I think they expect the parent to secure their own account to make sure their child can’t use it. And anyways, it shifts accountability. If the parent lets the child use their account, then the parent takes the blame. If the child gets addicted to social media, that becomes the parent’s fault for giving the child unrestricted access.
Do you know if the scrapers/bots are using the VPN providers? Or if they are just using VPSes in the same datacenter as the VPN, and the datacenter is just NATing all egress traffic to have the same IPv4. In that case I wonder if IPv6 could help distinguish between VPN traffic and bot traffic…
Though ultimately a gate like Anubis or Angie Guardian might be the best solution here so nice work.
Unfortunate but understandable. I believe there are public lists of the IPs of major VPN providers if you wanted to make an exception, but as VPNs are sometimes used for scraping too, I can see why you might not want that.
I do. Do you block all VPNs? Or is it just rate limiting?
Actually now that I check your username I think I have seen your instances before, though it seems like your website is down at the moment. But thank you for service to open source !
I can see a narration style like this working for a comedy film. Or maybe just a 5 minute skit. Maybe throw in some Wes Anderson visual gags
Good point. The article does talk about how Ragavan failed to find the solution a couple of years earlier, but the AI was able to find Broadbent’s paper that "gave it on a silver platter.”
Almost seems like the “smarter” people like Broadbent come up with the more novel revolutionary ideas, then others find ways of applying it to the rest of the world. And AI is able to do the latter as well.
IIRC a reverse proxy doesn’t add much security in itself. If there’s a vulnerability in the login page,.it doesn’t matter if the attacker reaches the page directly or via a reverse proxy. For security you’d add an auth layer, but that can also prevent the native jellyfin apps from reaching your server. This is why many people use Wireguard or Tailscale.
In short, it’s a lot more complicated than Stremio.
what’s going on with Bottles?
little gap exists is far from enough to explain the disparity in investment efficacy.
This is difficult to say. From what I’ve seen AI gains are slowing down, so catching up might not be that hard anymore. We’ll see from here if China is able to pull a clear lead. If so, then that’s clear evidence that they aren’t just copying
how are you using 128 GB? Genuinely curious because I run over 20 services with only 8 GB
fwiw I agree with you. 1-2 racist posts out of 1800 total posts, is not enough to warrant an assumption of bad faith on the Ceuta post
China is clearly ahead of America
Well that’s debatable. The article implies that the US is still ahead. The root comment of this thread implies that the US is still ahead. Your earlier comment made no mention of this idea. Clearly if that was part of your argument you should have brought it up earlier
I think of it like drafting behind another vehicle on the speedway. The car behind gets higher fuel efficiency
same reasons as OP. I want my desktop OS to be simple, and I focus on my homelab
I get the impression you’re not actually familiar with the history of Linux or Unix philosophy in general.
I’ve read enough mailing lists and issue trackers to know that they are far more complex than they look on the surface, so I definitely won’t claim authority about them.
Take this one that I found recently: https://bugzilla.mozilla.org/show_bug.cgi?id=1618257
It’s a bug report about Firefox’s favicon cache. They started looking into it, but found out that if they fix this bug, it creates fingerprinting risk, so they have to address that as well. And so the issue gets stuck in limbo for like 10 years, and is still open till today.
Regarding systemd, it had to be built on top of the existing architecture, and more importantly, had to appeal to the Linux community to be adopted, so it couldn’t change too much. I assume they have their reasons for depending on machine-id. It might not even be a direct dependency. Maybe it allowed easier adoption by the big players.
I don’t know, and honestly, I don’t really care about digging into every single fingerprinting vector (of which there are probably tons more), when I can just use containers. And while using containers might feel like a hack or workaround, if we look at Flatpak, it seems like containers are becoming the framework for app isolation on Linux, similar to what already exists on Android. So it may very well become the official solution to privacy and security on Linux.
I’m not familiar with the purposes or history of machine-id, I’d guess that it’s just a legacy artifact that can’t be easily removed now.
There’s definitely a lot to be desired when it comes to privacy on Linux. Unfortunately Linux was designed before many of the privacy and security best practices became established, which is why is it less secure than modern systems like Android (source). Trying to re-architect Linux at this point would be an insane undertaking. Machine-id is just one thing in a long list that would need to be changed. Nothing wrong with advocating for it, but I just wouldn’t expect it to happen for at least 5 years.
Containers are a modern technology with isolation and security as a core goal from the start. And by now, containers are already deeply integrated into the Linux community, for example look at how the entire Fedora Atomic project (including Bluefin, Aurora, Bazzite) uses container-based infrastructure to build the OS images. So that’s why I’ve been moving towards it as a solution for my privacy needs, and I recommend others look into it as well.
Edit: rewording some sentences
Well browsers are apps, just like any other app on your system. So the same advice applies. If you don’t trust chrome and firefox but you still want to run them, use a container/distrobox/VM. There are plenty of more private browsers though, like Brave or Mullvad Browser.
Web apps, on the other hand, run inside the browser sandbox, which is an entirely different environment. They don’t have access to machineid unless the browser gave it to them, for example via a browser extension. There’s still a lot of fingerprinting vectors though, so use Tor Browser or Mullvad Browser, ideally with JS disabled. This website is a great way to check your fingerprint: https://abrahamjuliot.github.io/creepjs/
Flatpaks might be the solution here. Flatpaks run in containers, they might have isolated machine-id already.
Though tbh if you don’t trust the apps on your Linux system, you have more to worry about than fingerprinting. Regular executable binaries and system packages have zero isolation, any malware can wreak havoc. Flatpaks are getting there but many apps still ask for permissions they don’t need, increasing risk.
For untrusted apps, run them in a browser (if a web-app), a container/distrobox, or a VM.
Ok that makes sense. As a user I’ve always wondered what it was like from the providers perspective. I always hear people complaining that more and more websites block VPNs, but sounds like it might be better to say more and more websites block scrapers and the VPNs are collateral. Thanks for the insight