- 119 Posts
- 35 Comments
9·7 days agoI know right, every time I use any google service Firefox goes ballistic.
They use https now, but use CRC for signature verification:
AMD told MrBruh that all update communications now use HTTPS and that updates undergo signature verification. The researcher says he verified the HTTPS claim, but found only a CRC32 check on the downloaded executable, which is not considered a cryptographic signature.
I could be wrong here, but I believe they should use a combination of SHA256 and PGP for signature verification.
The problem with using CRC32 is it reversible and has high collusion rate. An attacker can easily make a file the generates the same hash. This tool a few minutes of searching online. It appears that people who work at AMD don’t even know how to do proper research. All they have to do is look up how to make a secure updating process.
Yes, with truth social pre-installed
I don’t think there is any fucking involved, probably lots of crying though.
2·13 days agoThere is a fee but it is negligible, you just need to buy on sales. As for indexers just get a one or two life times and it will pay itself over time. I only have one subscription indexer, the rest are life time.
This is last year’s black Friday sale: https://www.reddit.com/r/usenet/comments/1p3ajl6/_/
Never buy usenet full price
You can get it some usenet providers for as little as $30 year which is $2.5 a month, maybe ever cheaper.
Lots of them offer trials if you just want to try it
Lime is the issue, I removed it for this exact reason. I mainly use usenet if I want torrents I will look for it manually. Usenet is way safer than torrents from my experience.
I have an account but I forgot the password and I used a throw away, so I can’t get it back. The problem with blusky it didn’t advertise itself very well, not many people even know it exists simular to Lemmy.
I believe they are using a modified version, not 100% sure. But in my opinion they should let the user decide on install.
https://news.ycombinator.com/item?id=47559056
I honestly blame ISO they should have never approved this format. https://www.ip-watch.org/2008/04/01/office-open-xml-officially-approved-as-international-standard/
This is what they said exactly:
Anthropic claimed an external bug bounty produced no universal jailbreaks across over 1,000 hours of testing before launch. That claim was almost immediately tested.
Easiest solution is awarness. Teach the parents how to monitor their children and how to use parental control. They can offer classes for this.
deleted by creator
I do agree that most people probably don’t change the defaults, but I believe that apple stopped the scan for CSAM years ago on iCloud.
https://edition.cnn.com/2022/12/08/tech/apple-csam-tool
Also you forgot to account for apps like Signal which store the photos encrypted in their own database.
This is not as simple as scanned photos, currently apple for example can do this locally on their own apps. The problem is apps like signal.
Only for apple apps, it doesn’t scan the entire device.
Messages, FaceTime, and AirDrop
Google has something similar I believe for Google Messages
Also they have to verify if the person using the device is a child if they want to implement this on the entire device.
Dude everyone is aware that Google scans google drive, it is not your own cloud naturally they can do what they want with it. If you store your data on someone else’s server naturally they can see what you store. We are taking about devices you own with android and ios this is completely different.
https://www.gov.uk/government/news/new-plans-to-stop-children-taking-sharing-or-viewing-nude-images Britain will become the first country in the world where it is impossible for children to take, share or view naked pictures on their devices.
deleted by creator
They created the model and trained it, but they don’t know why it gives what it gives when you ask it a question. Which is why they still haven’t solved the hallucination issue.
They are using an open source license. They threatened a developer to remove the code, most people believe that they want to lock the printers in the same way that HP does. They want you to pay a subscription. What they basically did form my understanding is take an open source code and add a cloud component to it, but they did not make that open source even though the open source license requires that all code be made open source
It was built on top of PrusaSlicer, which itself came from Slic3r. Both predecessors carry the AGPLv3, and so does every derivative built from them. SFC looked at both the userspace software and the firmware running on Bambu’s devices and pointed out the violations.
The first is about libbambu_networking, a networking library that ships with Bambu Studio across Linux, Windows, and macOS. It handles all communication between the slicer and Bambu’s cloud.
Bambu has never made the source code for it available, despite AGPLv3 requiring that any code distributed alongside an AGPLv3 project be released under the same terms. SFC says Bambu’s own README has effectively sat with this admission for years now.
The second violation comes from how Bambu handled Paweł Jarczak, a developer who built a fork of OrcaSlicer that could communicate with Bambu’s servers by studying the incomplete Bambu Studio source code.
He did not touch the proprietary library at all. Bambu still contacted him, demanded removal, and stated a cease-and-desist letter had been prepared, arguing its terms of service take precedence over the license.
You see the problem? The AGPLv3 explicitly says no one can place additional restrictions on the rights it grants. The SFC says going after Pawel the way Bambu did is itself a violation.
They had to choose persona they couldn’t help themselves