• 0 Posts
  • 17 Comments
Joined 2 years ago
cake
Cake day: April 23rd, 2023

help-circle


  • Everyone knowing your identity? The drawbacks would far outweigh the benefits. However, there may be a path to the benefits of a Real ID sign-up system that mitigates the possible harms.

    First of all, let’s get this out of the way - this “minimal harm” approach would only be feasible if the government could either reach some level of technical competency or farm out the task to heavily restricted private corporations that do have that competence. If we presume that’s the case (unlikely), the question becomes whether the people would be willing to accept it. If we presume the majority of citizens also want such a thing (a tall order to be sure, I certainly don’t want it), then the question becomes what sort of system would be able to maximize privacy, and thus safety, while still requiring your real identity to be involved in creating online accounts? What would that system look like?

    (Collapsed for your convenience because I wrote way too much about this hypothetical)

    We’d absolutely need a level of abstraction. The government knows who you are anyway, but the business entity you’re interfacing with would get a unique token from the government that is not your actual Real ID number but which is a hash generated from the business’s (salted) ID number and your own salted ID number (idk I’m not a cryptographer).

    Signing up for an account would resemble using Google or Facebook to create an account; you’d be redirected to some third party Identity Verification System (IVS) which would handle identity verification and redirect you back to the account creation with the extra piece of information provided by the third party. You’d still pick a username, password, etc.; the government database would only be used to generate that unique token.

    More specifically, the website or service would only be passed a token from the IVS, uniquely generated based on the company ID and the person’s ID, and the government database would only keep the token, not any of the data used to compute it. (That’s not counting China and other authoritarian states, of course - they’d definitely retain all that information and have a list of all the sites you have accounts with. This wouldn’t solve that problem.) This would make the IVS database virtually useless on its own, as an attacker who compromises the database has no way of knowing which token is associated with which website, and cannot derive it themselves unless they’ve also compromised one or more target websites at the same time. The cryptographic stuff would be rotated once it’s known that a breach has occurred, so such breaches would likely be limited to state actors or black-hat groups that hoard zero-days.

    Now, what would all this accomplish? What would it make possible that currently isn’t outside of China?

    • Unique website signups - one person, one account, and if it’s banned, that’s it, you don’t get to log in to that site ever again until you’re unbanned. Your only option to get around a ban would be to commit identity fraud, which would be quickly traced back to you if everything really was using this system.
    • If you block someone, they can’t just make a new account and keep harassing you; they’d have to start committing crimes, and the pattern of behavior would be easily traced back to their original account, and with it, their original identity.
    • No more sock puppets. If you say something on a platform, you only get one account to say it with. Troll farms would have to openly pay thousands of people to support a particular view, which many websites would likely consider a bannable offense. Troll farms are non-viable.
    • A website doesn’t need your email address or any personal information from you in order to verify your identity for password resets. If the IVS returns the correct token, that’s good enough.
    • If a user has committed a crime, and evidence of this is visible on a website or platform, a government with jurisdiction can, with a warrant, request that user’s token. That gives them a specific identity in the ID database to investigate further.
    • If the government is investigating a particular individual over whom they have jurisdiction, they can query websites or businesses over which they also have jurisdiction for information on whether any of the tokens in their database match a user account’s identity token, and request data from the matching account. It would be a much more focused process than queries based on IP addresses which judges keep having to say are not proof of identity.

    What would this system not do? What doesn’t change compared to now?

    • Companies using this system would still only know for sure who you are if you tell them; at most, they know with certainty what country your identity is associated with, but little more.
    • Companies could still coordinate information on data such as which accounts sign in from the same IP addresses, which would tell them more about specific users and potentially let them profile you.
    • Companies will still give up any information they have on you to the government if compelled by a warrant, sometimes even without one.
    • Websites can be hacked and your data on that website exposed to the world, requiring you to reset your password, etc.
    • The government can be hacked and information about your identity exposed
    • Accounts can be hacked, and nefarious people can do nefarious things under your name without having to commit identity fraud (though this act could itself be considered a crime under such a system)
    • Stalkers can still figure out who you are based on information you post, and go after you in the real world
    • The government doesn’t know which websites you visit unless they’re actively spying on you.
    • Oppressive governments can and will continue to monitor and log everything they can about you, and attempt to weaponize this against dissenters or those otherwise deemed “undesirable”

    Even in the grandest, best-possible-case scenario I can think of, it still comes down to “Can I trust my government to not take more information than they’re allowed to, and can I trust that they will not abuse the information they do obtain?” For many, I suspect the answer to both questions is no.


  • I’ll just go through my library and pick out the ones that I don’t think are very well-known or might have been missed by anyone who got into gaming more recently.

    Demon Truck is a devilishly arcadey game, and at 90% off it is fifty cents so you are legally required to buy it right now. Once you play it for a few minutes, you’ll want the BANGER soundtrack too, which was done by Zircon, costs $3, and is worth every penny. Here’s a sample on YouTube if Bandcamp doesn’t work for you. Game is a 40 megabyte download. What are you waiting for?

    Approaching Infinity - What if No Man’s Sky was a turn-based roguelike with retro tile-based sprite graphics? If that appeals to you, give it a look. The developer also has a more fantasy-oriented game called The Curse of Yendor.

    Devil Daggers is worth trying if you enjoy fiendishly hard FPS games with pixel graphics.

    Bots Are Stupid - it’s a tight platformer where you control the character by writing a script to control its actions down to the individual frame if necessary. It has a level creator as well. If you’ve ever seen tool-assisted speedruns (TAS), this game is basically creating a TAS for something like Super Meat Boy.

    If you have PCVR, give Ancient Dungeon a look. It’s early access, but it already has that particular spark that tends to (and did) hook me, and it does a number of things phenomenally well, such as knife-throwing. In lists of top VR games, however, I rarely see it get a mention.

    Distance is a racing game with where your car can jump, do flips, fly, stick to walls or the ceiling, and potentially get cut in half by the road hazards. It’s by the same developers and is the successor to the equally fun and completely free Nitronic Rush.

    It’s not on sale, but at $5, Noitu Love 2: Devolution doesn’t need a sale to be well-worth the price.

    Lastly, Timespinner is a pixel-art metroidvania with time travel. I thought it was pretty fun.


  • Sure, you can, but if one technology is both “good enough” and “works on everything” I can understand why the developer might only bother with that one. Proprietary, vendor-locked standards leave a bad taste in my mouth.

    I would like to at least see XeSS implemented in addition to FSR2, as it’s another open standard. With any luck, pressure could be put on Nvidia to make DLSS vendor-agnostic as well, but they’ve proven over and over again that they really don’t care about gamers.






  • That’s not very nice.

    If photography is art, so is AI image generation. If one can see something in the natural world they had no part in creating, and get an idea, a spark of creativity, and then choose a camera, choose the angle, choose the framing, set the configurable aspects of the camera such as shutter speed, exposure time, what type of film, what lens to put on, and produce a photograph, perhaps several, perhaps even a dozen attempts to get it just right, and the final result can be placed in a gallery alongside paintings and sculptures and Jackson Pollocks without a single modern art snob batting an eye, how then is that any different from someone with the same spark of creativity tuning a prompt for a model they’ve become deeply familiar with, seeking to bring the inspiration in their mind’s eye into the real world where others can see and experience it too?

    I’m sure you’ve heard it before, but it bears repeating for those who haven’t - photography was not initially considered a form of art. But photographers didn’t seem to care too much, and neither did the layperson, so here we are again, having the same old argument about another new art form made possible through a technology that invokes Clarke’s law.


  • Mandatory:

    • Dark Reader for dark mode anywhere, and Invert Colors for the occasions when a site is not usable with Dark Reader.
    • Ublock Origin of course, but I also still use uMatrix because even several years after it stopped being maintained, it’s STILL unmatched by any other addon in the content-blocker category. The granularity of being able to specifically allow scripts or frames or images or cookies from specific third-party domains or subdomains either everywhere or only on certain first-party domains, with a very intuitive visual grid (matrix) and subdomain selection, is incredible. I still don’t understand why it’s deprecated.
    • Tree Style Tab and the related Tab Unloader. I forget things exist if they aren’t right in front of me, so if I have any intention of coming back to a site or a workflow, I need those tabs somewhere in front of me, tucked away in a tree waiting for me to get back to them. I regularly have between 100-200 tabs open. Being able to unload performance-heavy tabs without restarting the whole browser also helps a lot.
    • Bitwarden because if you aren’t using some kind of password manager, do you even care about security?
    • Translate Web Pages because not everything I want to read is in English

    Nice to haves:



  • That anyone ever acted like that is so insane to me, it doesn’t even feel like it happened on the same planet. Among my middle/high school circle of friends through the 00’s, not a single one of us would have ever given shit to anyone, male or female, for playing video games. To us, every new gamer we met was a potential new friend who spoke our favorite language. Then we graduate, go out into the world, look around on the internet, and hear stories that there exist complete fuckwads on this green earth trying to keep girls out of gaming?? Like… what??



  • There had to have been people in marketing that knew this would happen and were overruled by bean-counting executives. The top card of each generation outdoes the top of the previous gen, but for a couple of generations it’s been increasing in price in almost lock-step with the performance increase. Often the newer card will have worse VRAM than the previous generation’s equal-performing card because you’re looking at an older top-spec card vs a newer midrange, and the midrange cards always have less VRAM. With AAA games now starting to really want more VRAM in order to have better visuals, the older cards wind up actually being the better option long-term.