Salamander

  • 43 Posts
  • 398 Comments
Joined 4 years ago
cake
Cake day: December 19th, 2021

help-circle

  • Thanks a lot for the examples! I have been looking through these, and, as far as I can tell:

    1. In SSL stripping, the site would appear to your client as HTTP, not HTTPS. If that’s the case, I think SSL stripping is blocked when using ‘HTTPS-Only’ mode
    2. For DNS spoofing, the visited site would show up as insecure because they would not be able to generate a valid certificate for the target website

    I still have not had the chance to look into leaky metadata. But, generally, I think metadata issues can in part be addressed by not generating much metadata.

    Probably the biggest vulnerability is the captive portal. There is no way to verify you’re connecting to an official Starbucks router. I think that when connecting to a public router it is wise to assume that it is malicious.



  • By hand. We are only two people, and we usually clean after we cook/eat. When one is cleaning only 2 plates + a pot/pan at a time, it is easy to use little water. Spray of soap, metal scrub, sponge scrub, and then turn the tap on to rinse for a few seconds. Utensils get individually scrubbed and then all rinsed together for a few seconds.

    Maybe when we have kids a dish washer will make sense.




  • I would take a portable CD player, place a CD with Rick Astley’s Never Gonna Give You Up on it playing backwards, hook up solar panels, remove the ability to shut it on/off, and set it up a circuit that will:

    • As the device solar charges, keep it off until some voltage threshold is exceeded
    • Once the voltage is high enough, start a random timer (8 - 100 hours), so that it is not immediately obvious that the sun activated the device
    • When the timer ends, turn the music on on repeat mode
    • Sometimes turn the music off at random, and then turn it on again at random after a long delay, so that in some cases you can have turn ‘ON’ events without the device being exposed to the sun
    • When the voltage drops below a low threshold, turn the device off until it is charged again

  • I speak spanish natively and at during uni I would hang out with a group of Brazillian friends. I would speak a mixture of portuguese and spanish with them.

    The mom of one of these friends made a Brazilian dish for us (Feijoada) and asked me how it was as it was the first time I tried it. I answered that the dish as ‘exquisito’, which in Spanish means delicious (similar ‘exquisite’). She seemed somewhat disappointed and upset by my response so I probed a little and found out that ‘esquisito’ in Portuguese actually means ‘weird’. She thought I was calling her dish weird tasting. I found quickly enough to clarify, but I did feel bad about making her fell that way… She was very excited about sharing her cooking and she thought I called it weird.




  • The use-cases that I see advertised are not things that I do in my day-to-day. I usually place my phone on a drawer or leave it in my backpack - I definitely don’t want it on my face.

    So, to me, smart glasses feel like an uncomfortable gimmick at this point. Maybe there is something amazing about them that has not yet clicked with me, but for the time being I don’t see me buying one of these for the foreseeable future.


  • I also did not know of him at all. I did know who Ben Shapiro is. This week has been an educational one: I have learned about Nick Fuentes and ‘groypers’, Candace Owens, and that the change my mind meme guy is called Steven Crowder (I first thought it was this guy when I saw the video of Kirk).

    The US political commentator that I do watch some times is Hasan, but not too often. The US lore goes too deep and moves too quickly, hard to keep up.


  • It always surprises me when ppl don’t know about torrents. They were the only way to get things before streaming services privatized all this content, and still remain better, by using the latest encodings and quality formats for media.

    I did know enough about torrents to do practically use them to download things since the Limewire/Ares times. But what I meant is that I never actually knew how they work at a technical level - I never opened a torrent file and looked inside, or knew what a magnet link was. So, then, the topic as a whole is still opaque to me. But I did some reading today and I’m getting into it.

    So new content would be no different than the thousands of people seeding existing content.

    I see it, but I also see why this concept might be intimidating to some. I (and probably many others) make use of torrents in rare occasion when I cannot find a movie, a series, or want an album. I associate torrenting with acquiring a large file for long term storage. Streaming feels different - videos exist in my computer only while I need them, and then they leave no trace. As I understand it, a torrent-based system would actually download all (or some) videos to disk to be able to seed them.

    Still, I do think that a youtube-like torrent-based client would be successful - especially if implemented in a way that is simple for the user. An interface to find content, transparent and adjustable torrent settings with control over disk space allocation, and the torrents/magnet link management mostly hidden from the user.



  • Thanks. I don’t know much about torrenting other, and I never looked into the concept of what Magnet links are.

    It is actually very interesting! Such an elegant and simple solution.

    And I think it is even simpler than what the instructions imply… I can write the following into the terminal:

    transmission-cli "magnet:?xt=urn:btih:563cf8f2a0bdd5564ae9ef3d3302eecef639328b"
    

    And that’s enough to pull the first episode of alien earth that you shared. That unique hash is all it takes to search for seeders. Very cool.

    It is still not obvious to me who would seed when implementing the torrent-based YouTube alternative. Would it make sense that users set some torrenting ratio, a file lifetime, and a size limit, and ‘collect’ videos as they watch them so that they can seed for other users?

    All that’s needed is for people to learn how to seed their own videos, and post magnet links around.

    I’m in! Looking into it. Now I need to go make something worth sharing.



  • Some of these ‘games’ do trigger real physiological mechanisms. A well-documented example is the Valsalva maneuver, where forcefully exhaling against a closed mouth and nose affects heart rate and blood pressure.

    In some games, this maneuver (or similar) is combined with a second action that normally increases blood flow demand to the brain. The mismatch between reduced blood pressure and sudden demand can cause dizziness or brief loss of consciousness due to insufficient oxygen reaching the brain.

    Actually, there is a similar effect sometimes seen during heavy deadlifts, suddenly releasing can sometimes make people pass out. There are many “deadlift passing out” videos online.

    So, those ‘games’ can work. I have known of kids breaking their teeth after face-planting against the floor while playing those games. Not a very smart thing to do.


  • If you catch a frog in between your hands and quickly flip it around, you can get the frog into a kind of paralyzed state called ‘tonic immobility’.

    Here is a photo from Wikipedia:

    Frog stuck in tonic immobility

    OK, well, many years ago I was very interested in this phenomenon and decided to look into the literature.

    I found a paper from 1928 titled “On The Mechanism of Tonic Immobility in Vertebrates” written by Hudson Hoagland (PDF link).

    In this paper, the author describes contraptions he used to analyze the small movement (or lack of movement) in animals while in this state. They look kind of like torture devices:

    OK, but, that’s still not it… The obscure fact is found in the first footnote of that paper, on page #2:

    Tonic immobility or a state akin to it has been described in children by Pieron
(1913). I have recently been able to produce the condition in adult human beings.
The technique was brought to my attention by a student in physiology, Mr. W. I.
Gregg, who after hearing a lecture on tonic immobility suggested that a state
produced by the following form of manhandling which he had seen exhibited as a
sort of trick might be essentially the same thing. If one bends forward from the
waist through an angle of 90°, places the hands on the abdomen, and after taking a
deep breath is violently thrown backwards through 180° by a man on either side,
the skeletal muscles contract vigorously and a state of pronounced immobility
lasting for some seconds may result. The condition is striking and of especial
interest since this type of manipulation (sudden turning into a dorsal position) is
the most common one used for producing tonic immobility in vertebrates.

    Apparently this or a similar effect can be observed in humans too?! In this paper, the author himself claims to have done this and that it works! I tried to locate more recent resources describing this phenomenon in humans but I could not find them… Is this actually possible? If so, why is this not better documented? Or, maybe it is better documented but understood as a different type of reflex today? Not sure.


  • That’s a very interesting resource!

    Actually, the countries where I have been able to purchase anonymous SIM cards are in the list “As of 2021, the following countries do not have mandatory SIM card registration laws”. So, it appears like I just happen to have been lucky and I should not make this as such a general recommendation…

    Funny, about Mexico it says:

    Countries expected to implement mandatory SIM registration in 2022: Philippines, Mexico.

    I can at least confirm that I was not asked for ID when buying SIM cards last year in Mexico.

    I just looked it up and found the proposed law for Mexico on Wikipedia. It was struck down in 2022 as unconstitutional.

    So, then, I really have no anecdotes to say that it is easy in places where it is formally illegal.


  • I am not sure about France. When I search online, I often find resources stating “Yes, ID is required”, even for the countries where I know that I have bought SIM cards with cash. Well, the SIM is usually free and what I pay for is the top-up code.

    I would imagine (but I’m not sure) that if you try to buy a SIM card at an airport or at an official store from a large telephony provider you are more likely to get asked for an ID. I find them in shops that have signs with the names of smaller MVNOs. Something like what is shown in this image that I found online, where you can see signs of ‘Lyca Mobile’ and ‘Lebara’:

    But, your mileage may vary. Probably some locations are more strict than others.