• 2 Posts
  • 126 Comments
Joined 1 year ago
cake
Cake day: June 17th, 2023

help-circle


  • I tend to prefer pass phrases, they are a lot easier to type and speak, if required. Mine regularly blow past 20 characters.

    As for salting, that only defends against rainbow table attacks. The salt needs to be stored along with the hash. That is find for most accounts, but once you’re in banking territory, that’s a bad bet.

    You also can’t assume you have no vulnerabilities. If someone gets your database, you can’t defend against brute force attacks.

    Lastly, if you are doing passwords properly, you shouldn’t care much about length. There are a few dos attacks to worry about, but a 512 char limit will stop those, and not limit any sane password.




  • cynar@lemmy.worldtoSelfhosted@lemmy.worldServer for a boat
    link
    fedilink
    English
    arrow-up
    17
    ·
    3 months ago

    Your best bet might be to use a laptop as the basis. They are already designed with power efficiency in mind, and you won’t need an external screen and keyboard for local problem solving.

    I would also consider having a raspberry pi 3 or similar as a companion. Services that must be up all the time run on the pi (e.g. network admin). The main computer only gets kicked out of sleep mode when required. The pi 3 needs less power than the newer pis, while still having enough computing power to not lag unless pushed hard.

    I definitely agree with SSDs. HDDs don’t do well when rotated when running. Boats are less than a stable platform.


  • In short, Facebook are incentivised to increase conflict and hate, it improves user engagement. They have also leveraged their large user base to boost numbers in threads significantly. Threads is already a cess pip of bigotry and hate.

    Federating with them would be like connecting your house’s drinking water pipe with the sewage pipe of an industrial pig farm. It would pollute our community to the point of destruction.

    They might try and control this initially. Unfortunately, it would almost certainly be part of an embrace, extend, extinguish attempt. ( https://en.m.wikipedia.org/wiki/Embrace,_extend,_and_extinguish ). They play nice till they have control of enough communities, then they stop the controls, to increase profits.


  • The best bet is to let your local aviation authority know. They are generally the ones with the actual powers, as well as the knowledge to apply them.

    At least in the UK, the laws cover anything that leaves the ground under an open sky. There are exceptions for RC toys and drones, but they have limits. One of the limits is you cannot fly within a certain distance of anyone or anything not under your control.

    Basically, most places require your permission to fly over, or near to your land. If they are overflying, they are breaking the rules.

    It’s worth noting, depending on the size of the system, it can be difficult to judge distances. The ones I work with are large. We regularly have officials insisting we are massively out of our flight area. GPS logs show that it was well within the entire time.




  • The consensus in the trans community is to let a potential partner know earlier, rather than later. It avoids the situation you’ve encountered. Some men also can react violently, when they find out, so it’s quite a critical dilemma to them.

    Unfortunately, not all follow that mindset. They also tend to bust out a lot, and so lead a lot of men on.

    It’s a bit like the scumbag dilemma women face. Very few men are scumbags, yet women encounter them regularly when dating. Most men try not to annoy the women they find attractive. They are careful in their approach mentality. This means they only make a few approaches (relatively). They also tend to pair off, and so exit the pool. Scumbags cast a wide net, and don’t hang on to women for long. This means they make a LOT of approaches, and so annoy a vastly disproportionate number of women.

    Basically most trans people try to be as polite and careful about it as possible. A few, unfortunately, can destroy the reputation of the rest by being scumbags about it, at least locally.






  • One of the key thing that LLMs lack is a knowledge layer. In many ways, modern LLMs are hyper advanced predictive text. Don’t get me wrong, what they produce is awesome and can be extremely useful, but it’s still fundamentally limited.

    Ultimately, a useful AI will need some level of understanding. It will need to be able to switch between casual chatter, and information delivery. It will need to be able to crosscheck its own conclusions before delivering them. There are groups working on this, but they are quite a bit behind LLMs. When they catch up, and the 2 can be linked/combined then things will get VERY interesting!


  • An encryption scheme is only as strong as its weakest link. In academic terms, only the algorithm really matters. In the real world however, implementation is as important.

    The human element is an element that has to be considered. Rubber hose cryptanalysis is a tongue and cheek way of acknowledging that. It also matters since some algorithms are better at assisting here. E.g. 1 time key Vs passwords.


  • The purpose is to access the data. This is a bypass attack, rather than a mathematical one. It helps to remember that encryption is rarely used in the abstract. It is used as part of real world security.

    There are actually methods to defend against it. The most effective is a “duress key”. This is the key you give up under duress. It will decrypt an alternative version of the file/drive, as well as potentially triggering additional safeguards. The key point is the attacker won’t know if they have the real files, and there is nothing of interest, or dummy ones.



  • I personally make use of the sonoff pow smart plugs, with Tasmota firmware. Though any Tasmota compatible smart plug with power readings will work.

    The key thing is that with Tasmota, you can properly calibrate the readings. I have a friend with a high quality power meter. I used that to calibrate my smart plugs, they seem to track within a few % of the expensive one, once calibrated.

    Depending on if you have access to an expensive meter or not, this will either be the best bet, or completely useless to you. Your local Hackspace might also be a good option for getting your hands on an expensive meter for an evening.