This is also far from my personal experience, you might not even realize what free software you’re depending on?

Your browser is most likely the most complex piece of software you interact with daily and it is most likely FOSS. The Linux kernel is FOSS and is incredibly robust. Most compiler suites, FOSS. Most programming languages, FOSS. These are all incredibly well written and robust tools. AOSP, kinda FOSS, and the forks like Graphene are definitely FOSS. Hell even a lot of macOS programs are actually FOSS.

There is great paid and proprietary software out there, sure, but no it’s not the majority of top quality software in my personal experience and likely a lot of people’s experiences and it is almost guaranteed to rely on a FOSS library somewhere

Sounds like you’re cherry picking both; I’ve seen plenty of garbage that costs money as well.

Oh right, thanks

Am I misunderstanding something? Wouldn’t that just be 7! = 5040 possibilities?

I have no skin in this game, but IPs are definitely not anonymous data. Also there is a lot of great info out there about de-anonymizing seemingly random data. Interestingly enough, this is similar to the Netflix prize dataset that was one of the more famous ones. Maybe a good introduction to that would be https://www.schneier.com/blog/archives/2007/12/anonymity_and_t_2.html

Nobody is gonna be using a quantum computer to “crack email hashes” of Plex users in a few years… I’m not even sure there is a speedup to hash cracking with quantum computers.

But depending on the hashing algorithm used, it’s likely pretty easy to crack hashes of email addresses today with a normal computer. They’re not particularly high entropy.

I feel seen

What’s the give away there? Not doubting just wondering.

I see impedance matched traces so seems like something fast, but that’s all I’d be able to guess.

Seriously wtf did I just try to read? It sounded like AI slop.

Honestly I wouldn’t even go so far as home assistant. Do you have any IP cameras or just USB webcams? If you have IP cameras all you need is the VPN and then just access them as if you’re at home. If you only have USB webcams, you’re going to have to stream the content and I believe ffmpeg is actually capable of taking /dev/videoX and serving it over RTSP somehow, but I don’t remember exactly how. I see some references to it in some quick searches though. Maybe start here (some blog) or here (Stackoverflow question)?

Another thing to remember is that you’re going to be limited by your upload speed. If you’re not on fiber and in the US that’s likely going to be pretty bad, so set your resolution and the like accordingly.

Sorry about your cat. We typically have a Rover stop in to check on our cats when we’re gone for a bit; it’s nice to get them some human interaction and they always send pictures and give updates.

I personally have a camera setup inside that just streams to HomeAssistant so we can check on them ourselves when we’re out just for the weekend. I disconnect it when Rovers are stopping by though because I don’t want them to feel spied on. No need for anything fancy really, but if you really want NVR I just use Frigate (for other things, the cat camera really is just a stream). It’s free and open source and really easy to set up.

WireGuard is a very easy way to set up the access. My router has just the single WireGuard UDP port forwarded

The real issue is definitely people not having total control over their own devices.

It doesn’t need permissions to be sent pictures from messages though, that’s all local and likely done via an exported Service. Good chance other Google products are or will make use of it in the future.

There are definitely good, non malicious reasons to have it as a separate app and that should actually be preferred. Off the top of my head:

• Separation of permissions - it only has the permissions it asks for instead of every permission messages has
• It can be disabled/removed without disabling messages
• it can be reused by other applications if that’s a desirable feature

Some people might actually like this: thinking of women getting unsolicited dick picks in particular

I almost never use Windows, but aren’t commands and variables in PowerShell case insensitive?

As long as it’s installed on a device you control it’s pretty easy to sniff TLS traffic from an Android application, even if they’re pinning certs. I do this all the time for work. Frida makes it extremely easy, even giving you the ability to edit boringssl if something important is happening in native code. I’ve had to do this a couple times.

If you don’t have root you’ll have to recompile the application though which could matter if you need the signature to not change, but that isn’t a common requirement.

It’d be nice to have a better way to test though; I’ve wanted to check out Waydroid. Some coworkers just use an emulator which works great if it doesn’t need specific hardware.

Oh oof I misunderstood because of the parent comment talking about NixOS oops

The top options here don’t work https://search.nixos.org/packages?channel=24.05&from=0&size=50&sort=relevance&type=packages&query=mullvad ?

Hm I always remember hearing this:

In a confidential memo to the Republican party, Luntz is credited with advising the Bush administration that the phrase “global warming” should be abandoned in favour of “climate change”, which he called a “less frightening” phrase than the former.

https://en.m.wikipedia.org/wiki/Frank_Luntz

https://www.theguardian.com/environment/2014/may/27/americans-climate-change-global-warming-yale-report

This is a real exploit chain in cups-browsed. The tl;dr is that it will add basically anything that knows the correct protocol to your list of available printers, and this can be exploited for RCE if you print to the malicious printer. The service listens on all interfaces by default on UDP 631.

It is not as horrible as it was marketed, but it’s real and not great. You may or may not have this service running by default; I didn’t on Fedora.

His full write-up is here: https://www.evilsocket.net/2024/09/26/Attacking-UNIX-systems-via-CUPS-Part-I/

Redox also takes some inspiration from Plan9 and https://doc.redox-os.org/book/ch05-00-schemes-resources.html is interesting. Also reading https://drewdevault.com/2022/11/12/In-praise-of-Plan-9.html made me a bit more interested in things trying to be more Plan9-like than Unix-like.