biscuitswalrus
@biscuitswalrus@aussie.zone
- Comment on Booking.com ignored me after my bedbug nightmare 2 weeks ago:
First party sites are how my credit card gets leaked every single time. The incompetence is thorough at every level.
My personal trick is even in my own country to get new travel credit cards regularly. The first one I got was scammed on my first booking. I alerted the hotel and they said it couldn’t possibly be them. They’re the only company that ever got those details it can only be them.
- Comment on Begun the kernel wars have 2 weeks ago:
I’m not an expert, but it sounds like if you finish a session of valorant, the anti cheat never unloads and continues to monitor memory and files.
Easy Anticheat though, according so some sources, only runs during game play.
Riots Anticheat has a bad history though. But both essentially are black boxes that send details both hash and samples back to their owners for them to approve what’s on it computer. Opened a medical record? It’s probably been hashed and sent back.
Opened your employers accounting files when working from home? details you probably sent riot a copy.
Both can be updated. There’s no guarantees that riot won’t do something nasty against a portion of high value targets. They know you from your payment details. They can identify, update the module and get anything they like, they have root.
Anticheat has a history of being a tool for hackers. vice.com/…/hackers-are-using-anti-cheat-in-genshi…
There’s no upside for the user. Mostly because they don’t work anyway.
- Comment on Begun the kernel wars have 2 weeks ago:
Just compile your kernel with the anti cheat flags and telemetry enabled from source.
- Comment on the universe about to have a little minty b 1 month ago:
Oh you think you exist somehow outside the simulation and are not just a construct of it. The Truman of the show.
- Comment on McDonald’s AI Hiring Bot Exposed Millions of Applicants’ Data to Hackers Who Tried the Password ‘123456’ 1 month ago:
Perfect
- Comment on Welcoming PCSX2 2.2.0 and 2.4.0! | PCSX2 1 month ago:
What a great post. I haven’t used pcsx2 since I wrote a yakuza guide probably decades ago. But that post was great to read.
- Comment on User says access to ’30 years of photos and work’ in OneDrive denied by Microsoft, can't get a response after filing form 18 times — 'Microsoft suspended my account without warning, reason, or any leg 2 months ago:
I feel like you understand the text book but didn’t know the application.
- Comment on Digital Foundry: Yes, It's Faster: Switch 2 Back Compat vs Batman Arkham Knight + the Witcher 3 2 months ago:
Curious if someone would then add how well the games on steam deck run in comparison… Though that’s not exactly legal I suppose
- Comment on Anon visits a guy's house 2 months ago:
You could retire off this pun.
- Comment on [deleted] 2 months ago:
They could be, but I assume say like an apple device won’t install a ccp root authority unconditionally. Huawei and xiamoi probably could be forced, but the browser too, like Chrome, Firefox and safari need to also accept the device certificates as trusted.
But the pressure in Europe would likely be to trade within Europe, you must comply.
It fundamentally destroys the whole trust of PKI if this did go ahead. We just need to hope it does not.
- Comment on [deleted] 2 months ago:
If your browser and device has a state sponsored CA certificate it’s not trivial to bypass. Transparently all certificate traffic could be intercepted by an ISP. Look at Europe already trying. Once someone malicious (to you) is a trusted certificate issuer you no longer can verify either the destination nor the privacy of the content.
Ssl based vpns are also decrypted. And vpns which use public key for identification would no longer be trusted.
- Comment on [deleted] 2 months ago:
A country for example could enact their mandatory certificate authority that they control. Then have ISPs who are in the middle use what was mandatory a trusted CA to act as the certificate issuer for a proxy. This already exists in enterprise, a router or proxy appliance is a mitm to inspect ssl traffic intercepting connections to a website say Google, but instead terminates that connection on itself, and creates a new connection to Google from itself. Since the Google certificate on the client side would be trusted from the proxy, all data would be decrypted on the proxy. to proxy data back to clients without a browser certificate trust issue, they use that already mandated CA that they control to create new certificates for the sites they’re proxying the proxy reencrypts it back to the client with a trusted certificate and browsers accept them.
It’s actually less than theoretical, it’s literally been proposed in Europe. This method is robust and is already what happens in practice in enterprise organisations on company devices with the organisations CA certificate (installed onto organisation computers by policy or at build time). I’ve deployed and maintained this setup on barracuda firewalls, Fortigate firewalls and now Palo alto firewalls.
- Comment on ‘Doom: The Dark Ages’ DRM Is Locking Out Linux Users Who Bought the Game 3 months ago:
Don’t tell competitive gamers that. LOL, CS, Overwatch, COD whatever is about a simple game loop for those who enjoy that loop.
- Comment on Is it normal for people to ask where you are from online? 3 months ago:
I’m in my late 30s from Australia, now you don’t need to ask. G’day
- Comment on Pearson complaining about using Linux to access my course material 3 months ago:
Which will be “If not Windows 11 or Mac os then report os string”. I don’t think they specifically took the time to research different OS’s and list them.
- Comment on 1994 white Kevin 4 months ago:
You’re right, this is a great services for predators to register.
- Comment on Why doesn't Steam support Android? 4 months ago:
I’m trying to figure out the gap in the market you’re trying to fill other than “for steam fan boys it would allow us fans of steam games that already exist in a native place, in a non native place!”
Correct me what is going into it that isn’t already somewhere, and who that appeals to?
Or is this just thought experiment?
- Comment on Why doesn't Steam support Android? 4 months ago:
What would you suggest they sell on their Android store that users would be so encouraged to install a new store and then what they want?
Steam already has a store on Android, you just can’t play games there because most games on steam either already exist on the native google play store, or aren’t compatible with mobile architectures like Arm64. Most mobiles unlike a arm laptop, have no x86/amd64 emulator which is what those games are compiled as by their developers.
So what’s left?
- Comment on Anon wants to watch an anime 5 months ago:
Is that different from this one I remember watching years ago? youtu.be/OZzIvl1tbPo
Note I’m not really… Good at math nor really understand it.
I’ll still watch an entertainer and someone good at what they do for entertainment either way.
- Comment on Which one are you? 7 months ago:
I’m in Australia, generally, we have cooking instructions and microwaves that talk about wattage and time. Never duty cycle.
Eg a sauce packet says 600w 30sec. Press power button until 600w and put it in 30 seconds.
I know there’s duty cycles, you can hear them. I don’t know if that’s how it’s converted as a fraction of the 1500 watt maximum (40% duty cycle = 600w) but you hear it turn on and off most on the defrosting preconfigured buttons.
Either way, I wouldn’t be surprised if it’s all just the same underneath with regional translations.
- Comment on Hypothetically, if some mysterious force started to jam every radio frequency, how would modern day society adapt to this? 8 months ago:
Let people enjoy thought experiments as a tangent.
- Comment on LNP wins the Queensland election after nearly a decade in opposition but it wasn't the emphatic victory predicted 10 months ago:
Well that was terrible.
- Comment on Row as Starmer suggests landlords and shareholders are not ‘working people’ 10 months ago:
By your definition I should be called a footballer because I play football once a week casually. Ignore the 50 plus hour weeks of my actual job. I got $50 from football as season champions (it’s a gift card, for the bar, at the place I play). I better go update my linkedin!
You’re funny, good one.
- Comment on 0.0.0.0 Day - 18 Yr Old Vulnerability Let Attackers Bypass All Browser Security 1 year ago:
I ended up reading it on bleeping computer since the linked site looks like an auto tldr bot saved 50% of the words. The important 50% was discarded.
- Comment on Twitter API has a list of users who are allowed to use racial slurs 1 year ago:
I checked too, it’s not a valid public DNS record, so then the question is, does Oktas DNS resolve this. Even if it does, how does okta even sit in this? Are they the identity provider for Twitter? Surely even if it’s identity, it’s got nothing to do with content moderation? So many questions.
- Comment on ABC article alleges caucus concern over Fatima Payma being "guided by god". Smells of a character assassination to me. 1 year ago:
Look, I’d call it fair if the Christian side had the same level applied to it.
I want no religion in my politics thanks. Full stop. Even handed.
- Comment on Anon meets his gf's parents 1 year ago:
This is the story of a girl,
- Comment on Family rave day. 1 year ago:
Baggies of white powder and snap chat
- Comment on Steam Game Recording Beta announced - works on Linux and Steam Deck too 1 year ago:
Hmm interesting. Not for me but the communities tab on steam will probably benefit from good easier made clips. Always enjoying the pictures from yakuza games there. I peek around the communities tab a lot while being undecided about what I want to play.
- Comment on AZ Maintenance 1 year ago:
Thanks for the hard work