smileybarry

There's some ML image-based cheats out there but they're much worse (and have been for years). Some games have sidestepped this with tiny imperceptible color changes to nametags & outlines to throw off the cheats while not bothering a human player.

Okay, then I don't get the point you're trying to make. You "slippery slope"'d the Secure Kernel TPM attestation used for multiplayer games into "what if you can't do banking anymore". Like I said (and you agreed), we're already using hardware attestation. So what's the problem with this approach that gets rid of the requirement of anticheat drivers, freeing your hardware? (You can now use that one app that Vanguard preemptively blocks for using a vulnerable driver)

> It's perfectly accurate, as Microsoft could let you use Riot's servers without using the secure kernel if they wanted to.

And then you're back to needing to load vgk.sys at boot time to play a Riot game. And that's dramatically worse as anticheats like Vanguard do PCIE & DMA screening, vulnerable driver blocklist enforcement, and other hardening at boot time.

The fence you're trying to maintain is already broken on both sides: media DRM (Widevine) does hardware attestation. TPM attestation already exists. Macs don't let you connect to some Apple services without a hardware-sourced ticket. Secure Boot enforcement and requirement by some apps is already a thing.

We already have media DRM using other methods that aren't as restrictive as you make it out to be. This slippery slope doesn't work.

This is entirely used for anticheat purposes. Ergo, if you want to play with other people in a multiplayer setting, you're required to abide by certain rules: some logical and social, some technical. It's a careful balance between a fully locked down platform (Xbox/PS OS) and just zero measures to prevent cheaters. (No, server-side anticheat is not sufficient, as proven countless times)

You're free to use your hardware as you wish, but if you want to disable the Secure Kernel et al, don't be surprised if the gameserver rejects your connection.

I recall one of the issues leading up to their abrupt cancellation was fulfillment, so I can't help but suspect there's some potential (long-term) issue they couldn't work out for this dev kit's chipset. Maybe some part of the chain was held together with glue and "this shouldn't fail but continue anyway" and whatever hardware issue eventually hit something critical. (And they intended to fix this some time after shipping, and gave up halfway through fulfillment)

The white line is just because the four quadrants are four separate images, and the four images are HTML-aligned together to make one.

The generated FIDO keys with "[...]-sk" are hardware-only too, the "key" you load is only an "identifier" associating the onboard passkey, allowing you to add it on multiple computers but still requiring the FIDO key present to use[1]:

> ssh-keygen(1) may be used to generate a FIDO token-backed key, after which they may be used much like any other key type supported by OpenSSH, so long as the hardware token is attached when the keys are used. FIDO tokens also generally require the user explicitly authorise operations by touching or tapping them.

> [...]

> This will yield a public and private key-pair. The private key file should be useless to an attacker who does not have access to the physical token. After generation, this key may be used like any other supported key in OpenSSH and may be listed in authorized_keys, added to ssh-agent(1), etc. The only additional stipulation is that the FIDO token that the key belongs to must be attached when the key is used.

IMO the baseline Security Key ($20) series is now enough, unless your setup uses PGP, legacy SSH that doesn't support these key types, or if you're using a real certificate for e.g. code signing.

1: https://www.openssh.org/txt/release-8.2#:~:text=The%20privat...

All the videos I've seen show it adopted by an existing UniFi site, I wonder if I can still set it up as a standalone device? Hopefully even set up the VPN functionality to some WireGuard server (which was implied somewhere where it listed OpenVPN & WireGuard, can't find it now).

This was announced a while ago, and it's just now going into effect:

> The company is implementing its long-lasting promise revealed in 2024, with the option for users to purchase additional play time as needed.

There's also some rollover between months (up to 15 hours)[1].

Previously:

https://news.ycombinator.com/item?id=42078726

https://news.ycombinator.com/item?id=42085089

https://news.ycombinator.com/item?id=42090845

1: https://blogs.nvidia.com/blog/geforce-now-thursday-performan...

They don't exist anymore. They've all been delisted when the partnership expired.

Don't worry, it'll be the #1 FIFA-branded game when it comes out. That's nothing to do with it being the only one, of course.

No, it started ~4 years ago when FIFA hiked the license cost for EA, and 2 years ago EA had enough & didn't renew the license.[1] Since then, EA basically rebranded their series to "EA Sports FC" and dropped the FIFA branding altogether. This didn't change much as they kept/renewed the licenses for players, teams, stadiums, etc.[2]

1:

https://twitter.com/syacvg/status/1706815482744238221

https://www.ea.com/en-gb/news/ea-sports-and-fifa-extend-lice...

2:

https://www.ea.com/news/ea-sports-fc

"All of the big TV makers" except Vizio which is owned by Walmart, of course, who happens to do ACR and ad targeting:

> In August 2015, Vizio acquired Cognitive Media Networks, Inc, a provider of automatic content recognition (ACR). Cognitive Media Networks was subsequently renamed Inscape Data. Inscape functioned as an independent entity until the end of 2020, when it was combined with Vizio Ads and SmartCast; the three divisions combining to operate as a single unit.[1]

1: https://en.wikipedia.org/wiki/Vizio

That still doesn't escape ACR, AFAIK. These "smart" TVs still capture screenshots from HDMI inputs.

That's one of the reasons I only buy Sony for years now. ACR & the like are opt-out at the first terms/privacy screen, and you can even go into Android/Google TV settings and just disable the APK responsible. (Samba something-something)

And of course: casual reminder that Vizio does extensive ACR and ad targeting, and even bought a company doing it to facilitate that:

> In August 2015, Vizio acquired Cognitive Media Networks, Inc, a provider of automatic content recognition (ACR). Cognitive Media Networks was subsequently renamed Inscape Data. Inscape functioned as an independent entity until the end of 2020, when it was combined with Vizio Ads and SmartCast; the three divisions combining to operate as a single unit.[1]

But I'm sure Texans are fully aware and consented to this, right?

1: https://en.wikipedia.org/wiki/Vizio

Peer reviewers can also use AI tools, which will hallucinate a "this seems fine" response.

From what I gather it's that GH Actions is good for easy scenarios: single line building, unit tests, etc. When your CI pipeline starts getting complicated or has a bunch of moving parts, not only do you need to rearchitect parts of it, but you lose a lot of stability.

No, in that case they'd want both to be reported separately so they could use the AirPod with the higher charge.

It can, but it'll be a small subset of stuff. You'll probably be able to just hit install + play on most things, but it'll have a "Steam Frame Verified" program like the Steam Deck's.

Same on iOS, with the fun bonus of the "something went wrong" modal looping as well! (Without retrying, you're just stuck in modal hell)

Same here, I've re-enrolled my Yubikeys 3 times so far, to the point that trying a full re-login asks "what do you want to use for 2FA?" and the list is 6+ generic named "Security Key".

I think it's just a matter of some "I need HDR" syscall.

To be it looked very much like the matte coating on Dell monitors, where bunched up same-color pixels have this "feels like there's a rainbow here but if I focus on it I don't see it anymore" effect. Definitely better than ThinkPad matte, though.

Wait until you try an OLED computer monitor, that screws with the "higher refresh rate => less ghosting" thought process completely.

They've had cloud servers in the US for a while now (Virginia and Oregon), seems like "Shared Regular Performance" and "Dedicated General Performance" have US servers.

A company operating fully remote with global employees still has to do some bureaucratic work with the countries of their employees for payroll purposes. That's what I meant by the experience they had with this.

No, a better analogy would be Germany. You can't count the entirety of Israel on one hand and ~10% of 1940s Germany on the other.

But that's beside the point and still doesn't match what you said, as you considered any company with an Israeli employee to be compromised, essentially.

Do you consider companies with Chinese employees just as "compromised"? We've known of Chinese state surveillance for decades.

I use ProtonVPN for bypassing media geoblocking, and they're fairly good, with some exceptions (BBC iPlayer works via browser but not the Apple TV app, local IPTV doesn't work on any Proton local servers).

They have an Apple TV app so I just switch it on as needed, and it's restricted to just that Apple TV. (Without having to fiddle with a separate WiFi network etc.) IKEv2, OpenVPN and Wireguard work without their apps so I don't have to install their apps on non-sandboxed platforms (Windows, macOS).

Well, yes, but being able to designate a VPN node as a Tailscale exit node directly means you don't need a random server in the middle for it. (Which is beneficial if you use it as an exit node for road warrior devices)