• 1 Post
  • 34 Comments
Joined 9 months ago
cake
Cake day: December 27th, 2023

help-circle

  • smb@lemmy.mltoAndroid@lemdro.idSearching for exact app names in the Play Store
    link
    fedilink
    English
    arrow-up
    9
    arrow-down
    2
    ·
    edit-2
    22 days ago

    ads with install buttons always are traps. and traps are always bad (except snmp traps, those are good but unreliable)

    same way ads at download pages stating “proceed to download” are traps.

    also ads at search result pages stating " 1 2 3 4 … next" are traps too.

    for the “sponsored” note: there is no boundary here that makes it really clear for what that ‘sponsored’ is meant for. without any boundary it could be for something above it, below it, on the side or maybe even something that opens when you click on “sponsored” itself (seen it this way once). it could be for an ad that just failed to load (noticed the free space above that “sponsored” text? maybe the ad loads a bit later just to shift the real contents down so you “accidently” click on the ad that loads intentionally late for this very accident to be likely to happen?) if you use adblockers - which you should do for security reasons anyway - then you’ll see “sponsored” or “advertising” often even without the ad it was meant for after full load of the page. so a single “sponsored” without a clear boundary showing what would be that sponsored content, does not state anything to be an ad, it is purely meaningless and the lack of such boundary always is intentional to distract the user from what he wanted and trap him somehow.

    a clear thumbs-down for ‘zoho assist’ from me here just for paying for (or trying out for free or such) such an advertising type.

    And in most cases ads simply beeing ads are traps too. by the very concept of ads.

    around 80 % of all things i actually still wanted after i bought them were recommendations by people i met in person. 15 % are things recommended by real persons i met on the internet. around 5% are things i bought without it beeing recommded by anyone (not even an ad) things i still wanted after i bought it due to an ad are nearly not existant. ok, i have stopped viewing television in 1997, have a sticker at my postbox that forbids to throw ads in (works where i live), use dns entries to remove most ads in my network, use browsers/extension that remove most crapjunkwastelitterrubbishads and skip webpages that still show too many ads or too offensive cookieterrorbanners. i use google search only sometimes for comparison of results, but near to zero for actual searching. i feel safe to say i am not that much distracted by ads. (however open source projects and authors do get money from me on a monthly basis, where i want to support them, either direct lly sent from my bank account or indirect).

    for me personally an ad just saying “you might like this” drives me away from that product, if it needs or wants an ad, i don’t want it, even more so the more it states how difficult and horrible my life would be without the product or how easy it’ll be with it, go away ad-needing products, get recommended personally by those who actually use it, not by those who want to sell it. period. there is no better ad than true recommendation and its also free, no marketing monkey needs to get payed for bs, only an actually good product is needed… and there we go what types of products actually need ads…

    once in my life i discovered a product that i first explicitly not bought for a decade because of the awful ad for it, but bought it another decade later by an absentminded accident and found it to be a good product despite its awful ad. then they increased packaging/reduced the product within to cover up a price increase in trade of more waste production, so i abandoned that product again and found something cheaper more eco friendly instead, yes, the cheaper one is really not as good, but i feel better with it and especially less betrayed by the vendor, so the eco one is the better one alltogether. and also i think its better to buy products where you don’t see ads for cause this behaviour could actually fix this advertising storm in the long run, so in this way its the better choice to buy products that don’t have ads for it.

    again:

    An ad with an install button is always a trap, even more so when the real install follows a single misclick on it. il’d say it would be quite fair to downvote/zerostars an app for how foulish-sneaky it was positioned in the search results if it is shown like an actual result with a f’ing install button. as its advertising type is always also part of the brand and the product itself. maybe make a sports out of that, klick the clickbait install buttons only to downvote the app for beeing intrusive and deinstall it again without even starting the app once, just to train advertisers to do it right instead of wrong next time. maybe. but for security reasons better don’t do that (at least not with a device with sensitive data on it)

    please do not blame users to fall for ads. advertising industry now had centuries to learn to trap users and literally thousands or millions of marketing guys, designers, psycologists, neurologists or whatever only to learn and establish new abusive ways to distract and trap users. but a user only has his own lifespan to counteract that and learn to avoid those manipulations, and he also has to do other important stuff in his life too.

    please don’t blame users for beeing humans. blame the industry where they are intentionally abusive, inhumane and/or counterproductive.


  • What’s the alternative to ads, though? Not everyone wants to (or can afford to) pay for every site they use.

    its not about paying for the site a user uses, its about paying those who run the site (and less to pay for someone only “managing” the site by doing actually nothing)

    maybe these could be alternatives:

    • patreon
    • flattr
    • micropayment in general
    • donations (somafm runs on donations)
    • link to shopping platforms (musicians on somafm mostly have links to the songs on amazon that you see while playing the song for free)
    • communities, like FSF, local groups
    • some small payed supporter part (like lwn.net) while the important stuff that makes the win-win of the site is free to use
    • maybe the list from this page can help too: https://kinsta.com/de/blog/patreon-alternativen/ Kickstarter Indiegogo Podia Sellfy Buy Me a Coffee Memberful Hypage Ko-fi Substack Kajabi Gumroad WooCommerce Mighty Networks MemberPress Uscreen

    maybe even a combination of multiple of those *whoa!!! mindblow!!! could be a good choice to allow usersvto choose how to contribute.

    so really only choosing to offer exactly one option that also puts all users at a real risk of real attacks where they can get ripped off of all or lots of their real money and data for the sake if earning 0.003 ¢ per each putting them at high risk is not really what should be done, or do you personally profit from their users high risk and are thus completely okay with it? hope not.

    if you have to earn money with your project or whatever, why not offer several options to choose from? why only one? and while we’re at it, offering an ad-free “membership” for 400 times the price of what they would earn by the same visitor with ads like they try here sometimes, does not make any platform look good, but the opposite.

    there are many platforms that i would pay for monthly and i would spend much more money alltogether than now on that if their price would not be artificially pushed into astronomically heights per service…

    there is one project where i do donate each month a little bit via recurring bank transfer since years. my transfer says the name of the project and “donation” thats pretty easy to setup for both sides, but too complicated for those who pay designers money so they can place the ad layers on top of the 400 other layers of spypixels and navigation controls… really ? lol*

    if those you are talking about cannot afford to have a bank account for some reason, i guess they also cannot receive the revenue of ads on their webpages ;+)

    saying there are no alternatives to ads is rather a candidate for the lamest excuse award ;-)


  • its not just ads and malware, and its not only about beeing sorry for them. ads are also manipulating how people think. not only the obvious things like “that product is good”, but also that products in general would help (with problems you didn’t have). and the format itself of ads (even without considering its contents) already has a changing effects on the minds of those who watch it. i am thinking of some parts of neil postmans thoughts about television back then and i guess there is plenty of possibilities to make a realistic conspiracy theory out of it why exactly the most poisonous parts of television are replicated to the internet with massive force even though everyone ignores ads in the net. i like theories

    unfortunately, feeling sorry for them does not help society to stability. 😥


  • you should definitely know what type of authentication you use (my opinion) !! the agent can hold the key forever, so if you are just not asked again when connecting once more, thats what the agent is for. however its only in ram, so stopping the process or rebooting ends that of course. if you didn’t reboot meanwhile maybe try unload all keys from it (ssh-add -D, ssh-add -L) and see what the next login is like.

    btw: i use ControlMaster /ControlPath (with timeouts) to even reduce the number of passwordless logins and speed things up when running scripts or things like ansible, monitoring via ssh etc. then everything goes through the already open channel and no authentication is needed for the second thing any more, it gets really fast then.



  • ok, not sure, but…

    • its billionaires…
    • they tried to put additional sand there to “protect” their luxury vacation homes they had literally “build on sand” and damage wildlife while they go, but were stopped by a court ruling
    • now one of them accusing another of “stealing sand” and sues him to put “the stolen sand back”, so he can be forced by court to put sand there. and maybe more than he ever “stole”.
    • it sounds like only lies is what they have
    • its only billionaires, nothing good comes from them.

    maybe the court should rule that he has to put sand there personally by his own hands (no tech other than a bucket is allowed) that he has to carry without machinery, cars or anything from at least 5km away until his neigbour is fine with the situation. if the neighbour is fine quite quickly, the court should fine that neighbour due to abusing the court with false claims. if not, that sandy billionaire still can fine his neigbour to help him. maybe…

    but anyway that situation stinks.



  • The whole point of ssh-agent is to remember your passphrase.

    replace passphrase with private key and you’re very correct.

    passphrases used to login to servers using PasswordAuthentication are not stored in the agent. i might be wrong with technical details on how the private key is actually stored in RAM by the agent, but in the context of ssh passphrases that could be directly used for login to servers, saying the agent stores passphrases is at least a bit misleading.

    what you want is:

    • use Key authentication, not passwords
    • disable passwordauthentication on the server when you have setup and secured (some sort of backup) ssh access with keys instead of passwords.
    • if you always want to provide a short password for login, then don’t use an agent, i.e. unset that environment variable and check ssh_config
    • give your private key a password that fits your needs (average time it shoulf take attackers to guess that password vs your time you need overall to exchange the pubkey on all your servers)
    • change the privatekey every time immediately after someone might have had access to the password protected privkey file
    • do not give others access to your account on your pc to not have to change your private key too often.

    also an idea:

    • use a token that stores the private key AND is PIN protected as in it would lock itself upon a few tries with a wrong pin. this way the “password” needed to enter for logins can be minimal while at the same time protecting the private key from beeing copied. but even then one should not let others have access to the same machine (of course not as root) or account (as user, but better not at all) as an unlocked token could also possibly be used to place a second attacker provided key on the server you wanted to protect.

    all depends on the level of security you want to achieve. additional TOTP could improve security too (but beware that some authenticator providers might have “sharing” features which could compromise the TOTP token even before its first use.


  • My theory is that you already have something providing ssh agent service

    in the past some xserver environments started an ssh-agent for you just in case of, and for some reason i don’t remember that was annoying and i disabled it to start my agent in my shell environment as i wanted it.

    also a possibility is tharlt there are other agents like the gpg-agent that afaik also handles ssh keys.

    but i would also look into $HOME/.ssh/config if there was something configured that matches the hostname, ip, or with wildcards* parts of it, that could interfere with key selection as the .ssh/id_rsa key should IMHO always be tried if key auth is possible and no (matching) key is known to the ssh process, that is unless there already is something configured…

    not sure if a system-wide /etc/ssh/ssh_config would interfere there too, maybe have a look there too. as this behaviour seems a bit unexpected if not configured specially to do so.




  • Cold fusion is right around the corner!

    i thought they’re already at “triple cold² fusion++” ;-)

    yet these are never make it to market.

    my personal favorite (but not a battery) were two different fake news about fans without any moving parts, one with electricity, conductors and shapes only, the other using ultrasonic somehow, how cool were these lies !!!

    https://www.itnews.com.au/news/silent-microchip-fan-has-no-moving-parts-106236

    “RSD5 is the culmination of six years of research by Dan Schlitz and Vishal Singhal of Thorrn Micro Technologies”

    “Six years of research”, such a cool “product” and now that linked thorrn domain is for sale, how bad!! the world will never profit from their super “cool” invention !!!

    “today” other bladeless fans (based on ultrasonic freqs) were anounced: https://linustechtips.com/topic/1471374-not-a-big-fan-new-solid-state-cooler-can-blow-air-with-no-moving-parts/ (“Frore is expecting to start shipping units in Q1 of next year.” which was news from 2022) but did you hear about that cool product beeing shipped yet? i would have, i’m somehow sure, but somehow i didn’t. maybe the “units” they wanted to ship were just something else *lol That article also says: “Frore Systems hasn’t announced any actual computers featuring its Airjet solid-state coolers. But the company is already in partnership with the likes of Intel […]” no actual result, but already partners like intel (intel, how does’nt that already fit !!)

    The same nonexisting effect (fan without moving parts), abused (at least) twice. (i’ll just ignore those “bladeless fans” here that officially just have hidden “propellers”) but military says “twice” is already a scheme…

    why should it be different for batteries?

    if they produce batteries THAT good, they would never sell them but make them available only for rent, to maximise their(!) ROI (and not yours). so i guess it’s yafn - yet another fake news. i might still be wrong however, but i also like to be on the safe side of predictions ;-)

    a theory: the richies offsprings startups desperately need other lies than their parents and grandparents who already used up nearly all language-allowed possible lies (as well as nonverbal lies, just watch tv for a while to see it in action) to distract people, companies and govs to ‘invest’ in them instead of i.e. in the future or in the nation, thus new nonexistant technologies is what the richies offspring found best to be their lies about.


  • like i said:

    maybe the root-cause is […] the total lack of any consequences

    but you used much more words ;-)

    “publicly traded” does not imply that consequences would be impossible.

    i see the opposite is true.

    one could make that “public trade” also “very” public as in ownerships could only be changed together with a public note of who that new owner of that share is in person and only like not allow ownership changes more than twice a week per person, making investment more profitable than parasitic high performance trade. also the current lack of consequences could be improved by making the shareholders personally responsible for everything that the company does, including going to jail when the ceo left the country to not go there.

    that could include making those responsible who owned that company at the time of its crime, making trust in the company way more important than that they can cause damage to society in macroscope just to profit in microscopical bits.

    this way the shareholders would have a at least one trigger to actually want to look into who that bullshittalker is they want to let into such a position of “their property”

    society should take care who they let do things with “their property” too.


  • i believe such happens only bcs society lets people into such positions without checking them to be fit in any way for anything except them having a bank account for receiving millions and a lawyer to check contracts and tell them what they should not say in public and receive parts of these millions in return for changing their customers “pampers”.

    or maybe that brainfart was just part of a trip on randomly mind altering illegal substances? or maybe a brain tumor? or maybe a brain parasite? or maybe a parasite brain? or maybe just normal capitalism? or maybe a tumor that grows in society?

    i guess we will never know for sure.


  • apple also killed productivity *lol but that has nothing to do with blackburied or … *who the f is intel?

    server: arm handy: arm desktop: amd laptop: amd

    and happy with it, left intel 20years ago for at that time already obvious reasons why other companies products are better.

    work notebook: impediment with a bitten fruit logo on it. i am very unhappy with its lack of stability/deterministic behaviour on even veery low basic things, and guess what, it also has an intel cpu… yeah (f**k), i unwillingly try to use that intel crap for work.

    apple might have killed intel, but got infested with releasing crappy products on that path. what a gain!!! 🤦‍♀️

    i’ld rather let a zombie go on walking than getting zombiefied while trying to stop it… but tbh its “only work” that is slowed down by the fruitlogozombie (well, am i zombiefied already?) at least that “bitten” part of its logo from now on makes fully sense to me 😁 😂



  • Having subscriptions for hardware

    actually how i understand that model, the subscription would not be for the “hardware” (which you would still have to ‘buy’ and pay for all of its repairs by yourself) but only for the software which would actually block you from using your own hardware if you stop paying the then-later-by-them-to-be-definded-price for the ‘licence’ to use that software, rendering the hardware a useless piece of junkscrap whenever and as long as they whish or their cloud runs on MShitsoft or is maybe ClownStricken, MacAfff’ed, CEO’ed, CTO’ed, Shareholder’ed or such).

    That f*up-idea is afaik explicitly NOT a renting model for hardware where they’ld had to make sure that it actually works before you have to pay the rent, but only a licensing software for that only software that is vendor-locked-in on that vendor-poisoned hardware.

    As i know myself, i guess i’ll discontinue to buy or suggest any of their stuff for a few decades from now, for that “idea” only.

    Have a nice® day without logitech!


  • Only rate limiting is the effective option.

    i doubt that. you could maybe ratelimit per IP and the abusers will change their IP whenever needed. if you ratelimit the whole service over all users in the world, then your service dies as quickly into uselessness as effective your ratelimiter is. if you ratelimit actions of logged in users, then your ratelimiting is limited by your ability to identify fake or duplicate accounts, where captchas are not helpful at all.

    at the same expense of bots. they might be cheap, but i doubt that anyway, bots don’t need sleep.

    i was answering about that wording (that captchas were “not” about bots but about “stopping automated requests”) and that automated requests “are” bots instead.

    call centers are neither bots nor automated requests (the opposite IS their advantage) and thus have no relation to what i was specifically saying in reply to that post that suggested automated requests and bots would be different things in this context.

    i wasn’t talking about effectiveness of captchas either or if bots should be banned or not, only about bots beeing automated requests (and vice versa) from the perspective of the platform stopping bots. and that trying to use different words for things, (claiming like “X isn’t X, it is really U!”* or automated requests aren’t bots) does not change the reality of the thing itself.

    *) unrelated to any (a-)social media platform