Carl

@Carl@anarchist.nexus

• ⁨Comment⁩ on ⁨she has risen!⁩ ⁨⁨1⁩ ⁨week⁩ ago⁩:

  Christa Pike was sentenced to death. The sentence itself was already fairly controversial, due to some of the details of her case. And now the state has attempted to kill her twice, but they keep fucking up her lethal injection. She has been injured during both attempts, but not killed. She even requested a firing line instead of a lethal injection, because she has a heart condition that will likely prevent the lethal injection from properly stopping her heart. But the state has refused to back down, and keeps injuring her with bad lethal injections instead.

• ⁨Comment⁩ on ⁨BONNGGGG⁩ ⁨⁨1⁩ ⁨week⁩ ago⁩:

  I can actually confirm that dropping a piano makes the characteristic BOOOOOONG sound that we all know. I’m not sure if they actually dropped a few pianos to record it… But I have personally dropped a piano off a ~10’ drop, (and was in the room when a second piano got dropped ~6’) and it sounded exactly like what you’d expect.

  All of this is to say that if they didnt drop a piano, (because that’s risky and very expensive just for a sound effect), those foley artists were really fucking good at their jobs.

• ⁨Comment⁩ on ⁨No, you can't keep your 20 year old dictionary password⁩ ⁨⁨1⁩ ⁨week⁩ ago⁩:

  Yup.

  For the unaware: modern hash algorithms have character limits, but it’s nothing that would ever interfere with a regular password. Even accounting for the salt that gets appended to the end of your password before it goes into the algorithm. Most of the popular hashes have a 128 character limit, and the site will also store a salt in your user’s database entry. That salt gets appended to your password before it goes into the hash. Basically, even if two users have the same password, the hash for each will see “password{Salt1}” and “password{Salt2}”. So they won’t show as the same hash in the database, even though they’re the same password.

  This salt is to prevent something called a rainbow table attack, where a hacker feeds a bunch of common passwords into a bunch of common hash algorithms, then compares with their stolen database. If they find matches, they now know which algorithm the database was using, and they only need to brute force the database once. So for instance, they feed “{common password}” into several hashing algorithms. One gives the result “1234567890”. They then check their stolen database, and find several users with the hash “1234567890”. They try using {common password} on those user accounts, and they work! Now the hacker knows which hash algorithm was used, and can brute force the entire stolen database at their leisure.

  By appending a salt to each password, “{common password}” actually becomes “{common password}{Salt1}” “{common password}{Salt2}”, etc… So even if the hacker tries to brute force it, they would need to brute force each individual password instead of brute forcing the entire database all at once. It’s still important to use strong passwords, because a weak password will still be broken in only a few seconds. But that will be a few seconds per weak password, instead of a few seconds for every user at the same time. This is why sites tell you to change your password after a breach. The idea is that salting the database makes brute force attacks take a lot longer, and gives most users time to change their passwords before the attackers manage to get anything.

  All of this is to say, you could have a 100 character password limit, and still have plenty of room for a 16-28 character salt. And the hashes will output the same length string regardless of what you feed into it. So longer or shorter passwords won’t matter, because they’ll all turn into a 64 character hash in the end.

  So putting a low character limit on a password is a site admin tattling on themselves, because it means they’re not hashing your password at all. If they were hashing it, the only upper limit on your password would be whatever the algorithm can accept (probably 128 characters) minus 20-30 characters for a salt.

• ⁨Comment⁩ on ⁨EU citizens on here, Ross Scott is warning about a draconian law in the European Unio.⁩ ⁨⁨2⁩ ⁨weeks⁩ ago⁩:

  I actually just updated my post to clarify how child/teen accounts would be handled without needing direct verification. No hash needed for minors, meaning there is no risk of this.

• ⁨Comment⁩ on ⁨EU citizens on here, Ross Scott is warning about a draconian law in the European Unio.⁩ ⁨⁨2⁩ ⁨weeks⁩ ago⁩:

  I’d be fully in favor of hardware-level age verification. And by that, I mean we already have the technology to securely and privately verify your age directly with the government, (not using a third-party), and so no single organization has a chance to collect more than a salted hash of your info. Then your user account (or the entire device, if you’re using a phone) would be considered verified. It would require governments to actually cooperate and be technologically literate, (which… Yeah… I know that makes it a pipe dream) but it is technologically feasible to implement.

  The short version is as follows:

  1. Governments have citizens create a password. Ideally this would happen when they’re applying for their ID, which they would need to have to verify their age anyways. This password and salt is used for their hashed info.
  2. The government sets up a database of salted hashed info, along with a simple pass/fail for whether or not the individual is an adult. Again, this is only using salted hashes, (the same method we use to send passwords to a website) so no recognizable data even if it gets intercepted in transit.
  3. The government publishes a service that intakes a hash, and returns a true/false for whether that hash is an adult. Again, no actual PII is stored in this database, only salted hashes.
  4. The user who wants to verify their age inputs their info into their device using standardized inputs, along with the password they created when they applied for their ID. This is hashed directly on the device, just like a password is hashed before it is sent to a website. This hash is the only info that leaves the device.
  5. Whatever service that is trying to verify your age takes this hash, passes it to that government database, and receives a pass/fail result. If you pass, your age is now verified.
  6. Note that the company never received your PII, they only received the salted hash, and only received a basic Boolean 1/0 response from the government server. And the government never received any info about your device, so they can’t use it to track you at a hardware level.
  7. Now that account is verified, and can be used to confirm your age on any devices it is used on. For example, if your Microsoft account is verified, any computer you log into with it will also be verified. If your Apple/Google account is verified, your phone is verified when you’re logged into it.
  8. This could even cut out the middleman and verify the device directly using that same government service, but that would need to come with some extra security precautions to be sure the government isn’t able to collect verification attempts and tie individuals to the specific hardware devices that made those requests.

  And then the verified device can directly pass a “yes this user is over 18” flag directly to any service that needs it. This could be done securely during the TLS handshake, before the site even begins to load. Ideally, it would be a fairly wide age range. So for instance, maybe we group it into child, teen, and adult. So sites that need to verify age for regulatory purposes can do so without actually collecting your personal data.

  This would allow websites to verify ages on the backend, without actually needing to use third-party services. It would also allow for a much smoother user experience, with verified adult users being able to bypass any kind of age gates. And unverified users would automatically get redirected to a “your device isn’t verified, here is why, here is how to verify it” page. No concerns about kids lying and clicking the “yes I’m over 18” button, because they never even see a button to click. They just immediately get redirected as soon as the site sees that they’re not verified as an adult.

  It’s really the best of all worlds. It allows for secure verification, where the only info leaving your device is scrambled. It appeases the “think of the children” crowd. It allows us to ditch the stupid fucking “click here if you’re over 18” pages. And most importantly, it would actually protect kids, because now preventing them from accessing mature content is as simple as protecting your passwords. Because they can’t just steal your ID to verify their device without also having your password.

• ⁨Comment⁩ on ⁨Please!!!⁩ ⁨⁨2⁩ ⁨weeks⁩ ago⁩:

  This sounds like an exaggeration, but a Twitch streamer got up and made a cup of coffee during a big motorcycle chase segment. His character was literally bouncing off of cars and guardrails on the highway, and he still finished the chase segment successfully. Literally didn’t touch the controller at all, and still finished it.

• ⁨Comment⁩ on ⁨Zamn... That's what happened ? Zamn...⁩ ⁨⁨3⁩ ⁨weeks⁩ ago⁩:

  My mom’s side of the family is all at odds because my aunt was a chronic shit-stirrer who would casually make up blatant lies about other family members. She was extremely nice, so the people around her tended to believe her. But all of the family members who didn’t spend a lot of time around her would quickly see through her BS, often because they were the targets of her lies (because they were never around to defend themselves when she was lying about them).

  By the time she eventually died, like a quarter of my mom’s family refused to even go to the funeral, including two of her own children (my cousins). Another quarter of the family only went to try and mend bridges with the people who had been listening to her lies for years.

  Things are better now that she is dead, but there is still a lot of residual “I can’t believe you actually thought I would do that” type of tension between the formerly-ostracized family members, and the family members who had been listening to my aunt the whole time. And that remaining quarter of the family who refused to go to her funeral are still absent. It’s amazing what kind of damage one manipulative person can do.

• ⁨Comment⁩ on ⁨Capitalism is all about using state power to protect capital by force⁩ ⁨⁨3⁩ ⁨weeks⁩ ago⁩:

  I literally posted that comment while sitting in a meeting. So yeah, I do it too.

• ⁨Comment⁩ on ⁨Capitalism is all about using state power to protect capital by force⁩ ⁨⁨3⁩ ⁨weeks⁩ ago⁩:

  Here’s a reminder that wage theft accounts for nearly 75% of all theft. It’s literally larger than every other form of theft combined, and then multiplied by almost three.

  If you walked into a convenience store and blatantly stole a $2 candy bar at the same time every single day, they’d have a cop waiting for you by the end of the week. But if that same convenience store chain steals $2 in wages from each of their 5000 employees every single day, then that is just good business.

  Part of the issue is that lots of people seem to think “my employer didn’t pay my check” is the only form of wage theft. In reality, wage theft typically happens via a thousand tiny things. Things like unpaid breaks that still require work. Unfair time clock rounding that shaves a fraction of an hour off of every employee’s clock in/clock out times. Managers requiring employees to show up early, and then not allowing them to clock in until their shift is scheduled to begin. Employers automatically deducting an hour of time for meal breaks, (for “convenience”) even if the employee was working during that time and got a shorter break. Employers requiring employees to clock out at the scheduled end of their shift to avoid overtime, then requiring those employees to finish their closing tasks while clocked out. Requiring employees to “always be on-call” but refusing to pay them an on-call fee when they take work calls while clocked out.

  All of those minor things quickly add up to massive amounts of stolen wages. For the employees, it is death by a thousand cuts. No single infraction is large enough to sue over, and no individual employee is going to bother going to court over $2 in unpaid wages. But when the company is doing it at scale, it means every employee is being paid less, which leads to massive illegal profits for the employer.

• ⁨Comment⁩ on ⁨When it was all trial and error⁩ ⁨⁨4⁩ ⁨weeks⁩ ago⁩:

  The funniest one is the mushroom that makes you see tiny people for like a week. It’s not like psilocybin that causes different visuals depending on the person. As far as we can tell, the only visual hallucinations that these mushrooms produce are just… Tiny people. Like little Smurf-sized people on every surface, clinging to your clothes, climbing up walls, etc…

• ⁨Comment⁩ on ⁨Fact Check: **TRUE**⁩ ⁨⁨4⁩ ⁨weeks⁩ ago⁩:

  Secondly cashapp patel said that the animal would also not be disqualified

  Specifically, he said that current laws automatically disqualify both victims and perpetrators of sex crimes. For instance, both a pimp and his trafficked prostitute get charged with crimes. Kash said the law currently targets both parties. The senator then turned that around and went “so in cases of bestiality, the animal is the other party? And the animal could be hired by the FBI?” And Kash basically went “I mean… I guess if you want to put it like that?”

  In reality, if a trafficking victim is being forced into bestiality, the animal wouldn’t be the “other party” in this case. The other party would be whoever is forcing the victim into doing it.

  I dislike Kash, (he always looks like someone is slowly but steadily inserting hardboiled eggs into his ass, and he’s trying not to react to it), but as the above poster said, the actual reasoning behind the decision isn’t awful. Trafficking victims often get charged with sex crimes under our existing laws, because the laws don’t make a distinction between victim and perpetrator. Which then makes escaping the situation even harder because those arrests will show up on a background check when they apply for jobs. In that way, the system is actually designed to keep the victim in sex work, because it’s one of the few ways they’ll have to make money after being charged with a crime.

• ⁨Comment⁩ on ⁨There's so much cheating in Fortnite it's getting unplayable.⁩ ⁨⁨4⁩ ⁨weeks⁩ ago⁩:

  Red Dead Online players: You mean cheating isn’t the expectation?

  Seriously though, RDO had the single worst cheating problem I ever encountered. To the point that the multiplayer was downright unplayable unless you had cheats of your own. People would constantly troll with full-map aimbots, combined with infinite explosive ammo and no reloads. You log in, and your character is immediately taking an explosive bullet to the face on every single frame.

  You start in a campsite where you can’t be damaged, but the sheer amount of explosions and particles being forcibly rendered are enough to make lower-end systems immediately lag. And as soon as you step outside of camp, you’ll take damage from those explosive rounds and immediately die. So at the very least, a godmode cheat is necessary just to be able to play the game without instantly dying.

• ⁨Comment⁩ on ⁨my year⁩ ⁨⁨5⁩ ⁨weeks⁩ ago⁩:

  Yeah, this photo was actually one of the things that he credits with helping him get clean. Because this was basically rock bottom for him, and seeing this photo in tabloids was a large part of what made him realize how bad his addiction truly was.

  He did the same thing that a lot of addicts do, and basically did a full 180 into health and fitness instead. Basically replaced the drug high with a workout high.

• ⁨Comment⁩ on ⁨Do analog triggers matter all that much? (In general and aside from racing games)⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:

  Hah, I distinctly remember the first time I discovered the pressure sensitivity in MGS 3. I was hiding inside of a locker, and pressed a button to lean towards the grate and peek out. I lightly pressed it, and Snake barely leaned at all. I couldn’t really see what I needed to. So I mashed it harder. But I pressed it so hard that Snake slammed his face into the metal locker door with an audible thud. The noise alerted the guard and I was caught.

  The fact that they even thought to program in a “slam face into whatever you’re peeking out of” mechanic has me rolling now that I’m thinking about it. It really is peak Kojima.

• ⁨Comment⁩ on ⁨Deans are so yesterday⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:

  I guess we doin lean now

  Image

• ⁨Comment⁩ on ⁨when u stub ur toe on the coffee table⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:

  My partner is a clutz, and I always joke that her Coffee Table Detector (little toe) is working great. It always earns me a death stare while she’s reeling, but being momentarily pissed at me is usually pretty effective at distracting her from the fact that her toe hurts.

• ⁨Comment⁩ on ⁨I think they're about to be in deanmand⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:

  Image

• ⁨Comment⁩ on ⁨Frog and Toad⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:

  Hah, yup. In my head, I stupidly went “Milli is 10^-3 so micro is 10^-4.

• ⁨Comment⁩ on ⁨Frog and Toad⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:

  It depends on how you’re doing it, (and how it was stored, because the molecule is pretty fragile and breaks down easily) but typically a single hit would be in the ballpark of 90-110 micrograms. So 500x would be about 5 grams. Which is a truly astronomical amount of LSD. Not the highest ever recorded, (that honor goes to a couple of idiots who thought it was cocaine and snorted it), but still a mind-meltingly high amount.

• ⁨Comment⁩ on ⁨CW: Mr. Breast⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:

  He actually did a market study and realized that his videos with that smile on the thumbnail got more views. Like, a lot more. So he quietly started adding it into every thumbnail. He even went back to old videos are replaced the old thumbnails with ones that had that smile.

  As for why that stupid smile makes his videos more popular? No clue. Kids are weird, and he does well in that demographic. So maybe it’s just a meme at this point. But the reason he’s known for that smile is ironically because it makes him more money.

• ⁨Comment⁩ on ⁨Has Piefed omitted some instances?⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:

  That’s actually surprising, because lots of admins end up lumping the entire anarchist block of instances together.

• ⁨Comment⁩ on ⁨I guess they didn't Edge enough⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:

  If F-18’s aren’t meant to be in the water, why does the navy keep throwing them into the ocean?

• ⁨Comment⁩ on ⁨Has Piefed omitted some instances?⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:

  Piefed has a built-in blocklist that is controllled by the dev. db0 is on that hardcoded list, after the db0 admin called out the dev for something. So the answer to OP’s question is a resounding “yes, piefed is blocking them” but I think my instance is also on that list. So they won’t be able to see this comment.

• ⁨Comment⁩ on ⁨Rich people don't understand us at all.⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:

  They think homeowners have roommates to get labor from them. The same way they have servants who cook and clean for them. To them, the idea of not being able to afford housing is literally inconceivable. It’s not even on their radar, because they’ve never had to worry about it before. The only reasons they can think that someone would have a roommate is for convenience.

• ⁨Comment⁩ on ⁨The Witcher 3: Wild Hunt — Remastered Announced, Songs of the Past Gets First Look⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:

  HoS is a phenomenal piece of DLC that you’re supposed to play alongside the main story. It has a truly fantastic villain. BaW is a nice capstone for Geralt’s story, which takes place after the events of the main story.

  I tend to fall into the “DLC is bad” camp, but both W3 expansions are perfect examples of how DLC can be good. I tend to dislike DLC because it tends to break (at least) one of the following criteria:
  The base game is already complete, and doesn’t require the DLC for a full experience.
  The DLC meshes neatly within the base game without feeling bolted onto the side.
  The DLC adds genuinely interesting content to the game.
  All three critera are what I would typically complain about with DLC, and Witcher 3’s DLC passes all three litmus tests. So any complaints I would have about them would essentially boil down to personal preference rather than objective reasons.

• ⁨Comment⁩ on ⁨Pie in the face.⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:

  Nah, I’ve been stabbed and shot. Getting shot was way worse.

  I was stabbed while fighting some white supes who were trying to take over a bar. My buddy was working as a bouncer so we were there to hang out. It was winter so we all had big puffy coats on while we hung out at the front of the bar. He had some skinheads show up and try to get in. He started to bounce them, they pushed back, and suddenly they realized that everyone outside of the bar were his friends. We got into a tussle, and the six of us kicked the shit out of the five of them.

  But afterwards, when the ambulances were parked outside, my buddy was like “hey uhh… You should go talk to the EMTs *now*.” I had a pocket knife sticking out of my shoulder, punched through my coat. I casually strolled over and was like “hey, is this… A problem?” Two of the EMTs immediately broke away from two of the skinheads to work on me instead. It sucked *after*, for sure. But at the time, I didn’t really feel it. Having my arm in a sling was honestly the worst part about it, because it was on my good side. So I had to learn to do a lot of stuff with my bad hand, because my good arm was strapped to my torso.

  Then I got shot (in the ass cheek, of all places) while being mugged outside of a music festival. I don’t even think he meant to shoot me; I think he was just an idiot. I remember the gun going off as my back was half-turned to him, (which is how he hit my ass cheek) then him cursing and taking off in the opposite direction. That one felt like a white-hot muscle cramp. Like the worst muscle cramp you’ve ever had, combined with a super over-exerted muscle burn like you just did a massive workout. Ever had a kidney stone? Sort of like that. Docs said I was lucky he didn’t hit my hip bone, because that would have been crippling at least, potentially even fatal. I still have a massive scar on my ass from where it tracked all the way across my ass.

  Given, the adrenaline probably played a large part in why I didn’t feel the knife. But I had plenty of adrenaline while being mugged too, and I sure as shit felt that bullet.

• ⁨Comment⁩ on ⁨Pie in the face.⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:

  Yeah, pretty much. A large part of what made the face-pie so effective was simply the “we can still touch you” reminder. It’s a powerful message, because it reminds them that their bodyguards only need to fail once. Which is why they’ve captured the courts and police, to deter attacks even when they aren’t under constant protection.

• ⁨Comment⁩ on ⁨Ancient Historians v. Modern Historians⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:

  This is why archeologists and anthropologists love boring people. Researching Alexander the Great is fine, but we already know the broad strokes. The actual useful “how people lived from day to day” information is almost always found in some boring person’s journal.

  {Date} I walked down to the market to get more salt, flour, vinegar, and some wool thread to darn my socks. The morning walk took approximately 20 minutes with the sun at my back. The fish seller has increased his prices to {amount} due to the war. I saw an interesting flock of birds today during my walk back from the market, I believe they may be passing through the area. I decided to make my dinner bread with a slightly different recipe today. {Full recipe listed below}. It was nice, but I’ll probably only use half as much salt next time, like I normally do. The dairy cow has produced a lot of milk this year because of the heavy rain making the grass grow well. So I’ve had a lot of butter to put on my bread. The neighbor has agreed to trade some of my excess cream for fresh veggies. I’ll probably make them into a stew for tomorrow’s dinner {recipe listed below}.

• ⁨Comment⁩ on ⁨Ancient Historians v. Modern Historians⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:

  Something something “Ancient Egypt had archeologists who studied ancient(er) Egypt.”

• ⁨Comment⁩ on ⁨Bring it back⁩ ⁨⁨1⁩ ⁨month⁩ ago⁩:

  Japan actually made me laugh, simply because the entire country somehow walked all the way around to the other side of the continent.