Lemmy shouldn’t have avatars, banners, or bios

  • 0 Posts
  • 39 Comments
Joined 1 year ago
cake
Cake day: July 3rd, 2023

help-circle
    • 7 felt like it was mine

    I remember that marketing campaign. Windows Vista had a shaky launch, because the hardware manufacturers hadn’t polished the Vista-compatible drivers yet. 6 months later, they had caught up, but people still had a bad taste from it.

    So when service pack 1 came out, Microsoft made a reskinned version of it and started an ad campaign with “customers” claiming “Windows 7 was my idea!” and the public ate it up.


  • Aa!@lemmy.worldtoTechnology@lemmy.worldAny LinkedIn alternatives?
    link
    fedilink
    English
    arrow-up
    9
    ·
    edit-2
    1 month ago

    I have such bad things to say about recruiters. They generally don’t have a clue about any of the skills related to the jobs I’m after, and they take a huge cut of the pay the entire time I’m working the job.

    On the other hand, the two best jobs (highest pay and best working environment) I’ve had in my career, I got through recruiters, so I acknowledge them as a useful business when it works out. The last one has led to the company buying my contract and hiring me directly for the past 12 years







  • In the 90s, the local Taco Bells in Portland had a menu item called “Mexi-nuggets” which were a Mexican spiced tater tot. In the combo meals, they filled the role of fries like you get in your burger combo (like the two tacos and Mexi-nugget combo)

    I was quite surprised to find out the stores in Washington didn’t sell them, and instead of Mexi-nuggets, the combos just had… Another taco.

    They were delicious, and I still think about them





  • Generally commercial drive encryption solutions, like Bitlocker, usually has a backup recovery key that can be used to access the encryption key if your TPM is reset, or if your device dies.

    So I guess the short answer is most of these solutions don’t fully protect it from being moved to another device, they just add another layer of security and hassle that makes it harder to do. And without the TPM as part of these solutions, you would be entering a 48-character passphrase every time you boot your device, which has several security flaws of its own.


  • Assuming you use bitlocker on your PC, how do you know the entire content of the TPM (your bitlocker encryption key, etc) cannot be fetched from the TPM by the manufacturer or any third parties they shared it tools and private keys with?

    The TPM specification is an open standard by the Trusted Computing Group, and there are certification organizations that will audit many of these products, so that’s a good place to begin.

    As with any of the hardware in your device, it does require some amount of trust in the manufacturers you have chosen. These same concerns would apply to anything from the onboard USB controllers to the CPU itself. There’s no way to be absolutely certain, but you can do your due diligence to get a reasonable level of confidence.

    And because it is hardware based, how do I as a user know that it does what it claims it does as I would with a software based encryption software that is open source (like truecrypt/veracrypt).

    This is a reasonable thing to think about, although very few individuals are qualified to understand and audit the source code of encryption software either, so in most cases you are still putting your faith in security organizations or the community to find issues.

    When it comes to security, it often comes with a trade-off. Hardware devices can achieve a level of security that software can’t completely reproduce, but they are a lot harder to audit and verify their integrity.

    In any case, the TPM is something that software solutions have to explicitly call in the first place, it isn’t something that activates itself and starts digging into your hard drive. Which means if you don’t want to use it in your security solution, then it will sit there and do nothing. You can keep using your encryption keys in clear memory, visible to any privileged software.

    I don’t know specifically about the XBox and how it uses it, but the TPM absolutely can be used as part of a DRM scheme. Since the TPM can be used to encrypt data with a key that can’t be exported, it could be part of a means to hinder copying of content. Of course this content still has to be decrypted into memory in order to be used, so people looking to defeat this DRM usually still can. DRM as a whole is often shown to be a pretty weak solution for copy protection, but companies won’t stop chasing it just the same.


  • Well I have good news for you, the TPM can’t do those things. The TPM is just a hardware module that stores cryptographic keys in a tamper-resistant chip, and can perform basic crypto functions.

    In of itself, it can’t be addressed remotely, but it is usually used as a component of a greater security scheme. For example, in full disk encryption, it can be used to ensure that disk can’t be decrypted on a different device.

    There’s been a lot of FUD surrounding TPMs, and it doesn’t help that the actual explanation of their function isn’t something easily described in a couple of sentences.

    There’s no reason to be afraid of a TPM, and for the privacy-minded and security-conscious, it can even be used as part of a greater security scheme for your device and its data.

    Of course at the same time, it’s not a feature most home users would make full use of, and as for not liking Windows, carry on. There’s plenty of reasons to avoid it if those things are important to you



  • This is why I don’t think the Lemmy platforms will really grow to Reddit size until we solve this problem. Most folks don’t want to curate their own feed when they first explore a social media platform. That usually comes later after they’ve been drawn in.

    What Lemmy and kbin could really use is a set of default subscriptions that are curated by instance admins to provide the best new user experience.

    For that matter, default block lists wouldn’t be so bad either


  • Aa!@lemmy.worldtoAsk Lemmy@lemmy.world*Permanently Deleted*
    link
    fedilink
    arrow-up
    1
    ·
    edit-2
    7 months ago

    Probably the movie, if you plan to watch both. It’s very good, and I love Terry Gilliam as a director. But while it still holds up, it’s certainly a little bit dated.

    But I would stress again, don’t watch the show as something related to the movie. They have completely different stories, messages, styles, and emotional impacts.


  • Aa!@lemmy.worldtoAsk Lemmy@lemmy.world*Permanently Deleted*
    link
    fedilink
    arrow-up
    4
    ·
    edit-2
    7 months ago

    If that makes a difference to you, the show was written and pitched as its own thing. The network had them turn it into a 12 Monkeys thing because some of the themes were familiar (using time travel to try to stop a virus that nearly wipes out humanity), and the movie was so good

    If you ignore the association with the movie, the show and characters stand really well on it’s own, despite reusing some names you may recognize

    The show did a fantastic job of coming back around to all the mysteries, in some cases taking all four seasons to get there. I echo the parent post, this show does time travel better than any other show I’ve seen.



  • Consider your specific audience you are reaching out to.

    Honestly the biggest barrier for entry into the Lemmy content isn’t choosing an instance. You can easily tell someone to sign up for Lemmy.world or kbin.social without going into detail about what that means.

    The issue is that most social media users don’t want to spend an hour or two searching for communities and blocking bots. They want a feed that is appealing at first, that they can tweak incrementally as they get more familiar with the service and its content.

    With that in mind, what people want is to know what makes the experience helpful to them right now. I think that boils down to two primary concepts: Draw people in to specific communities that are more accessible than their Reddit counterparts, or convince them why Reddit is not a good experience for them

    The latter is a tough sell to someone who already is happy with the Reddit experience. And the trouble with the former is there’s currently not a great deal of communities that are clearly better than on Reddit. The few that I would say count are fairly niche interests.

    I think the Lemmy and kbin software needs a set of default subscriptions for guests and new users. Something curated by instance admins to provide the best new user experience, while still allowing them to customize it from there.

    For what it’s worth, I would expect most social media users not to care about any of the decentralization aspects. Putting too much focus on the “it’s like email” thing is likely to fall on deaf ears at first.