Skip Navigation

Posts
0
Comments
38
Joined
2 yr. ago

  • Its double exposure.

    Since the sky is so bright, if you take a photo capturing the city buildings color, the sky ends up almost white due to it being so white. If you expose for the sky colors instead, you can see the full gamut of colors in this sunset, but the buildings would end up very dark (this is how we end with those iconic western film scenes or dark ground with red sky).

    You can take a double exposure to combine both so you have a higher range of light. There are many techniques for it and phones do it automatically but can be done in any camera, even film cameras. However if you fuck up or theres movement (slighty different angle) between the two takes, you can end up with things ghosting out.

    It can be used to create lots of tricks: https://www.ericjamesphoto.com/blog/2016/2/double-exposures-on-film

    In the 19th century they used it to "photograph ghosts" (spiritualism was in vogue at the time): https://en.wikipedia.org/wiki/Spirit_photography

  • That's a super sexy build! Tasteful use of lights

  • Why cotton instead of linen? At least in Spain, linen is more popular as summer clothing, and definitively feels fresher.

  • Any site worth its salt (heh) will verify criteria on client for UI reasons, not just in the backend

  • Didnt know Nushell, but that looks better than cmder! Will give it a try.

  • Both of those progressing nicely in Spain, and the result was... a rise of the right, that has doubled down on destroying the aquifers in the south, the most affected region.

    So the worse things become, the more people turn a blind eye to the issue.

  • Waterloo (1970). That many extras required the collaboration with the soviet army, as well as bulldozing a big area to film.

    We can see the difference very clearly with the new Napoleon trailer, which despite the huge budget looks outright poor in battles.

  • Do people have such short memory? The US does it, yeah, it was a super major scandal years ago. Spying not just on "enemy" states but also supposed allies, as well as all citizens all over.

  • Set your build goals now (check !buildapc@lemmy.world ) and use alerts/price trackers to see good deals. There are some good deals on Black Friday but many are bogus, its to better to check every now and then for deals.

  • Yeah, the password is much better. In Windows you also realize it because the admin screen is hard to miss, but you can just go ahead and accept it, since many users run their PC as admins.

  • I mean, in europe they are more expensive, 4070RTX was about 700€ (770$). Different currencies and different taxes. And greed.

  • If you have root in linux you can disable that, so you are in the same state. You could also selfsign.

    This is an issue, but IMHO quite overblown.

  • nVidia GPUs:

    970GTX was 329$ in 2014

    1070GTX was 379$ in 2016

    2070RTX was 499$ in 2018

    3070RTX was 499$ in 2020

    4070RTX is 599$ in 2023

    Probably, the 5070 in 2025-6 will be 650-700.

  • With admin privileges you can do the first one though, as the whole revocation list on certs is a fucking general mess (and that applies to web in general, not just windows).

    In general if your attacker is admin or has tricked you into executing something as admin, you are pretty much fucked, regardless of drivers.

  • No, that exploited a legitimate driver to be a point of entry and enable other attacks, and is much more problematic.

    This enables attackers to make non legitimate drivers appear legitimate to windows, but they have to be installed anyway, requiring admin privileges.

  • Yes and no. It's an escalations issue. Even with administrator access, you are not supposed[note1] to be allowed to install drivers with invalid signature, which supposedly haven an even high chain of trust (although this really iffy unless you are using secureboot as well but that's another discussion).

    That said, when the attacker already has admin privileges you are so far in the compromised chain that the kernel driver is an issue, but you are most likely completely fucked anyways.

    This just makes your vulnerability state to be the same as in linux, where your drivers arent required to be signed in the first place, for example.

    [note 1]: There's a caveat, with admin acess you can disable driver signatures entirely, using bcdedit, this is called test signing and leaves a visible watermark at all times with "Test signing enabled", therefore the user can already see that the computer is compromised. Its mostly useful for devs (or attacking people who dont give a fuck).

  • The whole signing of kernel drivers and UEFI code has always felt more of a walled garden/security racket to get actual legitimate hobbyist/open source to pay a shit ton for certificates, rather than actual security. Especially with all the hoops with older version support (if you wanted to fully support win vista or early7 you needed to dual sign with sha1, and most cert companies didnt know that and you had to fight with them to provide one), and the super shitty page that was the windows development hardware center for signing.

  • With the advances on SDcards, IPoAC is getting better and better.