NekuSoul @ nekusoul @lemmy.nekusoul.de

[@nekusoul@mastodon.nekusoul.de](https://mastodon.nekusoul.de/@nekusoul)

---

Read more

Posts

3

Comments

361

Joined

2 yr. ago

I believe there are some services, including some selfhosted ones, that allow you to quickly create (and later delete) unique aliases.

That said, I was surprised that these dictionary spam attacks don't really happen all that much, at least based on my own experience. Most of the ambient drive-by spam my server receives targets email addresses belonging to domains I don't even own. Blocking those and a few Sieve scripts gets rid of 99% of spam for me.

Interestingly, there was one time I received spam to a bogus address belonging to my own domain: A while back, one of my actual email addresses got leaked (thanks Sega) and a few months later that address got copied into another dataset but with a typo, which I assume was caused someone using OCR.

I think the way to go about detecting cheats server-side would be primarily driven by statistics. For example, to counter wallhacks one might track how often a player is already targeting an enemy before they become visible. Or to counter aimbots one could check for humanly impossible amounts of changes in the direction of mouse movement, somewhat similar to how the community found out a bunch of cheaters using slowmo in Trackmania.

Add in a reputation system that actually requires a good amount of playtime to be put into the highest tier of trust for matchmaking and I think one could have a pretty solid system that wouldn't have to rely on client-side anticheat at all.

But also, in a world where such a law did exist, it would naturally force every third-party to create their contracts in a way that would allow the eventual release of the source code, or lose out on the deal and subsequently, the money.

I've switched over a year ago and that's the thing that, looking back, sticks out to me the most as well. It's just insane that practically every application I used had its own update routine. Lesser used apps I had to update every single time before using them. Just constant interruptions everywhere.

Winget is a step in the right directions, but it still has to build upon and work around that same shaky foundation, and it shows.

Yup. For me it similar. I was getting frustrated with the lack of customization in Win11, while at the same time seeing that Linux is actually viable for me with the Steam Deck.

I've been running Linux for a year now and while it was good enough for me to switch back then, it's incredible how much better it has gotten since then.

Not any specific model, but I kinda like low-profile keyboards using scissor switches often found in laptops. Not as great as a mechanical, but I like how they bring over some of the aspects of clicky/tactile switches while also being low profile.

I see you implying everyone arguing against you is either a dumb moron, a child or russians in your other comments, so it's worthless arguing against your, ironically, authoritarianism-fueled idea.

Bye.

Sorry, but this comment left me completely stunlocked. Why am I supposed to solve the problems to a problem you've created? Since when is trying to prove your point not how an argument works? What even is an argument anymore?

So what happens when a platform grows and that threshold is reached one day? Force everyone to de-anonymize and potentially reveal sensitive information about themselves or abandon their account?

There's just no good way to force only some to de-anonymize without running into problems.

While I believe in the right to online anonymity, I also don't think that de-anonymization would even work, when I see the same garbage being posted in places that enforce real names. It just doesn't seem like a detractor to those types of people.

Instead, I'd rather want to see harsher punishments for big sites failing to moderate their content. I'd also take a look at these personalized "recommendation" engine and maybe ban them altogether. (Bonus points if it also affects personalized ads.)

So how exactly would you decide which platforms are allowed to be anonymous then?

It might be feasible, but it's a bit awkward to implement because Wireguard is stateless and doesn't know if a client is offline or just hasn't sent any traffic for some time.

That's kind of weird, because the reason why I never bothered with (selfhosted) VPNs before Wireguard was because it was the first one that just worked. Granted, due to its nature, you don't get a lot of feedback when things don't work, but it's so simple in principle that there's not a lot that can go wrong. For external VPNs like this, it should just be: Load config, double-check, done.

Aside from better server side detection, which is I agree is severely underdeveloped, I'd say that the next big step should be a much bigger reliance on reputation-based matchmaking, ideally across games. It would need to be built in a way that's not abusable by devs or trolls and should be as privacy-respecting as much as possible (as in, not having to validate with your ID South-Korean style), which isn't an easy task. Working properly however, it would keep honest players from seeing any cheaters at all with no client-side anticheat required at all, which would be nice.

Yup. If it's important enough that devs now have to add a disclaimer on the store page, surely devs shouldn't be allowed to circumvent that by adding it later. Since SteamDeck customers are affected by this the most, it's weird that this isn't already a rule, particularly for games that are SteamDeck verified.

Or the opposite: We only need one of those randomizers that shuffles the unlocks between multiple games. Just imagine one that incorporates Factorio, Satisfactory, shapez 2 and maybe Dyson Sphere Program. You'd be set for life.

The factory must grow (into other games).

That's a bummer. I've been using the forked version as well, and even that dev has been annoyed with Google Play enough that it's only released on F-Droid nowadays.

Personally, I don't think it's an issue only releasing only on F-Droid, because the people interested in Syncthing wouldn't be deterred by that if they're not already using it, but I totally get why that might sap the last bit of motivation the dev has.

I've made similar coasters a while ago, just with a stone tile as the base. Despite having to endure a cup of hot tea every day, it's holding up very well so far and stays clean.

The PETG did minimally deform after months of using it, which is both good and bad. On one hand it's now formed in a way that perfectly fits the specific cup I use, but that also means that it's become a bad fit for every other cup or glass.

Your comment about using TPU has given me the idea however to make the tile reversible with the current PETG on one side and Flex material on the other.

I'd be more concerned as well if this would be an over-night change, but I'd say that the rollout is slow and gradual enough that giving it more time would just lead to more procrastination instead, rather than finding solutions. Particularly for those following the news, which all sysadmins should, the reduction in certificate lifespan over time has been going on for a while now with a clear goal of automation becoming the only viable path forward.

I'll also go out on a limb and make a guess that a not insignificant amount of people only think that their "special" case can't be automated. I wouldn't even be surprised if many of those could be solved by a bog-standard reverse-proxy setup.

Part of this might be my general disdain towards sysadmins who don't know the first thing about technology and security, but I can't help but notice that article is weirdly biased:

Over the past couple of days, these unsung heroes who keep the internet up and running flocked to Reddit to bemoan their soon-to-be increasing workload.

Kind of weird to praise random Reddit users who might or might not actually sysadmins that much for not keeping up with the news, or put any kind of importance onto Reddit comments in the first place.

Personally, I'm much more partial to the opinions of actual security researchers and hope this passes. All publicly used services should use automated renewals with short lifespans. If this isn't possible for internal devices some weird reason, that's what private CAs are for.

Personally, I watch the channels from the creators I like and slowly grow my channels through their recommendations. My bookmark goes straight to the subscription page and have uBlock filters for all the unwanted recommendations.

I couldn't stand having an algorithm decide what I watch.