• 1 Post
  • 50 Comments
Joined 3 years ago
cake
Cake day: June 15th, 2023

help-circle










  • Ah, the Relay Server is only half of the service! If I understand correctly from the documentation I skimmed, and my existing knowledge of streaming systems, the relay server is just there to handle relaying the video stream from one device to another one in the worst-case-scenario that they can’t reach each other to form a direct client-to-client connection.

    So probably your relay server has never been used.

    But that’s just for media, and just for bad network configurations. The actual part that coordinates who can see which devices, etc, and sets up the media connections, is the other server, which it sounds like you’re not running. So your services are currently still using the public server to find each other and initiate contact!



  • Adam Savage, of Mythbusters fame, and noted hat wearer, said in a Q&A once that even he feels weird when trying out a new hat. Like, he wears hats all the time, but a different hat than one he’s used to feels awkward and “not like me”. And you just have to grow into it, because if you get through that then it starts feeling right instead.

    At least that’s what he claims, I don’t wear hats myself, besides a sunhat on a hike or paddle.

    I think this is the video I’m referencing (sorry for the YouTube link) but I can’t watch a video in my current situation, so I can’t verify. If it’s just some random video about hats, I’m sorry 😛



  • I don’t care about Mullvad, but this is an interesting philosophical question. How far does that chain of money carry responsibility? Like, what if you donate to a hospital, and a nurse at the hospital uses their wages to buy bread, and the owner of the bread factory is problematic?

    Definitely some fraction of my donation went to the bread factory owner’s politics, but is it my responsibility? Should I withhold donations to the hospital until they’ve pressured the nurse to buy a different brand of bread, or let them go?

    Definitely the bread factory owner has a bunch of money, and money is power, and that money was given by customers in exchange for bread, so at some point if we want their power to diminish steps must be taken. But is the hospital donor’s money the right lever for that? Does it outweigh the benefits?

    What if the bread factory’s owner is fine, but has a worker who spends their money on a problematic cause. Is it still the hospital donor’s responsibility?



  • psycotica0@lemmy.catoSelfhosted@lemmy.world•I need a map...
    link
    fedilink
    English
    arrow-up
    4
    ·
    4 months ago

    Similar to others here, but slightly different: start with what you’re most excited about. There’ll be some shitty parts where you’re confused and frustrated, and if you feel like you’re just doing something you’re “supposed to do”, it can feel like a job for no pay. Pick something you have an inner thrill for, and maybe that fire can carry you through the dark.


  • Yeah, like other people covered, it’s unfortunate but also very important. It’s easy to tie “visible wifi networks” to “surprisingly precise location on globe” in many places, so the permission is named for the worst case scenario. Yes, the app might just be looking for a wifi, but it also could use that same information to locate you, so it’s the location permission. Sensible.

    If they wanted to support just this one feature without requiring a location permission, they could maybe have an API that is “are you currently connected to this opaque token” API where the app can ask “am I connected” and is just told “yes” or “no”. That’s probably safe enough. And then I could register the app with my wifi without the app even knowing what my Wifi is, it just gets a unique but random string.

    The same is true of bluetooth. If I can list nearby bluetooth, I can see that speaker and this TV and guess location. But there could be an API that hides that, there just isn’t currently



  • psycotica0@lemmy.catoPrivacy@lemmy.ml•Passkeys
    link
    fedilink
    arrow-up
    6
    ·
    5 months ago

    These answers will be theoretical, because it’s possible some browser or system will do things stupid and negate these positives:

    It shouldn’t make things less anonymous, because different websites get unique passkeys made for them. This also makes them more secure, because if one site has a complete DB leak, that doesn’t impact other sites at all.

    Also, the passkeys are used for auth, so there’s already no “anonymity” here, you’re logging into a website. They know who you are, at least which user you are, maybe not which human, which is as true as it was before with passwords.

    Also they should require your device to ask you if you want to use the passkey, they’re not supposed to be automatically leaking to every site you visit without your knowledge.

    Also, they are not stored via cookies. Unless you mean the login session, in which case that part is stored via cookies, but just the same way that a password login gets a session key via a cookie to use after you’ve logged in. So if someone can steal your cookies that’s already a huge problem, but they don’t get any extra information with passkeys. The actual secret material for a passkey is stored outside of the browser entirely.

    The biometrics aren’t supposed to leave the device, they’re prompted for by the hardware on the device asking if you’d like to allow the keys to be used. The browser asks the passkey hardware “I’d like to sign this thing please” and then the hardware pops up the biometric thing as part of its decision making process on whether it should do that or not. Crucially this is not the website asking for biometrics, it’s your device. And if you unlock it, then it chooses to sign what it was asked to sign, and all the browser gets back is the signature.

    In theory.


  • That is not the situation. 😛

    Analog signals are not digitally irreducible without presuming there’s no level of noise floor under which greater detail is irrelevant, Turing’s machines are not digital by their construction and predate the concept by a long time, and the first computers we built were analog and we invented digital computers later because they were cheaper and more efficient and easier and more reliable.

    Also the halting problem doesn’t say “there are things which a computer can’t know but a human can”, it says “there are some things that cannot be known”.

    Similarly Gödel proved that there will always be true things about a system that cannot be proven from within the system, that is using its axioms. That was a real bummer for folks trying to prove all of math with a small set of axioms. But that does not mean there are things math can’t know that humans magically can, it just means there’s other math, outside the axioms, that are true without following from them, in math. He proved it with math, after all. It doesn’t claim to give any special abilities to human brains.

    And also, again, nothing Gödel or Turing ever said has anything to do with the concept of “digital” anything. I think you’re using the term “digital” to mean “rulesy”? Which is not even close to what it means?