unwarlikeExtortion

joined 2 years ago
[–] unwarlikeExtortion@lemmy.ml 4 points 18 hours ago

Probably not. AFAIK docker isn't a virtual machine in the traditional sense that it has its reserved storage other apps on the machine can't access. And even if it were, it's the same physical drive.

Now I'm not too versed myself in SSD firmware so maybe the large file size really is like a wide net, or maybe the file size isn't important - only the fact you're doing read operations on a small space on the SSD may give enough volatility in the read speed to infer the exact app that decided to spin up at that moment.

The simplest fix that comes to mind is to have multiple drives (e.g. install and data) and put the browser on the data one. Maybe this added complexity can throw off some naive attacks. Also, a HDD "naturally" has some variability in the access time (since it needs to physically locate the sector with its read heads).

So in essence, laptops with a single SSD are by far the most vulnerable.

However, adding sane limits on the vulnerable API mentioned and throttling read/write speeds (ideally with randomization) seems like a fix good even for single-drive laptops.

What'd probably work with Docker is a similar read speed throttling setup.

Spoofing identifying information won't help much since read time variability is what matters here. It may make it take more info to infer performance rather than having the transparent information, but a good model is bound to infer pretty well after some initial data.

[–] unwarlikeExtortion@lemmy.ml 10 points 19 hours ago

That's putting it mildly.

It's if they'd know the exact food in your fridge and where you got it from. Or the exact makeup of the clothes you buy. Oh, kid's clothes? What a lovley daughter you have! Would you like some educational material targeted for 4-8 year-olds?

And aren't you expecting another one?

Use a blender? What lovely strawberry milkshakes you like for breakfast. Why not tell the store most of your food comes from to raise their prices a bit, since it seems to be a trend in your city?

Do you have meds in the fridge? Well, these items are often sold together, have a look. Oh, and a price increase.

[–] unwarlikeExtortion@lemmy.ml 1 points 3 days ago

Evem then, hardware revisions were always a thing. Doing something they're forced to rather than what they'd themselves want is surely a bigger pain in the ass, but clearly a hardware revision in and of itself isn't that big of a pain to be a shit hits the fan-only move.

It's a regular part of manufacturing.

[–] unwarlikeExtortion@lemmy.ml 1 points 4 days ago

They are. It's a step in the right direction and I absolutely welcome it.

However, it's way overdue in my book, and the harm is im the waiting. It's much better to strike while the iron's still hot and avoid these issues. As is not waiting on improving accessibility.

I'm also intrigued by the fact Google makes such custom devices for the market. I think I came across some explanations lurking (and sometimes popping my head out and commenting) here on Lemmy (and on Reddit before the API apocalypse), but I don't really have anywhere to point you in your search other than Libredirect+Reddit since searching Lemmy has always proven an uncatchable golden goose to me.

[–] unwarlikeExtortion@lemmy.ml 2 points 4 days ago* (last edited 4 days ago) (3 children)

There are a few issues with there being... a single ideal privacy option line of devices (the Pixels):

  • the pixel isn't available for sale in all regions
  • there are only so much Pixels out there.. Meaning less options to choose from and potentially higher prices
  • people using them stand out... So much so some agencies treat Pixel users like criminals even if they don't have Graphene on it
  • Google may choose to end the Pixel line, drastically limit production or remove some feature Graphene relies upon any time they feel like

Having more vendor choice drastically lowers these negatives. And I can't really think of any negatives for the other side than increased dev time and operating costs.

Having the privacy features trickle down to other devices is great since some already landed in AOSP.

However, the trickle down is slow (and often a myth). And some protection is better than no protection.

Why are a multitude of poor options better than a few good options?

Is anything other than a Pixel a poor option?

They may be suboptimal but... Some hardening is definitely better than no hardening any day of the week.

What actively blocking "okay" or even "good" options when "the perfect" one exists should be plainly obvious.

Privacy-consciousness will never spread. Which also has negative effects on the privacy-conscious. Namely point 3 of my little list.

[–] unwarlikeExtortion@lemmy.ml 7 points 1 week ago (1 children)

I'd choose gold. AFAIK most all money laundering rules deal with cash.

Even if a geine were to give you 500 tons of cash or gold, some governments may have a problem with that and choose to redistribute it.

Choosing gold makes the value much more liquid in my opinion.

Not to mention that gold doesn't rot (unlike USD). In today's economy gold is probably more value-dense (as in, a pound of gold is worth more than a pound of hundered-dollar bills).

Currencies also come and go but gold stays. If you're thinking long-term, gold is the vastly better choice.

[–] unwarlikeExtortion@lemmy.ml 2 points 3 weeks ago (1 children)

reCAPTCHA protects. your privacy

I love how they used that period. Seems way better than that lawyer guy from the Simpsons.

[–] unwarlikeExtortion@lemmy.ml 4 points 3 weeks ago (1 children)

Well...

A data center is... A data center. So a central plave for data.

It isn't called Data Warehouse, Data Industrual Plant or Data Mega Shop.

So - if the place is... a central place for the town people's data (as in OC's cases)....

Wouldn't "Data Center" be a fitting name?

[–] unwarlikeExtortion@lemmy.ml 1 points 4 weeks ago

So what?

As if the US government or US compabies don't play the same "underhanded" tactics to harm competition.

Selling at a loss to earn market share is a perfectly valid strategy for US corpos. Why is China supposedly doing the exact same thing suddenly not as nice?

[–] unwarlikeExtortion@lemmy.ml 4 points 1 month ago

So... a "Make sure all votes are for the only true candidate" army?

[–] unwarlikeExtortion@lemmy.ml 3 points 1 month ago

And... They didn't communicate this with you beforehand?

[–] unwarlikeExtortion@lemmy.ml 3 points 1 month ago* (last edited 1 month ago) (2 children)

Yeah.

Edge still has its problems, but it's nowhere near the hot mess it wass in 2015 when it was basically a reskinned IE. Once they switched to Chromium it was still a hot mess, butit did get polished and has all the features you'd expect of a modern browser.

That being said, Edge is the main innovator behind built-in AI chats and similar bloat, which Chrome also likes to shove down people's throats.

And although the feature has existed as a Firefox addon for ages, I think the first browser to support tab groups and horizontal tabs was Edge.

So since both are pretty on-par feature (and bloat) wise, run the same engine and are made and maintained by billion-dollar corpos gobbling user data, both seem like two sides of the same coin.

So for 'normies', it pretty much boils down to which ecosystem you're more ingrained - that will make you prefer Edge or Chrome.

Us lunatics on Linux and/or ActivityPub prefer an independent option.

view more: next ›