• 54 Posts
  • 763 Comments
Joined 1 year ago
cake
Cake day: October 4th, 2023

help-circle
  • I don’t think that the problem is 2FA itself so much as poor UX on existing systems.

    Let’s say that I have a little USB keychain dongle in my pocket with an “approve” button and a tiny screen. When I sign in, at the time that I plug my password in, I plug the dongle in. It shows the information for whom I am approving authentication. I push the “approve” button.

    It’s got a trusted display (unlike a smartcard, so that a point-of-sale system can’t claim that I’m approving something other than what I am).

    It can store multiple keys, and I basically use it for any credentials that I don’t mind carrying with myself.

    I then keep another, “higher security” dongle at home with more-sensitive keys.

    Does that add some overhead relative to just entering my password? Yeah. But is it a big deal? No. And it makes it a lot harder for someone to swipe credentials.

    I agree that using phone-linked SMS 2FA authentication is problematic (for a number of reasons, not just because it locks you to a phone, but because there are also privacy implications there).


  • for some reason

    It’s called price discrimination.

    If there are multiple groups of potential purchasers who have different levels of willingness to pay, if you can identify some characteristic of people willing to pay more, then you can create a version of the product that targets that characteristic and thus the group.

    Price discrimination (“differential pricing”,[1][2] “equity pricing”, “preferential pricing”,[3] “dual pricing”,[4] “tiered pricing”,[5] and “surveillance pricing”[6]) is a microeconomic pricing strategy where identical or largely similar goods or services are sold at different prices by the same provider to different buyers based on which market segment they are perceived to be part of.[7][8][2] Price discrimination is distinguished from product differentiation by the difference in production cost for the differently priced products involved in the latter strategy.[2] Price discrimination essentially relies on the variation in customers’ willingness to pay[8][2][4] and in the elasticity of their demand. For price discrimination to succeed, a seller must have market power, such as a dominant market share, product uniqueness, sole pricing power, etc.[9]

    • “Product versioning”[8][16] or simply “versioning” (or “second-degree” price differentiation) — offering a product line[13] by creating slightly differentiated products for the purpose of price differentiation,[8][16] i.e. a vertical product line.[17] Another name given to versioning is “menu pricing”.[14][18]

    In this case, you’re going to have something like a group of “value customers” who care a lot about how much they need to spend on the game. And then you’re going to have “premium customers” who aren’t too fussed about what they pay, but want the very fanciest experience.

    If you had just one version, sold the game at the “value customer” price, then you’d lose out on what the “premium customer” would pay. If you sold it at the “premium customer” price, then you’d have a bunch of “value customers” for whom the game would no longer be a worthwhile purchase, who wouldn’t buy the game, and you’d lose the sales to them. But by selling it at multiple prices, you can optimize for both groups.

    EDIT: l’d also add, on the technical rather than economic side, that I’ve messed around with having a custom HRTF model myself, as Linux (and maybe elsewhere, dunno) games that use OpenAL let you specify a custom HRTF model in the config file. My own impression was that any impact on audio experience was pretty minimal. Might be different if someone had really weirdly-shaped ears or something, dunno.





  • I’m also interested to know whether you think Paradox should make another Sims-style life sim, after nuking Life By You

    I’d personally like a “The Sims”-like game.

    But while I like the sandbox aspect of that series, I was never that into the actual gameplay.

    Being able to make your own structures and interact with them is neat. I like games like that a lot. Dwarf Fortress. Rimworld. Cataclysm: Dark Days Ahead.

    But the actual gameplay in The Sims in that sandbox world doesn’t really excite me all that much. There’s not a lot of strategy or planning or mechanics to explore the interactions of. Watching your Sims do their thing is neat, and I’d enjoy having that go on while I play a game.

    I can imagine a world where I have a lot of control over structures, with NPCs that are sophisticated to an unprecedented degree.

    But I don’t have specific ideas as to how to gamify it well. I just know that The Sims hasn’t gotten there.

    If what one wants is Sim Dollhouse, I guess it’s okay. I know one woman who really liked one entry in the series, bought a computer just to play it. I guess it’s a neat tool for letting people sorta role-play a life. There may be a solid market for that. But for myself, I’d like to have more mechanics to analyze and play around with. Think Kerbal Space Program or something.

    I did like Sim City a fair bit.


  • Looks like China’s got a pretty large lead, even relative to London.

    https://www.comparitech.com/vpn-privacy/the-worlds-most-surveilled-cities/

    The 10 most surveilled cities in the world – cameras per person

    Based on the number of cameras per 1,000 people, these cities are the top 10 most surveilled in the world:

    1. Cities of China* — 626m cameras to 1.43bn people = 439.07 cameras per 1,000 people

    2. Hyderabad, India — 900,000 cameras for 10,801,163 people = 83.32 cameras per 1,000 people

    3. Indore, India – 200,000 cameras per 3,302,077 people = 60.57 cameras per 1,000 people

    4. Delhi, India — 449,934 cameras for 22,547,000 people = 19.96 cameras per 1,000 people

    5. Singapore, Singapore — 109,072 cameras for 6,080,859 people = 17.94 cameras per 1,000 people

    6. Moscow, Russia — 214,000 cameras for 12,680,389 people = 16.88 cameras per 1,000 people

    7. Baghdad, Iraq — 120,000 cameras for 7,711,305 people = 15.56 cameras per 1,000 people

    8. Seoul, South Korea — 144,513 cameras for 9,988,049 people = 14.47 cameras per 1,000 people

    9. St. Petersburg, Russia — 75,000 cameras for 5,561,294 people = 13.49 cameras per 1,000 people

    10. London, England (UK) — 127,423 cameras for 9,648,110 people = 13.21 cameras per 1,000 people


  • To put it another way, when I first joined, it was to kbin.social. Kbin has a feature to help people discover new communities where it will suggest random comments. This leads to…rather dramatic cross-pollination. So, for example, I remember looking at a technology community on pawb.social. Some other random kbin.social user also showed up there, I’m sure via random comment, and was complaining that everyone in the forum was a furry. I mean…yeah, you just hopped right into the middle of their den. Same thing with yiffit.net and probably a number of other instances. Does that mean that the Threadiverse is all furries? Well, no. I’d say that it’s disproportionately so compared to Reddit, but it’s more that it’s got special-interest instances.

    Or transexual users on lemmy.blahaj.zone.

    Or porn enthusiasts on lemmynsfw.com.

    Or underage anime porn fans on burggit.moe.

    Or science enthusiasts on mander.xyz.

    Or Star Trek fans on startrek.website.

    Hop onto any of those or communities on those, and you’re likely to find a lot of content of the sort that the instance focuses on. But if your instance doesn’t federate with them, you may not see that material at all, nor the users on those instances.



  • I don’t think anyone has polls. There is a much higher far-left proportion than on Reddit, as things stand.

    Note that Reddit is one unified world, albeit with division by subreddit.

    The Threadiverse is not. Some instances have very different communities – some only permit certain types of users. And not all instances federate with each other, and if your instance doesn’t federate with another, you won’t see content from those instances.

    So, for example, lemmygrad.ml and to a lesser degree lemmy.ml has a bunch of people – including the lead Lemmy dev – who are enthusiastic about Stalin and the Soviet Union, pro-authoritarian-left. Hexbear.net is kinda out there too.

    Then you’ve got exploding-heads.com, which I believe is far-right.

    Lemmy.world is more-mainstream, but I’d certainly place it left of Reddit on average. It doesn’t federate with lemmygrad.ml and hexbear.net or exploding-heads.com.

    Beehaw.org is what I’d call far-left, but less in the authoritarian camp, but they’ve defederated from lemmy.world.

    You can see defederations on an instance under “Blocked instances” at /instances. So for example:

    https://lemmy.world/instances

    Most instances also say something about their policies in the right-hand sidebar.

    I think that some of it is also that some people are very vocal about their political views, and I think that some of those are disproportionately in the far-left camp. Like, if someone wants to vent that they think that society would be better off as an anarchy or that private ownership of industry or money or whatever shouldn’t exist, I think that those people are gonna be more likely to have strong feelings about and repeatedly post about their point of disagreement than someone saying “I think that things are going pretty well, but I’d like Tweak X and Y”.


  • Honestly, concerns over the possibility that religion might be a political opponent and trying to neutralize it by replacing figures with one’s own are not new.

    It’s just a little unusual to have it happening in 2024 between gods and secular leaders.

    https://en.wikipedia.org/wiki/Religious_syncretism

    Religious syncretism is the blending of religious belief systems into a new system, or the incorporation of other beliefs into an existing religious tradition.

    This can occur for many reasons, where religious traditions exist in proximity to each other, or when a culture is conquered and the conquerors bring their religious beliefs with them, but do not succeed in eradicating older beliefs and practices.



  • I mean, you can probably build a house that can reliably survive the conditions there. It’s just gonna be really expensive and may not look all that pretty.

    It’s gonna have to handle water up to a certain height and wind-blown debris smashing into it.

    Like, think of a lighthouse or flak tower or something.

    https://en.wikipedia.org/wiki/Lighthouse

    Sometimes a lighthouse needs to be constructed in the water itself. Wave-washed lighthouses are masonry structures constructed to withstand water impact, such as Eddystone Lighthouse in Britain and the St. George Reef Light of California. In shallower bays, Screw-pile lighthouse ironwork structures are screwed into the seabed and a low wooden structure is placed above the open framework, such as Thomas Point Shoal Lighthouse. As screw piles can be disrupted by ice, steel caisson lighthouses such as Orient Point Light are used in cold climates. Orient Long Beach Bar Light (Bug Light) is a blend of a screw pile light that was converted to a caisson light because of the threat of ice damage. Skeletal iron towers with screw-pile foundations were built on the Florida Reef along the Florida Keys, beginning with the Carysfort Reef Light in 1852.

    https://en.wikipedia.org/wiki/Flak_tower

    With concrete walls up to 3.5 m (11 ft) thick, their designers considered the towers to be invulnerable to attack by the standard ordnance carried by RAF heavy bombers at the time of their construction.

    The Soviets, in their assault on Berlin, found it difficult to inflict significant damage on the flak towers, even with some of the largest Soviet guns, such as the 203 mm M1931 howitzers.

    After the war, the demolition of the towers was often considered not feasible and many remain to this day, with some having been converted for alternative use.




  • But what Ms Salagaras and the dozens of others who purchased the cookies didn’t know was that their baked goods were five days old, purchased at a store in Hawaii by people unaffiliated with Crumbl Cookie (Crumbl), and flown back to Australia.

    Hmm. Setting aside trademark law, that sounds like a legitimate concern from a consumer standpoint. This “Crumbl Cookie” company presumably wouldn’t intentionally sell five-day-old baked goods under their brand, and as a consumer, I’d distinguish between fresh cookies and five-day-old cookies, even if five-day-old cookies are perfectly edible. Maybe there’s an argument for making it normal to also rate the maximum age of a given baked good – I don’t know if that’s mandated in the US, but bakeries I’ve seen normally distinguish between bagels and day-old bagels, for example.

    But setting legalities aside…I wonder how practical it would be to do something like this and get better output than these guys flying the things did?

    Most of the time, it probably makes sense to just bake whatever the thing is domestically. But it sounds like the issue here is that the demand is small in scale, not enough to support a domestic bakery:

    “I think the fact that our market is small here, means that there’s a lot of things that never get here,” said Ellen Garbarino, a professor in marketing at the University of Sydney’s Business School.

    According to Professor Garbarino, many international brands are unlikely to open permanent locations in Australia due to the required costs and expected return.

    “The cost of setting that up is pretty high, to get it into the shelves or to get a retail outlet and pay rent and get customers and get staff and all those kinds of things, and get over the laws of a different country.”

    So for Australia – and, hell, anyone to some degree – it might make sense to just try to do a better job of being able to ship stuff and keep it as fresh as possible.

    https://www.quora.com/What-chemical-reaction-causes-food-to-go-stale

    There isn’t a single well-defined meaning of “stale.” When we say bread is stale, we usually mean it’s hard. Interestingly, this is due to the bread absorbing water from the air (water usually softens things, doesn’t it?) If bread is slightly hardened, you may be able to restore some of its freshness by microwaving it. This will make it obviously moist, and you can then toast it. This is also a good procedure if you freeze bread, which we have to do in our household because otherwise we eat way too much :) It’s not like super-fresh bread, but I find it edible.

    Another meaning of “stale” is partially rotten or rancid. Rotting is generally due to bacterial growth. Rancidification is chemical oxidation of fats to fatty acids, which is why rancid butter tastes sour (acids are sour).

    I mean, there are ways that you can counter that. They will add cost to the item. But they’re doable.

    Like, you can make something not rot by irradiating it sufficiently and then sealing the food in a sterile environment.

    Storing them in a low-oxygen environment, like under carbon dioxide, can cut into oxidation (though I’m not sure that that’d help much for cookies if they use yeast to rise, since the yeast would require oxygen, though maybe they’re okay if you use baking soda to make them rise).

    You could control humidity in the transport container.

    https://discover.texasrealfood.com/food-shelf-life/oreos

    The shelf life of Oreos can depend on various factors, including the storage method and whether the package has been opened. A packet of Oreos typically comes with a “best before” date, which is usually set for 9 to 12 months after the manufacturing date. This date serves as a guideline for optimal freshness rather than a hard expiration date. When stored properly in a cool, dry place, unopened Oreos can retain their quality slightly beyond this date, while opened Oreos should be consumed within a shorter timeframe to enjoy their characteristic crunch and flavor.

    Oreos are designed to have a pretty impressive shelf life, as long as you don’t open the package. They’re very dry. The problem with these “Crumbl Cookie” things is trying to use a cookie that isn’t designed to have a shelf life but to get more of one. So you can’t alter the cookie, can’t add preservatives or something.

    But some of the processes I listed above don’t require modifying the original cookie.


  • Even if it doesn’t happen prior to some form of peace agreement or something…that’s an interesting thought. Like, any scenario where the conflict restarts would place Ukraine in a considerably more-favorable position militarily than is the case today. Today, simply by dint of weapons each has available, Russia has much more ability to attack Ukrainian territory than vice versa. But in the event of such a guarantee and Russia restarting conflict with Ukraine in some form, Russia wouldn’t be able to touch a lot of Ukraine’s territory without starting a conflict with NATO, but Ukraine would have a free hand to hit Russia’s territory, with whatever weapons it could obtain.


  • I’m not saying that that wouldn’t work, but that seems like an excessively-complicated bit of lawyering.

    If the goal is to provide NATO guarantees for part of Ukraine’s territory, but not to provide guarantees for another part of it, to counter Russia playing the “as long as I control part of your territory, you can’t join NATO” bit, the only thing that produces the guarantee is what’s on the paper of the NATO Treaty.

    That treaty text is not written in stone. As long as all the members – and this assumes that we can avoid excessive shennanigans of the sort that Hungary and Turkey did around Sweden and Finland joining – are okay with it, the treaty text can be revised to say whatever. Yeah, you need unanimity for any such revision, but you need unanimity anyway to add a member, so the bar is no different from having Ukraine join in any other way.

    NATO Treaty Article 6 defines the scope of Article 5 coverage.

    https://www.nato.int/cps/en/natohq/official_texts_17120.htm

    Article 6

    For the purpose of Article 5, an armed attack on one or more of the Parties is deemed to include an armed attack:

    • on the territory of any of the Parties in Europe or North America, on the Algerian Departments of France, on the territory of Turkey or on the Islands under the jurisdiction of any of the Parties in the North Atlantic area north of the Tropic of Cancer;
    • on the forces, vessels, or aircraft of any of the Parties, when in or over these territories or any other area in Europe in which occupation forces of any of the Parties were stationed on the date when the Treaty entered into force or the Mediterranean Sea or the North Atlantic area north of the Tropic of Cancer.

    In the original treaty, the bit about Turkey – much of Turkey’s territory is outside Europe – was not present. When Turkey joined, we did a small revision to extend NATO coverage – which originally did not cover territory outside of the Mediterranean, North Atlantic, Europe, and North America at all. Even today, the treaty does not guarantee against attacks on European territories like New Caledonia or American territories like Hawaii.

    Honestly, I think that there may be a very legitimate argument that given that Romania and Bulgaria joined – and this becomes even more-significant with a Ukrainian membership – that the scope of Article 6 should be extended to the Black Sea, as we did with Turkey when Turkey joined. Otherwise, it’s possible for Russia to perform a blockade on NATO Black Sea powers and sink their warships without them being able to avail themselves of NATO Article 5 protection.


  • Honestly, given a canine’s physical capabilities, I’m not sure that I could have done as well as she did in that situation.

    And for a dog, what had to have gone into that…

    • Assess that her owner was in trouble.

    • Assess that another human could help. I’m not sure that that’s an obvious conclusion for a dog to come to from an evolutionary standpoint. My guess is that most cases, in a pack of wild dogs, for most problems short of being attacked by something, there’s not a whole lot that bringing another dog to help is going to do, if one gets hurt.

    • She had to plan out in advance a way to get a human to do what she needed them to do.

    • Assess that disrupting traffic would be a way to get attention. That is, she had to have a model of the mental state of other humans sufficient to predict how they’d act in a situation that I doubt that she’d seen before.

    • Evade capture when someone tried to capture her.

    • And keep them interested enough to follow her to the cabin.








  • Tales-like

    I’ve been kind of out of the RPG loop for a while, probably not the best person to suggest, and haven’t played the series, but I’m thinking that if you could expand a bit on that, it might help provide suggestions…I mean, not clear to me what you’re looking for that’s specific to that relative to other RPGs. Similar setting? A long-running RPG series with many entries? The combat system (absent the real-time aspect)?

    You mention “depth of story”, so maybe something with a similar level of storytelling?