Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)P

9point6

@ 9point6 @lemmy.world

Posts
14
Comments
3963
Joined
3 yr. ago

  • Websites have a new way to spy on visitors: analyzing their SSD activity

    Jump

  • Sorry could you elaborate? You just linked to the MDN page in the comment and claimed it was bad in that one. Did you mean to link to a different one?

    It's implemented everywhere, so it's not that it's a single browser doing something weird, it seems to be sandboxed (in a conventional sense), and there's plenty of use cases where an application might need high performance storage access or a pseudo filesystem.

    What is your reasoning for unimplementing it rather than mitigating the issue? I don't believe there is an equivalent web technology to this that people could use instead.

  • Trump refiles $10 billion defamation suit against WSJ over report on Epstein ties

    Jump

  • Isn't bezos the Washington Post?

    WSJ is a News corp brand.... Which is Murdoch, though I'm fairly sure Murdoch will see himself as above trump in the pecking order

  • Websites have a new way to spy on visitors: analyzing their SSD activity

    Jump

  • Nah, that's not gonna do anything for this given it is looking at the I/O characteristics of your SSD, it doesn't need any permissions to do this, it's basically just copying stuff in its own sandbox and pulling data from analysing the transfer characteristics.

    Unless for every site you want to visit you install a fresh SSD, with a new installation of a browser and you only ever visit a given site from its dedicated browser and SSD, and do nothing else with it. (This is not limited to figuring out just what sites you're visiting, but also what applications you're ruining)

    The alternative is something similar to what I suggested which is to basically ensure your SSD is spammed with accesses so it's very hard to pull out the individual signals.

    It's similar to a VPN connection. If someone is particularly interested in you, they can look at the pattern of VPN transfer traffic. If you open a connection and then go straight to a website and nothing else, it's relatively trivial for a determined enough adversary to take a fingerprint of the transfer sizes and timings. Enough times they can get a good set of fingerprints that they can then start to match to actual sites.

    Now this was regarded as quite hard to do until AI tools like this one come along to dramatically reduce the time needed to do this analysis.

    A way to mitigate the above is to make sure your connections are doing multiple things so it's harder to pull these fingerprints from traffic patterns. So I'm assuming the same strategy would work here given it's basically the same kind of attack

  • Trump accuses Iran of stalling peace deal to ‘outwait’ him until US midterms

    Jump

  • If trump says he doesn't care about something, that thing is what he is most worried about in that moment

    It's just below the other rule:

    Any wrongdoing he accuses others of, is something he is definitely doing himself

  • Websites have a new way to spy on visitors: analyzing their SSD activity

    Jump

  • Well now I don't seem so crazy for having a minimum of 100 tabs open at any one time.

    Surely past a certain point it just becomes white noise

  • Calls for Barnsley Reform councillor to resign over apparent swastika tattoo

    Jump

  • There are zero people in this country that would get a Buddhist swastika-like symbol tattooed on them without fully understanding your average person is going to see it as just a swastika.

    Given that, to then go ahead with it means you're okay with people thinking you've got a swastika on you

    Especially when getting a tattoo after such a "brief [...] period"

    Edit: typo

  • JP Morgan boss threatens to axe £3bn UK investment if Labour lurches to the left with Starmer replacement

    Jump

  • Lol K

    Maybe the city shouldn't be so independent of the rest of London then

  • White nationalist march sparks concern in Virginia: ‘Designed to intimidate’

    Jump

  • Sounds like terrorism

  • Last.fm is now independent

    Jump

  • Oh this is fantastic, I might dust off my old account

  • US law enforcement warns of “anti-tech extremism” as AI hatred grows

    Jump

  • What's considered extreme is a very subjective thing. That idea is often weaponised against the otherwise ignorant

    Helpful reminder to everyone

  • Another redundant app

    Jump

  • You certainly did

    I don't give a shit what they do

    That's completely orthogonal to whether they have mentally matured past the age of 8

  • Another redundant app

    Jump

  • Dude, this is a discussion about how ignorant guys should not be shocked by what women actually look like.

    And how it's kinda a baseline piece of becoming a mature, well rounded person

    bitter women

    Are you intentionally telling on yourself, or..?

  • Another redundant app

    Jump

  • Hello, I'm an actual man

    The only ones excluding guys that can't treat women as people are the guys themselves. These really are pretty basic concepts

  • Microsoft's GitHub bans security researcher who posted zero-day Windows exploits because company 'ruined their life' — expert claims action is vindictive and promises further retaliation

    Jump

  • Shit

  • Tony Blair tells Starmer and rivals: abandon net zero and move closer to Trum

    Jump

  • A literal ghoul

  • Tony Blair tells Starmer and rivals: abandon net zero and move closer to Trum

    Jump

  • Get in the sea you warmongering Epstein beneficiary

  • Germans bitterly divided over proposal to restrict cars in Berlin

    Jump

  • I'd be interested to know what you perceive as being not great

    I've been to Berlin about ten times or so over the past couple of decades and it's always struck me as being a pretty extensive and easy to use system, though as an outsider I guess the parts of the network I use might differ a bit from those that a local would

  • Microsoft's GitHub bans security researcher who posted zero-day Windows exploits because company 'ruined their life' — expert claims action is vindictive and promises further retaliation

    Jump

  • FWIW I've proudly been using it for years

  • Another redundant app

    Jump

  • Drop the "usually"

    Very much still a boy if you don't know this

    Some guys sadly never reach the requisite level of maturity to graduate to manhood.