• 0 Posts
  • 42 Comments
Joined 1 year ago
cake
Cake day: August 6th, 2023

help-circle
  • If you block ALL traffic from it? Sure. It’s possible but more involved and requires the right hardware to block their tracking domains while leaving streaming apps working.

    It’s best not to use smart TVs as well smart TVs. The apps they have are almost always slower or inferior in some way to the versions you get on streaming devices, updated less often, etc. I recommend pairing a TV with a quality streaming device like an Nvidia shield (or shield pro) or an AppleTV*. Alternatively if you want something a little cheaper in Androidtv space there is the Walmart brand Onn 4k pro.

    *warning with Apple is while they’re pretty good on privacy (meh, there are no excellent choices that support streaming apps in 1080p quality) and don’t have ads their app-store is a bit more locked down. They have all the major streaming services but if you do high seas type stuff it will be more involved and difficult. Though if you have a local media collection (source your own discs or high seas) and run Plex or Jellyfin they have apps for both of those that work great as well as Infuse which usually requires a subscription unless you don’t need 4k or any proprietary audio codecs like dolby for any of your media. I personally can say I enjoy my AppleTV 4K and I think it’s a great device but I run my own media-server and have some common streaming services I pay for.



  • Cons:

    You absolutely cannot get 2FA authenticator codes from 90% of services. Many services that require a phone number even without 2FA just for “verify you’re a human” or because they want your data or to verify region use shortcode services that also will not work with ANY VOIP provider.

    You will not receive their codes. These companies vary from banking institutions to gaming companies to online shopping marketplaces and stores to a Google account (used to be you could get an automated phone call to verify an account, not anymore, must be able to receive SMS from shortcodes that are disabled for VOIP numbers to register and to recover an account) just about anyone you could end up doing business with.

    A shockingly large amount of companies demand phone numbers and send verification texts before allowing you to do business with them, to create an account, to recover an account, to delete an account, to place an order, etc.

    They really shouldn’t, it’s a bad security practice but companies love it because with a phone number they can lower support costs by just allowing people to do a self-service where they get an automated text and can unlock their locked account. They also love harvesting that data and preventing anonymization with VOIP numbers and the reduction of fraud and increase of reliable KYC that comes with requiring them.

    And they all take it as a given that EVERYONE or at least 99% have a cell plan with a non-VOIP number that works with these and the 1% who don’t they don’t care about in the developed world and are an acceptable loss.



  • If they have to have a lot of channels then $120 isn’t the worst price (I have relatives who pay twice as much as that a month for cable) though you could perhaps try and check into whether they could switch to a streaming linear TV service like DirecTV Stream with one of their lower tier packages to save some money while retaining a cable-like experience (there’s also Sling, Hulu+Live TV, YoutubeTV, FUBO, etc, many of which have packages with many of the top channels for $60-$80/month).

    Fact is to save money you need to be willing to give things up. If you’re moving from a premium cable package with a ton of channels to a few streaming services you’re going to lose things and potentially a lot of things. You’re going to lose access to live news channels, you’re going to lose access to specific programs on some networks that don’t have streaming service equivalents (I know for one older person I knew the fact they couldn’t get and watch Lifetime and Hallmark movies within any reasonable time-frame of their premier meant they were not interested in looking into streaming any further to replace their cable).

    More than that though most old people hate change, they were used to a certain way of things and they’re afraid and perhaps get confused or frustrated with this new way of doing things. It’s simply more comfortable for them to use the old satellite system they’re used to and its interface and way of changing channels than doing something new where they have to think of how to do something or get frustrated or ask for help. Which is why I do think trying a streaming cable replacement like those I mentioned might be your best bet. It would still save some money.



  • The most elite trackers perhaps.

    Trackers on /r/opensignups ? Nah they open their doors to the public every now and again.

    Would not recommend it to anyone who can’t dedicate a seed box or machine uploading torrents most hours of the day every day. It’s possible to do it without those but difficult. With them it’s merely a matter of using free leech and building a buffer up as well as taking advantage of points systems to get free upload just for keeping torrents seeding even without uploading.

    If you only ever grab free leech then all you have to worry about is meeting seed time and activity requirements like logging in every 90 days.

    An old computer with an external drive. A raspberry pi, a nas that can run a BitTorrent client. Any would work if one doesn’t want to pay for a seed box. (Most trackers ban shared seed boxes though so you will have to get dedicated)


  • Take a look here for some alternatives:

    https://dessalines.github.io/essays/why_not_signal.html#good-alternatives

    • Matrix
    • XMPP
    • Briar
    • SimpleX

    Also just because there are no alternatives doesn’t mean your default position should be we just have to trust whatever exists now because it’s good enough. Or that we can’t criticize it ruthlessly, distrust it. Call it out and as a result of that build perhaps the desire for something better, a fix as it were.

    The evidence and history clearly points towards Signal being very suspicious and likely in bed with the feds. This is not conspiracy thinking. Conspiracy thinking is thinking that the country/empire that gave away old German engima machines whose code they’d cracked to developing countries without telling them they’d cracked it in the late 40s/early 50s, that went on to establish a crypto company just to subvert its encryption. That’s done everything Snowden revealed has in fact changed suddenly for the first time in half a century for no particular reason and not to its own benefit. That’s fanciful thinking. That’s a leap of logic away from the proven trends, the pattern of behavior, and indeed the incentivizes to continue using their dominant position to maintain dominance and power. They didn’t back down on the clipper chip because they just gave up and decided to let people have privacy and rights. They gave up on it because they found better ways of achieving the same results with plausible deniability.

    Also why is everything “tankies” with you people. Privacy advocates point out the obvious and suddenly it’s a communist conspiracy. LOL


  • No.

    HDMI does have a feature called Ethernet over HDMI that in theory could allow that.

    Thing is though it’s literally never been implemented in anything. It died because cheap WiFi became common.

    For it to work you’d need both the TV and Chromecast and HDMI cable all to support it. It’s not uncommon on cables and a surprising amount of them include it in features list (probably to trick low info people).

    But I believe that’s a hardware design thing so not something even a software update could enable. It costs extra money and they’re already paying for a WiFi chip so why bother?


  • Just FYI. Comments nearly exactly like yours on Reddit were used in copyright troll lawsuits against ISPs as evidence they didn’t do enough to enforce copyright and were negligent and legally liable.

    Further when that didn’t work the copyright agency sued Reddit to try to unmask the identities of those people to bring legal proceedings against them to coerce them into testifying against their ISP at threat of being in trouble for their activities. Reddit was big enough to fight off the lawsuit luckily but be careful.


  • That seems like a real problem given they are a people being actively subjected to genocide which is being censored and distorted by western media, who have their land stolen, their existence denied, and been subjected to apartheid sponsored by the most powerful nation in the world (the US no less) in flagrant violation of international law for over half a century. Abuses and genocide carried out by a regime so powerful, so important to US interests that there are multiple states in the US where you can lose your job or your business contract for simply voicing support for boycotting and divesting from the apartheid regime that is an illegal colonization and occupation of stolen land by radical far-right reactionary ethno-fascists operating under the cloak of religion. Most major western media are some degree of complicit in giving one-sided pro-apartheid state slants, omitting key details, and using dishonest framing to attempt to deceive the public and manufacture apathy and complicity.



  • You need to make sure when you rip the film that you grab all English subtitle tracks. Use mediainfo to find the smallest one with least elements and that tends to be the forced/translation track. Some people when initially ripping choose to burn those particular subs and those alone into the video. Others just put them in an MKV container with the full subs and mark them as forced with the flag editor. And others don’t rip them at all.

    That said, if for some reason your copy didn’t have such a track, it’s possible that the particular forced/translation subtitles had some special marker or something that the BD disc or DVD read and tended to force on and use only those subs. In fact looking at options for exporting PGS visual image subtitles in subtitle edit there is an option to mark individual lines of subtitles as forced so that’s a thing but I’m not sure any players or software currently supports it as all software I’m aware of tends to just look for whether a track is marked as forced or default and then use it or not depending on user preferences.

    If you can’t find good subtitles by themselves you could always acquire ('arr) another copy of the full movie and just grab the subs from that and mux them into your file. Again looking for forced flagged/named subs or else ones with less than half the elements of the other sub files.




  • Lot of cope and denial in these threads. Yes the same-day is probably a rosy estimate based off people using 6 digit codes or something easy to crack, doesn’t mean it’s false or that they can’t hypothetically target longer alpha-numeric passwords. For all we know they might not even be brute-forcing and could be conducting some sort of exploit that over time reveals the encryption keys themselves in some way.

    I’m still very curious about the nature of the mechanisms of action. I assume they manage to bypass the basic lock-out against entering too many passcodes too quickly somehow which is what enables this. If throttling could be properly enforced (to say nothing of something like 10 attempts and it refuses all future attempts and erases the key type of thing) this type of attack wouldn’t be practical for anyone using anything above a 6 digit numerical passcode in any reasonable timeframe. I wonder if they exploit wireless radios including cellular, wifi, bluetooth and force some code on the phones via these usually-on chips that enables this via exploiting problems in their architecture. Perhaps something that locks up, prevents functioning or resets certain checks via flooding parts of the hardware/software from these points of access. Or if it really is purely phy/log access to the lightning/usb-c port.



  • Politely agree to disagree and I’ll elaborate. Thanks for your input.

    LTH are all marked as such. MABL normal (non LTH) discs such as verbatim sells for less than half the cost of M-Discs have the same physical properties as M-Discs, the protective layers are the same, the recording methods are the same using the same materials. Therefore the longevity is the same or near the same without getting into M-Disc’s ridiculous marketing claims of 1000 years (when NIST and others agree the poly-acrylic protective layer would degrade and decompose after a century or two at most even in ideal circumstances).

    /r/Datahoarder has had this argument several times and the consensus so far seems to comes out to the fact that M-Discs were a DVD-era innovation that in the BD era offer no meaningful advantages in technologies.

    I’d rather have two BD’s from a reputable company like Verbatim (not fly by night plain white discount bulk BD’s from who knows where) from separate batches bought 6 months apart stored properly than rely on one overly expensive M-Disc that isn’t going to last any longer and probably isn’t made to meaningfully tighter tolerances.

    NIST only estimates the lifetime of M-Discs, real world abuse tests on BD’s (non LTH, should have mentioned that to be honest) show good endurance that far exceeds DVDs. It comes down to however burning it right and storing it right. A pile of M-Disc left in a window in your uninsulated garage year after year and burned at 16x are not on the whole going to be in a better state in 20 years than a pile of BD-R’s burned at 4x, stored in protective sleeves in a case in a temperature controlled, insulated environment. Add in having a back-up copy and the chances of total data failure on both primary and backup disc and you’re looking at better survivability. NIST numbers generally assume things like storage in archival quality environments such as old salt mines which are a controlled environment, low humidity, neither excessively hot or cool and not subject to shifts in temperature. Most people can’t store things in an environment like that and those who can usually have the finances for a better solution like multiple tape copies and/or continually updating and refreshing hashed/checksumed files and moving on a schedule to new better storage mediums (e.g. keeping files in a raid array in a plugged in NAS, checking for failures regularly, replacing disks and upgrading disks every 5-10 years one at a time).

    I wouldn’t trust any media not professionally stored in a purpose-built archival environment and with at least two copies to last more than 25 years without degradation or loss. Anyone trying to store stuff really long-term and cannot afford degradation or loss needs to have a plan to update their archival copies every 15 years or at least do an assessment that often and survey the options as well as the physical and ideally logical state of their chosen back-ups.



  • There is just no excuse for not even salting or SOMETHING to keep the secrets out of plaintext. The reason you don’t store in plaintext is because it can lead to even incidental collection. Say you have some software, perhaps spyware, perhaps it’s made by a major corporation so doesn’t get called that and it crawls around and happens to upload a copy of a full or portion of the file containing this info, now it’s been uploaded and compromised potentially not even by a malicious actor successfully gaining access to a machine but by poor practices.

    No it can’t stop a sophisticated malware specifically targeting Signal to steal credentials and gain access but it does mean casual malware that hasn’t taken the time out to write a module to do that is out of luck and increases the burden on attackers. No it won’t stop the NSA but it’s still something that it stops someone’s 17 year old niece who knows a little bit about computers but is no malware author from gaining access to your signal messages and account because she could watch a youtube video and follow along with simple tools.

    The claims Signal is an op or the runner is under a national security letter order to compromise it look more and more plausible in light of weird bad basic practices like this and their general hostility. I’ll still use it and it’s far from the worst looking thing out there but there’s something unshakably weird about the lead dev, their behavior and practices that can’t be written off as being merely a bit quirky.