Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)G

gnuhaut

@ gnuhaut @lemmy.ml

Posts
6
Comments
356
Joined
3 yr. ago

  • Biden erlaubt Ukraine offenbar Angriffe tief innerhalb Russlands | tagesschau.de

    Jump

  • Das wird nicht viel ändern an der Frontsituation, die USA liefern nicht genug solcher Waffen, und es fehlt den Ukrainern an Soldaten, Munition, Luftabwehr. Soldaten will (hoffentlich) der Westen nicht entsenden, bei dem Rest sind die Lager leer und die Produktion kommt nicht hinterher.

    Aber man will den Russen Schaden zufügen, auch wenn das der Ukraine nicht hilft. Vollkommene Idiotie, die Leute bis zum kompletten Zusammenbruch in den verlorenen Krieg zu schicken.

    Edit: Aus dem original New York Times Artikel:

    U.S. officials said they do not believe that the decision will change the course of the war.

  • Trump said to lift all military restrictions on Israel on 1st day in office according to reports

    Jump

  • You're ignoring the fact that the US knows the weapons are used for war crimes, have been used for war crimes before, and that they're supplying ever more weapons despite this. If you give your kid a gun and you know he's going to murder someone, and he's done it before multiple times, you're going to jail.

  • Trump said to lift all military restrictions on Israel on 1st day in office according to reports

    Jump

  • That excuse wouldn't fly in a courtroom if someone helped a murderer (repeatedly and knowingly), even if they claim they gave them the weapon for self-defense. It's proven the US govt knows what the weapons are used for, and they've been sending them continuously for over a year. It's called being an accessory to the crime.

    Btw the genocide convention explicitly lists under article III e "complicity in genocide."

  • Trump said to lift all military restrictions on Israel on 1st day in office according to reports

    Jump

  • And Israel keeps mass-murdering civilians with said weapons and the US govt knows it.

  • Trump said to lift all military restrictions on Israel on 1st day in office according to reports

    Jump

  • They're still sending weapons. You can't keep giving guns to a guy that keeps murdering people, and then say "I told him not to murder people it's not my fault". How would that hold up in court?

  • Trump said to lift all military restrictions on Israel on 1st day in office according to reports

    Jump

  • Trump said to lift all military restrictions on Israel on 1st day in office according to reports

    Jump

  • Manjaro distribution is introducing a system for sending telemetry about the system

    Jump

  • I edited my comment on your other reply and by my estimation, calculating every SHA256 of all MACs ever potentially issued takes less than 89 seconds on an RTX 3090.

    I also think MACs are (or should be considered) personally identifiable information, since there is potentially a paper trail back to the person who bought it. Plus MACs are not secret information, it's broadcast on the LAN and for wireless modules over the air in the immediate vicinity (though some systems will randomize wireless MACs for privacy reasons). Privacy-unfriendly software has been known to collect MACs (even from other devices on the network and in the vicinity), so there are already databases connecting MAC addresses with other data.

  • Manjaro distribution is introducing a system for sending telemetry about the system

    Jump

  • You don't need this to count unique users. You could just assign a random number on install or whatever. Or even more simply, just run the thing once per month, should be accurate enough. Do they expect the software to just randomly spam duplicate reports? Don't write it that way.

    Best case they don't care about collecting minimal data and don't understand that hashed MACs are easily reversible. So incompetent fools with no sensitivity to privacy.

    Maybe this should be Manjaro's tagline: Not purposely malicious, just grossly negligent and ignorant.

  • Manjaro distribution is introducing a system for sending telemetry about the system

    Jump

  • Debian popcon is opt-in, first of all.

    https://popcon.debian.org/FAQ

    Q) What information is reported by popularity-contest ?

    A) popularity-contest reports the system vendor [1], the system architecture you use, the version of popularity-contest you use and the list of packages installed on your system. For each package, popularity-contest looks at the most recently used (based on atime) files, and reports the filename, its last access time (atime) and last change time (ctime). However, some files are not considered, because they have unreliable atime. For privacy reasons, the times are truncated to multiple of twelve hours.

    [1] i.e. the dpkg Vendor field, see dpkg-vendor(1).

    So no fucking MAC addresses and machine-ids and harddrive serial numbers and stuff.

    They only want package statistics, the point being to have statistics about the popularity of packages, mainly so they can be prioritized for the CD/DVD isos. You know, information that actually has a use, not hardware identifiers that can only be used for tracking purposes.

  • Manjaro distribution is introducing a system for sending telemetry about the system

    Jump

  • That's not anonymous, that's pseudonymous.

    What is the point of this? The machine-id already looks to be some unique random number, so you're calculating another unique random-looking number from that, might as well use the original number.

    You can't glean any useful information from a unique random-looking number that would help with developing Manjaro. You can't calculate any statistics from that. The only use is tracking.

    Edit: And as mentioned in my other comment, reversing the MAC SHA by brute force is trivial, so that one at least (and possibly the other hardware serial numbers they collect) shouldn't even be considered pseudonymous.

  • Manjaro distribution is introducing a system for sending telemetry about the system

    Jump

  • MAC addresses are 48 bit, and half of that is just the manufacturer. So 24 bits really, and those bits aren't random, I think manufacturers just assign these based on some scheme, like a serial number. Point is you could easily reverse the SHA by brute force.

    You can't calculate any useful statistic from a hash so literally the only use this would have is some sort of tracking.

    Edit: I just looked up some data and I found someone using hashcat on an RTX 3090, which looks like it can do almost 10000 million SHA256 hashes per second of salted passwords (which are longer than 48 bit MACs, so MACs should be faster). 2²⁴ is 16.8 million, so it'll take about 1.7 ms per vendor. I found a database with (all?) 53011 vendor ids:

     
        
>>> 2**24 * 53011 / 10000 / 1000 / 1000
88.93769973759998

    Yup, 89 seconds. You can calculate the SHA256 of every single MAC ever potentially issued in 89 seconds on a bog-standard 3090.

  • Warnung vor Plastik in der Küche: Darum ist Holz besser

    Jump

  • Ich dachte eher an Holz (und Flüssigkeit) auf Edelstahl, was sehr gut abschabt. Aber ja Teflon ist auch ein Problem bei Metallutensilien.

  • Warnung vor Plastik in der Küche: Darum ist Holz besser

    Jump

  • Ist aber wurst wenn sich's verfärbt? Scheint ja hygienisch trotzdem okay zu sein, weil Holz antibakteriell wirkt. Und Holzlöffel sind voll gut zum abschaben von Bodensatz beim ablöschen, das geht mit Plastik und Metall nicht gescheit. Je nach Situation kann aber Metall auch besser sein.

  • What desktop enviroment do you use and why?

    Jump

  • Shoving everything into the task bar doesn't strike me as more orderly. Less so really.

  • What desktop enviroment do you use and why?

    Jump

  • I'm not a Gnome user but I stopped minimizing my windows years ago. Don't need that if you (a) don't have icons on your desktop and (b) move your windows over to another workspace when stuff gets crowded.

  • Phoronix: Several Linux Kernel Driver Maintainers Removed Due To Their Association To Russia

    Jump

  • Yeah better discriminate based on nationality /s. But why stop at that? Poor people are too easily bribed can't have them. I hear the CIA recruits from top US universities, can't trust those college grads either. Anyone belonging to some homophobic church or religious group? Better not what if they're closeted gay and get blackmailed? Anyone in a monogamous relationship should be excluded for the same reason, if you think about it. tips forehead

  • Phoronix: Several Linux Kernel Driver Maintainers Removed Due To Their Association To Russia

    Jump

  • Racists and Xenophobes will try to stop global collaboration,

    Yes! Go on...

    real conflict that matters will always be the smart vs the lowiq.

    Uff... That's some serious brainworms right there. How do you call your worldview? IQ Supremacy?

  • Phoronix: Linus Torvalds Comments On The Russian Linux Maintainers Being Delisted

    Jump

  • Maybe he's trying to avoid conflict with US government, but he clearly is not trying to avoid conflict with that statement.