Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)P
Posts
4
Comments
1233
Joined
3 yr. ago

  • Also worth noting that Costco doesn’t require a membership for their fresh food, pharmacy, or (depending on where you live, and your local liquor laws) liquor store. You can just tell the greeter that you’re there for the pizza, and they’ll wave you through.

    Their pharmacy is often one of the cheapest, and the pharmacy techs at my local Costco are all super helpful. Apparently working in pharmacies is pretty soul-sucking, but my local employees always seem to be in a good (and not just artificial “retail smile” good) mood.

    And yes, the Costco brand vodka is every bit as good as Grey Goose.

  • Sort of. The program uses a specific part of the website for its auto update. And it also didn’t do any kinds of TLS (https) validation (which would prevent changing the destination). They also signed their installers (which would throw an error if the file had been modified) but the auto update didn’t check for a valid signature. So basically the two big things that a browser would do when you visit the site to download the installer, the auto updater just… Wasn’t doing.

    So people who visited the site to manually download the installer were fine. They would have been alerted if the TLS cert was invalid or if the installer wasn’t properly signed. But if you used the auto updater, you wouldn’t get any of those errors and it would happily install the malware.

  • Rebooting your phone actually encrypts the device, and it will stay encrypted until the first unlock. But the side button simply disables biometrics. The phone is still unencrypted on the backend, so other workarounds (like some sort of exploit that allows them to bypass the PIN) will allow them to see the phone’s contents.

    This is particularly important because cops can image a phone after they seize it, to try and hack later. If they manage to image the unencrypted phone, that whole process is much easier. But if the phone is encrypted when they image it, they’ll basically just get white noise.

  • They also weren’t doing any kind of SSL verification for the download request, nor were they doing any kind of hash verification or signing. The former would have prevented a redirect attack in the first place, and the latter would have prevented downloaded files from being modified or swapped out.

  • There are an infinite amount of real numbers between 0 and 1. On the top track, when you reach 1, you would only kill 1 person. But on the bottom track you would’ve already killed infinite people by the time you reached 1. And you would continue to kill infinite people every time you reached a new whole number.

    On the top track. You would tend towards infinity, meaning the train would never actually kill infinite people; There would always be more people to kill, and the train would always be moving forwards. Those two constants are what make it tend towards infinity, but the train can never actually reach infinity as there is no end to the tracks.

    But on the bottom track. The train can reach infinity multiple times, and will do so every time it reaches a whole number. Basically, by the time you’ve reached 1, the bottom track has already killed more people than the top track ever will.

  • I mean, in that case it’s not really a matter of the trolley killing them, per se. The number will tend towards infinity, until it suddenly spikes to real infinity as people starve.

  • You don’t seem to be getting it… American copyright law can’t affect someone in Libya, unless the Libyan authorities allow it. American lawyers can try to sue all they want, but it won’t do anything unless the business owner visits America.

    Libya doesn’t have an official extradition treaty with the US. So the American authorities can bitch and moan about it all they want, but they can’t arrest a Libyan citizen and drag them to America without Libya’s consent. If this is legal in Libya, they’re not breaking any Libyan laws, and they’re not harming Libyans, why would the Libyan authorities care?

  • “Sign this NDA, and your consideration is that we won’t toss you out on your ass with a less-than-honorable discharge.”

  • He’s a former Major in the Army National Guard. I can guarantee he knows what the UCMJ is; He just doesn’t care.

  • Yeah, dating is 100% a numbers game. You cast a broad net, and then pick through the ones who show interest. There’s no way to find the right person without failing a few times. The people that end up with their high school sweethearts are the exceptions that got extremely lucky, not the standard to strive for.

    Don’t take the failure personally. Unless you’re blatantly going around cheating, being misogynistic, racist, etc., it’s likely not anything in particular that you did “wrong”. It simply means you weren’t a good match. The best thing you can do is simply be the best version of yourself. By that, I mean to avoid just sitting around on your hands, expecting someone to land in your lap. The “if you can’t handle me at my worst, you don’t deserve me at my best” mentality is extremely toxic; Be the kind of person that your ideal partner would want to date.

  • “Just give the bully your lunch money, and they’ll stop asking for it in the future. It definitely won’t result in them coming back tomorrow to shake you down again.”

  • No, each server is accessed separately. You can swap between servers easily, but there is no central way to browse all of your servers simultaneously. Jellyfin was designed specifically to rebel against Plex’s centralization, so that’s not a feature they’re ever likely to implement. There are ways to sync your watch history between servers, but it’s using third-party plugins.

  • The Tim Burton Batman movies. They’re hilariously bad, but make for a great time when you’re drunk with friends.

  • Or even worse… Supporting Palestine.

  • A lakh is 100k. So 5 lakh is 500k. Converted to USD, that’s around $5900 USD

  • I occasionally do scale drawings for my job, and I occasionally have to remind my coworker that her nice pretty colorized drawings will look fucking atrocious when printed in greyscale on a shitty laser printer. She likes to color code things to make it easier to communicate info… But that often ends up making things harder on the crews who are actually executing things. Because when she used color to communicate something, but the entire drawing is printed in shades of grey to hand a hard copy to the crew, it becomes fucking impossible to actually follow the drawing.

    For instance… The yellow circle is the one we need done today. Here’s what she draws:

    Except here’s what the crew receives:

    Now imagine if this was a watermark on every page of a 50 page court filing, which then gets printed out for the judge. Now they’re seeing text on the grey background, which likely makes it harder to read and is a massive waste of toner. It also massively inflates pdf file sizes, because you’re sending that image on every single page.

  • Yup. For minor issues, first aid is all that is needed; you don’t need to see a doctor for a minor cut, as long as the first aid ensures it’s not infected. But for larger things, secondary aid is what provides more long-term recovery.

    If someone dislocates a shoulder, first aid is putting it in a sling and bracing it against the body, so it doesn’t get worse (for instance, the tendons and ligaments in the shoulder joint can tear) before they can get to a hospital.

    If someone is massively bleeding, first aid is stopping the bleeding to keep them alive until they can get rescued.

  • It’s funny because I’ve seen almost the exact opposite; Trans femmes are choosing beautiful gorgeous names that fit them perfectly. Then trans mascs are just like “oh hey, I’m Steve.”

  • It can be, yes. One of the largest complaints with Docker is that you often end up running the same dependencies a dozen times, because each of your dozen containers uses them. But the trade-off is that you can run a dozen different versions of those dependencies, because each image shipped with the specific version they needed.

    Of course, the big issue with running a dozen different versions of dependencies is that it makes security a nightmare. You’re not just tracking exploits for the most recent version of what you have installed. Many images end up shipping with out-of-date dependencies, which can absolutely be a security risk under certain circumstances. In most cases the risk is mitigated by the fact that the services are isolated and don’t really interact with the rest of the computer. But it’s at least something to keep in mind.

  • Voyager @lemmy.world

    In-line image breaks embedded links

    lemmy.world /comment/12747892
  • memes @lemmy.world

    I was only gone for a day or two...

  • Voyager @lemmy.world

    Posts keep reverting to "Large" size

  • New Communities @lemmy.world

    Out of Context DnD - A place for all of your "oh I probably shouldn't repeat that in public" TTRPG quotes.