• 4 Posts
  • 28 Comments
Joined 1 year ago
cake
Cake day: July 23rd, 2023

help-circle


  • It basically is saying that if you have more money then you have more “votes”.

    That’s simply true. It doesn’t do anyone any good to disregard the facts.

    Or to put it in another way: If you have more money you matter more.

    That abstraction doesn’t help much. And first of all, it’s more accurate to derive the statement “If you have more money then you have more influence”.

    It’s still a shitty status quo, but it is what it is. The worse thing you can do is tell people not to boycott shit products on the basis of rejecting reality. It’d be like telling people not to vote in elections because their vote is a drop in the ocean.

    Some people vote for democrats, then they cancel their own vote by getting their internet service from Spectrum, buying fuel from Chevron for their car, shipping their packages using FedEx, getting their phone service from AT&T, banking at PNC Bank, flying on Boeing planes, shopping on Amazon, doing their web searches on a Microsoft syndicate’s site (e.g. DDG), buying Sony devices… etc. They either have no clue that most of their voting is actually for the republicans, or they think that drop-in-the-ocean vote that comes once in 4 years somehow carries more weight than the daily votes they cast with reckless disregard.

    Greg Abbott’s war chest is mostly fed by oil companies. If you buy fuel for a car, you help Greg Abbott and other republicans. And if you buy from Chevron, you give the greatest support to republicans (Chevron is an ALEC member).




  • Ending capitalism is not the /only/ way. Within a capitalistic system, you can boycott shit. Most consumers are pushovers but it doesn’t have to be that way. I’m boycotting hundreds of shitty companies. Off the top of my head:

    • Amazon
    • Cloudflare
    • Microsoft
    • Facebook
    • Google
    • Apple
    • (surveillance advertisers in general)
    • (all closed-source s/w)
    • HP
    • Proctor & Gamble
    • Unilever
    • all ALEC members (American Express, Anheuser Busch, Boeing, CenturyLink, Charter Communications, Chevron, FedEx, Motorola, PNC bank, Sony, TimeWarner)
    • many shitty banks
    • Paypal
    • AT&T
    • GMA members (Coke, Pepsi, Kraft - Heinz, Kellogg’s, General Mills, McCormick, Hormel, Smucker)
    • BetterThanCashAlliance.org members (visa, mastercard, unilever) – war on cash
    • Bayar-Monsanto
    • Dupont
    • Hershey
    • Nestlé
    • Exxon/Mobil
    • Comcast
    • Koch
    • Home Depot
    • Lowes
    • …etc

    Those are all shitty companies that significantly worsen the world. Giving money or data to any of them contributes to enshitification of the world.

    Of course it’s an option to stop supporting assholes. Become ethical. Be the change you want to see.



  • I could not pull it out with my hands after tapping it in. But to be clear, there’s only a sheer force to deal with, and it’s light.

    I cut a bicycle axle bolt in half, and embedded it in the brick so there is a bicycle sprocket on the wall. Then a chain wraps another sprocket, which turns a shaft that goes all the way though the wall to the other side, where it connects to a right-angle gearbox, which attaches to a water valve. It’s lightweight overall… just the weight of a sprocket, chain, and a small decorative wood thing out of wood to serve as a handle.

    This might come a bit too late but why didn’t you just get threaded rod and use one of these instead?

    I did not know anchors like that existed for machine bolts. That’s good to know! However, it would not have helped in this situation. The bicycle axle has non-standard threading (~9mm bolt with a thread pitch that’s 2 steps away from the norm). Since it had a special nut that interfaced to ball bearings, I could not bring in a standard bolt or threaded rod. And the threaded portion of the axle was short enough that no threads could have gone into the wall. I could have added threads to the bare portion, but my die set skips the ø=9mm size.

    I was asking more for future reference – whether or not I should ever repeat this. And I think you answered that. Even if I get lucky in the future on getting a perfect fit at that moment, temp changes could blow it. I guess I’ll assume anchors (chemical and mechanical) are designed to handle the temp changes.





  • I think this project has some tools that might automate that:

    https://0xacab.org/dCF/deCloudflare

    They ID and track every website that joins #Cloudflare. It’s a huge effort but those guys are on top of it. A script could check the list of domains against their list. There is also this service (from the same devs) which does some checks:

    https://karma.crimeflare.eu.org:1984/api/is/cloudflare/html/

    but caveat: if a non-CF domain (e.g. example.tld) has a CF host (e.g. somehost.example.tld), that tool will return YES for the whole domain.

    Manually adjusting availability is a can of worms that I don’t want to open

    I would suggest not bothering with any complex math, and simply do the calculation as you normally do but then if a site is Cloudflare cap whatever the calculated figure is to 98%. Probably most (if not all) CF sites would be 100% anyway, so they would just be reduced by 2%. Though it would need to be explained somewhere – the beauty of which would be to help inform people that the CF walled garden is excluding people. Cloudflare’s harm perpetuates to a large extent because people are unaware that it’s an exclusive walled garden that marginalizes people.



  • It’s not a matter of quick learning. If that were the case, GUI is a clear winner. It takes more time to learn a text-driven UI. But the learning curve pays off. You invest more time learning but the reward is reaching a point where you’re much faster than a mouse allows. I started off using gnusocial from a browser then transitioned to #bitlbee, after which I could search, read, and react faster than in the GUI. Same for Mastdon. Sometimes I’m forced into the Mastodon GUI because of something being unimplemented, in which case the loss of speed is apparent. Just like in the 90s, the keyboard is still faster than the mouse.

    BTW, I used a DVORAK keyboard for years. I never measured my speed difference but I think it slowed me down overall because there were moments where the brain would drift into QWERTY mode (and vice versa on a QWERTY keyboard), and the speed difference w/out drifting seemed negligible so I ultimately settled back on a QWERTY keyboard.




  • diyrebel@lemmy.dbzer0.comOPtoAsklemmy@lemmy.mlNo Debian Lemmy clients yet?
    link
    fedilink
    arrow-up
    2
    arrow-down
    11
    ·
    edit-2
    1 year ago

    I have had no choice but to try Firefox because (for years) #Lemmy has been wholly broken on Ungoogled Chromium. And for me the FF-Lemmy UX is terrible.

    Younger generations have no baseline for comparison because they were raised in GUI browsers. My baseline is IRC, gopher, usenet, emacs, lynx, mutt, bitlbee, toot (TUI + CLI), gnu screen, & piles of scripts on 15+ y.o. hardware, etc. So [bart simpson’s grandpa’s voice] all you young whipper-snappers chained to your GUIs with JavaScript, mice, labor-intensive clicking around have a very different reality and baseline of what’s good. Us older folks struggle to find tools that don’t rely on a mouse & which avoid all the #darkPatterns & bugginess of the modern day web.

    (edit) and wtf there are apparently several phone apps for the fedi. I just don’t get how people can like the small screens, small keyboards, and speech-to-text that causes embarrassments.

    The bigger problem is not even the mouse-dependent UI… it’s that browser clients have no practical HDD access apart from cookie storage. Rightly so, but I should have a local copy of things I write because my hard drive has better uptime & availability than any cloud service could have. When censorship strikes msgs are destroyed without backups. And (at least in the case of Mastodon), even the admins cannot recover posts they’ve deleted even if they want to. Wholly trusting a server to keep your records is a bad idea. So a browser can never by suitable for blogging/microblogging, at least certainly not without an archive download option that can be triggered by a cron job.




  • Cloudflared services like ani.social are getting a “100%” available stat. That site may be up but it’s unavailable (denying availability) to something like ~1-3% of the population 100% of the time. So in principle it should never be able to achieve the 100% availability stat.

    I understand it would be quite difficult to calculate an availability figure that accounts for access restrictions to marginalized groups, because apart from Cloudflare you would not have a practical way of knowing how firewalls are configured. But one thing you could (and should) do is mark the known walled gardens in some way. E.g. put a “🌩” next to Cloudflare sites and warn people that they are not open access sites.

    The lestat.org availability listing is like a competition that actually gives a perception advantage to services that exclude people, thus rewarding them for compromising availability. I would also subtract off ~2% for all CF sites as a general rule simply because you know it’s not 100% available to everyone. They do not deserve that 100% trophy, nor is it accurate.



  • You don’t see the wall because you’re in the included group. Unlike Facebook, Cloudflare hides the wall from those they welcome into their garden. If you click on the screenshot on the OP, you can see what the barrier looks like to those of us who are in the excluded group.

    Otherwise I hope you’re not viewing the world through a simplistic “good guys” / “bad guys” lens s.t. those you deem forces of good surely could not be a “walled garden”. The term serves well w.r.t. places where content is published. Restricted access venues: (Facebook, Cloudflare [with restricted access enabled], LinkedIn, Yelp, Quora,…) are not open access. They are walled gardens.

    While #Signal is in fact technically a walled garden, it’s bizarre to bring it up simply because it’s a p2p platform with no public content to speak of. The term doesn’t really serve us well in a discussion of p2p private chat platforms. Although it’s important to recognize Signal:

    • takes an extremely protectionist stance,
    • deploys tactics to push Signal users into Google’s walled garden,
    • threatens lawsuits against projects who attempt to use the same platform (#LibreSignal),
    • excludes people without mobile phones,
    • and is outspokenly hostile toward the idea of federations

    See https://github.com/privacytools/privacytools.io/issues/779

    The exclusivity of Signal’s design and decision making & careless marginalization of classes of people is comparable to that of orgs like Cloudflare & Microsoft.

    A Cloudflare host can leave the walled garden, but steps are needed

    It is possible to configure a CF host with unrestricted access, in which case you could argue those particular sites are not in the walled garden, but that’s relatively rare. And it still requires a hell of a lot of hand-waving on your part because CF algos still override the user settings in some instances.


  • Im glad we agree. Because its the entire point. You are nitpicking where it suits you and thats not really honest conversation.Tor browser isnt the only way to access tor

    TLS is useful very specifically in the case of banking via Tor Browser, which is the most likely configuration the normal general public would use given the advice to access their bank over Tor.

    There are entire swaths of the world, billions of people, where phones are basically the only gateways to the inter.

    I do not recommend using a smartphone for banking. You’re asking for a huge attack surface & it’s reckless. People will do it anyway but to suggest that people should avoid Tor for banking on the basis that you’re assuming they are using a phone is terrible advice based on a poor assumption. Use Tor Browser from a PC for banking. That is the best advice for normies.

    The point is, again, that Tor and specifically exit nodes are more hostile than normal ISP relays.

    And again, those hostile nodes get less info than ISPs. They have to work harder to reach the level of exposure that your ISP has both technical and legal privilege to exploit.

    Saying selling metatdata that is unencrypted is the same level of malicious as a nation state going after you (life and death) or having your identity or bank account stolen is clearly pretty naive.

    Wow did you ever get twisted. You forgot that I excluded targeting by nation states from the threat model as you should. If someone has that in their threat model, they will know some guy in a forum saying “don’t use Tor for banking” is not on the same page, not aligned with their scenario, and not advising them. You don’t have to worry about Snowden blindly taking advice from you.

    It’s naive to assume your ISP is not collecting data on you and using it against you. It’s sensible to realize the risk of a honeypot tapping your bank account and getting away with it and regulation E protections failing is unlikely enough to be negligible.

    You still have to deal with getting your funds back and paying for stuff to live in the interim.

    If you’re in the US, you have ~2-3 bank accounts on avg, and 20 credit cards (US averages). Not to mention the unlikeliness of an account getting MitM compromised despite TLS in the 1st place. Cyber criminals choose the easier paths, just as 3 letter agencies do: they compromise the endpoint. Attacking the middle of a tunnel is very high effort & when it’s achieved they aren’t going to waste it on some avg joe’s small-time bank acct. At best you might have some low-tech attempts that result in no padlock on the user side. But I’ve never seen that in all my years of exclusively banking over Tor.

    Thats a bad assumption.

    Not in the slightest. Everyone is subject to mass surveillance & surveillance capitalism.

    MOST people arent really concerned with it in the western world.

    Most people don’t even have a threat model, or know what it is. But if you ask them how they would like it if their ISP told their debt collector where they bank so the debt collector can go do an unannounced legal money grab, you’ll quickly realize what would be in their threat model if they knew to build one. A lot of Corona Virus economic stimulus checks were grabbed faster than debtors even noticed the money arriving on their account.

    And thats not a Trump thing. its existed WAY before trump. Snowden showed that and it was Obama, not trump, that went after whistleblowers harder than any predecessor before them.

    You missed the source I gave. Obama banned the practice of ISPs selling customer data without their consent. Trump reversed that. That is wholly 100% on Trump. Biden did not overturn Trump, so if you want, you can put some of the fault on Biden.

    W.r.t history, echelon predates Snowden’s revelations and it was exposed to many by Nicky Hagar in the 80s or 90s. But this all a red herring because in the case at hand (banking customers accessing their acct), it’s the particular ISP role of mass surveillance that’s relevant, which Trump enabled. Or course there is plenty of other mass surveillance going on with banking, but all that is orthogonal to whether they use Tor or not. The role of Tor merely mitigates the ISP from tracking where they bank, and prevents banks from tracking where you physically are, both of which are useful protections.

    Further trying to make this about “party” sides is a bad idea. Its something all parties

    You can’t “both sides” this when it’s verifiable that Obama banned the practice and Trump overturned it. While Obama’s hands are dirty on a lot of things (e.g. Patriot Act continuity), it’s specifically Trump who flipped the switch to ISP overcollection. Citation needed if you don’t accept this.

    And there are some areas where straight access TOR is illegal and can get you in trouble.

    The general public knows your general advice to use/not use Tor is technical advice not legal advice, and also not specific to their particular jurisdiction.