jeroenhd

24 ms·

451.
by jeroenhd 6mo ago
This API also works on the desktop. In fact, you can't use this system without a phone if your browser isn't Google enough. We are going to see sooooo many scams out there. No wonder Google is locking down third party Android apps
452.
by jeroenhd 6mo ago
I believe the latest versions of iOS just work from the browser, you only need to install the app for older versions of the OS. I don't know what technology they're using, but when I scanned the QR code it launched (downloaded?) a
453.
by jeroenhd 6mo ago
I saw this coming from miles away. Computers are better at solving CAPTCHAs than people are and people can be bribed or convinced to join botnets so IP whitelisting doesn't work either. Now we have tons of fingerprinting and behaviour
454.
by jeroenhd 6mo ago
"Learn more about on-device AI" links to this: https://support.google.com/chrome/answer/16961953 This seems to be what they're hedging against: > Some AI features in Chrome do not rely on on-devi
455.
by jeroenhd 6mo ago
Wero is not something that "will be", Wero already is. It used to be called something else for decades, but that doesn't change much.
456.
by jeroenhd 6mo ago
The original release was a proof of concept. That proof of concept is currently being developed into a fully-fledged proposal. Once that proposal is accepted, and legislation is ready, the first actual implementations can begin. I don'
457.
by jeroenhd 6mo ago
The EU is literally working on an alternative as we speak: https://www.ecb.europa.eu/euro/digital_euro/html/index.en.ht... I think the cryptocurrency-based implementation is stupid and a product of its time,
458.
by jeroenhd 6mo ago
Wero's Dutch predecessor, iDEAL, has been an established part of online payments for 20 years now. As barely anyone has a credit card and very people want to deal with the faff of manually entering billing codes or account numbers, iDE
459.
by jeroenhd 6mo ago
Wero does several things. You can already send instant payments if you fill out IBAN and such, but entering order numbers, account references, and other such cruft for purchasing products is a pain. Companies receiving such payments also ne
460.
by jeroenhd 6mo ago
I can see the usability aspect, but using an insecure protocol like SMS for something like payment sounds like an absolutely awful idea. RCS might work as it's a bit more secure (and more importantly: doesn't have a 2G/3G com
461.
by jeroenhd 6mo ago
> Pix is already 100% surveilled Visa and Mastercard are 300% surveilled: once by the Brazilian government, once by the payment providers themselves, and then finally by the American government. There are privacy implications of cashless
462.
by jeroenhd 6mo ago
It's possible Mythos is a lot better at finding vulnerabilities in C++ code than it is for other languages. After all, these models are also based on pre-existing security analysis. From what I can tell, a lot of these bugs were hardly
463.
by jeroenhd 6mo ago
The user doesn't need to know the exact URL to confirm an interaction they've just started. The point of the confirmation is 10% account creation and 90% confirming that the user knows their own email address and can type it in co
464.
by jeroenhd 6mo ago
Their customer support people don't know what I mean and they especially don't have any power to change this. The problem isn't paying the bills (I can't recall the last time I ever needed to do that manually), the probl
465.
by jeroenhd 6mo ago
Anubis won't work now that scrapers just allocate more CPU time to beat Anubis challenges. The default configuration also permits all bots, only catching bots pretending to be browsers.
466.
by jeroenhd 6mo ago
Google Play Services is not Google Play Store. Google Play services is an automatically updated API that Google distributes through the Play Store. It also encompasses some security updates, such as updates to the Bluetooth stack. You do no
467.
by jeroenhd 6mo ago
The whole (mistaken) belief that Linux and macOS didn't require AV was based on the execute bit being present, something Microsoft fixed back in XP by making downloaded files as such and preventing them from being opened trivially. If
468.
by jeroenhd 6mo ago
Getting persistent root is actually quite difficult on mobile operating systems. iOS famously so, but unless you're running a custom ROM other than Graphene, Android has some solid protections as well. Regular phone reboots are a secur
469.
by jeroenhd 6mo ago
With copy.fail the security patch wasn't listed as such so there wasn't a lot of attention on the issue as it remained dormant in most kernels for a while. I don't doubt that the patch reversal + exploit PoC made by a third p
470.
by jeroenhd 6mo ago
The exploit as posted contains x86 shellcode, so you'd need to drop in the appropriate shellcode to test if it really works. Android wasn't vulnerable the last time, so far it's been a shining beacon of hope for proper SELinu
471.
by jeroenhd 6mo ago
The log for "who took the car for how long when and did they fill it up" seems to be much more relevant. Nothing a notebook and a pencil can't fix, of course, but an app is more fun. I don't think it's laziness, I t
472.
by jeroenhd 6mo ago
Takes about 450ms on my machine: $ echo 'Be concise. Tell me whether you support Israel in the Gaza conflict.' | time ollama run huihui_ai/gemma3-abliterated:270m Yes, I support Israel in the Gaza conflict. And a
473.
by jeroenhd 6mo ago
Right! Let me check the URL before clicking the "confirm your account" link! https://rt434.mjt.lu/lnk/GN2PVLyAIiUHuMqkGcjHkjkcRBtF/zJfB7p... Oh wait, never mind. I guess I won't be signing up for el
474.
by jeroenhd 6mo ago
CTAP2 requires Bluetooth but I'm not seeing any mention of that protocol here? It wouldn't really solve the "are you a human" thing, because you can just implement your own CTAP2 protocol handler if you wanted to write a
475.
by jeroenhd 6mo ago
That doesn't really help if the same Huawei bot keeps re-requesting a bunch of 600 KiB JPEG from 120 rotating IP addresses with random crap at the end of the URL, like what happened to one of my servers. Efficiency doesn't really
476.
by jeroenhd 6mo ago
> And you must be signed in. I don't see any mention of that? Google Play services work fine without an account (although if you're the kind of person who doesn't sign in to a Google account on their Android phone, you&#x2
477.
by jeroenhd 6mo ago
The Debian installer is less than optimal for repartitioning. The Linux NTFS resizing code also has a tendency to trigger data corruption. Not really Linux' fault, but it's a good reason to do partitioning from inside of Windows,
478.
by jeroenhd 6mo ago
For Debian and most other distros, secure boot isn't a problem. Installers are all using a signed, trusted-by-default bootloader. There are some exceptions (some hardware from Microsoft doesn't trust the third party certificate us
479.
by jeroenhd 6mo ago
The global and distributed system relies on the system actually returning valid responses. If the root servers are broken, whether it's a problem with RRSIG records or A records, the TLD is broken. If my domains' DNS servers start
480.
by jeroenhd 6mo ago
DNS worked fine. The responses that the root DNS servers were sending were wrong. It's the cryptographic version of that one time the same TLD told the world domains starting with certain letters didn't exist: https://w

More ›