• livenowfox.com/…/uss-abraham-lincoln-arrives-thai…
• newsweek.com/uss-abraham-lincoln-photos-reveal-wa…

cross-posted from: piefed.zip/…/stop-killing-the-internet-no-digital…

This was posted to cybersecurity and I am not sure how to make a proper crosspost. Or even if that is a thing I can do. So just dropping a lemmy link in the url. Hope that is OK. The external link is here -> malwarebytes.com/…/aliexpress-caught-using-silent…

Given how much fingerprinting relates to privacy, seems related for this group too. Yet Another Fingerprinting Technique. It doesn’t record the user, just a silent signal which still has variance due to the unique device.

researchers and browser maker Brave reported finding silent Web Audio processing on the site that could help fingerprint visitors’ devices.

on top of that, the traditional fingerprinting signals are used too,

The scripts also gathered information tied to canvas rendering, WebGL, display settings, hardware configuration, WebRTC behavior and user interactions. Together, those signals can create a more detailed profile of a device than any one signal would provide on its own.

cross-posted from: lemmy.world/post/51177007

Think the roughly $18 Billion Meta has settled for over child safety is a slap on the wrist?

Wait until you see the actual details: 😀 Paid in annual installments over a 10-year period

😜 States receive the money, not the victims

🤑 30% will only be paid if YouTube & TikTok:

"…pay an amount matching the 30% figure “…implement a one-hour Daily Limit, Night Mode, and age assurance measures”

about.fb.com/…/agreement-with-state-attorneys-gen…

Meta even wrote a wonderfully open letter to their competitors!

Sadly now everyone will have to verify themselves, too bad for Meta, now they will have to collect even more data - which we know they totally oppose and hate ;)

Homepage is a dashboard for all your services with plenty of plugins to have the services status displayed in one place

The interesting part is that it came through a legacy Lenovo ID authentication flow, not some crazy “encryption got broken” scenario.

Makes you wonder where the real weak point in cloud storage usually is — encryption, login, or third-party integrations?

Been looking into Posteo and I saw the price for additional storage is 0.25/GB/month with a cap of 75GB. I calculated this to seem to be 18.75 (including the initial 4GB) per month. When looking at Proton, Tuta, and Startmail, this feels very expensive compared to their competitors. Is there something I’m missing here? Does Posteo do a bunch of stuff that warrants a high rate for the higher end compared to the very affordable low end?

I am on one ui right now, I dont know if they collect any telemetry. Will it help to pick a minimal one from fdroid?

Also for battery life, would one ui perform better because better optimisiation or debloated foss launcher?

A general question on the efficacy of Duck Duck Go in blocking trackers.

A friend of mine with decent credentials in security is constantly shitting on any use of DDG. I use it on an e/OS which was preinstalled into settings to block both browsing and tracking through my apps, the worse being banking apps even when not in use. He has even gone so far as to state that they are probably faking the numbers of blocks to get people to keep using the products. Another line is that it is Russian built/propagated garbage product.

Does anyone else hold this belief? I have not seen much of this discussed here in this forum and also see it recommended often enough. I ask you fine folks because it just feels so defeating.

Sorry for, source: this god damn bloke told me.

Summary:

• GPT-6 Astra scores 62.7% for $26K on ARC-AGI-3 Semi-Private with our Standard harness, and 99.9% for $19K with a Provider Adapter harness.
• GPT-6 Astra surpasses the human baseline in action efficiency on ARC-AGI-3. It used fewer actions than the median tested human on 96% of levels.
• A key behavior observed in GPT-6 Astra was its ability to turn unfamiliar environments into compact symbolic world models. It represented game mechanics as logical rules and developed its own domain-specific language shorthand to track state and plan actions.

For a cost comparison, during our controlled testing, human participants were paid $115 per 90-minute session, plus $5 per game completed. Participants attempted approximately nine games per session, roughly $12.78 per attempted game before bonuses.
Most of this fee pays for the participant’s time and willingness to take the test, rather than the energy their brain uses (a closer proxy to compare with AI). If we look at only the brain’s energy, and price it as electricity, the estimate drops to about 0.6 cents per session, or 0.067 cents per game attempted.1

Astra’s results are also a major milestone worth celebrating. From our perspective, Astra represents a noticeable step-function change in frontier model capabilities.

When we launched ARC-AGI-3, we made it clear that saturating the benchmark would not represent “proof of achieving AGI.” Therefore, while we believe Astra represents meaningful progress towards generalization, we are not claiming that it is AGI.

Your tele-screen is watching you back…

Re:Zero kara Hajimeru Isekai Seikatsu 4th Season, episode 16

Related Communities

• !re_zero@lemmy.world

Reminder: Please do not discuss plot points not yet seen or skipped in the show. Failing to follow the rules may result in a ban.

All discussions

This post was created by a bot. Message the mod team for feedback and comments. The original source code can be found on GitHub.

ZKas is a one month old cryptocurrency that combines Kaspa’s GHOSTDAG BlockDAG - fast, parallel, proof-of-work block production with Zcash’s Orchard shielded protocol, so that every amount, sender, and recipient is hidden by construction.

Zcash’s privacy is considered to be the most advanced but it’s not enabled by default, so receives criticism from people (e.g. Edward Snowden). Kaspa’s DAG achievements enable it to produce 100 blocks per second but it’s a transparent ledger.

ZKas combines Kaspa’s and Zcash’s work and creates the fastest privacy network with 1 second block time and mandatory hardest encryption.

Enthusiasts and developers are welcomed:

zkas.info

discord.com/invite/jysMS4XNFT

Today i learned that manjaro has, in parts, german roots and is maintained by a german company. For that i, as a german myself, want to strongly apologize in the name of the german people!!

I am so excited about this project. Yes, I am a backer. I love that they are actually testing patterns against real-world cameras (Flocks, Rings, etc) and releasing only those that reliably defeat them.

Check the two most recent updates

Yesterday (Aug 15)

The GPUs have been at 100% for months. Billions of patterns tested against an “impossible” gauntlet of camera models. Here is the plain truth on where we stand.

Hoodie: our best piece. Across all the person detectors we test, nearly 5,000 patterns hit a perfect record. The hoodie covers the most of you, so the pattern has the most to work with.

T-shirt: strong on individual detectors, still tightening. T-shirt patterns beat person detectors on tens of thousands of tests. What we are still building is the harder win: a single T-shirt pattern that stops a real camera on every person, every time. The hoodie is there. The T-shirt is close, and the ship design will be our strongest.

Buff: oh, the buff. The hard one, and here is why. It has to beat two things the shirt and hoodie do not: face detection and facial recognition, both far tougher than spotting a person. So far it reliably beats one of the four face detectors (2,600+ wins), facial recognition is cracking. Two of the toughest models have not fallen to our main method yet. So earlier this week I implemented a second, smarter method, and it is already working. In testing, it fooled the hardest face detector 71% of the time on people it had never seen before. That is the direction the final buff design is heading.

I do not count a win unless two things are true. One, the pattern beats a plain black version of the same garment, so we know the pattern is doing the work, not just covering you. Two, it works on people the system was never tuned on That is a strict test. I watch the wins and losses come in live, and most patterns die on that screen. The ones that make it are real.

The shirt and hoodie are proven. They defeat real cameras today. The buff is the last wall, and I have found the cracks. Last night, on faces it had never seen, it beat that detector 71% of the time. A week ago that number was zero.

This is what it looks like when a wall comes down. Not a press release months from now. Right here, in real time, with you watching. We will finish this.

Today (Aug 16)

We crossed $100k today. I set the goal at $5,000 because that is what I thought it would take to get the first patterns onto real fabric. I never expected to be writing this kind of update.

When I started this research I knew it was important. The feedback from the community has been overwhelming, and your support for this project means you care about your privacy too. Know that every waking minute I am developing the strongest countermeasures possible.

Every dollar of this goes into the research. More cameras to test against, more fabric, more print runs, and the time to keep pushing on the problems that are not solved yet. Six months ago I was begging for GPU hours. Now I can chase the hard cells until they break.

Thank you. I am humbled, grateful, and thankful for you all. Genuinely. If you know someone who would want this, please send it their way.

-Bill

cross-posted from: lemmy.bestiver.se/post/1289547

Comments

There are some services that I expose to the internet (using Apache reverse proxy) that really should be accessed by only a small set of devices. Requiring client certificates seems like a great way to reduce the attack surface and prevent brute force attacks (since the attacker doesn’t even get a chance to attempt a login).

I wonder about the difficulty on the client side as well as other practical implications. The clients are smartphones of various makes.

cross-posted from: lemmy.ml/post/51469097

A full-featured 2D + 3D CAD application built in Rust with GPU-accelerated rendering. Native DWG & DXF read and write, paper space, ACIS solids, dimensions, layouts. An open source community project by Hakan Seven, recognized and promoted by the OpenAEC Foundation.

How to build the web version.

I have noticed that my home server is strangely using lots of swap (~5 GB), despite having only a few lightweight processes running and loads of RAM installed (32 GB).

Upon configuring Grafana + Prometheus, I noticed a trend where cache + buffer will progressively increase until swap starts to be used. My system and services combined will use ~8 GB RAM. Upon rebooting, the cache + buffer will start anywhere from 3–10 GB, progressively ramp up to ~25 GB in 1–2h, where swap will start to be needed (~3 GB). See the image attached for reference.

My swap filesystem is on an expensive (to me) SSD, and I would like to reduce its wear by as much as possible. I understand that swap can introduce only minimal wear on SSDs depending on its nature and that it can be harmless, but I am still not sure what is causing this behavior (and why) and whether I should worry about it or not. So I figured I should investigate what is happening here.

My main question is, how can I figure out what is causing this behavior? Is it expected? I am looking for guidance from others who are more experienced than me in the topic.

A little bit about my system:

I am running Debian 12 on an NVMe SSD containing the root partition (btrfs) and docker services. I also have two HDDs, one with persistent data (ext4), and the other with backups (ext4). This is majoritarily a single-user machine. I tried using the following kernel parameters, but it hasn’t helped:

vm.swappiness=10
vm.vfs_cache_pressure=200

My docker services are:

• *arr stack
• jellyfin
• nextcloud
• immich
• open-webui + ollama
• pi-hole
• invidious
• romm
• nginx proxy manager
• grafana + prometheus
• other minor services that I don’t think are doing much (uptime-kuma, stirlingpdf, vaultwarden, etc)

I’m using Frigate with these TAPO cams:

Tapo 2K+ Indoor/Outdoor Wired Security Camera, Baby Monitoring, C120

The CAMS support the RTSP protocol, which works with Frigate.

Yes the cams support audio mic and speaker when connected to the TAPO service and using the TAPO phone app.
But I do not want to use TAPO’s service and their app / servers.
I keep my cams on a separate router / subnet which does not have internet access.

Only my Frigate server has a network interface on that subnet, so it can access the cams feeds via RTSP.

Now I would like audio intercom so I can listen to audio or talk through a speaker using the Frigate phone app.

I don’t see such an option in Frigate.
I see there is something called “go2rtc” but I’m not sure if these cameras support this. Or even how that protocol works.
I’m willing to buy a new cam, different model or manufacturer if necessary is fine.

How can I achieve this?

edit:
I needed to edit ~/.config/qui/config.toml and bind the host to “0.0.0.0”

I’m running Debian (12) and I just installed qui, a single binary dropped in /usr/local/bin. When I fire it up, I can access the web interface on the local machine via localhost:7476, but I cannot access it over the LAN via the server’s IP. Firefox just says ‘Unable to connect’.
I can access a dozen other services over the LAN, and as far as I’m aware there’s no firewall enabled by default.
What gives?

I think it would be nice if my guests could easily print and scan when they are visiting.

Printing should be relatively easy nowadays with the printer on the same network. Scanning is another story. I found this nice project which works very nicely.

However, I would love to have the same but for printing, that way I would not have to do device specific troubleshooting/helping when trying to print something from guests’ devices.

There is this project, which has a screenshot of what seems to be exactly what I’m looking for, but the issues are unanswered, there is no release, the building of the project is lacking.

Dockerfiles are incomplete, they are lacking copy yarn.lock and api lacks db initialization. The ports seem to be hardcoded. And once built, it doesn’t work or at least I didn’t manage yet. I got the frontend finally up but can’t login. My knowledge is very limited so I’m checking with you if there is anything similar in the landscape or anyone willing to help on that project. Unfortunately I am locked out of github.

CUPS didn’t work for me as I can’t see an upload option on the web UI.

edit: So I spent time on tweaking the akronae repo, and after a few corrections, adding CUPS and improvements, I managed to get something functional. If I have more time I might publish it. It’s fully vibe coded though 'cause I couldn’t be arsed learning TypeScript and shit, and the original repo has plenty of outdated dependencies which, same, I won’t update because I don’t have the skills.

The mouse did not survive interrogation.

Also mouse not pictured.

cross-posted from: sh.itjust.works/post/66395410

happiest guy you’ve ever seen

reference to this meme

but with this song about transitioning (but transmasc instead of transfem)
youtu.be/OSYmTw6_bjc

forgot to crosspost this one when I posted it lol

I got my kid a cheap generic gamepad that I like a lot for its features (and price!) And was thinking of getting another one and modding them with hall effect sticks, so I stopped to actually look at it to consider if it was worth it and noticed it doesn’t have triggers, the L2 and R2 are just buttons.

Which got me thinking, do analog triggers matter all that much? I don’t really like racing games in general and since I’m a PC gamer I don’t even consider the gamepad for precision shooters (if I feel I need precision aiming I just do m+k). I can’t think of many situations where I don’t just bottom out the triggers on my xbox gamepad, to the point where I get surprised if in the middle of a game I find out I can do stuff like a weak shot with a bow or a weak anything.

What situations, other than throttle and break in vehicles, do you find yourself making real use of the analog triggers? Do you think you would miss them if you didn’t have them? Why? Maybe I’m just not noticing when I use them, it’s nice to have, sure, but can’t say more than that.

Something I noticed as a consequence of online culture and platform design, especially on social media:

It is very common online to follow an account not for the person behind it, but the way they present and discuss a topic or niche, even if they aren’t doing this with a professional intent or style. Then when the topics shift or we get tired of the person, people try to find someone else that scratches the itch.

It’s like we use people online to engage with topics by proxy, and they are rather replaceable. We don’t just watch crochet videos, we watch this specific person crochet, but not for her as a person, and so on. People seem to have roles to fill in terms of who they follow, and they’ll move on if the role is no longer adequately filled, or the roles change. Feeds are highly curated; too many posts considered off-topic and you are ruining the vibe.

Previous Thread | Next Thread

Welcome to another general discussion thread! Feel free to use this thread to talk about things you have watched recently, questions you have, or recommendations you want to give!

As always, remember to be mindful of spoilers. If you want to know more about how to handle spoilers in this community, check the guide here (also linked in the sidebar).

cross-posted from: https://piefed.world/c/tech/p/1389931/openai-claims-to-have-solved-maths-problem-that-stumped-humans-for-decades-company-behin

The company behind ChatGPT said it had cracked the Navier-Stokes problem, one of 7 Millennium Prize Problems published by the Clay Mathematics Institute to highlight some of the biggest unsolved puzzles in the field.

Koukaku Kidoutai: THE GHOST IN THE SHELL, episode 10

Reminder: Please do not discuss plot points not yet seen or skipped in the show. Failing to follow the rules may result in a ban.

All discussions

This post was created by a bot. Message the mod team for feedback and comments. The original source code can be found on GitHub.

A group representing American automakers sent a letter (PDF) Thursday to congressional leaders asking for a “permanent ban” on Chinese-made cars in the U.S. John Bozzella, the Alliance for Automotive Innovation’s CEO and president, described in the letter China’s manufacturing industry as “rooted in a well-documented pattern of unfair trade, subsidies, intellectual property theft and surveillance.” Bozzella addressed his request to Senate Majority Leader John Thune (R-S.D.), Senate Minority Leader Chuck Schumer (D-N.Y.), Speaker Mike Johnson (R-La.) and House Minority Leader Hakeem Jeffries (D-N.Y.) – urging them to back a “permanent ban on the sale, import and manufacture of Chinese connected vehicles,” before the 119th Congress concludes in January.

Youjo Senki II, episode 10

Reminder: Please do not discuss plot points not yet seen or skipped in the show. Failing to follow the rules may result in a ban.

All discussions

This post was created by a bot. Message the mod team for feedback and comments. The original source code can be found on GitHub.

Today’s game is some more Assassin’s Creed 3. Admittedly I was originally going to do some more Pokemon Platinum, but the SD card I was using with my FlashCart failed me. it’s my fault. I should have known better than to trust the cheap no-name Chinese SD card that was giving me issue after issue. Nonetheless though, I was able to save my save file so all is good.

Since I had none of those screenshots though, I was left with not a lot of options. I ended up settling on AC3. It’s been my background project for a little bit. My original plan was to play it to 100% from the start, but it turns out my Save File got backed up. So instead I’ve been running 2 saves. A 100% Save where the story is already complete, and a story save, where I’m just worrying about the story. I love this game, not enough to play 100% twice on it though.

Anyways. First off, I’m playing the remaster and I feel like it looks like shit. Like, I know it’s a 360 game but the black colors don’t look black. It’s like the gamma is high or something. I’m wondering if it has something to do with me playing it on an SDR monitor but I’m not sure.

Gameplay wise though. It’s assassin’s creed 3. After having played the OG and Ezio saga though compared to this, I see why those games are so praised for the Parkour. Like this isn’t bad, but 1-Revelations felt so hands on. Each action felt deliberate.

Here Connor kind of feels like he goes up and that’s it. It’s not bad but the Ezio stuff was amazing to control. I see now why it’s so heavily praised.

Anyways, I will admit my story playthrough I was doing got sidetracked by reading the index before bed. It’s something I love about these games. It feels like they wear their setting on their chest and they’re proud of it. I love it. Like. I don’t know many other games set during the colonial war that will give you a run down on some minor general, including life and death after the events of the game. It feels special. I don’t remember if they do it anymore (specifically I mean shadows) but I love it here.

Anyways. Reading all that kind of turned into my reading before bed, and it put me to sleep a little bit. I think it’s the nostalgia. I used to stay up late on School Nights in the living room playing this game. I specifically have a fond memory of laying on a fold out bed on a couch and playing the Mission where you chase down Lee with the sound off so I don’t wake my parents. Basically though, I have a lot of nostalgia for this game. Getting to view it through this lens of having since become an adult and building my own life is surreal, and I’m glad I get to experience it.

_**In a statement published today, OpenAI said it had historically treated model misalignment as a research issue, with findings communicated through research papers and system cards.

The company said it considered the wiki activity another example of “misalignment” similar to behaviors it had previously discussed, rather than an incident requiring a dedicated public disclosure.

OpenAI’s own wording suggests a wider footprint than the researchers documented, describing the episode as one “where our agents wrote to several internet sites.”**_

Don’t you just love the unaccountably.

All of this stated with en.wikipedia.org/wiki/Attention_Is_All_You_Need