MarkAssPandi (tiny)

Recent fedi instance admin
Now migrating after SOME company screwing me over

Teen programmer thingy I like computer ig and movies and shows and anime uh yeah

"thought you were cis :neocat_flop:" - Willow :bhjflag_bisexual::anarchy_punk_demiboy: (npub1h4s…6c6c)

Prelegentka na 19 Sesji Linuksowej :3

Has bf so pls don't flirt with me unless i know u and ur fully aware this is joking foolin around

Might post and boost nsfw stuff sometimes, will try to CW correctly

site: kamila.pet
Pronouns: she/her
If u wanna give me money (idk why but go ahead): [ko-fi.com/markasspandi](https://ko-fi.com/markasspandi )

Last Notes

2025-02-03 20:00:10 UTC

- reply

Maybe `-vsync vfr -r (framerate) -c copy`?
vsync should set it to variable framerate which would allow ffmpeg to shift timestamps, r would set framerate, and c copy would make it so it just copies stream without reencoding?
I'm not an expert but maybe it could work?

2025-01-22 01:01:05 UTC

- reply

Hm, okay thanks
But out of curiosity what could be theoretical privacy considerations when having profile with "running in the background" turned on?

2025-01-22 00:55:04 UTC

@npub1kwa…e0nj I have question about profiles.
When they are allowed to work in the background, can for example some app just decide "I wanna a locatiom data rn" and just get the location (assuming the location is turned on in the current profile)?

2025-01-21 22:36:36 UTC

- reply

Also there is another way to look at: attacker also has no idea of knowing if the victim actually used vpn/tor
So there is also uncertanity for the attacker
Even if you know person is in a given country, you have no idea if they didn't set VPN also for the same country, which would show datacenter in the same country but different location

2025-01-21 22:29:36 UTC

- reply

Not to mention, from what I see this is kinda "easy" to fix if it's a journalist or other high-tier person:
1. Zero-click is based on push notifications, which can be disabled/show only name not actual content
2. In Signal settings you can turn off automatic download of Media files, which will mitigate the 1 click aspect too (Will still work after downloading file itself tho)
And as always, if your thread model is high enough, you def should use VPN or TOR
For regular users this doesn't really do much harm, assuming you don't have attackers specifically targetting you, and even if you did, cloudflare datacenters aren't much reliable source of exact location (author himself said ~250 miles radius).
I still think this is an very interesting finding, and I believe signal should actually try to mitigate this somewhat instead of just saying it's not their responsibility, but I don't believe this is that severe.

2025-01-07 14:31:29 UTC

- reply

I don't wanna fight but wouldn't it be possible to package KeePassXC into some installer that supports MS Store updates?
Isn't there some way to turn MSI packages into MSIX?

2024-12-05 06:05:29 UTC

- reply

It's because it is not a Public status
its unlisted and it works when you enter the link into your instances search bar