• 0 Posts
  • 19 Comments
Joined 1 year ago
cake
Cake day: June 13th, 2023

help-circle




  • It is not, but a write amplification of 36704:1 is one hell of an exploitable surface.

    With that same Raspberry Pi and a single 1gbit connection you could also do 333333 post requests of 3 KB in a single second made on fake accounts with preferably a fake follower on a lot of fediverse instances. That would result in those fediverse servers theoretically requesting 333333 * 114MB = ~38Gigabyte/s. At least for as long as you can keep posting new posts for a few minutes and the servers hosting still have bandwidth. DDosing with a ‘botnet’ of fediverse servers/accounts made easy!

    I’m actually surprised it hasn’t been tried yet now that I think about it…




  • There are inverters that support battery backup, recharging from solar and grid power that are supposed to go between your grid tie-in and the rest of your house. Quite a ways more expensive, but the battery capacity is probably relatively cheap compared to UPS power and is essentially a backup for your entire house.

    The one I read about a while ago was a Growatt that is basically an all in one box. Can provide power from batteries, recharge from solar or grid power, feed back excess solar power to the grid, etc, you name it. And I can imagine other brands producing the same solution.

    I’m lucky enough to live in a country with almost no power cuts though. I think we have at most 1 a year for max 10 minutes. So can’t say I have any experience with it myself.




  • And let’s not forget: it’s full AAA price, but it feels like a finished game without hidden microtransactions for cosmetics or DLC that actually should have been part of the main game. Mod support is also free which is apparently not a given. Looking at you Bethesda with the starfield rumors.

    Gameplay is modeled to be enjoyable instead of a time sink just to get you to play more.

    You can play co-op with friends if you want but it doesn’t force you to always be online.

    Actually, the more I think about, it’s sad how low a bar we have set for new games these days. And the worst part is, most new games can’t even pass this…


  • Honestly the default config is good enough to prevent brute force attacks on ssh. Just installing it and forgetting about it is a definite option.

    I think the default block time is 10 minutes after 5 failed login attempts in 10 minutes. Not enough to ever be in your way but enough to fustrate any automated attacks. And it’s got default config for a ton of services by default. Check your /etc/fail2ban/jail.conf for an overview.

    I see that a recidive filter that bans repeat offenders for a week after 10 fail2ban bans in one day is also default now. So I’d say that the results are perfect unless you have some exotic or own service you need fail2ban for.


  • You think they can’t earn money from users that are not logged in? Sweet summer child.

    They will still show ads on the search page. The dirty affiliate redirects they will think off will still work in their browser. You are effectivly using a software platform they have total control over. Offcourse they are going to find ways to earn money.

    It’s like saying Facebook can’t track me because I’m not logged in. Or Google Ads don’t earn money from me because I’m not logged in.



  • You are probably better off switching back to Edge, Opera GX, Chromium or even Chrome instead of Brave if you still want to use a chrome based browser. They have made some questionable decisions in the past.

    BAT cryptotokens

    So brave rewards you with their own injected advertisements with crypto, probably their most discussed feature. Could be a good idea if implemented correctly. But the real issue here is that they block advertisements and then add their own “privacy minded” advertisements back into the page for which you and they earn some crypto. So not only do you still see some ads with the default settings, now the site/content creators get nothing and brave earns money of your page views.

    Creator donations

    Speaking of content creators: At some point brave also had donation links on Youtube for those content creators that now earn less trough blocked advertisements and make brave money. Showing these donation links for specific creators, with their name and photo attached, with no opt-in or consent from creators themselves. Tom Scott even asked if they could refund everyone that donated to which they replied “Refunds are impossible”. It looks like they changed the way that works after feedback though so no funds are being donated anymore unless the creator verifies in brave.

    Affiliate links

    At some point brave changed URL’s from binance, even when typed in manually, directly to their affiliate link. They even publicly apologized after that. Which shows they are willing to change URL’s to earn some money off you.

    So yeah you could probably still use Brave even if you disable the crypto aspect but from actions in the past they have shown they really want to earn money off you. And they haven’t hesitated to explore boundaries of what people find acceptable to get that money in the past. I personally wouldn’t trust them to not do something questionable in the future either, crypto or no crypto.


  • Sleepkever@lemm.eetoFirefox@lemmy.mlNew feature in nightly? :o
    link
    fedilink
    English
    arrow-up
    8
    ·
    edit-2
    1 year ago

    Not 100% true according to the description on that page. It just hides the banner if possible but it will automatically accept some or even all cookies and tracking if it is required for the site to function. And their choice if they accept some or all depends on “whichever is easier to do”.

    And functionality of the website could be social media or video embedding which might be “required for the site to function” in the eyes of the extension maintainers. But which will send data to Facebook, Google, and the likes. That could be okay depending on what your stance but a good thing to be aware of.



  • But the Dutch state instance isn’t meant to assert power over user content nor is it meant to influence any information shared. Normal people won’t be able to create an account on that instance, so they cannot see what people view or limit what people create.

    The reason for the instance is to have a government owned instance to share things that aren’t limited by another 3rd party commercial company. Now the government is in control instead of meta or Twitter and they can’t decide to, for instance, limit view access for everyone with no accounts one day. (Looking at you Twitter)

    Another additional advantage is that all the official dutch government accounts are now grouped on an instance with limited and screened account creation. So now everything from that instance is verified to be from the Dutch government. Possibly reducing fraud and impersonating accounts in the future once people get used to the federated usernames.