• 0 Posts
  • 237 Comments
Joined 2 years ago
cake
Cake day: August 9th, 2023

help-circle











  • Fusion 360 is fantastic. It’s free for non-commercisl use. I’ve been using it for years and have zero complaints. It’s polished and powerful.

    People complaining about it for ideological reasons have a point, but I disagree that it’s in some sort of “enshitification spiral”. It’s exactly as usable as it was 5 years ago. There are very few features locked behind a paywall, and they aren’t important to the average maker.

    You can even use Fusion to run a CNC router. For free! With all the polish of commercial software.

    Everyone I know at my local makerspace uses Fusion. I don’t know a single person who uses FreeCAD. A couple people use TinkerCAD. There’s a very large community of Fusion users and getting help is easy.

    I am 100% in favor of FOSS. Give FreeCAD a try. I used it years ago because it had a plugin to make convolute gears with a couple of clicks. But don’t shy away from Fusion just because of all of the haters on here. Give it a try yourself. I think you’ll be impressed by what you get for free.


  • Back in the day, your ISP would have a Usenet server. Maybe they still do. I haven’t looked into it in a very long time. It would be something like nntp://news.timewarner.com, and you would add that to your email client of all things, because newsgroups were glorified email lists. Your email address was your identity, and you sent messages to groups. The protocol was different, but you were basically sending emails. Then your message would be shared to news servers all over the world. A giant peer-to-peer network. It worked a lot like Lemmy, sort of. Not really.

    If ISPs do host news servers nowadays, it’s going to be censored and definitely won’t be hosting petabytes of binary files. If they host binary files at all, they won’t be particularly fast to download, and will probably be limited to images and such.

    A modern usenet provider costs money per month because they host all of those files, with very long retention times. Years and years. Plus they have insane download speeds. Do you have gigabit fiber at home? Cool! Enjoy downloading these files with a full speed direct download. That’s what the provider gives you. Access to the “real” Usenet, for a long time, with excellent download speeds. This costs real money, so you pay for this service per month. Providers have different tiers of service, too, with various limits. It’s like picking a phone plan.

    Second, you need an indexer. A different website that tells you where the files are. Otherwise, good luck finding them. Imagine trying to find a specific meme on Lemmy by just browsing all the meme communities and scrolling and scrolling. The indexer is a search engine for these files, neatly organized categories. Indexer websites cost a one-time small fee per year.

    You download “nzb” files from the indexer. Those small files contain a long list of all the files to go download. You see, every binary file available for download is split into dozens of small RAR files, or some other format. So, thing.rar, thing.r00, thing.r01 thing.r02, etc. The nzb file contains metadata for the download plus a link to each of those files in whatever newsgroup they are in. I imagine whole seasons of individual episodes can be stuffed into a single nzb file, too, but I’m just guessing.

    You use bespoke software to manage the downloading and rebuilding of all of those pieces. An nzb file will open in this program to manage the download. There are FOSS ones available, I’m sure, but also paid ones, and even ones for phones.

    (If I got parts of this wrong, please forgive me. I have never used any of these things. Well except for newsgroups way back in the 90s.)





  • The only webp exploits for which I can find articles are from 2023. Some new articles, but still about the 2023 exploit. Both in Chrome and in iOS.

    The first step would be to see if the “PNG” file is actually a webp file. To see if what you’re saying is plausible.

    However, if there were a new, unpatched webp exploit, there’s zero reason to spam users with DMs when you can just post the image in popular communities. It could be any image and there’d be no reason to keep sending images pretending to be a girl looking for friends.

    It’s the links in the image which are important to the attacker. Originally they weren’t in the image and it was easy for admins to filter them out, so the attacker took the time to embed them in the image. This points to traditional catfishing and pig butchering as the attack.

    Then again they could be playing 4D chess and masquerading the real attack as simple catfishing.

    Update

    Oh. My. God.

    Byte Ox000cbb7f contains the word “Cum”!

    They’re trying to poison our minds!

    It’s just a normal PNG file.


  • without an image

    I thought so, too, but I switched to “Private Browsing”—which disables most of my extension—and opened my inbox there, and there was the image. Went I went back to my normal browser where the tab was still open, there was the image, too. So it just seemed like it took a very long time to load.

    The image URL was https://quokk.au/pictrs... which is another Lemmy instance, and the message was from bogymanstout(at)quokk.au. So the image wasn’t hosted externally to the Lemmiverse, so it can’t really be a deanonymization attack like some people were theorizing. There’s nothing else in the message. No tracking pixels or anything.

    On the other hand, it’s a very small instance with only 8 communities. The largest of which, world news, has almost 1,000 subscribers. Not impossible to be a fake instance designed for spying, but seems unlikely.

    Update:

    I just opened my inbox in a normal window again, and Firefox simply refuses to load that image in my inbox. I don’t know why. It loads fine if I open that URL in a new tab.