Skip Navigation
Under a toot announcing that firefox now supports CHIPS (Cookies Having Independent Partitioned State)
  • oh

    https://developer.mozilla.org/en-US/docs/Web/Privacy/Privacy_sandbox/Partitioned_cookies

    CHIPS is similar to the state partitioning mechanism implemented by Firefox. The difference is that state partitioning partitions cookie storage and retrieval into separate cookie jars for each top-level site, without a mechanism to allow opt-in to third-party cookies if desired. As browsers start to phase out third-party cookie usage, there are still valid, non-tracking uses of third-party cookies that need to be permitted while developers begin to handle this change.

    so this adds a setting to allow a site access to shared 3rd party cookies, when the site supports the feature?

  • Valve removes arbitration from its Steam agreements — here’s what that means for you
  • Several law firms have pursued this option, one of which was sued by Valve for allegedly attempting to “extort” the company with a threat of mass arbitration with more than 50,000 people. (This lawsuit was dismissed in August without prejudice, meaning Valve could re-file.)

    The idea is that the sheer number of arbitration cases would force Valve to settle with all of them with the same resolution, instead of arbitrating them all individually. Arbitration is usually less expensive than litigation, but on this mass scale, it can easily become overwhelming for the company the disputes are with. “In states like California where businesses must pay most of the arbitration fees in a consumer claim, the business would be required to pay a filing fee for each individual claimant,” Steinberg said. “With fees of approximately $1,500 per claim, a claim with thousands of individuals could cost millions in filing fees.”

  • Lemmy specific private tracker - any interest?
  • I have a few hundred public torrents active, and they all have peers, even the "fringe" ones. maybe your statistics is right, but even then it has value. I don't care about leechers if it improves the service for us too

  • XMRig Based Anti-Spam / Rate Limiting
  • hmm, I think it wouldn't be really useful for monero mining. even with p2pool mini you need hours on a simple machine to find a block, and you are waiting just for a short time on these bot verification pages/menus.

    Like at least if they could be given work units to very briefly preform micro prime number calculations, at least there is some mathematical value in that.

    if you can adequately verify the correctness of the results, that could be worth something yeah

  • Firewalls: what SHOULD I block?
  • That is sort of saying that if someone want to learn Swedish, but since they don't know any Swedish, it is better to start them on Norweigan first.

    nobody wants to learn Swedish here. they want to be understood in a community that knows both Swedish and Norwegian, and if Norwegian is easier, they can learn just that

    If UFW had used a similar syntax to that of iptables, then

    then it wouldn't be Uncomplicated anymore

  • Firewalls: what SHOULD I block?
  • who speaks about localhost? out of 21 active ports on my machine, only 3 is only listening on localhost. dhclient, avahi-daemon, syncthing, kdeconnect.. cups-browsed did not listen only on localhost either

  • Firewalls: what SHOULD I block?
  • run sudo ss -tulpn, and have a look at the processes and their privileges listening for incoming connections. If one of them has a vulnerability, through which a third party can make that software do things it was not intended for.. that's pretty bad.
    This can most easily happen with software whose developers are underresouced/careless/stubborn.

    A recent case of that happening: https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I/
    Tl;Dr, remote code execution vulnerability in software that most often runs as root, automatically.

  • All Proton Drive apps are now open source
  • I was listening to it a few weeks ago, but vaguely there are auditing companies in the Netherlands that need to verify companies above a certain size whether they are handling their money properly. As I understand it includes tax accounting.
    These auditing companies don't like cryptocurrencies. There are several of these that don't agree to audit Proton even because they are accepting Bitcoin, but none of the remaining would accept it if they were also accepting a second cryptocurrency.

    Now that I think of it, it might have actually been the reason they don't accept Monero as a payment? In that case, the reason for Proton Wallet being bitcoin only has something to do with another wallet's developers having been jailed recently for handling multiple cryptocurrencies.

    I recommend you to listen to it though, if you understand english speech. There were interesting topics (and Opt Out generally has interesting episodes).
    This episode is 54 minutes, audio only. You can find it here: https://www.buzzsprout.com/1790481/15505787-proton-wallet-w-andy-yen.mp3.

  • Element X, Call and Server Suite are production ready
  • I must mention though that their solution is not really efficient. Everyone's app gets the phone number, its just not displayed anymore. This can be circumvented with a little modification of the app, which is easy because it's open source.

  • Hello, world! You, me, and The Matrix.org Foundation
    matrix.org Hello, world! You, me, and The Matrix.org Foundation

    Matrix, the open protocol for secure decentralised communications

    Hello, world! You, me, and The Matrix.org Foundation

    Introduction of the first Managing Director

    1
    Why does Ruby Gem 3 install gems to Ruby 2 directories?

    I have just installed the tmuxinator 3.0.5 ruby gem with gem 3.2.5 and the --user-install parameter, and to my surprise the gem was installed to ~/.gem/ruby/2.7.0/bin/.

    Is this a misconfiguration? Will it bite me in the future? I had a quick look at the environment and haven't found a variable that could have done this. Or did I just misunderstand something? I assume that the version of gem goes in tandem with the version of ruby, at least regarding the major version number, but I might be wrong, as I'm not familiar with it.

    I have checked the version of gem by running gem --version. This is on a Debian Bullseye based distribution.

    1
    Google's Web Environment Integrity made me remember this video
    vimeo.com Trusted Computing

    "Trusted Computing" - ever heard of it? This motion graphic style documentary explains what the term "trust" has in common with "Trusted…

    Trusted Computing

    The video is a short documentary on Trusted Computing and what it means to us, the users.

    If you like it and you are worried, please show it to others. If you are not the kind to post on forums, adding it to your Bio on Lemmy and other sites, in your messaging app, or in your email/forum signature may also be a way to raise awareness.

    5
    InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)RE
    ReversalHatchery @beehaw.org

    Computers and the internet gave you freedom. Trusted Computing would take your freedom. Learn why: https://vimeo.com/5168045

    Posts 3
    Comments 1.4K