Email or username:

Password:

Forgot your password?
1,238 posts total
:blobcatlaptop: gravitos :blobcatcomfsip:​

Microsoft looking to restrict kernel level access after CrowdStrike incident might help us with our current Anti-Cheat dilemma

CrowdStrike’s Falcon software uses a special driver that allows it to run at a lower level than most apps so it can detect threats across a Windows system. Microsoft tried to restrict third parties from accessing the kernel in Windows Vista in 2006 but was met with pushback from cybersecurity vendors and EU regulators. However, Apple was able to lock down its macOS operating system in 2020 so that developers could no longer get access to the kernel.

Now, it looks like Microsoft wants to reopen the conversations around restricting kernel-level access inside Windows.

Microsoft looking to restrict kernel level access after CrowdStrike incident might help us with our current Anti-Cheat dilemma

CrowdStrike’s Falcon software uses a special driver that allows it to run at a lower level than most apps so it can detect threats across a Windows system. Microsoft tried to restrict third parties from accessing the kernel in Windows Vista in 2006 but was met with pushback from cybersecurity vendors and EU regulators. However, Apple was able to lock down its macOS operating...

WerySkok :verified_think:

@mudle somehow, I don't think that's the way to resolve future problems, it just looks like Apple's way, which sometimes isn't great for customers

:blobcatlaptop: gravitos :blobcatcomfsip:​

@esm can we add more :blobcat: to the instance?

@pndpnd made some extremely cute ones, we already have a few actually: :blobcat_daradara: :blobcat_nechao: :ablobcatyawn:

why not add more? :blobcatupsidedown:

Essem :skeeter:

@gravitos @pndpnd are there any in particular you're thinking about

:blobcatlaptop: gravitos :blobcatcomfsip:​

In 2023, we published a finding encouraging the deprecation of third party cookies, and the development of new technologies that can replace their functionality. Today, we’re issuing an updated version of that finding to further clarify our position: third-party cookies are harmful to the web and must be removed. w3.org/2001/tag/doc/web-withou
@torgo

Show previous comments
Claus Cramon Houmann

@tag @torgo so, Google happily judges other companies on their practices, such as certificate companies that they remove, which implies that others can remove anything Google if they don’t stop supporting 3rd party cookies?

Don Marti

@tag @torgo also, before anyone mentions that cookie vs. non-cookie tracking is a competition problem, this is from #W3C privacy principles:

"Sharing data between different contexts of a single company can be a privacy violation, just as if the same data were shared between unrelated actors.”

w3ctag.github.io/privacy-princ

Turning off 3rd party cookies is good, but good as in "good start" not final outcome

solstice

@tag @torgo
Google decided to keep third party cookies because not doing so lowered their profits.

:blobcatlaptop: gravitos :blobcatcomfsip:​

It's official! This W3C TAG Finding says:

> "Third-party (AKA cross-site) cookies are harmful to the web, and must be removed from the web platform."

w3.org/2001/tag/doc/web-withou

w3c.social/@tag/11284305738242

#privacy

Patrick

@paulshryock Better late than never🤷‍♂️

Maddie :patsMaddie:
@paulshryock can't wait to not have to fear some random website grabbing all my session cookies anymore
thomastc

@paulshryock It's been *official* since cookies were added to the HTTP RFC. Browsers just forgot to implement it.

:blobcatlaptop: gravitos :blobcatcomfsip:​

i still strongly believe that the default mode for any competitive multiplayer game should not rely on competitive matchmaking at all

the most obvious negative consequence is that this means every single game has to be treated with the same set of rules and fair play requirements -- and since it's impossible to moderate tens of thousands of matches at the same time, that means harsh algorithms and client-side cheat detection that compromises your system's security or fails on linux or causes other issues

whereas in the real world, an overwhelming majority of matches are casual. nobody brings in a league-licensed referee and does a doping test before organizing a workplace soccer game. there aren't cameras and faraday cages to prevent cheating at every chessboard in the local park.

now also consider that most ranked systems work based on either the Elo algorithm or one of its variants. these algorithms start off by placing the player into the middle-skill category and then down- or up-ranking them as they win or lose. these were intended to compare skilled professional players, and when you put them into a multiplayer environment, you basically break the system, because now the middle-skill area now has a constant influx of newbies amid actual mid-level players. then the system delivers those newbies a gut-wrenching series of losses just because they were initially placed beyond their skill level. (even worse, as said series of losses goes on, they usually stop being matched with other newbies and start competing against more skilled low-to-mid-tier players, leading to further losses!)

do ranked matches have a place in gaming? of course. especially since now every game wants to have a high-level e-sports competition. but these should not be the default way in which one plays online matches. the default mode should be based on dedicated servers and perhaps friend lists, matching the way we play games in the real world. then, once the player feels skilled enough to play ranked, they can join the ranked mode and fight through the leagues for their e-sports glory.

i still strongly believe that the default mode for any competitive multiplayer game should not rely on competitive matchmaking at all

the most obvious negative consequence is that this means every single game has to be treated with the same set of rules and fair play requirements -- and since it's impossible to moderate tens of thousands of matches at the same time, that means harsh algorithms and client-side cheat detection that compromises your system's security or fails on linux or causes other issues

:blobcatlaptop: gravitos :blobcatcomfsip:​

едем едем в соседнее село на дискотеку

только не в соседнее село, а в соседнюю область

и не на дискотеку, а на море

:blobcatlaptop:

'i am no man' Charlotte Eowyn!

<Cell> "I thought the HRT revolution was supposed to help the working cell!"
<Cell 2> "It only helped the neurons!"
<Cell 1> "And the fat cells! They were already sitting fat and happy, as always."
<Bottom-area cells> "Oh you want a little sugar do you?"

Xan Surnamehere

@CharlotteEowyn@chaosfem.tw I love this comic but Mario Kart being misspelled as Mario Cart hurts 😖

:blobcatlaptop: gravitos :blobcatcomfsip:​

my another boomer ui take is that app icons should have unique shapes to remain distinctive and recognizeable

Show previous comments
DabeDotCom

@jannuary

When **Flat UI** came out, I remember thinking, "I paid three thousand bucks for something that I could make in PowerPoint?!?"

Bring Back Skeuomorphism! 🤓

wepwep :neomouse_hold:

@jannuary i hate all of my system tray icons because theyre all circles with slightly different sizes and i keep accidentally clicking on either signal or quod libet trying to access the other . so i might just make an icon theme about it if it annoys me enough

:blobcatlaptop: gravitos :blobcatcomfsip:​

Framework with RISC-V? All I’m saying is that a small push for open source firmware and Framework may end up being the best open source laptop option in the world.
fosstodon.org/@frameworkcomput

:blobcatlaptop: gravitos :blobcatcomfsip:​

Oh look at this

https://goblin.band/files/83b69351-b17a-45cc-84f4-9c1389811dfd

So automattic/Tumblr's CEO is making the company email servers to redirect all mail from teamblind.com to his own personal address instead of the actual person who registered to Blind, so he can know who signed up using their corporate email (the only way to sign up).

Not only that, but by doing this, he could just go through the company email address list, hit the "forgot your password" link, and find out who already has an account, and even steal it.

Very sane, not creepy, absolutely not sociopath move, sire. Absolutely normal and not crazy maniac behavior.

‡ If you don't know blind, it's a platform that let employees of a company to anonymously talk between them about their employer

Oh look at this

https://goblin.band/files/83b69351-b17a-45cc-84f4-9c1389811dfd

So automattic/Tumblr's CEO is making the company email servers to redirect all mail from teamblind.com to his own personal address instead of the actual person who registered to Blind, so he can know who signed up using their corporate email (the only way to sign up).

Go Up