Hiker, software engineer (primarily C++, Java, and Python), Minecraft modder, hunter (of the Hunt Showdown variety), biker, adoptive Akronite, and general doer of assorted things.

  • 0 Posts
  • 183 Comments
Joined 1 year ago
cake
Cake day: August 10th, 2023

help-circle



  • Dark Arc@social.packetloss.ggtoPrivacy@lemmy.mlPSA: Git exposes timezone metadata
    link
    fedilink
    English
    arrow-up
    15
    arrow-down
    1
    ·
    edit-2
    5 days ago

    This seems like a weird thing to be concerned about. Any given time zone there are going to be millions if not billions of people.

    Git also “leaks” your system username and hostname IIRC by default which might be your real name. A fake name and email would pretty much be sufficient to make any “leaked” time zone information irrelevant.

    Granted… I wonder if stuff like this is how they caught those North Korean “employees.”

    https://arstechnica.com/?p=2042326

    FWIW, I’d also suggest just picking the wrong time zone (but a close one) over UTC or something like that. UTC seems like it’s just “HEY LOOK AT ME! I’M TRYING TO HIDE SOMETHING!” One on the other side of the world, if you sleep like most people, could be defeated by doing an analysis of when the commits were made on average vs other folks from random repositories to find the average time of day and then reversing that information into a time zone.

    It’s better to be “Jimmy Robinson in Houston Texas” than “John Smith in UTC-0”




  • Who said it’s a street? What makes it a street?

    personally have seen the illegal content I talked about.

    Did you seek it out? I and nobody I know personally, have ever encountered anything like what was described on that platform and I’ve been on it for years.

    Was it the same “channel” or “group chat” that persisted for years?

    What gives them the right or responsibility to moderate a group chat or channel more than say Signal or Threema? Just because their technical back end lets them?

    I mean by that argument Signal could do client side scanning on everything (that’s an enforcement at the platform level that fits their technical limitations). Is that where we’re at? “If you can figure out how to violate privacy in the name of looking for illegal content, you should.”

    Nothing Telegram offers is equivalent to the algorithmic feeds that require moderation like YouTube, Twitter, Instagram, or Facebook, everything you have to seek out.

    Make no mistake, I’m not defending the content. The people who used the platform to share that content should be arrested. However, I’m not sure I agree with the moral dichotomy we’ve gotten ourselves into where e.g., the messenger is legally responsible for refusing service to people doing illegal activity.


  • Questionable interpretation. Privacy doesn’t mean mathematically proven privacy. A changing booth in a store provides privacy but it’s only private because the store owner agreed to not monitor it (and in many cases is required by law not to monitor it).

    Effectively what you and the original commenter are saying (collectively) is that mathematically proven privacy is the only privacy that matters for the Internet. Operators that do not mathematically provide privacy should just do whatever government officials ask them to do.

    We only have the French government’s word to go off of right now. Maybe Telegram’s refusals are totally unreasonable but maybe they’re not.

    A smarter route probably would’ve been to fight through the court system in France on a case by case level rather than ignore prosecutors (assuming the French narrative is the whole story). Still, I think this is all murkier than you’d like to think.


  • By integrating everything into it, it has become a good enough medium of communication for almost everything.

    Except that’s not at all what we’ve done.

    The only reason English dominates is because it’s the dominant language of the world super powers following world war II. It’s not because of some special design, principle, or properties.

    English isn’t just “make up whatever rules and put them wherever”, particularly formal English which is what we’re talking about in the context of education.

    Really, a better argument against changing the spelling is the classic “standards” xkcd, where now you’re just making another dialect of English where they spell words differently again, and now it needs to be adopted, fracturing the language further.

    Language will evolve with or without direction. We have the structure in the form of schools to actually evolve it with direction in the name of making things more consistent and intuitive. We should use it, that’s all.



  • I disagree that it’s a fools errand. Misspellings rarely become popular enough to become “proper” because we teach everyone the “proper” spelling and we have spell checkers on our computers that are used for virtually everything.

    There’s no method for the people speaking the English language to put pressure on a word that already exists because we’ve build up this infrastructure to "lock things in’ and insist that “they’ve been this way so they must continue to be this way.” The only way we get language evolution currently is via slang … which is hardly a way to get a better language.

    I know the history of facade, it’s like many other words we’ve stolen from other languages that don’t make a lick of sense in our alphabet. It’s not an infinite list, it’s fixable, but we need to change the mind share that “it has to be this way.”

    We made up official spellings, we can fix them, they’re not an immutable law of nature.


  • That’s something only a teacher would say. As someone who did all their school work and got a fancy engineering job, a lot of it was bogus busy work that 99% of us have completely forgotten.

    You can’t tell me that I needed two teachers having me comb through the book for words that weren’t part of the index so that I could rewrite the word’s textbook definition on a piece of paper verbatim on a weekly basis and that that was a good education experience.

    You can’t tell me my high school study hall where they’d give you something to do if you were bored and forbid you from sleeping or playing games unless the study hall monitor “liked you” was a good experience.

    I mean my high school algebra teacher couldn’t even remember the algebra lesson she’d taught every year for over a decade when I had her. If it was really a life skill or that important, she would’ve remembered.

    In calculus they teach you the hard way to differentiate and then they’re just like “ah but actually you can do it this way and that’s how everyone does it.”

    Artificially raising the difficulty by forbidding formula sheets in math is also just stupid. If you can see the problem, recognize which formula to use, and use it, that should be enough.

    We’re just straight up wasting millions of hours of people’s time with our education system that has very little merit in terms of long term results and retention and negatively affects both people that come out of it “passing with flying colors” and people that flunk out because of various home life circumstances, bad teachers, difficult with the material, or a lack of interest.

    Students are miserable (suicide is at an all time high last I checked and I’m pretty confident it’s not just about social media), administrators are miserable, teachers are miserable, and kids really don’t learn all that much that stays with them into adulthood. We desperately try to shove way too much information into people’s heads in a very dry and uncaptivating way. We need to throw the system out and figure out how to teach what matters and change/replace stuff that doesn’t matter or make sense (e.g. we changed the spelling of various words in the past, why don’t we fix them instead of teaching a bunch of ridiculous spellings that make no sense like facade, ghost, llama, etc).



  • Just because there’s a “rule” that exists somewhere in the abstract, that doesn’t mean folks should assail people for innocent mistakes. It’s also not a rule of this community. It’s not a rule of the instance this community is a part of. It’s most definitely not a rule of “the platform.”

    In fact, these the W3C (the body most people are seemingly citing as a source for rules) isn’t even calling their “rules”, rules. They call them “guidelines” https://www.w3.org/WAI/standards-guidelines/.

    Ya, I’m colorblind, but you’re probably not and you probably didn’t think about it. You’re just some random person on the internet, you’ve probably got plenty of other things to worry about than hunting down the latest WC3 publication on accessibility.

    To be clear, I do let folks know if there’s a chart I’m interested in reading that I can’t read, try to give feedback about colorblind relevant stuff, etc. (literally last night I was on the Deadlock forums giving Valve accessibility feedback). I just do it in a “matter of the fact” fashion and try to explain what I’m struggling with rather than with an attitude and command that they change something without any context.





  • It’s truly crazy how much our information gets shared these days and how long it lingers.

    My house spent a few years as a rental. I still get mail from people who haven’t lived here in over a decade (despite deliberate efforts to stop it).

    My grandpa signed up for ever “store card” you can imagine to get all the deals and rewards programs. His landline virtually never stops ringing… On August 5th alone he got, no joke, 43 spam calls (I have his landline hooked up to Jolly Roger Telephone to try and filter some of this out and help him out, so I’m forming that statistic off of the emails from them).

    It’s completely ridiculous and all of it needs to stop.



  • Reading through all the jargon and simplifying it, the answer: yes they’re the same in the way you mean.

    “SSH” and “passkey” are both technologies built on asymmetric cryptography. They thus at a fundamental level do work in the same way, it’s all the protocol and practices stuff that gets bolted on that is where things become different and where things took time to get into place so we could use these things on the web (and not just “we” who know what SSH is but “we” who make up society).

    Arrghghgh! Orwell was right about people’s incredibly capacity to write with zero clarity.

    The problem is arguably that for the people who understand it enough to say “yeah, they’re the same idea”, the key point is “asymmetric cryotherapy” in an authentication context, the key point is not SSH. SSH is just how most technically inclined users have most directly experienced asymmetric cryptography deployed as an authentication mechanism. It’s that same mistake textbooks often make of burying the lead in an otherwise obscure reference the reader may or may not pickup on.

    But yes, it would be helpful if some major site would provide this comparison “so that I don’t have to! 😉”

    See also “Enrollment and Sign-in with FIDO” in https://fidoalliance.org/how-fido-works/