cultural reviewer and dabbler in stylistic premonitions

  • 199 Posts
  • 776 Comments
Joined 4 years ago
cake
Cake day: January 17th, 2022

help-circle

  • As others have said it is a huge amount of work to maintain a fork of such a complicated piece of software.

    Especially around security: web browsers constantly process potentially-malicious data, which gives them a large attack surface. Every browser regularly has new vulnerabilities discovered which must be fixed. Hard forking a browser means that, even ignoring any bugs in the new code the fork has added, every time a bug is discovered and fixed in the code they forked from someone needs to analyze the upstream’s fix and port it to the fork. The more they diverge, the more work this is. Failing to do this work lets any malicious website exploit the bugs and install malware on users’ computers.





  • Arthur Besse@lemmy.mltoPrivacy@lemmy.ml*Permanently Deleted*
    link
    fedilink
    English
    arrow-up
    5
    ·
    edit-2
    8 days ago

    The 2021 paper OSRM-CCTV: Open-source CCTV-aware routing and navigation system for privacy, anonymity and safety says they published source code at https://github.com/Fuziih but I don’t see it there now (though there is a related project called cctv-exposure).

    The final published version of the paper seems to be paywalled; it’s probably on scihub but there is also a preprint of it here on arxiv.

    https://github.com/FNBIP/ghost-route (just 3 commits, from February this year) says it is inspired by the paper and “extended to a production-grade multi-mode threat routing system”. It’s a node app you run locally (there doesn’t appear to be a public instance currently) which would be nice if it could work offline but unfortunately “Offline mode with pre-downloaded OSM tiles” is still on the roadmap and it currently lists “A Mapbox GL JS token (free tier works)” as a requirement (which is probably why there isn’t a public instance - someone would need to pay mapbox if they wanted to run it for other people).

    I have not tried it; if anyone reading this has or does please post here about how it works!









  • Is this something that websites opt into and add to their own site?

    Yes.

    reCAPTCHA is google’s “anti-abuse” service which many websites use to prevent slightly increase the cost of operating automated crawlers (which somewhat ironically google operates one of the largest of itself, for their search engine).

    Before neural networks could solve CAPTCHAs reliably, spammers were solving them with human labor; solving services like anti-captcha.com (intentionally not a clickable link…) today use a mixture of automated and human solvers.

    In the future google is apparently building, solving services will need farms of able-to-run-a-recent-android-release mobile devices with some kind of trusted computing hardware, each one of which they’ll have to use sparingly enough to keep usage of its unique ID under some plausibly-human threshold.

    And even if you do have a phone and are willing to identify yourself with it, if it is too old to run a recent enough Android you also will sometimes be denied services for being unable to pass a robots’ “human” test.

    🤮












  • The head of France’s biggest film producer, Canal+, has said the group will no longer work with hundreds of cinema figures who signed a petition voicing concern over the growing influence of the rightwing billionaire owner Vincent Bolloré.

    […]

    Speaking in Cannes on Sunday, the Canal+ chief executive, Maxime Saada, called the petition “an injustice toward the Canal+ teams, who are committed to defending the independence of Canal+ and the full diversity of its choices”.

    He added: “I will no longer work with and I no longer want Canal to work with the people who signed that petition.”

    funny way to demonstrate his organization’s independence from its owner