• 4 Posts
  • 52 Comments
Joined 7 months ago
cake
Cake day: December 9th, 2024

help-circle






  • I feel like its a mixed bag. Certainly there’s an infinitely higher chance of someone randomly noticing a backdoor in OSS than in closed source simply because any OSS project in use has someone looking at it. Many closed systems have dusty corners that haven’t had programmer eyes on them in years.

    But also, modern dev requires either more vigilance than most of us have to give or more trust than most of us would ideally be comfortable offering. Forget leftpad, I’ve had npm dependencies run a full python script to compile and build sub dependencies. Every time I run npm update, it could be mining a couple of bitcoins for all I know in addition to installing gigs and gigs of other people’s code.

    The whole industry had deep talks after leftpadgate about what needed to be done and ultimately, not much changed. NPM changed policy so that people couldn’t just dissapear their packages. But we didn’t come up with some better way.

    Pretty much every language has its own NPM now, the problem is more widespread than ever. With Rust, it can run arbitrary macros and rust code in the build files, it can embed C dependencies. I’m not saying it would be super easy to hide something in cargo, i haven’t tried so I don’t know, but i do think the build system is incredibly vulnerable to supply chain attacks. A dependency chain could easily pull in some backdoor native code, embed it deep into your app, and you might never realize it’s even there.





  • I doubt they’ll get anywhere with weak action like that. “Stop forcing copilot on us or we’ll be very sad and we’ll strongly consider moving some of our hosting to another site.”

    GitHub is a disaster for open source software. MS controls some insane amount of all the code created on earth, and even with self-hosted forges being more prolific and easier to access than ever, people act like their projects can’t live without Big Daddy MS’s social media for coders.

    I saw someone the other day, on Lemmy and in full seriousness, proclaim that the world really needed distributed version control. To avoid censorship, like how the fediverse is decentralized.

    This is what GitHub has done to a generation of programmers. For those missing the joke, git is already decentralized. You don’t need a central Hub of some kind for your code. You do for your issues, releases, and all that, but not for the code. And if we’d collectively moved to a well designed, intentionally improved system like Fossil, all that woukd have been decentralized and distributed too.

    But no, easier and more efficient/profitable to keep using the one C library that’s compatible with Torvald’s pile of old Perl scripts. My website can’t live without a built in Travis CI bot and nonstop PRs from dependency bot, but allowing every moron on earth to submit AI generated content, at last we’ve found the step too far.



  • A pretty large amount of people don’t own a PC at all, though I’m finding it surprisingly hard to get a good number on it. Just anecdotally, most people I know who aren’t IT professionals have either no PC or 1 old laptop, often from college or on loan from work. Most folks use their phones for everything. People I know with kids have school issued Chromebooks, which barely counts.

    As to exact numbers, I’m curious what others can find. I turned up between 74% and 94% of adults in the US owned a PC, which seems insanely high to me. But on the same page claiming that 89% of all households have a PC, I also saw

    In the United States, the number of households with computers is projected to surge from 4.7 million to 120.45 million between 2024 and 2029, indicating a substantial increase in computer ownership.

    Which… That’s bonkers. They expect the number of PCs (in homes) to go up by a factor of 30 in just 5 years, presumably that guess was before tariffs as well. I’m wondering if these household and per capita numbers somehow include corporate spending because businesses and schools do purchase literal tons of computers.



  • Objects don’t “have” colors either, if we’re being pedantic. They reflect/absorb/transmit/emit different combinations of wavelengths. So “pink” objects just reflect some wavelengths that we classify as in the range of “red” and “blue”. Color is an interaction between emission, detection, and the brain’s interpretation.

    Its not even a unique trick. The ears combine various wavelengths of air vibrations to create sound, with combinations of pure waves merging into distinct timbres (sometimes called “tonal color”).


  • From the GitHub:

    Now playable (previously worked with Proton Experimental):
        Batman: Arkham Asylum Game of the Year Edition
        Black Ink
        Factorio
        Ignited Entry
        Microsoft Flight Simulator 2024
        MySims Kingdom
        No Man's Sky in VR mode (regressed after a game update)
        Rising Storm 2: Vietnam
        Sniper Elite: Nazi Zombie Army
        Soul Interface
        THE KING OF FIGHTERS XIII GLOBAL MATCH
        VIDEO GAME (924310)
        Willful
        X Rebirth VR Edition
    Fixed / improved video playback in:
        Agony Unrated
        All-Star Fruit Racing
        Audiosurf
        Bloodstained: Ritual of the Night
        Gal*Gun 2
        Greedfall
        Indigo Park: Chapter 1
        Omensight
        SOULCALIBUR VI
        TELEFORUM
        Tintin Reporter - Cigars of the Pharaoh
        Zero Escape: The Nonary Games
    
    The rest of the update
    Reinstated hack from Proton 7 that helped with SpellForce: Platinum Edition, NieR: Automata, Sekiro: Shadows Die Twice and DARK SOULS III crashing with monitors exposing too many possible resolutions.
    Improved performance in Dirt Rally 2.0.
    Fixed Final Fantasy XVI demo displaying driver warning on launch.
    Fixed Grand Theft Auto V Enhanced launcher hang and the game crashing on launch as well as not being possible to uninstall it via Steam.
    Fixed XCOM 2 erroring out when trying to connect to my2K.
    Fixed network issues in Hunt: Showdown 1896 after a game update.
    Fixed Rivals of Aether II, Stalker 2, The Axis Unseen, Beyond Handwell, Marvel Rivals, The Finals, Creatures of Ava crashing with Intel GPUs.
    Added support for game mods that load via custom dinput8.dll.
    Fixed input not working with Studio System : Guardian Angel.
    Fixed cursor not working in the menu of Amerzone: The Explorer's Legacy (1999).
    Fixed Deviator crashing with AMD GPUs shortly after launching.
    Fixed Warhammer: Vermintide 2 showing prerequisite installer on every launch.
    Re-enabled nvapi for Neverwinter, Star Trek Online and Champions Online.
    Fixed full screen mode in The Bright Star Of Seraph-Katis.
    Improved situation with audio crackling in Assassin’s Creed Shadows on Steam Deck.
    Improved reliability of Proton Prefix creation.
    Fixed Supermarket Together not detecting DLC on some systems.
    Fixed extras video playback in Shadow Warrior 2.
    Fixed VR mode in Evochron Legacy SE.
    Fixed non-Steam Battle.net installations.
    Fixed Sea of Thieves Xbox login window not working.
    Fixed graphics scaling in Master Magistrate.
    Fixed interface elements in Disney Epic Mickey 2: The Power of Two showing as solid green color.
    Included initial work on speech synthesis - requires manual installation of Proton Voice Files (steam://install/3086180), confirmed to work with The Thief, the Witch, the Toad, and the Mushroom.
    Fixed video playback in Twisted Sails.
    Improved video playback in Max: The Curse of Brotherhood.
    Added hack to allow Steam Overlay to function with EAC EOS games.
    Fixed CPU topology override issues on machines with more than 32 logical cores.
    Fixed Proton sometimes creating an empty window when running via XWayland.
    Fixed Marvel Rivals displaying OS/drivers out of date warning.
    Fixed desync issue with 60FPS AVPro videos in VRChat.
    Fixed intermittent freezing in Spirit Hunter: NG.
    Fixed The Finals crashing after a recent game update.
    Improved Ubisoft Connect behavior when switching between Proton versions.
    Improved video playback in Locoland on NVIDIA GPUs.
    Improved video playback in Microsoft Flight Simulator.
    Fixed Tiny Cauldron freezing when selecting some resolutions.
    Fixed various crashes affecting Final Fantasy XIV launcher.
    Fixed broken account creation in Final Fantasy XIV.
    Fixed Nioh: Complete Edition hanging on a black screen when skipping videos.
    Fixed Killsquad freezing on character selection screen.
    Fixed Dread X Collection 3 Bete Grise minigame.
    Fixed video playback in ATRI - My Dear Moments-.
    Fixed Dark and Darker not being playable after a game update.
    Updated libvkd3d-shader to vkd3d-1.15-179-g21e08955d3c3.
    Updated dxvk to v2.6.1.
    Updated dxvk-nvapi to v0.9.0.
    Updated vkd3d-proton to v2.14.1-153-ga7159b80e165.
    Updated wine-mono to 9.4.0.
    Updated Xalia to 0.4.5 and enabled it for The TakeOver, Floppy Heroes, Whiskered Away, Himno, Survirus, The Adventure of Ninomae Ina'nis.
    Rebased Wine on top of wine-10.0.
    Added Steamworks SDK 1.62 support.
    

  • Further, “Whether another user actually downloaded the content that Meta made available” through torrenting “is irrelevant,” the authors alleged. “Meta ‘reproduced’ the works as soon as it made them available to other peers.”

    A “peer” in bittorrent is someone else who is downloading the same file as you. This is opposed to a “seeder” which is also a peer but is only sending data, no longer receiving.

    You don’t have to finish the file to share it though, that’s a major part of bittorrent. Each peer shares parts of the files that they’ve partially downloaded already. So Meta didn’t need to finish and share the whole file to have technically shared some parts of copyrighted works. Unless they just had uploading completely disabled, but they still “reproduced” those works by vectorizing them into an LLM. If Gemini can reproduce a copyrighted work “from memory” then that still counts.

    Now, to be clear, fuck Meta but also fuck this argument. By the same logic, almost any computer on the internet is guilty of copyright infringement. Proxy servers, VPNs, basically any compute that routed those packets temporarily had (or still has for caches, logs, etc) copies of that protected data.

    I don’t think copyrights and open global networks are compatible concepts in the long run. I wonder which the ruling class will destroy first? (Spoilers, how “open” is the internet anymore?)