sylver_dragon

joined 2 years ago
MODERATOR OF
[–] [email protected] 13 points 1 day ago (2 children)

Stopping Windows from running, probably not. MS could stop sending updates and could deactivate it, but it would mostly keep running. And, if any EU/Russian systems were not connected to the internet (yes, this sort of thing still happens in 2025), nothing MS did would matter. Office/Azure and other cloud based services are more vulnerable. Yes, Microsoft could geo-fence those services such that they did nor work if you were coming from an IP address in EU/Russia. Though, the simple workaround for this is to install a VPN. And given US sanctions on Russia, this is probably happening right now anyway.

As much as the tin-foil hat crowd likes to think about MS having some master control switch, it's incredibly unlikely. The problem with backdoors is that hackers are constantly looking for ways to attack systems, especially Windows. If there was some sort of master "off switch" baked into the code, it's likely some one would have stumbled upon it by now. Even if it's that well hidden, it's a "one use" item with high reputational damage attached. Stop and consider for a moment, what happens when that kill switch gets used? It's going to be picked up on. People record internet traffic for fun. As soon as that kill command went out, security researchers, the world over, would be dissecting logs to find the command, and then it would be reversed engineered. That MS had such a kill switch in their codebase would cause massive distrust in MS software going forward. No one would want to take the risk of having that kill switch running in their environment, certainly not on anything critical. Also, given how bad people are at updating Windows, we'd probably see a lot of systems killed by hackers just doing hacker things. Since the versions with the kill code would be know, you'd get bored teenagers searching Shodan for vulnerable systems and sending the kill command for fun. And all of this would be "Microsoft's fault" for having the backdoor. It would be a PR nightmare. And since everyone would now know what the kill command looked like, anyone who mattered would install filters to block it at the firewall. So, it got used once, caused some damage with a lot of damage to MS's reputation but is now neutralized. Was it worth it? Probably not to Microsoft.

[–] [email protected] 4 points 1 day ago

When I was first switching to Linux, I installed Arch on a USB3 stick and ran from there for a month or two. It worked pretty well, however I did seem to have issues with I/O contention. During some read and write operations and multi-tasking, the whole OS would just hang up until the operations were done. Since moving that installation to an SSD, that issue is gone. So, it does work, it's a pretty good way to "try before you buy"", but do keep in mind that performance will suffer.

At the same time, I'd definitely recommend working through the pain of getting it setup right. When you have a problem (and they will crop up), it gives you a better understanding to work from for troubleshooting. You may also want to try our different distros. I used Arch, because I hate myself. But, that may not be the right choice for someone else. Something like PopOS could be a good choice for something that is aimed more at gaming, but is supposed to "just work". Ubuntu is a good choice for a more "mainstream" look and feel. There is no good reason to do things the hard way, unless you really, really want to. The goal is to have a functional system, don't tie yourself in knots getting there.

[–] [email protected] 88 points 1 day ago* (last edited 1 day ago) (13 children)

Uh, no shit. State backed espionage groups are targeting the communications channels used by their primary targets. What are you going to tell me next? That water is wet and fire is hot? If the US government started using IP over Avian Carrier (RFC1149) you can bet that the GRU would start up a program to intercept the carriers.

[–] [email protected] 7 points 1 day ago (4 children)

This is why many communication options these days advertise that they are encrypted.

Like Signal. You know, the app they were using, as was mentioned in the article, multiple times. You did read the article, right?

[–] [email protected] 23 points 2 days ago

Season 5 will premiere later in 2025

For those, like me, that mostly just wanted to know when.

[–] [email protected] 1 points 6 days ago

It's also not really a bug. It's just understanding that whitespace characters are often ignored and can be used to push a command past the end of the textbox in the "edit shortcut" form. I'm not sure I really see a fix for it either. Granted, I think always showing file extensions would be a good start; but, that horse is so long out of the barn it's grown old and died in the woods. Much like hyperlinks, I think people just need to learn to be careful where they put their click.

[–] [email protected] 1 points 6 days ago

You could create one with the normal shortcut editor, which is built right into Windows. As for considering Windows a risk, well yes it is.

[–] [email protected] 2 points 6 days ago

This is going to be a teaching moment for cyber security.

[–] [email protected] 0 points 6 days ago (1 children)

This really is solvable with a KeePass setup, but it is harder. I use KeePass and host my own Nextcloud instance. One of the files I have up there is my KeePass database. If I need one of my passwords, I access it from my phone and type it in. If I really, really wanted to drop my password database on someone else's computer, I could login to my Nextcloud instance via a web browser, pull down the file and run KeePass as a portable executable (not installed). It'd be a PITA (and there are some caveats around this process), but it's certainly possible.

That said, online password managers make sense for a lot of use cases. I generally recommend BitWarden when people ask me for what to use. The whole "KeePass and manual sync" answer really only works for those folks who want to self host lots of things. And it brings its own set of risks with it. I'm the type of weirdo who is running splunk locally, feed all my logs into it and have dashboards setup (and looked at regularly) dealing with security. I have no expectation that my wife will do that and so she uses BitWarden.

I think the most important thing to convince people of is "use a password manager". The problem TommySoda brought up is very real:

While I understand that password reuse is a problem I also understand that remembering 50+ passwords, because literally everything requires you to make an account, is impossible.

The hard thing to teach people is that, you don't actually need to know those 50+ passwords, nor should you care what they are. With a password manager, they can be the crazy unique 20 character, random string of letters, numbers, symbols, upper and lower case characters. And you won't care. Open the website, and either copy/paste the password or (if you password manager supports it) use the auto-type feature. There are risks to each; but, nothing will ever be without risk. Just please folks, stop reusing passwords. That's bad, m'kay.

 

When companies win their pitches for state incentives to fund a new plant or expansion in Virginia, they sometimes end up hiring fewer people than they said they would.

But a shift away from making upfront grants — to require that companies show that they have hired and invested before the state releases funds — has made a big difference, according to a Richmond Times-Dispatch analysis of state economic development spending data.

 

When companies win their pitches for state incentives to fund a new plant or expansion in Virginia, they sometimes end up hiring fewer people than they said they would.

But a shift away from making upfront grants — to require that companies show that they have hired and invested before the state releases funds — has made a big difference, according to a Richmond Times-Dispatch analysis of state economic development spending data.

 

I would like to request to take over moderation of the community: https://lemmy.world/c/virginia

The current mod "@[email protected] gabowo" has been inactive for 2 years and the last mod action for the community was also 2 years ago (https://lemmy.world/modlog/4102).

[–] [email protected] 4 points 1 week ago (2 children)

I was introduced to it when it was still Hero’s Quest (and EGA)

This is the version I always play. There's something just "right" about the EGA graphics and text parser. A clicky interface will never replicate:
Hut of brown, now sit down

[–] [email protected] 5 points 1 week ago (4 children)

There's probably a lot of nostalgia in the choice, but my all time favorite game is Quest for Glory: So You Want to be a Hero. The game was just the right mix of fantasy, adventure and humor for a young me, and I still go back an play it about once a year. A close second is Valheim. It's kinda my "cozy game". I find building and exploring relaxing, and there's enough fighting to keep the game from getting boring.

 

Virginia law enforcement agencies will no longer be able to withhold the names of their employees from the public.

That’s the result of a ruling issued on Tuesday afternoon by the Virginia Court of Appeals, which found that “the names of law enforcement personnel are not exempted” from public records requests made under the Virginia Freedom of Information Act.

 

A great quantitative examination of the effects of infill on part stiffness.

 

Instead of worrying about what sign is on the outside of the building, let’s pay attention to the department’s funding. What happens to federal funding for education under the Trump administration, whether there’s a fully functional Department of Education or a vacant building collecting dust while the work gets done elsewhere? We simply don’t know.Trump has said a lot more about shutting down the department than offering policy papers on federal funding for education.

Here’s what we do know, though, with absolute certainty: how much federal funding each school system gets and what percentage that is of its total funding. That’s listed every year in an annual report on the state Department of Education’s website.

The localities most dependent on federal funding are in rural areas — and most cities. The localities least dependent on federal funding tend to be suburbs, particularly those in Northern Virginia.

 

On May 8, 1971, a freelance photojournalist was flying over central Vietnam when he looked down and saw something unexpected: A huge peace sign that had been carved into the landscape near Camp Eagle, home of the U.S. Army’s 101st Airborne Division during the Vietnam War.

Fifty-four years have passed since the photo was taken, but the person who created the peace sign was a mystery.

Until now.

 

The Virginia House of Delegates passed three constitutional amendments Tuesday, including one that would strengthen abortion access, advancing the process that could get the amendments on the ballot for Virginians to vote on next year.

The House also passed proposed constitutional amendments on same-sex marriage and restoration of rights to people convicted of felonies who have served their time.

Passage of a proposed constitutional amendment is a multiyear process. A proposed amendment must pass the legislature in two different years with an election for the House of Delegates in between. (The House of Delegates is up for election this fall.) The measure could then go to voters in a statewide referendum.

 

I recently used Firefox Nightly on my Android device, in a private tab, to login to gmail. After I closed the browser, both via the "quit" menu icon and via swiping the Firefox away in the Overview, I had expected the session information to be deleted and the next time I came back to gmail via a private tab, to be required to login again. However, this was not the case. Despite closing out the browser, something seems to have survived and the I was immediately logged back into the gmail session.

Is this some sort of expected behavior? Shouldn't closing out the browser delete all session information from a private tab? Is there something I missed that maybe I'm not actually "closing" the browser?

 

My daughter wanted a "Gorilla Tag" birthday. And my wife wanted me to print some party favors for the guest kids. Not my model, but they are churning out ok-ish.

 

I'm currently purchasing a new GPU and specifically settled on the MSI 4070 Super. I'm all set for everything except connecting the display to the card.

Currently, the display I have (which isn't being upgraded for now) only has two input options: DVI and VGA. The new GPU only provides HDMI or Display Port. This isn't really a problem as adapters/cables exist to go from Display Port/HDMI to DVI-D.

But, the question I have is, which is the better option, or does it make any difference? And, are there any "gotchas" I should watch out for when buying the cable?

I realize that I am likely over-thinking this, but I would rather ask a stupid question than make a stupid mistake.

 

Just got started with this game (PC - Steam version). It's fun so far. I had really wanted to use my controller. But, the aiming movement is so sluggish. I've tried pushing the "Aim Sensitivity" up to 10, but still felt like I was turning through molasses. Is there anything which can be done to speed that up, or is the controller just fundamentally slow on PC?

Using an Xbox controller via Bluetooth. And the issue isn't lag, it's the rotation speed in game.

view more: next ›