wybiral

19 ms·

151.
by wybiral 7y ago
Yeah, just looking at protein and calories is too simplistic. You need more than flour and sugar to survive.
152.
by wybiral 7y ago
Firefox has a tracker blocking mode that shows you all of the trackers. I counted 25 different tracker services being blocked on a single news article yesterday.
153.
by wybiral 7y ago
Yeah, or if people returned to using HTML the way it was meant to be used instead of using a JavaScript framework on every page.
154.
by wybiral 7y ago
I wonder how that works with Facebook's Blu-Ray cold storage [1]. Are optical disks treated like paper documents or is it still considered electronic storage? [1] http://www.digitalpreservation.gov/meetings/documen
155.
by wybiral 7y ago
There are other reasons why an open source implementation is useful even if it relies on some proprietary backend stuff (like being able to review the code running directly on your device). And I think it's more interesting in the cont
156.
by wybiral 7y ago
> It looks from the comic like they aggregate data with linear structure (probably derivatives on the model parameters.) Thanks, that's the part I must have glossed over. It looks like they're using secret sharing to distribute
157.
by wybiral 7y ago
How do they assure you that the training algorithm isn't just exfiltrating your data? Edit: By that I mean... What's stopping the model from being as simple as "learn my personal information"?
158.
by wybiral 7y ago
Or it'll just scare away perfectly qualified people with reasonable expectations about the job because the interview process was absurd.
159.
by wybiral 7y ago
Ads aren't really the problem for me, it's the trackers.
160.
by wybiral 7y ago
Firefox on mobile is really good these days. With tracker-blocking enabled it usually performs better than Chrome for me. Most of the time these days websites are slow because of all the trackers and ad traffic. They also have some cool fea
161.
by wybiral 7y ago
> Almost nobody: I stopped using Facebook. I can't speak for the general population but I know plenty of people who have quit FB in recent years (myself included).
162.
by wybiral 7y ago
> It's not difficult to see that wealth, status, and connection are self-compounding. I also don't think it's unreasonable to say that many people in this group hold views that are out of step with the majority of American
163.
Mouse Tracking Without JavaScript(bleepingcomputer.com)
2 points by wybiral 7y ago|0 comments
164.
by wybiral 7y ago
> But that hash is a regular, fast hash that takes like 1µs to compute right? They use SHA512 which is fast, but noticeable for large enough files. > Or is this meant to spite the 0.01% of visitors that really try not to be tracked an
165.
by wybiral 7y ago
<link> tags to include CSS and JavaScript on a page can have an integrity property, which is a SHA hash of the resource they link to. It's intended to ensure that a CDN doesn't change the content they're serving to your
166.
by wybiral 7y ago
Yeah, I'm playing around with the idea of using the background image trick to profile the integrity hash speed of the visiting browser. That little background image feature in CSS has given up quite a bit of data in similar situations
167.
by wybiral 7y ago
Is it mitigated? Once it's leaked you can't force everyone who may have captured it to delete it. So GitHub deleting it doesn't solve the problem.
168.
by wybiral 7y ago
Only federal crimes though, so if a state picked up any charges against him the president can't do much about it.
169.
by wybiral 7y ago
Opinions are allowed but that doesn't mean they aren't just opinions.
170.
by wybiral 7y ago
> The president has an embarrassing YouTube reel where he "loves WikiLeaks" 50 times. It'll drag the contents of contentious leaks back into the spotlight. It could be more convenient to let it go. But America isn't a
171.
by wybiral 7y ago
The weird part to me is that the US Intelligence Community is using Tumblr for communicating these reports to the public.
172.
by wybiral 7y ago
I haven't tried this yet but it reminds me of the spirit of GeoCities. For years now I've been hoping that one day the wheel of internet trends will roll back around and make personally-designed webpages a thing again instead of t
173.
by wybiral 8y ago
> Is there an equivalent with any other type of resource, that avoids deferring onLoad? If JS is disabled the event doesn't really matter and any asset can be handled this way. I just use the favicon because it stops the browser fro
174.
by wybiral 8y ago
It's not really "permitting" it, that's just how the internet works. If you send the data slowly you can keep a connection open. And fighting privacy violation is basically a game of cat and mouse. As soon as we figure o
175.
by wybiral 8y ago
This particular cases is just an unintended consequence. They could put a limit on the connection duration, but you could also just slowly drip the bytes of a real favicon image (possibly augmented with junk metadata) and how would the brow
176.
by wybiral 8y ago
If I'm operating the server I can keep the connection open to your browser and wait until sending the iframes to crash you. So combined with other tracking techniques (to tell if a tab is still open) you can crash their browser and see
177.
by wybiral 8y ago
Tor can also create a false sense of privacy because people think it will do all of the work for them. If they look at the network tab in their browser they can see it, but it just looks like a favicon asset that's really slow to load.
178.
by wybiral 8y ago
The browser doesn't seem to update the image any faster (at least not Chrome on Linux) than it already does. You can try different framerates though, maybe some platforms allow higher frequency?
179.
by wybiral 8y ago
It's easier and common to do with JS, so it would be a really niche target. I was investigating it as a method of tracking users on Tor where JS is often disabled.
180.
by wybiral 8y ago
If you really want to crash a Firefox browser without JS, there's this: https://fan-pages.herokuapp.com/ It basically keeps sending iframe's with data URL's for download, see code: https://github

More ›