Oh, here’s the 4 pages of documentation of items and crafting recipes of this nodded game I’m playing that are open at all times.
Then there’s the tsb with the video series I’m watching, the tab with the dropout home, other two tabs for two series I’d like to watch, about 3 different tabs that I just closed down that were opened yesterday to search some ffxiv market item prices for a friend, WhatsApp web, some Path of exile trade live tabs in case an item I’ve been searching for a month shows up on trade in a reasonable price to pick up the game again, the medianxl ladder to check for gear on too players, 2-3 tabs for players on the ladder to check their gears as a rough template,…
I’d say at any given time it’s a minimum of 10, and I’m not being held responsible of my work browser tabs. That’s more like, 4 github repos because they ask me about stuff and I forget to close them, hue, the spark docs on like 5 tabs, 3 google searches, several excels with project tracking stuff, and maybe an extra 10 to 20 tabs open depending of what I’m searching or have been asked about in the last 2 days.
Hate to type this but mate, skill issue. If its taking that much memory check your addons because you fucked up somewhere. I use it with several debugging and linting addons and it runs on a virtual remote desktop where I’m lucky if I have 4GB to share between vscode and the browser with 20 tabs open.
Maybe your issue is thst you ran heavy programs through the vscode console and those registered in the task manager as vscode? Idk, but either way, skill issue :P
When Bloomberg reported that Spotify would be upping the cost of its premium subscription from $9.99 to $10.99, and including 15 hours of audiobooks per month in the U.S., the change sounded like a win for songwriters and publishers. Higher subscription prices typically equate to a bump in U.S. mechanical royalties — but not...
Tidal is the only one for me since it’s the only one with an unofficial HiFi Linux client, which is a wrapper around the web version but with HiFi enabled.
I’m happy reading that they are decent on pay for artists.
Idk what the other two are saying because Tidal HiFi is an unofficial client that let’s you reproduce high quality music, being basically the only one that let’s you do it on Linux. Yeah it’s a web wrapper but with HiFi enabled or whatever, I don’t really remember but the default web version doesn’t have HiFi and the app does and it’s noticeable.
If you are talking about Tidal HiFi, the UI might be similar to the web version but apparently itbruns on a modified version of chrome that allows HiFi music? I did test it some months ago and the quality difference is noticeable.
Most of them, honestly. Idk where you looked but Tidal, Amazon music, apple music, dezeer or however it’s pronounced, all were available in Spain. I stocked with Tidal because of the Linux client but apparently theybalso pay artists the most so yay.
As an edit, you mentioned metal, I listen to lots of mainstream metal bands (powerwolf, system of a dawn, dragonforce, sonar arctica, blind guardian…), some other maybe not so well known ones (tyr, alestorm, korpiklaani), and some local ones that are more rock than metal (vendetta, su ta gar, kaotiko, la polla records).
According to another commenter chromium on Linux is hard capped on quality, so although it’s noticeable vs the web version, it’s not actual Max quality. I haven’t noticed it although my headphones should be able to show the difference (sony MDR 7506, I know, yes, for everything, people say that it doesn’t sound nice, I don’t care I love it) so idk.
100% agree, it’s better than all the other music services in quality on linux just because it (3rd party) offers something that has somewhat better sound quality than the basic video version of any other one, and Spotify being the only other one that has an unendorsed official native client (done by the devs in their spare time without any official support offered) is pointless because their best audio quality is trash.
You can have synced authentication right now on their password manager, so unless they remove features I don’t think they will remove the waybto export codes from bw.
No shit, but that is not a neurodivergent issue. If I’m viving in a given lighting and someone changes the lighting without proper warning I’m gonna get pissed.
As always, this is a boundaries, respect and communication issue.
Thanks to /u/azvasKvklenko@sh.itjust.works for mentioning KDE window rules. In KDE, we can add rules for windows so that they behave in specific ways. One rule that can be added is the position: remember rule, and it’s possible to make that rule apply to all windows by removing the match field. This way, closing and reopening...
It wasn’t needed in x11 so I guess it wasn’t made default when Wayland dropped, since it’s something extra that the DE is checking. In any case, I have plenty processing power to spare for this fix so it’s fine by me.
yeah, insttead of blocking nsfw instances (since I think that that blocks users too), I blocked every nsfw community that popped up, and after the first week I’ve had no issues either.
I’m going to get technical. A registered passkey is basically your phone or whatever holding a private key and the server holding the public one. When you want to log in, you enter the username on the service, which contacts wherever you registered it, and asks for a verification. Then, the device creates a nonce, which is a random number to be used once (NumberONCE), and a copy of that number encrypted with the private key. Then, the service can unencrypt the piece and check that the value is the same as the unencrypted value. This process is called a digital signature, it’s a way for online processes to verify the sender of whatever.
This way, the server knows that whoever is trying to authenticate is doing it from the authorised device. The difference between sending a signed nonce and a password, is that is someone steals the signed nonce they get nothing, since usually that number gets registered somewhere so it’s not valid again or something, it’s not exactly as explained but the point is that whatever is sent can’t be sent again. Something like a timestamp in milliseconds where it will be obvious that the signature would have expired. If an attacker captures the authentication attempt, with passwords they get the actual password and can the use it again whenever, while with nonces, they can’t.
Iirc, the server sends the device a code and the device must send the signed code back, so the service knows that the one trying to authenticate is the device. No need for passwords.
Now, if you need to authenticate to gain access to that private key, that’s of course an attack vector, so if you want any kind of syncronisation of passkeys, you need to make sure that you don’t need to send a password to get the pkeys. I use bitwarden, and unless I misunderstood, you don’t authenticate against the bitwarden server, when you access your vault they actually give you you the encrypted data, which you then unencrypt with the password locally on the browser. I’ll have to double checknon this because I have a 2fa on that for extra measure butidk how it actually works. My plan for the future is to actually use a yubikey to authenticate against bitwarden, following the same logic explained above, to then gain access to a bigger pool of passkeys. This way, ultimately all access is protected with my physical key which I can connect to most devices I use, and I can, with NFC use the key to authenticate the android bitwarden app, so it should be completely usable.
In any case, passkeys are better than passwords, provided toy don’t store them in a less secure place. As we all know, the security level of a system is the security level of its weakest cog.
It’s like the initial authentication, where server and clientnexchange a symmetrical key with their asymmetrical keys. The difference is that in that exchange the server and the client meet for the first time whereas the point of pass keys is that once when you were already authenticated, you validated the device or whatever will hold the private key as a valid source, so then when the authentication code gets exchanged, both ends can verify that the other end is who they tell is, and both can verify the other end as valid, and thus that exchange authenticates you because you, in the past, while authenticated, trusted that device as valid.
Technically, yeah, it’s an asymmetrical key exchange. Iirc the server sends you a signed certificate and you need to unencrypt itnwithbtheir public key and sign it with your private key, so they can the getnit back and ensure that it was you who signed it, using your public key to check the validity of whatever was sent.
I don’t know enough to be 100% corrextbon the details, but the idea is that it’s an interaction between asymmetrical keys.
Soporta like how we use keysbto authenticate through github through SSL, but with an extra level of security where the server validates a key in a single endpoint, not wherever that private key would be held (like with SSL)
But… PAKE is used as a method for ongoing exchange of messages, you wouldnt avoid using a password when authenticating, which is the whole point of this debacle.
In really don’t see it that complex, in my last job IT installed a passkey in my laptop, which then Microsoft used to login and thorough its SSO, I just stopped using passwords altogether after logging into my PC itself. This is way more secure for the average Joe than having 5 postists with passwords pasted in the sides of the monitors. Yes this is way more common then you think, there’s a reason passwords need to be rotated all the freaking time.
Once rolled out, workers didn’t have to do anything to authenticate, as long as they were using the work laptop the company assumed that the used was the one using it, since the laptop was registered to the user, and it was way more comfortable.
It’s not really that hard to explain to people. Sending passwords is insecure because if an attacker gets the password, you lost. With passkeys, once you set it up, google/microsoft/pepapig.com will send a request to authenticate to your phone, where you will just say “yes” and they will talk with each other to give you access. If an attacker gets hold of that message, it doesn’t get anything of value because each time pepwpig.com and your phone talk with each other, they say different stuff and the attacker would just have yesterday’s responses, so they lose.
Old people won’t adopt it unless forced, just like they adopted special passwords by adding 1 and * to whatever stupid word they use and writing it next to their work monitor, in the office. They just won’t. Either IT automates everything for them or anything we develop will get completely bypassed.
you can go into the command line and write “flatpak upgrade”, but every time I open the discord app it apparently downloads something, idk if it’s self updating correctly or not.
you don't need more 4GB of RAM (lemmy.dbzer0.com)
After announcing increased prices, Spotify to Pay Songwriters About $150 Million Less Next Year (www.billboard.com)
When Bloomberg reported that Spotify would be upping the cost of its premium subscription from $9.99 to $10.99, and including 15 hours of audiobooks per month in the U.S., the change sounded like a win for songwriters and publishers. Higher subscription prices typically equate to a bump in U.S. mechanical royalties — but not...
Bitwarden has launched a new authenticator app (bitwarden.com)
Bitwarden Authenticator is a standalone app that is available for everyone, even non-Bitwarden customers....
Nobody wants to work anymore! (lemmy.world)
Happens Too Frequently (infosec.pub)
Think what you will of Brave's crypto, but its adblock is spectacular. (slrpnk.net)
Simple fix on KDE wayland for windows to remember their last position (imgur.com)
Thanks to /u/azvasKvklenko@sh.itjust.works for mentioning KDE window rules. In KDE, we can add rules for windows so that they behave in specific ways. One rule that can be added is the position: remember rule, and it’s possible to make that rule apply to all windows by removing the match field. This way, closing and reopening...
Confused Reddit Users After Coming to Lemmy (Apparently) (lemmy.world)
Passkeys: A Shattered Dream (fy.blackhats.net.au)
I AM SO DISAPPOINTED WITH UBUNTU 24.04 😡 (news.itsfoss.com)
Are we Wayland yet or Whats missing? (lemmy.ml)
Curious from people who follow its development closely....