SteleTrovilo

joined 2 years ago
[–] SteleTrovilo@beehaw.org 4 points 5 days ago (1 children)

Because the "them" in your sentence is a rapidly decreasing number of professionals. https://lemmy.zip/post/51501102

[–] SteleTrovilo@beehaw.org 113 points 2 weeks ago* (last edited 2 weeks ago) (6 children)

Signal is the best intersection of genuine security and ease-of-use that I've ever seen. No choosing a server, no making an account. Just install the app, get a confirmation SMS, and now you can communicate with future-proof encryption and authentication right away.

For more technical people, who aren't going to be intimidated by things like making accounts and secure passwords and choosing servers, Signal is not the best. But when I need to communicate securely with non-technical people, it's a wonderful quick go-to solution.

[–] SteleTrovilo@beehaw.org 7 points 2 weeks ago (1 children)

"a crafted archive can escape its intended extraction directory and write files to other locations on the system. When chained, this can escalate to full code execution under the same privileges as the user"

To be clear, you want Tom's Hardware to downplay the severity of this situation?

[–] SteleTrovilo@beehaw.org 1 points 2 weeks ago

It needs to be said. Because anonymity is only one part of privacy.

Security is another part - in messaging, this means that the message cannot be spied on in transit, and cannot be altered in transit.

Authenticity is another part - you need to know that the message came from who it claims to have come from, and not elsewhere.

Signal does not provide anonymity, basically. But it guarantees security and authenticity beyond doubt. And this is useful - you can exchange secure information with people using Signal, knowing that it's not being spied on or altered, knowing that only the person you intend to see the data can see it, and knowing that they know that you sent it.

But yeah, if you want to send messages anonymously, other services are necessary.

[–] SteleTrovilo@beehaw.org 1 points 2 weeks ago (2 children)

So Signal doesn't provide anonymity. Is that all you're saying?

[–] SteleTrovilo@beehaw.org 1 points 2 weeks ago (1 children)

I'm guessing somewhere in the range of 18-30. How'd I do?

[–] SteleTrovilo@beehaw.org 0 points 2 weeks ago* (last edited 2 weeks ago)

You literally don't understand how hashing works, got it. Please educate yourself on this topic. In short, "connecting your existing contacts" is ENTIRELY possible with hashed phone numbers; it's not even complicated or tricky. To claim otherwise, as you just did, is nothing but trumpeting your own ignorance.

As for deleting (and propagating deletion of) messages, this is most definitely NOT a matter of "just trust us". The client is open-source! We KNOW how it works. We KNOW that deletion propagates across devices when you tell it to. We KNOW that the service cannot see your unencrypted messages, and that the encrypted messages are made with AES so even quantum computers in the future can't decrypt them. This is incredibly far from "just trust us".

[–] SteleTrovilo@beehaw.org 2 points 2 weeks ago (4 children)

This is vastly different from every other piece of information I've read about Signal. Please link me to a source for your claims.

[–] SteleTrovilo@beehaw.org 3 points 2 weeks ago (2 children)

Are you talking about the client app, or about the service?

Much of what you said doesn't apply to the service, which stores hashed phone numbers and first access / last access times and nothing else.

And the client does store these things, but also lets users delete messages and contacts. Your message deletions can propagate as well.

[–] SteleTrovilo@beehaw.org 3 points 2 weeks ago (1 children)

Indeed, I also don't realize that. Please explain further.

[–] SteleTrovilo@beehaw.org 4 points 2 weeks ago (1 children)

Signal stores the hash of the phone number. So you can query them for a specific phone number, but are unable to figure out phone numbers based on the hashes (outside of brute force - trying every 12-digit phone number).

And after doing that, you learn "this person uses/used Signal", with no information about particular messages whatsoever.

[–] SteleTrovilo@beehaw.org 3 points 2 weeks ago

The leak from the administration was because Pete Hegseth included a journalist in a discussion about sensitive war plans. Trying to blame that on Signal is deceptive on your part.

If you are saying that Signal does not offer anonymity then you are right. Anyone I message on there knows it's me. But Signal is still keeping my messages safe from monitoring and third-party surveillance, to the best of my knowledge.

11
submitted 2 years ago* (last edited 2 years ago) by SteleTrovilo@beehaw.org to c/startrek@startrek.website
 

Does anyone here use Exercism? I've started using it to learn Elixir, and it seems to be good. I'm thinking about having my kids use it as well for Python and JS/TS.

I'd be interested to hear if anyone's used it for a long time, and if there's any advantages or disadvantages to it. Or if there are other, better code exercise sites I should check out.

 

I'm getting back into fighting games! And I don't want to wear out my gamepads or joycons, so can you recommend a good control stick?

A few criteria:

  • Wireless would be ideal
  • Compatible with PC mainly, but Switch and Playstation would be excellent too.
  • I'm mainly into BlazBlue and Injustice right now, not sure if that would affect my choices.
 

I've been thinking about a taxonomy of Roguelikes that should help us speak more clearly about this genre - or group of genres - that we love. I'd rather do this than just call things "roguelites", which basically doesn't mean anything. So here we go!

True Rogues: you're alone in a dangerous, randomly-generated dungeon, moving one turn at a time (except for speed-altering mechanics), with the possibility of permadeath always looming. Less objectively, these games tend to be more dangerous up-front, and require the player to master the mechanics in early levels - while still ramping up the threat for players who survive to later floors. Rogue, Brogue, Nethack, Jupiter Hell, and DCSS all fit here.

Bandlikes: inspired by Angband. Distinguished from True Rogues by the presence of one or more "towns" - places of safety that allow you to recover or improve outside of danger - with the attendant "town portal" abilities to get you there & back easily. This results, quite deliberately, in a longer "run". Also they tend to ease the player in - early floors have a lot of weak monsters designed to pad the player's early experience levels. I'd put Caves of Qud and Tangledeep (on hardcore mode) here.

Mystery Dungeons: think Shiren, or basically any console Roguelike. Take the mechanics of a True Rogue, but add some degree of meta-progression which can lead to an all-but-guaranteed win over time. Outside of official Chunsoft-made Mystery Dungeon games, I'd also put Nippon Ichi's ZHP and Guided Fate Paradox here.

Action Rogues: you still get random dungeons and permadeath, but now in real time! For whatever reason, these games tend to have "variety" meta-progression - you can unlock new features that don't objectively make things easier, but add more variation to future runs instead. Spelunky, Gungeon, 20XX, Streets of Rogue, and Necrodancer fit here.

Coffee-break Rogues: seemed to be all the rage a while back, but I haven't heard about them recently. These are one-floor dungeons with still enemies, where figuring out the ideal way to have your character approach each encounter is the key to success.

Cardlikes: focused on card-based battles, with dungeons generally (but not always) abstracted into icons for fast traversal. Slay the Spire is the most famous example, and I'm enjoying Dicey Dungeon here too.

Darkest Dungeon clones: basically Darkest Dungeon and the games which clearly want to be regarded as like DD. Vambrace: Cold Soul and Warsaw come to mind, since they're in my library.

Grinders: having only random dungeons, and no permadeath - or at least the ability to reload a save in case of defeat - I sometimes see these discussed in RL communities. Dragon Quest Monsters 1, Pokemon Mystery Dungeon (on its main quest anyway) and Lufia: The Legend Returns are the best examples. I'd also put Rogue Legacy here since the grinding basically obliterates any concept of loss from death.

I think in some cases a game can fit multiple terms - Rogue Legacy is an Action Rogue and a Grinder, Diablo (on Hardcore mode) is a Bandlike and an Action Rogue, Tainted Grail is a DD clone and a Spirelike, and One Step From Eden is a Spirelike and an Action Rogue. Most Mystery Dungeon games have True Rogue modes or bonus dungeons outside of the main experience, too.

There's a few games that I can't quite classify yet - Into the Breach and Dwarf Fortress, mainly - but there's always room for improvement.

I think this could help us when presenting new games to the community. Any thoughts?

 

He is not a lawyer (and neither am I) but Doctorow knows a great deal about licenses and rights, and I definitely learned some interesting things from this.

view more: next ›