kuberoot

joined 2 years ago
[–] kuberoot@discuss.tchncs.de 18 points 1 week ago

That actually sounds like a fun SCP - a word that doesn't seem to contain a letter, but when testing for the presence of that letter using an algorithm that exclusively checks for that presence, it reports the letter is indeed present. Any attempt to check where in the word the letter is, or to get a list of all letters in that word, spuriously fail. Containment could be fun, probably involving amnestics and widespread societal influence, I also wonder if they could create an algorithm for checking letter presence that can be performed by hand without leaking any other information to the person performing it, reproducing the anomaly without computers.

[–] kuberoot@discuss.tchncs.de 2 points 1 week ago (1 children)

I'm not a security expert, but to my knowledge that's the point - even a unique salt global to your site/service can help. Worth mentioning are rainbow tables, which are databases of hashes for known strings, so you can take a hash and look up the string, and very easily defeated by salts.

[–] kuberoot@discuss.tchncs.de 1 points 1 week ago

If the password is securely hashed, and the attack only includes data exfiltration, then there's theoretically no risk of breaking into users' accounts anyways. However, the issue is that if somebody can log into your Plex account, that means they got your password somehow - and if they did get that password, they can use it elsewhere. So if there's any reason to change your password on Plex, then there's just as much reason to change that same password elsewhere.

[–] kuberoot@discuss.tchncs.de 10 points 1 week ago (9 children)

I do think they missed a bit about password reuse, since they tell you to reset the password on their site, you should be changing the password on any other sites where you reused it. But yeah, not arguing about it being good otherwise.

[–] kuberoot@discuss.tchncs.de 2 points 3 weeks ago

It does seem to go a step further, Fedora seems to not only require you to install them, but also not provide them in the official repositories, requiring you to use unofficial repositories. Most software in a distro's repositories doesn't come preinstalled, but it's generally as simple as running the package manager.

[–] kuberoot@discuss.tchncs.de 1 points 3 weeks ago (2 children)

I think I was using an NVidia GPU up until about 3 years ago, when I switched to AMD when upgrading, so my knowledge on that front is a bit outdated.

The arch wiki has more information if you're curious, but I'm aware of official proprietary drivers, official partially opensourced drivers, separately packaged legacy drivers, and the unofficial opensource Nouveau drivers which weren't really usable back then.

What you're describing sounds odd to me, but looking it up, sounds like Fedora doesn't package official drivers? I'm having trouble finding proper information on this, but it could be for ideological reasons, since those drivers are proprietary - so the default drivers might be Nouveau, which might be rather broken, both because of lack of workforce and NVidia blocking unofficial drivers from using their devices properly.

If that's the case, it's basically a conflict between ideology and usability within that distribution - it might seem like a great distro for users, and it might be competently made, but when somebody doesn't care about the ideology and just wants their device to work, they'll end up with confusion and work to do.

[–] kuberoot@discuss.tchncs.de 7 points 3 weeks ago (6 children)

I will remark that that sounds like a distro issue - I use Arch and the drivers are just in the official distros, no need to add external ones. Just look up what you need on the wiki and install it.

That said, AMD will still probably be a better experience.

[–] kuberoot@discuss.tchncs.de 5 points 1 month ago

I think the issue is that text uses comparatively very little information, so you can't just inject invisible changes by changing the least insignificant bits - you'd need to change the actual phrasing/spelling of your text/code, and that'd be noticable.

[–] kuberoot@discuss.tchncs.de 7 points 1 month ago

Since so many other quotes are already claimed, how about some Outer Wilds:

Seriously, I tried everything I could think of [...], and neither idea worked.

[–] kuberoot@discuss.tchncs.de 2 points 2 months ago (1 children)

Calling somebody a racist or sexist hurts their feelings, should that be allowed?

Calling somebody out publicly can hurt their livelihood and thus ability to get things like medical care, should that be allowed?

[–] kuberoot@discuss.tchncs.de 12 points 2 months ago

All information on the manufacturer’s servers has been destroyed, including 10 terabytes of backup materials.

The numbers might not add up, but it's possible the hackers had access to the (insufficient, and badly secured) backups to delete them too.

[–] kuberoot@discuss.tchncs.de 1 points 2 months ago

I would assume they sent them after the number was drawn, to before the number was drawn, which means the future self doesn't need their own message to learn the numbers.

view more: next ›