AnAmericanPotato @ AnAmericanPotato @programming.dev

Posts

0

Comments

132

Joined

1 yr. ago

I’m not (currently) in a position where others would find it desirable to do so. Potentially in the future?

It's hard to imagine a scenario where this would happen and your voice would not otherwise be available. For example, if you went into politics, then you'd be a target, but you'd already be speaking in public all the time. It only takes a few seconds of a voice sample to do this nowadays and it'll only get easier from here.

Maybe just make a point to educate your family and friends on the risk of voice cloning so they don't fall for phone scams.

I've noticed an uptick as well. This isn't the first time it's happened over the years, though. Spam is a cat-and-mouse game. Every now and then spammers learn how to break through, and it takes some time for Google to adapt.

I've been surprised by the latest wave, because it's so obviously spam. Mostly phishing attempts full of misspellings and even numbers in place of letters, like F1del1ty instead of Fidelity. Should be pretty easy to filter.

"Let"

As if anyone asked for this.

I think you're overestimating how many people keep their eyes open at all.

Racism in America is real. Anyone telling you otherwise is probably just living a charmed life and incapable of accepting that their personal experience is not universal.

I don't have the time or energy to prove this exhaustively, but here's a starting point: https://en.wikipedia.org/wiki/Driving_while_black

In 2019, as reported by NBC, the Stanford Open Policing Project found that "police stopped and searched black and Latino drivers on the basis of less evidence than used in stopping white drivers, who are searched less often but are more likely to be found with illegal items."

Please refer to the citations on that page for more details. Lots of studies in various states showing the same thing. The fact that the mere existence of racial profiling in America is still debated, when it has been consistently proven again and again for decades, is itself a clear indicator of a different kind of racism.

Here's a little story that stuck in my memory, about how a white woman finally came to realize that racial harassment by police was a real thing. It's kind of hilarious, in a dark, face-palmy kind of way. https://franklywrite.com/2020/06/01/a-white-woman-racism-and-a-poodle/

It’s explicitly forbidden for anyone to discriminate against you based on your race or ethnicity

Ironically, it's very common to be asked for this information specifically because of anti-discrimination laws, so they can demonstrate statistically fair practices. I always see a box for this on medical forms, new-hire paperwork, etc. I believe the law requires it to be optional and only used for regulatory reports. So that's probably what OP heard about.

Oh nice! I did a quick search for forks but didn't find that, so thanks for linking. I'll check it out!

This assumes a legitimate need to prove who you are outside the context of that specific site, rather than just within it. Sometimes that need is real, sometimes it is not.

When it's not, and you only need to prove you are the same person who created the account, then a simple username and password is sufficient. Use 2FA (via authenticator app or key, NOT via SMS or email) on top of that. This allows users to prove to a sufficient degree that they are the owner of that account.

This is how most Lemmy instances work, for example. I can sign up by creating a username and password, with optional 2FA. They do not need my email. They do not need my phone number. They do not need my name, or my contacts, or anything else that is not related to my identity within their server.

I realize that this is untenable at large scales for any communications platform. Spam (and worse) is a problem wherever there are easy and anonymous signups. I'm honestly not sure how Lemmy is as clean as it is. I guess it's just not popular enough to attract spammers.

Looks like the open source version was axed, and the cheapest subscription plan is $36.67 per month per user. Yikes.

I'd kill for a modern HyperCard.

which would indicate that it’s somehow needed to generate AI-generated CSAM

This is not strictly true in general. Generative AI is able to produce output that is not in the training data, by learning a broad range of concepts and applying them in novel ways. I can generate an image of a rollerskating astronaut even if there are no rollerskating astronauts in the training data.

It is true that some training sets include CSAM, at least in the past. Back in 2023, researches found a few thousand such images in the LAION-5B dataset (roughly one per million images). 404 Media has an excellent article with details: https://www.404media.co/laion-datasets-removed-stanford-csam-child-abuse/

On learning of this, LAION took down their database until it could properly cleaned. Source: https://laion.ai/notes/laion-maintenance/

Those images were collected from the public web. LAION took steps to avoid linking to illicit content (details in the link above), but clearly it's an imperfect system. God only knows what closed companies (OpenAI, Google, etc.) are doing. With open data sets, at least any interested parties can review, verify, and report this stuff. With closed data sets, who knows?

I've noticed that Google is getting more and more aggressive with VPNs. It won't let me load anything on VPN without logging in. This applies to third-party tools like yt-dlp too.

This probably depends on your VPN provider. Perhaps I can make a throwaway google account just to get it to stfu? I don't know how hard it is to make a semi-anonymous Google account nowadays.

Another issue with Google Play is that there's nothing stopping the developer from pushing out an update that doesn't match the published source. It isn't tied to GitHub or anything.

Developers with apps on Google Play are frequently targeted with buyout requests from scammers looking to get malware to an existing user base. Or even if it's not explicitly malware, it could be closed-source.

For example, the "Simple Mobile Tools" app developer sold their apps a year or two ago. Now they have ads, in-app purchases, and god knows what else. If you had installed them from Google Play, you would have received these updates automatically. Those new versions don't exist on f-droid, naturally. Anyone who was using them should really uninstall them and install the "Fossify" forks from f-droid.

Every developer ID publishing on Google Play is potentially for sale. There are no real safeguards against this, and you might never know. At least with F-Droid it's verified as open source and malicious (or just plain crappy) updates can be identified and dealt with, either by f-droid maintainers or by end users.

Typo in your link (but not in the text). https://searx.space/

8 is also a lucky number in Chinese culture. I've seen a lot of "88"s in Chinese social media just because of that.

It always sucks when shitbags co-opt innocent symbols and language.

Ridiculous.

He specifically started talking about American party politics, unprompted, making sweeping statements about both Democrats and Republicans. NOW he wants to blame us for...being concerned with his views on American party politics? Dude. Get real.

Saying stupid shit now and then is forgivable, but not if you take it in as the new nucleus of your public image. Why do so many public figures have this compulsion to double down combatively?

Sorry, it looks like the real estate option in Portugal is no longer available. :( Now it would take a €500K investment in a local business or €250K in a nonprofit. If you're that stinkin' rich, you probably have better options already.

According to https://www.globalcitizensolutions.com/real-estate-citizenship/ , Cyprus offers a citizenship path with real estate purchase of €300K. Greece and some other countries do, as well.

I'm not worried about getting raided by the KGB or anything like that, but break-ins happen and my computer equipment would be a prime target for theft.

I occasionally cycle my backup drives off-site, so I want those encrypted as well.

The cost of encryption is very close to zero, so I don't even entertain the question of whether I should encrypt or not. I just encrypt by default.

Are you able to spend a lot of money on it? Last I checked, there were a few places in the EU that had a citizenship track if you purchased substantial property. So if you're in position to buy a nice house, that's an option. I think Portugal is the most approachable cost-wise. But it's been a while since I looked at this so I'm sure things have changed.

Several countries will allow extended student visas, even if you only speak English. I think Sweden allows this.

Then of course there's the easy way: marry a Canadian.

And it wouldn’t affect your ability to download torrents if you don’t have port forwarding on VPN, just your ability to upload

This isn't quite true. Two peers who both lack port forwarding will not be able to connect to each other at all. Once a connection is established between two peers, both uploading and downloading should work just fine.

A significant portion of swarms are users like that, who can initiate connections but cannot receive incoming connections. This is especially problematic with smaller torrents. If you're working with well-supported torrents with dedicated seeders and thousands of users, then it won't really matter. But if you need something with just a couple seeders, you might find yourself stuck with zero accessible peers.