jokeyrhyme
Now
•
100%
One example I can think of is Widevine DRM, which is owned by Google and is closed source: https://en.wikipedia.org/wiki/Widevine
Google currently allows Mozilla (and others) to distribute this within Firefox, allowing Netflix, Disney+, and various other video streaming services to work within Firefox without any technical work performed by the user
I don't believe Google would ever willingly take this away from Mozilla, but it's entirely possible that the movie and music industries pressure Google to reduce access to Widevine (the same way they pressured Netflix into adopting DRM)
jokeyrhyme
Now
•
100%
For disappearing messages to work, your conversation partner has to promise they won't take photos of their screen, and they have to promise to use an app that actually implements the feature instead of just pretending to, and the app developers have to promise to have implemented the code to delete a message when the service says it should
Is there actually a cryptographically-sound and physically-complete method for ensuring that a message is only legible for a temporary duration once it leaves your own device and is delivered to someone elses?
jokeyrhyme
Now
•
100%
Hmmm, is CloudFlare known for being a bad actor in terms of privacy?
Setting that aside, no matter what you pick, you'll be exposing your IP address, from which your ISP and/or general location may be derived
If you don't trust CloudFlare with that information then you basically cannot trust anyone else, so maybe you'd need to run your own service and ping that instead now that you're in a situation where you can only trust yourself 🤷
The other issue that comes to mind is that you're only testing reachability to one address, which means you could get a false negative where that address stops working but the rest of the internet is actually fine
jokeyrhyme
Now
•
100%
Without being specific, I'd try to get something with firmware updates available on LVFS: https://fwupd.org/
And you might want to check for distribution specific notes on that model e.g.
- https://ubuntu.com/certified/laptops
- https://wiki.archlinux.org/title/Category:Laptops
- https://linux-on-laptops.com/
- https://www.linlap.com/doku.php
If Wayland is more important to you than AI/ML/LLMs then you probably don't want anything with an nVidia GPU
jokeyrhyme
Now
•
100%
We need a verified check-mark for true wayland users :P
jokeyrhyme
Now
•
100%
I did actually do this already, separate from working on this issue, but can confirm the intermittent problems with the combination of wpa_supplicant and systemd-networkd
My desktop PC is the only machine in the house having Wi-Fi connectivity issues (connects fine, but drops out randomly after a few minutes or sometimes a few hours) I _think_ wpa_supplicant is getting confused and thinks signal strength is poor (I have a Netgear mesh, but this seems increasingly common, so it's weird for that to be the issue) I did pick up a TP-Link USB Wi-Fi adapter, but can reproduce the same connectivity issues The fix was switching away from wpa_supplicant in favour of iwd, which seems rock solid in comparison I'm sure there's a way to fix wpa_supplicant, but it's man pages only seem to list the options without actually describing what they do, which seems sort of poor considering how old the project is 🤷
jokeyrhyme
Now
•
100%
I'm not an expert, but my understanding of the Global Shortcuts portal is that it's very much designed for the push-to-talk use case where an app is not focused but still receives button events for exactly the keys its interested in and no other keys: I think this would cause problems if an app requested every key (e.g. if the request was approved then no keys would work in every other app)
It'll be interesting to see how the remaining compatibility/accessibility issues are tackled, either in portals or in wayland protocols
jokeyrhyme
Now
•
100%
There's a portal for Global Shortcuts: https://flatpak.github.io/xdg-desktop-portal/docs/doc-org.freedesktop.portal.GlobalShortcuts.html
KDE and Hyprland already implement it, and COSMIC seems likely to
On the app side, if we can get the major toolkits to adopt it, then hopefully that covers most actively-maintained apps (but it's unlikely to cover legacy apps): https://github.com/electron/electron/issues/38288
jokeyrhyme
Now
•
85%
Gosh, I'm so fascinated by the concept of removing/hiding the tabs implementation from every app and relying 100% on the window manager to provide this
jokeyrhyme
Now
•
93%
Wayland breaks global hotkeys: I present to you: Hyprland (where you can get global hotkeys). Now, it is normally not allowed by design, as a security measure
Not disagreeing at all, but I'd like to add some information here to support your correction
There's a GlobalShortcuts portal ( https://flatpak.github.io/xdg-desktop-portal/docs/#gdbus-org.freedesktop.impl.portal.GlobalShortcuts ), and this is implemented for hyprland in xdg-desktop-portal-hyprland ( https://github.com/hyprwm/xdg-desktop-portal-hyprland/blob/b2fc1110963fa583ad5348a9dc0101bd58ceac7a/hyprland.portal#L3 )
So, technically, there is nothing in the wayland collection of protocols that supports global keyboard shortcuts, but (along with lots of other supporting functionality), this is addressed via the collection of portal APIs
As it happens, KDE already supports the GlobalShortcuts portal: https://invent.kde.org/plasma/xdg-desktop-portal-kde/-/blob/master/data/kde.portal#L3
Any desktop can provide an implementation of the GlobalShortcuts portal, and any app can adopt it as required (although if it's implemented within popular toolkits/frameworks, then app developers won't have to even think about it)
Here are related tracking issues:
jokeyrhyme
Now
•
100%
Proton emails are stored in an encrypted form that goes beyond the simple authentication that is part of the POP/IMAP specifications
Proton does have open-source bridges/proxies, so they aren't hiding these details from us
Perhaps Thunderbird could be enhanced to support the Proton features directly?
jokeyrhyme
Now
•
100%
EFF still recommend Signal (and others) for people fitting various risk profiles: https://ssd.eff.org/
jokeyrhyme
Now
•
100%
Google is also going with a combined approach: https://security.googleblog.com/2023/08/toward-quantum-resilient-security-keys.html
signal.org
> We believe that the key encapsulation mechanism we have selected, CRYSTALS-Kyber, is built on solid foundations, but to be safe we do not want to simply replace our existing elliptic curve cryptography foundations with a post-quantum public key cryptosystem. Instead, we are augmenting our existing cryptosystems such that an attacker must break both systems in order to compute the keys protecting people’s communications. > > ... > > Our new protocol is already supported in the latest versions of Signal’s client applications and is in use for chats initiated after both sides of the chat are using the latest Signal software. In the coming months (after sufficient time has passed for everyone using Signal to update), we will disable X3DH for new chats and require PQXDH for all new chats. In parallel, we will roll out software updates to upgrade existing chats to this new protocol.
opensource.googleblog.com
> Rumor 1: Rust takes more than 6 months to learn – Debunked ! > > ... > > Rumor 2: The Rust compiler is not as fast as people would like – Confirmed ! > > ... > > Rumor 3: Unsafe code and interop are always the biggest challenges – Debunked ! > > ... > > Rumor 4: Rust has amazing compiler error messages – Confirmed ! > > ... > > Rumor 5: Rust code is high quality – Confirmed! > ...
jokeyrhyme
Now
•
100%
Huh, I shared this a year ago Not sure why this is popping up again :shrug:
jokeyrhyme
Now
•
90%
I encounter misinformation and other FUD about immutable distributions quite frequently
Imagine a root filesystem that is only modified when you expect, instead of at any time by any software on your system, the horror! </sarcasm>
arstechnica.com
cross-posted from: https://lemmy.ml/post/1073275 > Great explainer / FAQ > > I'll probably still use my Precursor and Yubikeys for the most part, but I'll definitely enable Passkeys wherever they are an option
arstechnica.com
Great explainer / FAQ I'll probably still use my Precursor and Yubikeys for the most part, but I'll definitely enable Passkeys wherever they are an option
blog.google
> That’s why later this summer, we're launching a refreshed Find My Device experience that makes it easier than ever to locate your devices and belongings quickly and securely by ringing compatible devices or viewing their location on a map in the app – even when they’re offline. The new Find My Device network will harness over a billion Android devices across the world to help you locate your missing belongings like headphones, tracker tags, or even your phone via Bluetooth proximity. This earlier announcement about a joint effort with Apple to work out how stop stalkers and other criminals from abusing these networks now makes a bit more sense: https://security.googleblog.com/2023/05/google-and-apple-lead-initiative-for.html
jokeyrhyme
Now
•
100%
While it ended up shutting down, the fact that Google Stadia was also a Linux-based gaming platform might also have factored into the ecosystem improvements and interest, maybe just a little bit
jokeyrhyme
Now
•
100%
It's possible that SteamOS and the SteamDeck are part of the incentive that finally made nVidia get to work on open-source GPU drivers and Wayland-compatibility
arstechnica.com
> We can take a few guesses as to why things are so big. First, Samsung is notorious for having a shoddy software division that pumps out low-quality code. The company tends to change everything in Android just for change's sake, and it's hard to imagine those changes are very good. > > ... > > Unlike the clean OSes you'd get from Google or Apple, Samsung sells space in its devices to the highest bidder via pre-installed crapware. A company like Facebook will buy a spot on Samsung's system partition, where it can get more intrusive system permissions that aren't granted to app store apps, letting it more effectively spy on users. Urgh, it's so frustrating that Samsung is the leading Android manufacturer, the market is rewarding greed and incompetence
arstechnica.com
> In fact, all the “easy” versions of supersymmetry have been ruled out, and many of the more complicated ones, too. The dearth of evidence has slaughtered so many members of the supersymmetric family that the whole idea is on very shaky ground, with physicists beginning to have conferences with titles like “Beyond Supersymmetry” and “Oh My God, I Think I Wasted My Career.”
jokeyrhyme
Now
•
100%
I bought a sealed device, with the intention of doing development but have not yet done anything like that
I installed GadgetBridge on my Android phone, paired it with the watch, uploaded the latest PineTime firmware, all without looking at code or opening it up or anything
It works perfectly fine as a basic watch with step counter and heart-rate monitor (although, I am not sure how accurate these features are)
If you can browse the web, download files, and find that file again when using a different app, then I think you'll be fine
jokeyrhyme
Now
•
100%
I love this part in the sidebar:
“It is correct to call Borealopelta an ankylosaur (which would mean Ankylosauria) or a nodosaur (which would mean Nodosauridae). You just can’t call it an Ankylosaurid, Ankylosaurine, or Ankylosauridae (as these have specific meanings).”
arstechnica.com
> Archaeologists have confirmed that a papyrus scroll discovered at the Saqquara necropolis site near Cairo last year does indeed contain texts from the Egyptian Book of the Dead—the first time a complete papyrus has been found in a century, according to Mostafa Waziri, secretary-general of the Supreme Council of Antiquities in Egypt. The scroll has been dubbed the "Waziri papyrus." It is currently being translated into Arabic.
arstechnica.com
Huh, I have mixed feeling about Google doing this Yay that Apple isn't the only game in town for this functionality But then it's this functionality in particular with all the horrible stalking that it facilitates
www.theverge.com
Great interview and great book What's great about the proposed solutions here, is that they don't require us to teardown capitalism, we just need to make a few very practical reforms
www.theverge.com
Great interview and great book What's great about the proposed solutions here, is that they don't require us to teardown capitalism, we just need to make a few very practical reforms
github.com
I switched over to the completion plugin that is part of https://github.com/echasnovski/mini.nvim and I'm impressed with how suitable it is for my use case without any configuration Sure, it's not as extensible, but it's so set-and-forget and still gives suggestions from LSP
www.youtube.com
oof
restofworld.org
> What is happening in Indonesia is part of a recurring global pattern in countries where battery materials are abundant. Local residents in Chile, Argentina, Congo, and elsewhere complain of environmental destruction, and dangerous or exploitative working conditions. The RLS study’s authors argue that it is crucial to look at the material footprint of the EV industry against the promised decrease in carbon emissions. In the Global South, where most of the raw materials for EV batteries are sourced, “the rising demand for electric vehicles is threatening to worsen existing injustices in the extractive industry,” they wrote. > >And while these places bear the brunt of the immediate environmental fallout, they are not set to benefit the most from the extraction and manufacturing of rare earth minerals — areas mostly dominated by Chinese businesses.
arstechnica.com
> It remains to be seen whether innovations like these can really get the concrete industry to a place where it emits no net carbon dioxide. Yet industry observers and insiders alike find plenty of room for optimism, if only because the momentum for change has built so rapidly. Remember, says Andrew, that as recently as a decade ago there seemed to be no feasible, climate-friendly alternatives to Portland cement at all. The stuff was cheap, familiar, and had a huge infrastructure already in place—hundreds of quarries, thousands of kilns, whole fleets of trucks fanning out to deliver pre-mixed concrete slurry to building sites. “So for a long time, decarbonizing cement production was in the ‘too hard’ basket,” he says. > > Yet today, says Bohan, “because of this intense attention to the climate issue, people are now going back and saying, ‘Wow, we didn’t realize all these options were available.’”
> Entropy is an unavoidable fact of life. "Just don't drop your laptop" is great advice, but it's easier said than done, especially when you're racing from one commitment to the next without a spare moment in between. > > Framework has designed a small, powerful, lightweight machine – it works well. But they've also designs a computer that, when you drop it, you can fix yourself. That attention to graceful failure saved my ass.
> Over the years, the web deteriorated to the state it is in now - a highly destructive force. Much of the damage is driven by the monetization of users and every aspect of their lives. Enterprises capture our preferences, our friends, our families, the information we consume, and the information we create. They manage and maximize for their benefit our preferences, our opinions, our purchases, and our relationships. The web can poison individual opinions, freedoms, and political and social institutions. It steals from us, addicts us, and harms us in many ways.
Now
jokeyrhyme
lemmy.mlhe/him/his, cis, gay, husband, Beagle chew-toy, JavaScript jockey, Rustacean