unwarlikeExtortion

joined 2 years ago
[–] unwarlikeExtortion@lemmy.ml 4 points 1 day ago (1 children)

CUPS is the UNIX (i.e. both Linux AND Mac) print software. For some reason it's maintained by Apple.

So chances are if a printer works on Mac (which it will), it'll also work on Linux (which it does).

You only need to find the right "print driver" which is actually just a preset for CUPS. Scrolling the list can be quite annoying if you don't know where to look, as it's highly unlikely to find your exact model listed (which doesn't mean others won't work - they will. It's just hit or miss sometimes if the autodetect doesn't work).

That being said, if you're shopping for a printer and have the ability to choose, try checking the manufacturer support website for "Linux drivers" (i.e. ppd files). Most should turn something up.

[–] unwarlikeExtortion@lemmy.ml 4 points 4 days ago

Probably not. AFAIK docker isn't a virtual machine in the traditional sense that it has its reserved storage other apps on the machine can't access. And even if it were, it's the same physical drive.

Now I'm not too versed myself in SSD firmware so maybe the large file size really is like a wide net, or maybe the file size isn't important - only the fact you're doing read operations on a small space on the SSD may give enough volatility in the read speed to infer the exact app that decided to spin up at that moment.

The simplest fix that comes to mind is to have multiple drives (e.g. install and data) and put the browser on the data one. Maybe this added complexity can throw off some naive attacks. Also, a HDD "naturally" has some variability in the access time (since it needs to physically locate the sector with its read heads).

So in essence, laptops with a single SSD are by far the most vulnerable.

However, adding sane limits on the vulnerable API mentioned and throttling read/write speeds (ideally with randomization) seems like a fix good even for single-drive laptops.

What'd probably work with Docker is a similar read speed throttling setup.

Spoofing identifying information won't help much since read time variability is what matters here. It may make it take more info to infer performance rather than having the transparent information, but a good model is bound to infer pretty well after some initial data.

[–] unwarlikeExtortion@lemmy.ml 9 points 4 days ago (1 children)

That's putting it mildly.

It's if they'd know the exact food in your fridge and where you got it from. Or the exact makeup of the clothes you buy. Oh, kid's clothes? What a lovley daughter you have! Would you like some educational material targeted for 4-8 year-olds?

And aren't you expecting another one?

Use a blender? What lovely strawberry milkshakes you like for breakfast. Why not tell the store most of your food comes from to raise their prices a bit, since it seems to be a trend in your city?

Do you have meds in the fridge? Well, these items are often sold together, have a look. Oh, and a price increase.

[–] unwarlikeExtortion@lemmy.ml 2 points 4 days ago

It's not a just "you've made it" though.

It's a "You push and shove it HARD down people's throat to the point it's almost the only thing they see now apart from ads".

I remember accidentally searching through google once. The AI summary took half the page and there were a whopping 6 ads. Which is almost two pages of scrolling.

So I don't blame users for taking the easy way out and just using the summary. Especially if they haven't heard of uBO + Firefox on mobile. Rawdogging the modern internet is terrible UX. Popups, autoplay, consent forms with a bajillion data "partners". And ads, ads and even more ads.

[–] unwarlikeExtortion@lemmy.ml 4 points 6 days ago

how transparent, yet unrecognizable

Well, that's the point of transparency. It's so see-through that you don't see it. You only see through it.

[–] unwarlikeExtortion@lemmy.ml 5 points 6 days ago (1 children)

Not his money, OUR money.

Is US tax money really ours, or is it basically Trump's near-infinite gift fund?

[–] unwarlikeExtortion@lemmy.ml 1 points 1 week ago

Evem then, hardware revisions were always a thing. Doing something they're forced to rather than what they'd themselves want is surely a bigger pain in the ass, but clearly a hardware revision in and of itself isn't that big of a pain to be a shit hits the fan-only move.

It's a regular part of manufacturing.

[–] unwarlikeExtortion@lemmy.ml 1 points 1 week ago* (last edited 1 week ago)

Benefit and morality are separate things.

Well yeah, they are. But they're tightly connected regardless.

As you've rightly noticed, benefit to self isn't automatically immoral. Neither is all benefit to society.

For example, killing some parts of society (perhaps the mentally lesser) is as immoral as it gets.

However, I feel working to advance society in sane ways that do not harm vulnerable groups inherently is a moral thing to do.

Things like charity, volunteering. Hell, even feeling bad when you pass by someone on the street and do nothing else about it. Not ideal, but at least you're not heartless and see your flaws.

Whinc means you care. And that's the first step to the last one: being a driver of change.

However, not everyone is set on this path. Most people do not have the resources (of whatever kind: money, infuence, power, time... the list goes on). Hell, even the drive to change or the eyes to see issues.

That's why it's important to create systems which help those in need and make a baseline of quality and utility, accessible to all. Such systems are, in essence, infrastructure.

And FOSS is an example of such infrastructure.

It lowers the barriers to entry for everyone.

Then big players like to "take advantage" of that. For example, Facebook (yes, that one) is said to be the "Largest MySQL cluster in the world", since all their products store data in MySQL. And MySQL is (mostly) FOSS.

However, that's a great thing. It makes the infrastructure free. Facebook has money, and if they have a problem with something MySQL does badly, they can throw money at it. Then the fix will be there for everyone using it to benefit from.

In some sense it's the logical inversion of the famous "Tragedy of the commons" since instead of multiple people runnung the well dry, a single one can fix the well and make it run smoother.

And since most FOSS is "viral" (a genius idea by whoever thought it up), it'll most likely stay that way.

About GitHub: it's a platform built aroung Git, the stupid content tracker. A piece of FOSS software made by none other than the creator of Linux.

As you've noticed yourself, Android roms themselves are "proprietary". But the largest base they take from is AOSP - Open source. They also use other FOSS projects. There's a master list hidden somewhere in the Settings of each phone (including iPhones) - so even Apple isn't "immune" to open source.

They need it to be competitive. Why remake something that's already freely available to all, anyways?

Using FOSS is inherently good in my eyes percisely because of the "viral" part.

The standard meaning of "viral" in Open source is as follows: you can't take open source software and close it off. It needs to stay open.

However, there's another aspect of virality that's important to mention: the more people use FOSS, the more it grows. And the more it grows, the more accessible it is (people know). The more useful it is (there's more of it, it does more stuff). And finally, users benefit more from it. Some go on to expand and enlarge it!

A wonderful cycle of growth. And even something as simple as merely using it is doing the cycle a favour.

And while one person relying on proprietary software won't do much harm, it adds up fast. It breaks the cycle.

Think of it like a kind of herd immunity.

That's why I feel using open source software is a moral imperative.

Open source is better than proprietary for the users. And using it is better for it. It's a symbiotic relationship.

[–] unwarlikeExtortion@lemmy.ml 10 points 1 week ago

Because in some (most) parts of this world, the concept is

Privatize profit, socialize losses.

So the company gets to keep all profit during good times, but employees "solidarily pay" for the losses.

[–] unwarlikeExtortion@lemmy.ml 1 points 1 week ago

They are. It's a step in the right direction and I absolutely welcome it.

However, it's way overdue in my book, and the harm is im the waiting. It's much better to strike while the iron's still hot and avoid these issues. As is not waiting on improving accessibility.

I'm also intrigued by the fact Google makes such custom devices for the market. I think I came across some explanations lurking (and sometimes popping my head out and commenting) here on Lemmy (and on Reddit before the API apocalypse), but I don't really have anywhere to point you in your search other than Libredirect+Reddit since searching Lemmy has always proven an uncatchable golden goose to me.

[–] unwarlikeExtortion@lemmy.ml 2 points 1 week ago* (last edited 1 week ago) (2 children)

Sure.

Using community-vetted software doesn't have any security or privacy benefits over proprietary.

Neither will proprietary software arbitrarily be able to remove features, lock out certain users or raise prices dramatically.

Would you rather buy vetted cruelty-free foods or not?

There's surely no benefits in doing so.

What about clothing?

Would you rather buy a shirt that has some guarantee of not using underpaid or child labor?

What about energy?

Would you rather your electricity comes from a local coal plant poisoning you and others with its toxic fumes, or from a solar+hydro mix?

What about furniture?

Woukd you rather get an item made from recycled materials and with well-paid labour, made locally and to high quality or get the not-so-cheap alternative from IKEA?


All the options above are morally superior. And so is FOSS software.

And there is a multitude of reasons.

But there's two things I'd like to point out right away, regardless of FOSS specificalky

  1. sometimes, these pros from above don't even come at a higher price.

Hell, oftentimes they're cheaper (for example, storebrand is vastly more moral than Nestle and it's cheaper).

  1. There's a positive-feedback loop regarding standards.

First standards don't exist formally and any "standard" (quality or otherwise) is pure coincidence. Pay is high because the market said so. Quality is high because machines are good enough. Privacy of our maiking list is high because our director chose to use a free (FOSS) local app instead of a paid cloud service.

Then ad-hoc (informal) standards form. Companies voluntarily do things in order to stay competitive. For example most every site uses hashing and salting, meaning your passwords are pretty safe.

Then real standards form. Still voluntary, but formal. They're still voluntary, but you can't half-ass things anymore abd say you did them. You've gotta meet real demands.

Then these standards get made a requirement by the legislature, so Nestle actually has to do some ethics now.

This exact same progression is present in multiple otherwise disjunct domains. Labor rights, pollution, quality standards. And yes, software freedom is one of them.

But what even is software freedom?

It's the ability to vett code. The ability to switch providers. The ability to play a game after servers shut down. The ability to export data. The ability to not pay an hourly rate of $15 for your dial-up use. Interoperability. And a lot of other things.

Free as in freedom is much more than gratis (free as in no need for money).

Free software is the one that pushes this feedback loop forward the most.

And that's why it's a moral imperative.

Ironically, it's free software that often times creates competition (and therefore lowers the price of) proprietary software.

It sets quality standards. Proprietary can't be that worse than free - people'd find out soon enough.

It acts as competition (albeit oftebtimes unequal).

It expands accessibility by giving a gratis alterbative.

It drives change. Much more so than proprietary bullshit.

Using FOSS software isn't easy in this day and age. But without it, using proprietary software would be way, way harder than the FOSS from decades ago.

No Internet/WorldWideWeb. No networking. No encryption.

Most of the infrastructure is FOSS. It's too expensive to make well even for the big players - some 25% of Windows (as in the bloated mess) is made up of free software. 90% of Edge is.

You're using free software even if you're not trying to much more than you realize.

And that's the result of small victories from ages ago. Victories which set standards and expectations.

Maximizing your use of FOSS software maximizes the amount of these victories. It speeds them up.

And it makes a difference way bigger than you may realize.

[–] unwarlikeExtortion@lemmy.ml 2 points 1 week ago* (last edited 1 week ago) (2 children)

There are a few issues with there being... a single ideal privacy option line of devices (the Pixels):

  • the pixel isn't available for sale in all regions
  • there are only so much Pixels out there.. Meaning less options to choose from and potentially higher prices
  • people using them stand out... So much so some agencies treat Pixel users like criminals even if they don't have Graphene on it
  • Google may choose to end the Pixel line, drastically limit production or remove some feature Graphene relies upon any time they feel like

Having more vendor choice drastically lowers these negatives. And I can't really think of any negatives for the other side than increased dev time and operating costs.

Having the privacy features trickle down to other devices is great since some already landed in AOSP.

However, the trickle down is slow (and often a myth). And some protection is better than no protection.

Why are a multitude of poor options better than a few good options?

Is anything other than a Pixel a poor option?

They may be suboptimal but... Some hardening is definitely better than no hardening any day of the week.

What actively blocking "okay" or even "good" options when "the perfect" one exists should be plainly obvious.

Privacy-consciousness will never spread. Which also has negative effects on the privacy-conscious. Namely point 3 of my little list.

view more: next ›