking "magnet:?xt=urn:btih:" on the front. So perhaps simply sharing the hash of pirated content with some sort of encouragement could be enough to land you in hot water.

If the link were directly to specific pirated content perhaps, but it's not, it's to the homepage.

Even if I get banned from returning, if it's a high value item I can get a friend to do the return or even pay someone if needed. I'm yet to have shopped anywhere that requires ID for a return too though, but even if that changes, cash is still a massive improvement in this sense.

Yikes, that's pretty horrific. I think I'll be paying with cash at these places from now on.

We constructed a whole reality to steal your keys - the world's most advanced phishing attack.

Interesting - I don't have the strongest math background so I'm usually somewhat intimidated by topics like this, but this makes it seem like a fairly simple weighted average based on squared error values like in standard deviation? I assume this would also only work on a normal distribution too?

Makes it seem a lot more approachable than many people have made it sound to me, but I may be horribly misunderstanding still.

Yeah, especially since weechat with its custom relay protocol replaces the bouncer and has a great mobile client too.

I too would like a clear answer to this, I've made numerous attempts to learn vim and emacs and can find my way around in both, but I never broke my habit of the old school CUA keybindings and arrow keys so always found myself gravitating back, especially when more full fledged IDEs and such were an option. ReSharper C++ is a major time-saver on a daily basis for me and I have a hard time thinking that would be easily replaced.

Great service - combine with restic for secure and cheap backups with automatic deletion.

I went from only affording to backup the most important files with Tarsnap to just backing up / with B2. It's the difference between $1/mo and $50/mo.

Yeah, the trick in my opinion is to find a good enough book or guide on new features with which you can skim and familiarize yourself. If you don't understand when you might apply something, go figure that part out. Then work on a project and when it seems like you might need that concept, go read about it in more detail. In terms of real world work, having a very broad, surface level knowledge of many concepts and when you might apply them often comes in more useful than a very in depth knowledge of a few specific concepts.

If they are fully compatible it means community updates can work better too - not needing to worry about the HAL as much.

Yes, Google might need to take one more step of saying "and we ship the security updates" before the average user benefits - but that can be done down the line if the situation merits it. Developers and power users will be able to take advantage of it even sooner. A single codebase for LineageOS? Yes please!

Yeah, the only hope we've got is to move to a more Windows-style driver model, which is what Treble attempts to do, abstracting the HAL from the kernel and application software. This is already shipping in Android O and new devices on O or P must be Treble certified to ship Play Store, so we should see this improved greatly in upcoming devices.

Eh, that might be true today, but I doubt we'll see flagships shipping with Nougat still by the end of the year. I certainly won't be buying any like that primarily for this reason. OEMs will catch up sooner or later. It's a slow process, but don't write off the long game for the short one.

Once P is released they won't even certify Nougat devices anymore.

I don't think that's really valid here - you're asking them for an opinion of their job, not their opinion of you. What they think of their job has nothing to do with how I'll rate them. Heck, I may rate them higher or tip them better if I feel sorry for them not making much money.

Of course it won't stop trade completely, but it could tank the price and cause interest to drop off as that's significantly higher effort than "sign up here, use your credit card or bank account directly".

It definitely won't make cryptocurrencies worthless, but it could tank their value if they start chasing exchanges and adding burdens to new customers on exchanges. If regulations like this start popping up in many countries it could largely do damage to the boom in the field.

For sure you should - but if you're incentivized to find such a thing, what's to say you won't leave some drugs hidden in their basement yourself? If the pay off was high enough, especially with young, generally low wage employees it might be quite tempting.

Wow, that's pretty crazy - ~5% bonds for conservative and ~7-8% for aggressive would have been more appropriate in my opinion. And I feel even those numbers may be a little optimistic.

Currently it's more like "what if you have a great market year every year until you retire" or "what if you can reliably beat the market" - neither of which is likely to happen.