Inbred: chaorace’s family has been a bit too familiar. (Can be inherited)

Expand?

  • 4 Posts
  • 252 Comments
Joined 1 year ago
cake
Cake day: June 10th, 2023

help-circle
  • Wayland is Wayland. If you use a Wayland compositor, you’re getting a lot of security by virtue of design alone. Things like keyloggers and screenrecorders will not be able to intrude on your session barring vulnerability exploits. I’m not going to touch on the relative vulnerability risk of each environment since a) they’re all relatively new & b) I’ve never implemented Wayland myself

    With that being said, here’s what’s not protected by Wayland regardless of the chosen compositor: microphones, webcams, keyrings, and files.

    For microphones & webcams, any distro which rolls Pipewire in combination with Wayland will be sufficient to secure these. Pretty much all Wayland environments roll Pipewire so this is only important to consider if you’re running your own customized environment (be sure to disable any pre-existing PulseAudio daemon after setting up Pipewire to close this security hole)

    For keyrings, these are handled by your environment’s polkit implementation. Much like Wayland, there are several implementations of polkit and they’re all just about equally secure barring any potential vulnerabilities… Just make sure that you’re using an encrypted database (usually on by default) and that you have it configured to always relock & properly prompt for the unlock key.

    For file access, this is actually a core probelm with Linux as a whole – any unsandboxed application you run will be able to read any file that you can read. The solution is to use sandboxed applications whenever possible. The easiest way to achieve this is through using flathub/flatpak applications, since they will always list out and enforce their required permissions on a per-application basis. For non-flatkpak applications, you’ll need to use “jail” environments (e.g.: bubblejail, firejail) in order to artificially restrict application permissions by hand.


  • It could probably be argued that the board didn’t do what was best for the investors, which is what they exist to do.

    Incorrect. OpenAI LLC (the traded company) does not have a board of directors. The board of directors actually belong to the parent company, simply “OpenAI”, which is a nonprofit organization – the only thing that they’re beholden to is the OpenAI company charter.

    Here’s a simplified breakdown:

    Board of Directors =[controls]=> OpenAI (non-profit) =[controls]=> OpenAI LLC =[employs]=> OpenAI CEO

    OpenAI LLC is obligated to act in the best financial interest of their shareholders, but OpenAI LLC does not actually have control over who sits in the CEO chair. That power goes to the non-profit “OpenAI” parent company – a company beholden to their board, not shareholders.


  • I present for your consideration the case of September 3rd, 1967: the day Sweden switched from driving on the left side of the road to the right side. One would expect that the incredibly distracting process of overcoming a lifetime of learned habit would be a recipe for chaos, but in fact there were significantly fewer accidents than average on the day of the change [1].

    As it turns out, the danger of complacency outweighs the danger of distraction. It does not particularly matter where one directs their focus if they are not driving mindfully. In a more natural environment, we’re good enough at identifying dangerous situations to pay attention when it matters, but roads are not a natural environment. For every alert person briefly annoyed by an audio notification there will be at least as many pedal-pushers too relaxed to even form coherent memories, let alone engage in defensive driving.[2]


    1. The effect was not permanent, so I will be ignoring the alternative explanation that the new side was somehow massively superior to the extent required to explain the discrepancy. Ditto to the idea that fewer people were driving that one particular day, because the effect did last longer than a single day. ↩︎

    2. Of course, just because someone’s driving absent-mindedly doesn’t mean that they’re stupid. They’ll catch on if you just buzz their phone randomly because you think it’ll prevent crashes. The driver needs to believe that the danger is real which is something that the app has to earn by not being manipulative. ↩︎







  • I used my WF-1000XM4s daily for 2 years until the batteries gave out. They were already out of warranty, but Sony replaced them anyway. I still use mine daily and am quite happy with the performance. They’re great IEMs if you’re fine with the batteries croaking after a couple of years – not a big deal if you’re comfortable installing aftermarket cells.

    It’s not ideal, but I’ve had worse exeriences with other IEMs. My worst experience was actually with the GalaxyBuds, which unfortunately I developed an allergy to (Don’t roll your eyes – I’m not the only one! It was an issue with the rubberized coating in a few specific batches). Those assholes accepted my in-warranty RMA, but then never sent anything back. I literally only wanted a replacement, not even money back! Support completely stonewalled me even though I had the UPS receipt from their return slip 😤







  • I’ll answer your question with another question: is it Vegan to eat bacon made from a pig you personally raised up from birth after it dies naturally having lived a full life?

    If you define Veganism as a diet, then bacon’s bacon. If you define Veganism as a personal reaction to the cruelty of industrial farms, then perhaps this is how you get Vegan bacon. If you define Veganism as something more spiritual, then perhaps desecrating your dear friend’s corpse by eating it is even worse.




  • In the Steam Link app, you have the option to select “Start Streaming” without picking a specific game. This will stream the screen as it is without binding to a specific window.

    The main caveats here are as follows:

    • Requires a working pipewire & desktop portal configuration
    • Depending on desktop portal & settings, you may need to manually click through the screensharing request modal on your desktop at the start of each connection
    • The Steam client must be installed and running on your Linux machine in order to receive connections