• 0 Posts
  • 35 Comments
Joined 9 months ago
cake
Cake day: July 23rd, 2025

help-circle


  • It says it can’t be decrypted with passive means due to a proper ECDH key exchange, but if they are not doing any sort of verification that theor server sent or created the key, then it would be possible to do an active attack like MITM that manipulates the key exhcnage. What I mean is, your MITM proxy would substitute the real key with one that you have the keypair to and hand that to the target application. The target application then encrypts using the key you provide, your MITM proxy decrypts and reencrypts with the real key and all seems legit from both sides.

    If there are server validation of some sort, signature checks or whatever, then it would require extra work like patching out or otherwise modifying those checks in the application, extracting the key from the application’s memory, or something like this.

    I guess myvpoint is, if you’re motivated enough, you can make it happen.





  • My POV (having not used a Jolla phone) is that it’s likely to be less convenient than GrapheneOS (I do use Graphene). I understand SailfishOS has an android compatibility layer but I assume there will be random apps that don’t work well with it (Graphene isn’t free of this either). That said, I want consumers to have more options, which means there needs to be early adopters willing to accept limitations or inconvenience to build up the ecosystem of alternatives, so if you’re willing to do that, I think you should. I realize this is selfish in some ways, but it’s also good in the bigger picture.

    I wouldn’t be surprises if the Motorola phone gets heavily delayed and eventually cancelled (I have no inside knowledge, but have been hopeful about too many things that get cancelled to be optimistic until it’s widely available). As such, I think another benefit of Jolla is it’s more likely that you’ll get one (in a reasonable time).



  • I started with graphene a few months ago and it worked from the beginning just following the instructions on the phone to enable it. That said I do recall aention of extra permissions for Bluetooth android auto, which I didn’t want. My car doesn’t support it over Bluetooth anyway so didn’t matter to me, but you may be interested in looking that up (I don’t recall the specifics).


  • When I first read this, I thought subgraded meant “fell into the water and sank” and “into subs” meant hit them/wrecked in to subs (that were near the ship at the time the aircraft sank). Insert spongebob (too much) time passing meme. Oh…

    Sometimes I find Peter Explains the Joke funny. Sometimes I need it. I hope you’ve had a good day. This has been mine.



  • No reason it can’t be done on 120v (from a technical level). In fact, most solar inverters in the US could do this at a technical level as they basically do the same thing, just on a larger scale (higher current and therefore are wired in to electrical panels rather than through outlet as outlets have lower current limits). All you need is the inverter to synchronize its AC output to match grid. If you had a smaller inverter, you could just connect it to an outlet (ignoring building codes, insurance, and other non technical reasons). So the choice is then to have centralized larger inverters or smaller inverters per panel or 2. If you live in a very densely populated area where you can only pit a panel or 2 on a balcony or you don’t have control of your electrical panel, then the small inverter method makes sense.


  • You can still bet on near certain events / events in progress, but there’s not necessarily a benefit in doing so as the odds shift. If something is believed to have a 50% chance of occurring then theoretically the bet would cost 0.5 for a payout of 1 (of you win). As the outcome becomes more (or less) likely, the cost of the bet changes to reflect that. In a prediction market, it’s similar to stock market in that in order for you to buy a share / place a prediction bet, someone has to be selling a share/taking the other side of the bet and the prices shift based on perceived value of the underlying thing being traded (stocks or predictions).


  • I think you’re on to something, but sort of accidentally. A couple replies to you are saying it’s not possible, but I think they’re making an assumption that is not correct in many cases.

    The replies is saying it’s not possible because the layers are flattened before passed to the compression, thus the uncensored/unredacted data is not part of the input to the compression and therefore cannot have any impact on its output. This is true assuming you are starting with an uncompressed image.

    Here’s a scenario where the uncensored/unredacted parts of the image could influence the image: someone takes a photo of their ID, credit card, etc. It’s saved in a lossy compressed format (e.g. JPEG), specifically not a lossless format. They open it in an image editing tool to 100% black out some portion, then save it again (doesn’t actually matter the format). I feel lile someone is going to think I’m misunderstanding if I don’t explain the different output scenarios.

    First is the trivial case: amultilayer output with the uncensored/unredacted data as its own layer. In this case, its trivial to get the uncensored/unredacted data as it is simply present and visible of you use a tool that can show the individual layers, but the general assumption is that this is not the case – that the output is a single layer image, in which we have 2 scenarios.

    Second case: lossy compressed original, lossless censored. Consider that this censored/redacted image is flattened and saved as a lossless format such as PNG. Certainly there will be no compression artifacts of the uncensored/redacted data both because it is lossless (no artifacts added by PNG) and that it was flatted prior to being passed to PNG. However, the uncensored/unredacted artifacts remain in the uncensored/unredacted portions of the image. These were introduced by the compression that was applied prior to the censoring (e.g. the JPEG compression that contained the pre censored image). I suspect this is actually a common case.

    Third case: lossy compressed original, lossy compressed censored: same as second case, except now you have additional artifacts, in particular you bow have artifacts from the censored portion, and the artifacts of the previous lossy compression are also adding additional artifacts. This is probably more difficult, but the point is that the original uncensored/unredacted artifacts are still present.


  • Basically what Nintendo did on one of their schemes to prevent unauthorized software (Famicom Disk System, which was a floppy disk drive for the Japanese version of the NES). This was the physical Nintendo logo embossed on to floppy disk and with a flat disk instead, the disk can’t be physically loaded (sort of, you can add extra cut outs). Other game systems required a logo or similar other brand/trademark/IP to be present in the game code in order to boot, so if you wanted to make your own game without Nintendo’s blessing, you had to invlude their IP in your physical disk or in the game code just to get it to boot. This BMW patent seems to be in the spirit of those hard and software protections that prevent people from doing what they want with the hardware (car) they bought.




  • Slackware was my first and I didn’t know that package managers existed (or maybe they didn’t at the time) to resolve dependencies and even if they did, they probably lagged on versions. I learned true dependency hell when trying to build my own apache, sendmail, etc from source while missing a ton of dependency libraries (or I needed newer versions) and then keeping things relatively up to date. Masochistic? Definitely for me, but idk how much of that was self inflicted by not using the package tool. Amazing learning at the time. This would have been mainly Slackware 3.x and 4.x. I switched to Debian (not arch BTW).


  • How would it be too late? To develop a huge following? Idk, buy if you just want to stream for the hell of it, I don’t see how that matters. I’ve not gamed much the last few years, but I started again recently, upgraded my computer, and my ISP bumped my upload speed (finally), so I can stream without it impacting my game play.

    I turn it on if I remember, but since I’m streaming just because why not (maybe I’ll find someone new to game with or maybe someone will be amused by my shitty skills), I don’t do it regularly and have no regular followers, as such, I forget to check the chat and have often had people join and type and then leave, presumably because I ignored them (or I’m just not worth watching).

    OK a lot of rambling, I guess the summary is, stream because you want to, not because you want a following/make money and then it’s definitely not too late, but also don’t ignore the people who join your stream.