• 76 Posts
  • 278 Comments
Joined 3 years ago
cake
Cake day: July 9th, 2023

help-circle
  • I thought this was using SDKs embedded in apps and advertising platforms. This is a different threat model. You need to block ads and prefer using websites instead of apps which have more access to device info like the advertising ID.

    If you’ve got an Android, go to Settings, search for ads, and find the advertising ID and delete the ID. It’s a stable identifier that can be used to identify your phone.

    Switch to more private browsers like Firefox for Mobile and install uBlock Origin.

    EDIT: I’m not saying this will protect you against IMSI catchers or tower based drag nets. In addition to not bringing your phone, when you do go home you need an entirely different set of tools to protect yourself.




  • You’re describing what agile should be, but Agile™ is the variant you get in toxic companies where they say they are agile, but it’s just a mechanism to micromanage developers with bad managers asking why you’re not burning down enough points or why you haven’t met the estimated date you thought before you realized there was more technical debt than a bankrupt business.

    Maybe you’ve avoided it but I’ve seen it first hand.




  • I use it to play music from Jellyfin to my Sonos speakers. It won’t fix a Jellyfin library that has bad data, but it can pull in music from multiple different sources and push to different players.

    It works well enough. Some issues where songs get interrupted, but I think that’s issue with the Music Assistant/Sonos integration.



  • I developed my own scraping system using browser automation frameworks. I also developed a secure storage mechanism to keep my data protected.

    Yeah there is some security, but ultimately if they expose it to me via a username and password, I can use that same information to scrape it. Its helpful that I know my own credentials and have access to all 2FA mechanisms and am not brute forcing lots of logins so it looks normal.

    Some providers protect it their websites with bot detection systems which are hard to bypass, but I’ve closed accounts with places that made it too difficult to do the analysis I need to do.





  • chaospatternsOPtoLinux@programming.devLow FPS in Firefox on one monitor
    link
    fedilink
    English
    arrow-up
    1
    ·
    edit-2
    1 month ago

    Interesting. I played around with X11 vs Wayland settings just to see what different configurations give me

    • MOZ_ENABLE_WAYLAND=1 /snap/bin/firefox - Exhibits low FPS issue
    • MOZ_ENABLE_WAYLAND=0 DISABLE_WAYLAND=1 /snap/bin/firefox - Actually feels fast like it should be. Most animations feel faster, some are still choppy though. It’s hard to tell.

    It seems like running with X11 sort of the problem? Which seems unexpected and concerns me since I know distros are starting to default to Wayland.






  • On Tor dark web domains, you use the .onion domain. Tor is configured as a SOCKS proxy, so it doesn’t perform a DNS query. Instead, Tor itself sees you’re trying to connect to an onion domain name. Then it takes the URL and translates that into a public key that it knows how to find in its own hidden service directory.

    Only the actual hidden service has a valid private key corresponding to that public key in the URL so cryptography (and the assumption that quantum computers don’t exist) ensures you’re talking to the right server.

    Tl;dr effectively no DNS for onion hidden services

    https://community.torproject.org/onion-services/overview/





  • chaospatternstoTechnologyIt's your fault my laptop knows where I am
    link
    fedilink
    English
    arrow-up
    10
    ·
    edit-2
    2 months ago

    Every WiFi router and network has something called an SSID and a BSSID. The SSID is the friendly name that you use to show off your puns to your neighbors. The BSSID is a 6 byte MAC address. All devices use the BSSID when connecting and communicating.

    With a non hidden SSID, your router broadcasts the SSID and BSSID.

    The BSSID doesn’t change even if you change your SSID (Though APs with support for multiple SSID create a different BSSID per network) and it’s what is actually used for geo location.

    When it’s hidden, it doesn’t send the SSID out, but sends out packets with the BSSID. Clients then scream out to the void “anybody know the SSID ‘My Secret SSID??’” Then it’ll respond.

    So basically hidden networks still send out the unique identifying address and then when you take your phone with you, you’re just telling everybody what your home WiFi is called.

    Hidden SSIDs are not that useful.



  • chaospatternstoSelfhostedPSA syncthing-fork has changed owners
    link
    fedilink
    English
    arrow-up
    42
    ·
    2 months ago

    We’re sort of in this situation because the official project decided not to continue providing an official Android app, yet people want to use it on Android forcing unofficial versions to be created and maintained.

    I get that they don’t want to deal with Google Play anymore, but somebody has to deal with it and them not owning the app is putting users at risk.