2026-04-17T18:14:44Z https://yabu.me MarkAssPandi (tiny) https://yabu.me/npub1ft6jz0x6447em8cp6sj8x09cpgwxwtyx0zs74r3jpe9rsetmquwqr86lte https://fedi.fabrykajabo.li/files/b34511df-af5a-4b08-96ab-dcff5e2cf63b https://fedi.fabrykajabo.li/files/b34511df-af5a-4b08-96ab-dcff5e2cf63b https://yabu.me/nevent1qqsd59jvy03z2ka8fdef53956v9ngg5sw3u4xu5dwxdsfg77te27k3czyp902gfum2khm8vlq82zgueuhq9pceevseu2r65wxg8y5wr90vr3cnrspyd In reply to <a href='/nevent1qqs9mjckaqfu9pwd6na2dhluustlhuawx7c9nql6a46u0q08cllr28skzyc53'>nevent1q…yc53</a><br/>_________________________<br/><br/>Maybe `-vsync vfr -r (framerate) -c copy`? <br/>vsync should set it to variable framerate which would allow ffmpeg to shift timestamps, r would set framerate, and c copy would make it so it just copies stream without reencoding?<br/>I&#39;m not an expert but maybe it could work? 2025-02-03T20:00:10Z https://yabu.me/nevent1qqsxhznul6eavr0v4gh39g6w8gkpvhv5tduek3csrja4yh55ltm38nczyp902gfum2khm8vlq82zgueuhq9pceevseu2r65wxg8y5wr90vr3cm939m8 In reply to <a href='/nevent1qqsxagyhgutd7266t437u0h959j07rw8ksslmpq2q30e54aecxj3mfca6s6nj'>nevent1q…s6nj</a><br/>_________________________<br/><br/>Hm, okay thanks<br/>But out of curiosity what could be theoretical privacy considerations when having profile with &#34;running in the background&#34; turned on? 2025-01-22T01:01:05Z https://yabu.me/nevent1qqsr6k6hp9a5cpwmew5vm6gvy6j6um5xclen9wrcgrnpjjujwg8c8rgzyp902gfum2khm8vlq82zgueuhq9pceevseu2r65wxg8y5wr90vr3cze0hqz <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1kwarc5z9lwhen05uknd2nuwhhthd4ws0cku3t9j3rchm0fcd6luslse0nj" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>GrapheneOS</span> (<span class="italic">npub1kwa…e0nj</span>)</a></span> I have question about profiles.<br/>When they are allowed to work in the background, can for example some app just decide &#34;I wanna a locatiom data rn&#34; and just get the location (assuming the location is turned on in the current profile)? 2025-01-22T00:55:04Z https://yabu.me/nevent1qqsdg99m6nx38mve2kjvjkqsy88365xsz4f4vatfawcqxcdcallrwegzyp902gfum2khm8vlq82zgueuhq9pceevseu2r65wxg8y5wr90vr3c4j0z6e In reply to <a href='/nevent1qqsvzkgy76n574v865jxwnjh9f22ch9xcehrce89xeg7pn2pfltqdmcxsc73q'>nevent1q…c73q</a><br/>_________________________<br/><br/>Also there is another way to look at: attacker also has no idea of knowing if the victim actually used vpn/tor<br/><br/>So there is also uncertanity for the attacker<br/>Even if you know person is in a given country, you have no idea if they didn&#39;t set VPN also for the same country, which would show datacenter in the same country but different location 2025-01-21T22:36:36Z https://yabu.me/nevent1qqsvzkgy76n574v865jxwnjh9f22ch9xcehrce89xeg7pn2pfltqdmczyp902gfum2khm8vlq82zgueuhq9pceevseu2r65wxg8y5wr90vr3cfhuprv In reply to <a href='/nevent1qqsz92w5ekpxymk3jj3jq0dd4gwpmvls07qr47d2wmpxh93gw9kncncvgx9qa'>nevent1q…x9qa</a><br/>_________________________<br/><br/>Not to mention, from what I see this is kinda &#34;easy&#34; to fix if it&#39;s a journalist or other high-tier person:<br/>1. Zero-click is based on push notifications, which can be disabled/show only name not actual content<br/>2. In Signal settings you can turn off automatic download of Media files, which will mitigate the 1 click aspect too (Will still work after downloading file itself tho)<br/><br/>And as always, if your thread model is high enough, you def should use VPN or TOR<br/><br/>For regular users this doesn&#39;t really do much harm, assuming you don&#39;t have attackers specifically targetting you, and even if you did, cloudflare datacenters aren&#39;t much reliable source of exact location (author himself said ~250 miles radius).<br/><br/>I still think this is an very interesting finding, and I believe signal should actually try to mitigate this somewhat instead of just saying it&#39;s not their responsibility, but I don&#39;t believe this is that severe. 2025-01-21T22:29:36Z https://yabu.me/nevent1qqsgpdqk9uqxv9rrn9z3ruycw3n4l66jrvm6tqz022gjjwdtxwf8akszyp902gfum2khm8vlq82zgueuhq9pceevseu2r65wxg8y5wr90vr3c7wc0gv In reply to <a href='/nevent1qqs8ytl2yt9fmaww40fv5rqa00keeseszhh2ua8qlj8uzhxqc6yph6qrh3xja'>nevent1q…3xja</a><br/>_________________________<br/><br/>I don&#39;t wanna fight but wouldn&#39;t it be possible to package KeePassXC into some installer that supports MS Store updates?<br/>Isn&#39;t there some way to turn MSI packages into MSIX? 2025-01-07T14:31:29Z https://yabu.me/nevent1qqs0uqrh4tp8mqk0j32pqt0qvl2vgjwhs3gr8pce888wjvlkjfcptyqzyp902gfum2khm8vlq82zgueuhq9pceevseu2r65wxg8y5wr90vr3c5kvtyp In reply to <a href='/nevent1qqs0agc4lu88v9xlvk2nx6hh70vz9l0g5r499jevj678vf78527yyzc0xuv0p'>nevent1q…uv0p</a><br/>_________________________<br/><br/>It&#39;s because it is not a Public status<br/>its unlisted and it works when you enter the link into your instances search bar 2024-12-05T06:05:29Z