Email or username:

Password:

Forgot your password?
1,693 posts total
:blobcatlaptop: gravitos :blobcatcomfsip:​

Microsoft looking to restrict kernel level access after CrowdStrike incident might help us with our current Anti-Cheat dilemma

CrowdStrike’s Falcon software uses a special driver that allows it to run at a lower level than most apps so it can detect threats across a Windows system. Microsoft tried to restrict third parties from accessing the kernel in Windows Vista in 2006 but was met with pushback from cybersecurity vendors and EU regulators. However, Apple was able to lock down its macOS operating system in 2020 so that developers could no longer get access to the kernel.

Now, it looks like Microsoft wants to reopen the conversations around restricting kernel-level access inside Windows.

Microsoft looking to restrict kernel level access after CrowdStrike incident might help us with our current Anti-Cheat dilemma

CrowdStrike’s Falcon software uses a special driver that allows it to run at a lower level than most apps so it can detect threats across a Windows system. Microsoft tried to restrict third parties from accessing the kernel in Windows Vista in 2006 but was met with pushback from cybersecurity vendors and EU regulators. However, Apple was able to lock down its macOS operating...

WerySkok :verified_think:

@mudle somehow, I don't think that's the way to resolve future problems, it just looks like Apple's way, which sometimes isn't great for customers

:blobcatlaptop: gravitos :blobcatcomfsip:​

@esm can we add more :blobcat: to the instance?

@pndpnd made some extremely cute ones, we already have a few actually: :blobcat_daradara: :blobcat_nechao: :ablobcatyawn:

why not add more? :blobcatupsidedown:

Essem :skeeter:

@gravitos @pndpnd are there any in particular you're thinking about

:blobcatlaptop: gravitos :blobcatcomfsip:​

In 2023, we published a finding encouraging the deprecation of third party cookies, and the development of new technologies that can replace their functionality. Today, we’re issuing an updated version of that finding to further clarify our position: third-party cookies are harmful to the web and must be removed. w3.org/2001/tag/doc/web-withou
@torgo

Show previous comments
Claus Cramon Houmann

@tag @torgo so, Google happily judges other companies on their practices, such as certificate companies that they remove, which implies that others can remove anything Google if they don’t stop supporting 3rd party cookies?

Don Marti

@tag @torgo also, before anyone mentions that cookie vs. non-cookie tracking is a competition problem, this is from #W3C privacy principles:

"Sharing data between different contexts of a single company can be a privacy violation, just as if the same data were shared between unrelated actors.”

w3ctag.github.io/privacy-princ

Turning off 3rd party cookies is good, but good as in "good start" not final outcome

solstice

@tag @torgo
Google decided to keep third party cookies because not doing so lowered their profits.

:blobcatlaptop: gravitos :blobcatcomfsip:​

It's official! This W3C TAG Finding says:

> "Third-party (AKA cross-site) cookies are harmful to the web, and must be removed from the web platform."

w3.org/2001/tag/doc/web-withou

w3c.social/@tag/11284305738242

#privacy

Patrick

@paulshryock Better late than never🤷‍♂️

Maddie :patsMaddie:
@paulshryock can't wait to not have to fear some random website grabbing all my session cookies anymore
thomastc

@paulshryock It's been *official* since cookies were added to the HTTP RFC. Browsers just forgot to implement it.

:blobcatlaptop: gravitos :blobcatcomfsip:​

i still strongly believe that the default mode for any competitive multiplayer game should not rely on competitive matchmaking at all

the most obvious negative consequence is that this means every single game has to be treated with the same set of rules and fair play requirements -- and since it's impossible to moderate tens of thousands of matches at the same time, that means harsh algorithms and client-side cheat detection that compromises your system's security or fails on linux or causes other issues

whereas in the real world, an overwhelming majority of matches are casual. nobody brings in a league-licensed referee and does a doping test before organizing a workplace soccer game. there aren't cameras and faraday cages to prevent cheating at every chessboard in the local park.

now also consider that most ranked systems work based on either the Elo algorithm or one of its variants. these algorithms start off by placing the player into the middle-skill category and then down- or up-ranking them as they win or lose. these were intended to compare skilled professional players, and when you put them into a multiplayer environment, you basically break the system, because now the middle-skill area now has a constant influx of newbies amid actual mid-level players. then the system delivers those newbies a gut-wrenching series of losses just because they were initially placed beyond their skill level. (even worse, as said series of losses goes on, they usually stop being matched with other newbies and start competing against more skilled low-to-mid-tier players, leading to further losses!)

do ranked matches have a place in gaming? of course. especially since now every game wants to have a high-level e-sports competition. but these should not be the default way in which one plays online matches. the default mode should be based on dedicated servers and perhaps friend lists, matching the way we play games in the real world. then, once the player feels skilled enough to play ranked, they can join the ranked mode and fight through the leagues for their e-sports glory.

i still strongly believe that the default mode for any competitive multiplayer game should not rely on competitive matchmaking at all

the most obvious negative consequence is that this means every single game has to be treated with the same set of rules and fair play requirements -- and since it's impossible to moderate tens of thousands of matches at the same time, that means harsh algorithms and client-side cheat detection that compromises your system's security or fails on linux or causes other issues

:blobcatlaptop: gravitos :blobcatcomfsip:​

едем едем в соседнее село на дискотеку

только не в соседнее село, а в соседнюю область

и не на дискотеку, а на море

:blobcatlaptop:

'i am no man' Charlotte Eowyn!

<Cell> "I thought the HRT revolution was supposed to help the working cell!"
<Cell 2> "It only helped the neurons!"
<Cell 1> "And the fat cells! They were already sitting fat and happy, as always."
<Bottom-area cells> "Oh you want a little sugar do you?"

Xan Surnamehere

@CharlotteEowyn@chaosfem.tw I love this comic but Mario Kart being misspelled as Mario Cart hurts 😖

:blobcatlaptop: gravitos :blobcatcomfsip:​

my another boomer ui take is that app icons should have unique shapes to remain distinctive and recognizeable

mac os app grid, showing a bunch of icons in a rounded rectangle shape
android home screen with a bunch of icons in a circle shape. a lot of them are just actual icons (i.e. google play triangle, or google docs paper) but in a white circle.
a bunch of GNOME app icons in various shapes, mimicking real life objects
Show previous comments
DabeDotCom

@jannuary

When **Flat UI** came out, I remember thinking, "I paid three thousand bucks for something that I could make in PowerPoint?!?"

Bring Back Skeuomorphism! 🤓

wepwep :neomouse_hold:

@jannuary i hate all of my system tray icons because theyre all circles with slightly different sizes and i keep accidentally clicking on either signal or quod libet trying to access the other . so i might just make an icon theme about it if it annoys me enough

system tray with quod libet, keepass, nheko, and signal which look really similar if you dont look hard enough
:blobcatlaptop: gravitos :blobcatcomfsip:​

Oh look at this

https://goblin.band/files/83b69351-b17a-45cc-84f4-9c1389811dfd

So automattic/Tumblr's CEO is making the company email servers to redirect all mail from teamblind.com to his own personal address instead of the actual person who registered to Blind, so he can know who signed up using their corporate email (the only way to sign up).

Not only that, but by doing this, he could just go through the company email address list, hit the "forgot your password" link, and find out who already has an account, and even steal it.

Very sane, not creepy, absolutely not sociopath move, sire. Absolutely normal and not crazy maniac behavior.

‡ If you don't know blind, it's a platform that let employees of a company to anonymously talk between them about their employer

Oh look at this

https://goblin.band/files/83b69351-b17a-45cc-84f4-9c1389811dfd

So automattic/Tumblr's CEO is making the company email servers to redirect all mail from teamblind.com to his own personal address instead of the actual person who registered to Blind, so he can know who signed up using their corporate email (the only way to sign up).

:blobcatlaptop: gravitos :blobcatcomfsip:​

Learn to host your own services now. Because in the future you might not be able to discover how.

Show previous comments
End Of Line

@vkc I mostly use nowadays
news.ycombinator.com/
lobste.rs/
dev.to/ (I find it more useful than reddit.com/ for dev informations) and mastodon (following users and specific tags)

I find nowadays little to no useful information straight from google search) and I'm surprised that somebody tries to do so

Kenneth Freeman

@vkc
I concur. Internet corporations make for walled gardens, gate-keeping, and rent-seeking. Which are are among the reasons why I’m so keen on #Wikipedia & #Tor. (Hosting my own server or instance is another project for another day.)

bel

@vkc god I'm so thankful I found you out here in the internet wild, been quietly despairing of learning things fast enough before they make internet learning impossible

Go Up