Many sites have had to enable reveal passwords for people with complicated passwords not using password managers.

It’s low risk, but their numbers are also coming from fairly dated hardware and is just proof of concept. It can almost certainly be speed up significantly.

Yeah as the other person suggested i suspect it’s more like “when do these expire?” “does this have mold on it?” “what does this sign say?”

You might get some about “does this match?” but i don’t know

The problem is that so many browsers leverage hardware acceleration and offer access to the GPUs. So yes, the browsers could fix the issue, but the underlying cause is the way GPUs handle data that the attack is leveraging. Fixing it would likely involve not using hardware acceleration.

As these patterns are processed by the iGPU, their varying degrees of redundancy cause the lossless compression output to depend on the secret pixel. The data-dependent compression output directly translates to data-dependent DRAM traffic and data-dependent cache occupancy. Consequently, we show that, even under the most passive threat model—where an attacker can only observe coarse-grained redundancy information of a pattern using a coarse-grained timer in the browser and lacks the ability to adaptively select input—individual pixels can be leaked. Our proof-of-concept attack succeeds on a range of devices (including computers, phones) from a variety of hardware vendors with distinct GPU architectures (Intel, AMD, Apple, Nvidia). Surprisingly, our attack also succeeds on discrete GPUs, and we have preliminary results indicating the presence of software-transparent compression on those architectures as well.

It sounds distantly similar to some of the canvas issues where the acceleration creates different artifacts which makes it possible to identify GPUs and fingerprint the browsers.

You should 100% lie when you can. You can give every site a different email address, name, birthday, gender, and location and just note all of that in your password manager.

However, there’s a lot you just can’t control, like other people catching you in their pictures.

Or leave the house 😢

This only sorta works for today and if your friends never share images or videos online. The ever-increasing amount of people taking pictures and filming and posting them online means the day is quickly approaching where you could be identified and tracked through other people’s content, security & surveillance cameras, etc.

If stores start adopting the tracking used at Walmart and the Amazon biometric data, social media will be the last of your worries.

Who says there’s no innovation in tech companies today? lol

Avatar checks out

I have no idea what their business model is, but this would be a great way to collect more data for training various forms of AI. Arguably without harvesting people’s personal data or their creative works.

I also suspect that because it’s an assistive tool, it can probably get a fair bit of grant money.

Yes, it’s a press release, but I think this is maybe a an interesting use for some of the AI to augment that of volunteers who help describe and annotate for people who have vision challenges.

Welcome to the future [of shit]!

I saw some research a while back around giving computers personality traits or having them respond more human like, and college students found it super creepy. If you watch how people interact with assistants, it’s very different than from interacting with humans.

That’s a decent start, but you need a browser that’s resistant to fingerprinting through some plugins and something like ublock origin that will block all embedded content. At some point, it may require you to use a phone number, and at that point you may have a problem. If you avoid that, one of the biggest threats are the facebook and related meta content placed on other pages around the internet. The pixel is one aspect, but almost any facebook content can still track you across sites. These are easily blocked with a decent adblocker and probably privacybadger too.

I know lots of folks will disagree, but I’d care less about Facebook tracking you as they mostly only care about serving you ads and making content suggestions to keep you on the platform to view more ads. Facebook has never served me a relevant ad, and even with a lot of use still can’t recommend things I’m interested in. Data leaks and sharing is a concern, but that’s a concern with every site. I think when it comes to privacy, there’s far bigger concerns.

Yes-- same with bluetooth or ordering groceries for delivery and giving your home address. There’s always ways to leak data and make it no longer anonymous. However, from my knowledge of how some of these datasets work, they aren’t putting in a lot of effort into truly trying to make sure the joins are 100% accurate because it rarely matters. They generally don’t give a shit about you as an individual. The most common uses of the data are for advertising and mistargeting doesn’t cost enough to justify the time to verify the data.

Paying in cash though can make it anonymous, or by using virtual cards that mask your card id.

Sure, but you can usually register with fake info though. I’ve never seen one really verify much of any information.

Just use one of those email forwarding services that generates unique addresses.

everyone can sign up as “JP Morgan” at “555 Fuckoff Lane”. I’m guessing it might be better if we all standardize to make it harder to connect the sold datasets. If they have address checking we should find some tiny town with 200 people from google maps.

Protip: Many grocery stores allow you to just grab cards without signing up (in the US at least). You can tell them you’ll send it in later.

Then, you can use whatever the fuck info you want and still get the “rewards” so it’s not attached to you. If you use the apps on your phone, make sure they don’t have bluetooth access.

From a feature-functional perspective, sure, but it’s not entirely true. The biggest differentiators for social media are rarely the core features, but the content and friends. There’s a few specific groups that have slowly been migrating from Twitter and Mastodon there.

There’s a couple of very famous people that have moved over and because the audience is smaller, they tend to engage with people more often.

This has arguably always been the case. A century ago, it could take years to get something published and into a book form such that it could be taught, and even then it could take an expert to interpret it to a layperson.

Today, the expert can not only share their research, they can do interviews and make tiktok videos about a topic before their research has been published. If it’s valuable, 500 news outlets will write clickbait, and students can do a report on it within a week of it happening.

A decent education isn’t about teaching you the specifics of some process or even necessarily the state-of-the-art, it’s about teaching you how to learn and adapt. How to deal with people to get things accomplished. How to find and validate resources to learn something. Great professors at research institutions will teach you not only the state-of-the-art, but the opportunities for 10 years into the future because they know what the important questions are.

It doesn’t really matter. If you find value in using it, just keep using it.

Had this question like 2 years ago, thinking it was due for an upgrade… At this point, I wouldn’t be surprised if they never release another.

I think it supports pretty much everything you might want in a device already.