kibiz0r

@kibiz0r@midwest.social

This profile is from a federated server and may be incomplete. Browse more on the original instance.

kibiz0r, (edited )

Instantly makes ransomware [edit 2: my brain was being dumb, I didn’t mean literally ransomware, I meant hackers blackmailing companies with the threat of releasing/selling stolen data] far more profitable.

Edit: And heavily discourages self-reporting. There’s a Schneier quote I like: “You can’t defend. You can’t prevent. The only thing you can do is detect and respond.”

kibiz0r,

The ban is a dumb policy, but you’re daft if you think the security implications are at all similar.

TikTok was caught injecting a keylogger into their in-app browser and their response was “Well yeah, but we promise we’re not using it.”

kibiz0r,

No. This is analogous to cross-frame scripting.

So imagine you go to tiktok.com and you click on a link to bestbuy.com/cool-product-i-want-to-buy. But instead of taking you directly to bestbuy.com/cool-product-i-want-to-buy, it keeps you on tiktok.com and just opens an iframe with a keylogger injected into it.

So then when you enter credit card info into the bestbuy.com UI, the tiktok.com JS can see what you typed.

(This scenario is largely impossible these days, due to modern browser security.)

The difference is that if you witnessed this kind of XFS in your desktop browser, you might notice it because the location bar still says tiktok.com, because you never actually left the site. But in a mobile in-app browser, you don’t need an iframe. You can inject JS directly into the browser itself, making it invisible to the user. As far as you can tell, you’re on regular ol’ bestbuy.com, not a modified version of it.

kibiz0r,

Absolutely. But the penalty does modify the cost-benefit analysis. If a hacker demands $5m or else they will release stolen data, you might be more inclined to YOLO the 5 mil on the 1% chance they’re an honest hacker if the penalty for the breach is $50bn.

kibiz0r, (edited )

lmao, you asked.

I’m not a security expert, but my tech career has involved a lot of automated testing in weird scenarios, including iframe-based Facebook games and browser-based mobile apps. Automated tests face a lot of the same challenges that a malicious third-party would, so I know a little bit about how to get past them – or rather, how to deliberately create vulnerabilities (in the dev build of your system) so that your tests can get past them.

Edit: I am curious why someone downvoted me on that one though. I can understand how my comment about the ban being dumb but TikTok also shipping a keylogger could anger people on one side or the other. But just explaining how in-app browsers revive a security problem that’s been long-solved in standalone browsers?

kibiz0r,

Pro tip:

Instead of: “Is this the road to the wizard?”

Ask: “Are you the kind of person who could claim this is the road to the wizard?”

The truth-teller and liar will both give the same answer.

kibiz0r,

Or they can decide to lie or tell the truth, but a mysterious curse forces them to do the opposite as they go to form the words.

Not sure Nelson Goodman had a general solution for that one.

kibiz0r,

Bit of a misdirect in the headline. This was not primarily a scientific projection. This was a political reckoning by scientists who had recently suffered the bureaucratic pain of serving on the IPCC, and voluntarily responded to a survey.

As one climate scientist put it:

“As many of the scientists pointed out, the uncertainty in future temperature change is not a physical science question: It is a question of the decisions people choose to make,” Texas Tech University climate scientist Katharine Hayhoe wrote on social media. “We are not experts in that; And we have little reason to feel positive about those, since we have been warning of the risks for decades.”

Change never comes from politicians first, but these are people who are zoomed in on whether politicians are changing their minds.

They’re not going to change their minds slowly over time. It’s gonna be nothing at all until the electorate is too loud to ignore, and then suddenly 100% of officials will claim they’ve “always condemned fossil fuels”, “from day one”, and “in the strongest terms possible”.

We’ve seen time and again that policy changes tend to bubble just below the surface for long time and then suddenly emerge with multiple changes happening in quick succession.

I was of voting age when just saying the word “civil union” in the context of gay rights was political suicide, and I’m not that old. Things can change quickly. Keep your hope alive and keep agitating. We can do this.

kibiz0r,

“Hey, we really don’t want you out here on the street, so we’re gonna have to do something about it.”

“You’re gonna give us homes?”

“lol no”

kibiz0r,

Idk, I think publicly exposing a wealthy sexual predator is a good thing, and I wish people did it more often. Especially considering that his gig affords him plenty of opportunities to invite girls backstage.

kibiz0r,

First, they sent the missionaries. They built communities, facilities for the common good, and spoke of collaboration and mutual prosperity. They got so many of us to buy into their belief system as a result.

Then, they sent the conquistadors. They took what we had built under their guidance, and claimed we “weren’t using it” and it was rightfully theirs to begin with.

kibiz0r,

The quality really doesn’t matter.

If they manage to strip any concept of authenticity, ownership or obligation from the entirety of human output and stick it behind a paywall, that’s pretty much the whole ball game.

If we decide later that this is actually a really bullshit deal – that they get everything for free and then sell it back to us – then they’ll surely get some sort of grandfather clause because “Whoops, we already did it!”

kibiz0r, (edited )

“Are we the baddies?”

“No! Of course not!”

“Are you sure? Our uniforms caps have skulls on them.”

Edit: Whoops, not uniforms. Also, for those who haven’t had the pleasure: youtu.be/ToKcmnrE5oY

kibiz0r,

Don’t vote and hope. Vote and mobilize.

When you decide which party to put in power, you’re not selecting your teammates. You’re selecting your opponents. Choose a favorable match-up.

kibiz0r,

The camera adds 50 pounds. That’s why he wants to eat it.

kibiz0r,

On him, or on his belt?

kibiz0r,

I was riffing. Making additional jokes. Cuz he has a shitload of stuff on his belt.

kibiz0r,

This whole thing reminds me of “The Dress”.

Two people can look at the same thing, but see completely different things. And the way that they see it seems completely obvious and unambiguous to them. To the point where it’s hard to understand how anyone could claim to see anything else.

Take that same dynamic and apply it to a very loosely-defined question with very specific emotionally-charged answers, and you’ve got… Well, basically, a blueprint for social media engagement.

Wait, isn’t this just what BuzzFeed turned into a whole business? Did we loop back around to 2010?

kibiz0r,

Seems to be a pretty good attempt, actually.

My mobile client doesn’t show downvotes, so I was surprised when I saw exactly how bad the stats on this post are. Like, I saw all the comments declaring it a wasteland, but… Holy shit.

I hope we develop a new form of media literacy to deal with this kind of stuff.

kibiz0r,

Name one famous example of a charismatic coup-attempting fascist getting locked up and rallying their supporters behind a manifesto referring to “their struggle”.

[Serious] Why do so many people seem to hate veganism?

Seen a lot of posts on Lemmy with vegan-adjacent sentiments but the comments are typically very critical of vegan ideas, even when they don’t come from vegans themselves. Why is this topic in particular so polarising on the internet? Especially since unlike politics for example, it seems like people don’t really get upset by...

kibiz0r,

Cuz it itches the part of our brain that looks for status-seeking behavior and labels people as inauthentic.

Being vegetarian places a degree of exclusivity onto your consumer habits, and in the Western capitalist lens, conspicuous consumption has a lot to do with how we communicate our status.

Being vegan stands in direct relationship to vegetarianism as being even more exclusive. This does two things:

  1. It raises the stakes, because now the identity is even more exclusive because it’s more restrictive.
  2. It creates a pattern, where it looks as if you’re saying “Oh yeah? Well, I’m even vegetarianer! Take that! Look how cool I am!”

Just that in and of itself puts vegans on the receiving end of a whole bunch of cognitive biases.

But wait, there’s more!

Because mass production never lets a social identity go to waste, major brands got on board with explicitly labeling things as vegan, which starts to make it seem like you’re trying to be cool but really just deepthroating the corporate cock to “buy your way to cool”.

And then came the trends of organic/non-GMO, local-first, artisanal, farm-to-table, etc. etc.

At the point where Wal-Mart has their own artisanal farm-to-table cheese brand, it starts to look (to our dumb pattern-matching brains) like vegans are just rubes falling for the most basic version of an obviously fake status-seeking game propped up by cynical brands preying on how desperate you are to look cool.

But wait, there’s even more!

Because, surprise – our brains never actually stop caring about status, even if we think we’re just trying to make rational, objective, moral choices. Picturing yourself as a rebel for being vegan, taking the sneers and the insults in stride because you know it’s the right choice for the planet… is appealing.

And that self-aggrandizing image is inseparable from actually doing the thing, because that’s just how our brains work. Even for the most pure-hearted among us, thinking we’re morally superior – especially in tangible ways that we get to physically play out on a daily basis – is intoxicating.

So the people who are chuckling about the inauthenticity are… kind of right. But this same dynamic exists for literally everything. So when you chuckle at the vegan, but then take a moment to consider which kind of bacon really speaks to who you are as a consumer, you’re playing the same game. It’s just one that far more people are invested into. So if anyone calls it silly, nobody takes that criticism seriously. Not like your organic local-first artisanal acai kale kombutcha.

Basically my recollection of this episode of You Are Not So Smart: soundcloud.com/…/selling-out-andrew-potter

…which I listened to, for the first time, as an attempt at bonding with my then-girlfriend/now-wife’s roommate. We had not gotten along up until then, because she was aggressively vegan and I ate a lot of fast food. But I found out she liked podcasts and I was really enjoying this one and there was a new episode I hadn’t heard yet! She really enjoyed it, until the guest talked about veganism as a form of status-seeking. That didn’t go well. I didn’t mind taking over her half of the lease though.

kibiz0r,

I’ma press X to doubt here.

They’re not going to be using cloud services

Job listing for back-end engineer at Arrowhead says:

  • Cloud Engineering: Utilize Azure services to build and optimize cloud-based backend components and make use of monitoring tools to track live performance.

Our tech stack

  • NET/C#, Docker, Kubernetes/AKS, Azure, SQL Server, CosmosDB, Redis, Grafana, Terraform

Early days playercount woes were before they added more nodes to their solution.

CEO said during the early day playercount woes:

It’s not a matter of money or buying more servers. It’s a matter of labour. We need to optimise the backend code. We are hitting some real limits.

They can’t just fire the people maintaining their solution either but that’s also baby bucks

A good back-end engineer is at least 100k. And a just-keep-the-lights-on crew is probably 3-4 of them.

FWIW: I also work in IT, on an IoT system that you might also assume has a “nonexistent” server cost. (I assure you, the cost exists.) I also used to work in game dev.

That said: Yeah, protesting by playing the game is a severely misguided notion.

kibiz0r,

Could also be that the HTTP server lied about the content length.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • anitta
  • Durango
  • magazineikmin
  • InstantRegret
  • hgfsjryuu7
  • vwfavf
  • Youngstown
  • slotface
  • thenastyranch
  • ngwrru68w68
  • rosin
  • kavyap
  • PowerRangers
  • DreamBathrooms
  • cisconetworking
  • khanakhh
  • mdbf
  • tacticalgear
  • ethstaker
  • modclub
  • osvaldo12
  • everett
  • tester
  • cubers
  • GTA5RPClips
  • normalnudes
  • Leos
  • provamag3
  • All magazines