Chinese people have been developing similar obfuscation protocols and playing a cat-and-mouse game for years, and most of them are "open source" (in quotes because lots of them have to be somewhat hidden because the Chinese gov threatens the devs).
Props to Mullvad, but it's not like they're unique in this regard.
During COVID, lots of live shows (concerts, etc.) in Japan moved to streaming (and most of them stuck, so thanks to that, lots of large concerts today have real-time streaming, which is great for foreign fans).
Out of 10+ platforms, more than half have vulnerabilities that allow you to access the content freely (sometimes including the rehearsals, because they are also streamed internally), and on a handful, you can access the admin panel and, as the author said, stream whatever you want.
Most of them have been patched over the years (some are just the byproduct of them changing the backend/SaaS provider, though), but there remain some major providers where you can get content for free.
Sometimes it's not very clear what I really want when typing.
Also, Google Search's AI answer doesn't prevent the actual search results from still showing below; so if I later realize I need those (search results) instead, they're already there.
Also, I use browsers all the time, so typing things into the location bar is quicker than deliberately opening the Gemini app/website or whatever.
I value one fewer click/action a lot when such an action will be performed hundreds of times a day.
Very good write up but I lost it a little at the end. Could someone clarify for me?
The author said:
You cannot just use the shortcut trick to install the evil extension directly because of new publisher trust system;
You can bypass this by using local workspace extensions which has no publisher screening, but CSP blocks it;
The solution seems to be that installing a local workspace extension which binds a shortcut of 'install extension without checking publisher'.
So I assume it means:
1. you need two extensions, 1st one is local and only for the keybinding, and 2nd one is the 'real' evil one and it doesn't need to (actually can't, because of CSP) be local anymore?
2. the CSP only prevents the JS in local extension but nothing about its package.json (or the ability to add shortcuts), right?
I don't want either, if I'm indeed "searching." But I find that often times I am indeed just looking for a quick answer, and Gemini/Google's "new" search does it fine.
It's one of the few AI features, despite still being shoved in my face, that I actually find useful.
With that said, the worst thing is how search results have degraded significantly since the AI years, even before they added the actual "AI mode."
Google now (and quite a few search features on other services, e.g., Twitter) often returns results that have ZERO relationship to the search keywords I gave -- like an entirely different person when searching for a person's name, which I think should never happen and did not happen when search was still based on a "rigid" algorithm of indexed content. So, I can only assume it's because they have some AI thingy along the process.
In the video, some debris seemed to fly away from the explosion in a wavy path (top left). I thought things only moved like that in video games. What causes that kind of movement?
Good article, but I'd like to ask about two small technical details (I've used Bambu before, but I'm not very familiar with the 3D printing ecosystem).
1. OrcaSlicer: so it's a fork of Bambu's official client, Bambu Studio - but it apparently still goes through Bambu's servers for printing? How exactly does that work? Does it also "impersonate" the User-Agent, and Bambu was okay with that?
2. OrcaSlicer-bambulab: if the goal of this fork-of-a-fork is to bypass Bambu's cloud servers, why would it still need to "impersonate" the UA and communicate with Bambu's servers (as Bambu claimed)? Wouldn't the whole point be to avoid doing that in the first place?
Does it effectively bypass regional restrictions for you, so you can use something like the Claude API from unsupported regions such as Hong Kong, or does it still enforce the official providers' geo-restrictions?
Well TBF, the original Notepad++ isn't too good in this regard either.
Whenever I opened a N++ window in a remote desktop session and leave it open, and then use the same computer in-person, the whole UI of that window becomes a blurry mess and the boundary of the window is off (as in, if you maximize the window, moving the cursor to the top-right will actually not land on X.), which I assume it because of changing resolution/scaling between remote and in-person use.
I've probably said this a bunch of times already, but based on my past experience, any analysis built on month-to-month changes in the Steam Hardware Survey should be taken with a very large grain of salt, if not considered outright useless for any serious conclusions.
The clue is already in the article itself. The author notes that "part of the jump at least appears to be explained by Valve correcting again the Steam China numbers." If you actually think about what that implies, it raises more questions than answers. A 31.85% monthly drop is obviously not organic, so yes, it makes sense to call it a "correction." But then why was the previous month's data so far off in the first place? Is there something fundamentally flawed in the survey methodology, like sampling bias, non-uniform distribution, regional skew, or something else?
And if this kind of correction happens this month, what's stopping it from happening in previous months? The reality is: it does happen all the time. You can usually spot at least one clearly unrealistic data point in almost every release.
At that point, it's hard to argue there's any real value in trying to analyze these results in a rigorous way.
I always thought "opt-in" (not "opt in") meant something you have to actively choose to enable; otherwise, it stays off. So calling something "opt-in by default" sounds like a misnomer to me.
But English is not my first language so please correct me if I'm wrong.