[-] ricecake@sh.itjust.works 1 points 34 minutes ago

Yeah, and it's not like you want the information out there, it's just that in my opinion it's not something I would pay money for. Having the authority to make the request doesn't mean that the party on the other end is obligated to comply, or in some cases even legally permitted to.

I've used Google's service where they send you an email to review results if they find something, and my Google results for my incredibly distinctive name are basically only professional resources that I kinda want to be findable.

[-] ricecake@sh.itjust.works 1 points 14 hours ago

Honestly? It's not something I would pay for. Google has their own service where they'll let you know if they find your information and you can ask them to remove the search result.
Beyond that, there's some information that you just fundamentally can't make private and no service can get taken down.
Most data mining sites just collect those public records and put them next to each other, so they get a pile of your name, birthday, where you were born, how active you are as a voter and all that stuff.

Removing your address from Google maps just seems silly to me. That there is a residence there is fundamentally public information, not being on maps doesn't make it less public it just probably causes issues for delivery drivers.

Anyone who has your data and is going to be a jerk about it isn't going to listen to a request to take it down either. They're just going to send you spam messages.

The odds of being Targeted by a determined individual who's focused explicitly on you is low. They tend to target a broad swath of people, and then dig in on people who take the bait a few times.

[-] ricecake@sh.itjust.works 19 points 22 hours ago

I have never felt so old.

Name, address, and phone number of the account holder used to be published in books that got sent to everyone in the city and also just left lying in boxes that had phones in them if you needed to make a call while you weren't home, because your phone used to be tied to a physical location.
You also used to have to pay extra to make calls to places far away because it used more phone circuits. And by "far away" I mean roughly 50 miles.

It's not the biggest thing in the world, privacy wise, since a surprising amount of information is considered public.
If you know an address, it's pretty much trivial to find the owners name, basic layout of the house, home value, previous owners, utility bill information, tax payments, and so on. I looked up my information and was able to pretty easily get the records for my house, showing I pay my bills on time, when I got my air conditioner replaced and who the contractor who did it was.

As an example, here's the property record for a parking structure owned by the state of Michigan. I chose a public building accessible by anyone and owned by a government to avoid randomly doxing someone, but it's really as easy as searching for public records for some county or city and you'll find something pretty fast.

[-] ricecake@sh.itjust.works 2 points 1 day ago

Depends on the vendor for the specifics. In general, they don't protect against an attacker who has gained persistent privileged access to the machine, only against theft.
Since the key either can't leave the tpm or is useless without it (some tpms have one key that it can never return, and will generate a new key and return it encrypted with it's internal key. This means you get protection but don't need to worry about storage on the chip), the attacker needs to remain undetected on the server as long as they want to use it, which is difficult for anyone less sophisticated than an advanced persistent threat.

The Apple system, to its credit, does a degree of user and application validation to use the keys. Generally good for security, but it makes it so if you want to share a key between users you probably won't be using the secure enclave.

Most of the trust checks end up being the tpm proving itself to the remote service that's checking the service. For example, when you use your phones biometrics to log into a website, part of that handshake is the tpm on the phone proving that it's made by a company to a spec validated by the standards to be secure in the way it's claiming.

[-] ricecake@sh.itjust.works 19 points 1 day ago

Package signing is used to make sure you only get packages from sources you trust.
Every Linux distro does it and it's why if you add a new source for packages you get asked to accept a key signature.

For a long time, the keys used for signing were just files on disk, and you protected them by protecting the server they were on, but they were technically able to be stolen and used to sign malicious packages.

Some advanced in chip design and cost reductions later, we now have what is often called a "secure enclave", "trusted platform module", or a general provider for a non-exportable key.
It's a little chip that holds or manages a cryptographic key such that it can't (or is exceptionally difficult) to get the signing key off the chip or extract it, making it nearly impossible to steal the key without actually physically stealing the server, which is much easier to prevent by putting it in a room with doors, and impossible to do without detection, making a forged package vastly less likely.

There are services that exist that provide the infrastructure needed to do this, but they cost money and it takes time and money to build it into your system in a way that's reliable and doesn't lock you to a vendor if you ever need to switch for whatever reason.

So I believe this is valve picking up the bill to move archs package infrastructure security up to the top tier.
It was fine before, but that upgrade is expensive for a volunteer and donation based project and cheap for a high profile company that might legitimately be worried about their use of arch on physical hardware increasing the threat interest.

[-] ricecake@sh.itjust.works 3 points 2 days ago

I'll give them the benefit of the doubt and assume they're using one of the languages that uses := for assignment. :P

[-] ricecake@sh.itjust.works 13 points 5 days ago

Minimum wage means minimum livable wage, and "livable" isn't the same as "survivable".

Anyone working should be able to afford the amenities we call living, not just scraping by. Children, transportation, food, healthcare, reasonable recreation, savings, retirement, self development and actualization. All of it.
People not working should be able to survive, and we should do everything we can to get them to that "living" point as well. Disability or a bad labor market shouldn't close someone off from eating, having children or going to the doctor.

[-] ricecake@sh.itjust.works 257 points 3 weeks ago

The weird thing is, they don't actually sell the jars anymore. "Ball jars" are not made by the ball jar corporation after their antitrust lawsuits for being a fucking jar monopoly. So they sold the "ball jar" rights and now only do aluminum cans for food packaging and high end satellites and satellite launch systems.

25
Cozy fox drinking tea (sh.itjust.works)

crochet fox drinking hot tea, cinematic still, Technicolor, Super Panavision 70

Not quite what I was going for, but super cute regardless.

55

Went camping in northern Michigan this week and I was quite popular with the local biting flies.
Delightfully, I found this local food samaritan doing their part to save me, and they were gracious enough to show off a little for the camera.

[-] ricecake@sh.itjust.works 136 points 4 months ago

"we've built a platform that at least give piracy a run for its money, and used it to develop a massive user base so conditioned to buying from us that they happily joke about how 50% off a game they won't play is cause for them to buy four times as many. Please, join us all in the baffling orgy of commerce, all we ask is 30% of the treasure.".
"We will, but we're gonna try to get the users to come to our platform with less content and maybe a $500 buy-in so we can have a bigger portion of a smaller pie".
"Lol, go for it".
"...".
"...".
"Why are you being anticompetitive?"

[-] ricecake@sh.itjust.works 159 points 4 months ago

For a brief moment in the beta for all this, it basically just summarized the top two or three reputable results, and attached a link to where it got the data.

They should have just left it at that, and not started mixing in random blogs and social media sites.
The ability to summarize the Wikipedia article and a random university professors page where they list every fact known to man about pine trees or something was actually helpful.

If I want the AIs best guess about how to fuck up a pizza, I just go to the site where I can ask it. Bad advice when searching is just shit.
A tldr for "what is turpentine" is actually helpful.

[-] ricecake@sh.itjust.works 156 points 4 months ago

Unfortunately, there has been precedent for the argument that the right to remain silent is one that needs to be continuously and positively invoked.
So if they keep interrogating you and you choose to start talking, that can be interpreted as you waiving your right to remain silent.

https://www.nolo.com/legal-encyclopedia/questioning-after-claiming-miranda.html

https://www.nolo.com/legal-encyclopedia/when-how-invoke-your-right-silence.html

Remaining silent is not enough, you have to articulate that you want to invoke your right to remain silent, unambiguously request a lawyer (no "I think I should have a lawyer for this"), and request a lawyer generally (no "I want a lawyer before I answer any questions about where I was").

"I am invoking my right to remain silent and I want a lawyer" is basically all you should say.

The ACLU remains an excellent resource for being aware of your rights.

https://www.aclu.org/know-your-rights/stopped-by-police

[-] ricecake@sh.itjust.works 167 points 4 months ago

The idea could be perfectly cute, and I feel like it would have been so easy to not make it "shame-y".

Like, "just a nibble", "pretty good!”, "yum!" and "my favorite". "I couldn't possibly...", "if you insist", and "thanks Grandma".

76
submitted 7 months ago* (last edited 7 months ago) by ricecake@sh.itjust.works to c/imageai@sh.itjust.works

Been having fun trying to generate images that look like "good" CGI, but broken somehow in a more realistic looking way.

85

Made with the Krita AI generation plugin.

1

He's not nearly as chubby as he looks.

view more: next ›

ricecake

joined 1 year ago