• 0 Posts
  • 20 Comments
Joined 1 year ago
cake
Cake day: June 15th, 2023

help-circle


  • I’m not a vegan - but we are omnivores, we can eat plants. There is nothing unnatural about it. Let alone if you compare it to our modern ‘normal’ food, which is chock full of extra sugar, extra fat, extra protein, extra artificial additives like preservatives, sweeteners, and what not. It’s also factual that you can get more energy out of directly consuming plant material than eating an animal that consumed said plant material. If you take the biggest offenders for that, cows. You need 8 kg of feed for them to produce a kg of meat, this is known as it’s feed conversion ratio (source). Other animals (Like chicken and fish) are better, but a ration below 1 is essentially impossible.

    I like the taste of meat as much as the next (average) person, but vegans do have a factual basis for their stance. But non-vegans rebuttal to that is realistically just “I don’t want to give up meat because I like it” not “the facts aren’t on your side.” - Lets be honest about that.



  • And even with that base set, even if a computer could theoretically try all trillion possibilities quickly, it’ll make a ton of noise, get throttled, and likely lock the account out long before it has a chance to try even the tiniest fraction of them

    One small correction - this just isn’t how the vast majority of password cracking happens. You’ll most likely get throttled before you try 5 password and banned before you get to try 50. And it’s extremely traceable what you’re trying to do. Most cracking happens after a data breach, where the cracker has unrestricted local access to (hopefully) encrypted and salted password hashes.

    People just often re-use their password or even forget to change it after a breach. That’s where these leaked passwords get their value if you can decrypt them. So really, this is a non-factor. But the rest stands.


  • While this comic is good for people that do the former or have very short passwords, it often misleads from the fact that humans simply shouldn’t try to remember more than one really good password (for a password manager) and apply proper supplementary techniques like 2FA. One fully random password of enough length will do better than both of these, and it’s not even close. It will take like a week or so of typing it to properly memorize it, but once you do, everything beyond that will all be fully random too, and will be remembered by the password manager.



  • It will never be solved. Even the greatest hypothetical super intelligence is limited by what it can observe and process. Omniscience doesn’t exist in the physical world. Humans hallucinate too - all the time. It’s just that our approximations are usually correct, and then we don’t call it a hallucination anymore. But realistically, the signals coming from our feet take longer to process than those from our eyes, so our brain has to predict information to create the experience. It’s also why we don’t notice our blinks, or why we don’t see the blind spot our eyes have.

    AI representing a more primitive version of our brains will hallucinate far more, especially because it cannot verify anything in the real world and is limited by the data it has been given, which it has to treat as ultimate truth. The mistake was trying to turn AI into a source of truth.

    Hallucinations shouldn’t be treated like a bug. They are a feature - just not one the big tech companies wanted.

    When humans hallucinate on purpose (and not due to illness), we get imagination and dreams; fuel for fiction, but not for reality.



  • First: They did actually end up removing this and making it configurable, check the bottom of the page. In a vacuum, the idea to stop cut-and-clear racists and trolls from using Lemmy is not something that’s too controversial. Sure, they are being hard asses about changing their mind and allowing instance owners to configure it themselves (and I’m glad they changed their mind). But there’s a big overlap between passionate and opinionated people, so they have to be at times to ensure a project doesn’t devolve into something they can’t put your passion into anymore.

    Second: I mean… what do you expect? In the issue above they actively encourage people to make their own fork of Lemmy and run that if they don’t like something from the base version of Lemmy, so I kind of would assume they do as they preach. Instance owners also have the option to block communities without defederation. Lemmy.ml is basically their home instance. If anything this is a reason not to make an account on lemmy.ml, but as long as that doesn’t leak into the source code of Lemmy, who cares?




  • If it’s a fairly inconsequential service (no payment/personal info, nothing lost if it gets hacked), you can just generate a far shorter password. Even randomly generated passwords can be remembered eventually if you have to type it enough times, and that’s still better than the same one.

    If it’s not inconsequential, I’d be questioning if my money is well spent on a sadistic service that makes my life hell trying to have a minimum level of security. I would say that even if it wasn’t a generated password that you have to type over.


  • It’s the choice between trusting one company (or if you self host, trusting yourself) to have their security all in order and properly encrypt the password vault. Using one password for every site you use means that you have to trust each of those sites equally, because if one leaks your password because they have atrocious password policies (eg. storing it in plain text), it’s leaked everywhere and you need to remember every place you used it before.

    Good password managers allow audits, and do at times still get hacked naturally (which isn’t 100% preventable). Yet neither of these should result in passwords being leaked. Why? Because they properly secure your master password so it can’t be reverse engineered to plain text, and without the master password your encrypted password vault is just a bunch of random bytes. And even in the extreme situation it did, you know to switch to a better password manager, and you have a nice big list of all the places where you need to change your password rather than trying to remember them all.

    Human memory is fallible and we want the least amount of effort, because of that we usually make bad passwords. Your average site does not have their password security up to date (There’s almost a 0% chance not one of your passwords can be found here). If you data is encrypted accordingly, it doesn’t matter if it gets leaked in any way or stolen by some rogue employee, so long as they do not have your master password. So yes, I’d say that’s a good idea.




  • Yup. Used to be it was quite easy to find the games that were worthwhile to play since there was very little for profit games and not too much choice. Nowadays only if I hear from people I trust to have a taste for the games I want to play will I actually get excited. Its just easier to go back to classics because you know you’re going to have a better time than most things you buy new.

    Always on the look out though, gems are still being produced, they just became a lot less findable.



  • The first is just human nature. That’s not a problem with decentralization, but with humans. And it’s always a tipping point, it’s impossible to make decisions that are 100% agreed on with enough people. But just like Reddit is learning now, once you’ve pushed it above a certain level, you’re going to be bleeding users to either smaller or larger communities. Zipf’s law says nothing about how those transitions happen, just that it “gravitates” towards settling in the distribution it over time. You don’t know how long it will takes before the hierarchies settles again.

    The second isn’t really an issue with Lemmy. Since the protocol is fully transparent, you have sites like https://the-federation.info/ which provide full transparency on the statistics. There’s also no way for instances to “speak on behalf” of another instance, so if one instance tampers with things, it will be plain and clearly visible on other instances. There are also other ways for people to talk to each other besides through Lemmy itself. If a conspiracy like you’re saying would take place, the news would eventually reach the users of the instance being affected, and another Reddit will occur.

    For once the power is much close to the hands of the users, and not some CEO who isn’t beholden to anyone.

    I disagree it’s something we don’t talk about enough though, since we’re talking about it right now, and it’s been a very frequent discussion point regarding pretty much every big site. Not to mention it’s the talk of the day for the last month or so because of the Reddit API changes. Hell, if the discussion hadn’t been had in the past, we would’ve had another centralized Reddit-like clone right now, and not the fediverse.