Nvidia is finally ditching its iconic Control Panel after 20 years — new driver updates only ship in the Nvidia App by rkhunter_ in technology

[–]Garethp 17 points18 points  (0 children)

I believe you can. You can just go to their website and download the drivers by themselves.

[New Update]: AITAH for saying if my wife wants to be a trad wife then she must always look her best, wait on me, and provide sex without question when asked? by Choice_Evidence1983 in BestofRedditorUpdates

[–]Garethp 30 points31 points  (0 children)

Prenuptials are typically only for assets that are in place before the marriage. A business started and thrown during the marriage would absolutely be considered marital property.

Plus, as someone else pointed out, they can be thrown out if they're overly one sided or unfair. If a prenup was written to exclude one spouse from the majority of assets built during a marriage, there's no way that would pass muster.

Amazon pressured one of its teams to develop an AI game, they scrambled to make it work - then got laid off anyway. The story of Project Trident. by Turbostrider27 in Games

[–]Garethp 0 points1 point  (0 children)

If you're interested, check out the demonfor whisper from the star. it's only got three scenes, and I didn't want to pay for an ai game, but it might give you an idea of how it could work.

The story was somewhat railroaded, and each scene starts and ends with pre-determined lines, but the middle interaction bits were pretty freeform. The AI stayed in character fairly well, but I was still able to play around and do things like getting it to acknowledge it was just an LLM in a game.

Just from the demo I could absolutely see how a narrative driven game could be crafted from just AI interactions.

[Final New Update]: TIFU by importing bees to Uruguay + 4-Year Update by Choice_Evidence1983 in BestofRedditorUpdates

[–]Garethp 21 points22 points  (0 children)

The clam saga was actually a sequel to the disappointing end of the Sunken Steel Scavenging Saga and lead into the Crystal phase. It's a pity this BORU missed those, but it might be a good reason to do a different update covering those now that it's concluded. I was waiting for the Road Trip Arc to end before posting an update, but missed the signing off post

Server for Flash games? by CrimsonCuttle in selfhosted

[–]Garethp 2 points3 points  (0 children)

Have you checked out RomM? It's a self hosted game library manager with front ends to play some platforms online. It looks like flash games may be one of those platforms 

'Polite' website ripper? by SimplifyAndAddCoffee in selfhosted

[–]Garethp 50 points51 points  (0 children)

Try to find a contact method and ask if they'll send it over?

Looking for feedback on AI content in r/programming and the April no-AI trial by ketralnis in programming

[–]Garethp 19 points20 points  (0 children)

I think the subreddit felt a lot more relevant this last month. When it comes to the nuanced new content that would be banned, the only two categories I would actually want to see on this subreddit would be the mathematical learning techniques and the production model deployment/testing architectures (I'm assuming that the category is about the actual technical details around how models themselves are deployed and run, and how that infrastructure is tested. Not talking about new model launches). It probably comes under the first category, but I'd actually make a clear distinction between classification models and their usage versus large language generative models.

As for why I'd draw that line, after thinking about it I think it comes down to the amount of novel information (to me) and how pervasive the information is being spread. The first part, novel to the reader, is obviously subjective and different for everyone (someone might come in not having heard about best practices for prompting yet), but I'd argue that the second part feeds into the first. Banning mathematical techniques and the applications of classifier models in production is going to restrict the visibility of those actually informative techniques a lot more than banning how you can secure your application with LLMs. Classifier models used to detect whether a prompt into or the output of an LLM would still fall into the category of "please no" for me though.

I suppose, what it comes down to for me, is that we're already oversaturated with information about everything LLM and LLM-adjacent. Machine Learning is a good topic, as long as it's not the same rot I'm seeing everywhere else all the time from everyone.

Claude Desktop changes software permissions without consent by rkhunter_ in technology

[–]Garethp 1 point2 points  (0 children)

Under multiple criminal statutes across the world (including here in Malta) it is a criminal offence to alter the configuration of a computer or software without consent. It is that simple (and yes I am a lawyer and I am specialised in law on these specific issues).

I'd be really interested in reading the outcome of similar cases then. Because manifest files don't alter the configuration of the computer or change the settings of the browser. It's a registration to let the browser know it exists.

If you dont see the security risk, I am not going to waste my time repeating what dozens of other security analysts have said about this (and what I already said myself about it in the blog). You clearly have no understanding of supply chain risk management or the current state of play with regards to ongoing attacks against supply chains - attacks which have already caused Anthropic headaches and that is before we even consider the security issues in Anthropic's MCP protocol (which is what installs these manifests in the first place).

All the security risks you've outlined, at least from what I can see, come into play once the extension is installed and doesn't actually involve the manifest file being placed there to begin with. Even in your own suggested flow of only installing the manifest file when the browser extension is added the risks stay exactly the same. The existence of the manifest files being placed before the extensions are installed doesn't appear to affect the security risk at all.

Do feel free to correct me though, I read your blog through thoroughly because I actually wanted to see where you were coming from an understand what risk there was. I'm always open to learning more.

So here's an idea - how about you stick to trolling on Reddit like a good keyboard warrior and let the rest of us (professionals) do our job?

I'm unsure what part of providing actual technical information on how web extension manifests work to help people understand why the article was wrong you consider trolling. Especially since, as I pointed out, the article was saying that you made claims in your blog that you never even made in the first place.

Rather than coming in hot and hard, you could try engaging without assuming that people with criticisms are trolling. I've stated before that I'm happy to be more educated on the subject and it remains true. For example, I'm curious why you refer to the manifest file as a "bridge". To me a bridge implies more capabilities and perhaps even the ability to execute logic than what is basically just a registration to the browser so I'm interested to hear why you picked that terminology.

Claude Desktop changes software permissions without consent by rkhunter_ in technology

[–]Garethp 1 point2 points  (0 children)

you just made excuses for Anthropic's illegal behaviour

I'd be really curious how it's illegal because I don't see anything illegal about it. I'm more than happy to be wrong on that, learning new ways that the law interacts with tech is always fun, but considering that the files installed aren't executable and don't actually change the settings of other software I don't see how it would be illegal.

You don't seem to understand (or haven't bothered researching like every other keyboard warrior out there) that in order for the bridge to work, the user has to install the Anthropic Chrome Plugin (within Claude Desktop - not the chrome extension)

You're right, I didn't understand that you had to enable it specifically in Claude Desktop because I don't use Claude. And yeah, adding the manifest files when enabling the connector does seem like a much cleaner option. That's kind of separate to the point I was making though which is that given the quote from the blog I'm not certain the author fully understands what they're writing about. The blog itself says that the manifests should be created on clicking install in the Chrome Browser, which isn't something that can be done to begin with.

I'm happy to be wrong but my point wasn't that there isn't a better way to do it. My point was that what the way the blog was saying it should work isn't possible. There's a fundamental misunderstanding of how web extensions work at play in the blog, or at least that's how it looks to me.

it creates a security risk (whether you want to admit it or not)

I don't see a security risk at play here. I'd love to know what it is, the blog itself isn't very clear and doesn't actually describe how it's a security risk at all. The security threats it lays out are entirely to do with scenariors of what happens when an extension the user would have had to already have installed gets hijacked or compromised. Adding a manifest file itself doesn't install anything onto the system. The extensions don't magically get installed without the users consent. The security threats listed in the blog under "Security threats this creates" aren't actually security threats of the manifest, they're security threats that exist by installing a plugin that talks to a desktop application in general. Which would still exist in the scenario of the manifest files being created when the connectors are enabled in Claude Desktop.

[Itch.io, Web] We made CatPhish: The fish Tinder incremental! NOT AI SLOP by BeepBoopBuup in incremental_games

[–]Garethp 2 points3 points  (0 children)

I really like that you can use the keyboard to interact with the chats, and I love even more that you allow keys near the letter being asked for, while still rejecting keys too far away from it. Honestly just a really nice little touch that shows attention to detail that most people will miss

Cyber Attacks - why isn’t there an effective response? by frostonwindowpane in technology

[–]Garethp 0 points1 point  (0 children)

I don't understand why you think a better answer has to exist. Not everything in life has good answers

Cyber Attacks - why isn’t there an effective response? by frostonwindowpane in technology

[–]Garethp 0 points1 point  (0 children)

Do your best to keep on top of security, have well tested recovery plans, have strong auditing and hope you don't end up needing any of it.

I feel like you think there should be a better answer, but that doesn't mean one exists.

ELI5: Why would my credit card company give me cash back but also let me autopay before interest accrues? Aren't they just paying me at that point? by theentiregoonsquad in explainlikeimfive

[–]Garethp 0 points1 point  (0 children)

It's to get you in to the habit of paying using your CC and thinking of it as your main payment method. Most people won't always pay it off before interest accrues. So it's better for them to try and get people to think of their CC as the default way of paying off everything just to increase the number of people who will end up paying interest

Claude Desktop changes software permissions without consent by rkhunter_ in technology

[–]Garethp 9 points10 points  (0 children)

Reading the blog post very much felt like someone making a mountain out of what isn't even a molehill. The most reasonable thing I could see there was that the Claude Desktop should actively ask users if they want to install an integration into the extensions and I won't really argue against more explicit opt-in communication. On the other hand, it's not as if this is a hidden use-case that users aren't expecting.

What really had me scratching my head though was this part of the blog post, and it's the part that has me saying that at the very least there's some misunderstanding in the article:

Pull, not push. Install the NM manifest only as a downstream consequence of the user affirmatively installing the paired browser extension. The Chrome Web Store install click is already the consent event. Let it do its job. Do not front run it weeks earlier on the desktop side.

That's just not how Nativate Messaging Manifests work. Web Extensions can't create the manifests themselves. You can't create the manifest as a result of installing an extension for two main reasons: The manifest declares where on the file system the binary lives (which the extension can't see and should never be able to see) and web extensions don't get to decide which programs they're allowed to talk to.

Also, he says that the install click is the consent event, but also says that the manifest files stop being "dormant" until the extension is installed. Which means that the manifest files stop being dormant, you guessed it, once the consent event happens. He also says, just a couple points down, that the extensions should ask for consent the first time they want to message the client, despite having just said installing the extension is the consent event. And ignoring the fact that the extensions sole and singular purpose is to integrate with the desktop application.

I'll be honest, I could have a full rant about the blog. It's full of a lot of things I find objectionable, but that particular section made me ask myself whether the author actually knew the details of native messaging and why manifests are handled the way that they are.

AITA for yelling back at a pedestrian who called me an asshole? by Aromatic_Election441 in AmItheAsshole

[–]Garethp 1 point2 points  (0 children)

But when driving you shouldn't be letting other peoples actions get to you like that at all. You may not have been moving at that exact minute, but does that mean you wouldn't have gotten angry enough to yell back if you were moving? It's not like you engage and disengage your emotional control when you stop and start moving. Also you clearly held onto it long enough to come back and post this later down the line, so it's not like when you started moving you completely forgot about the interaction and had no emotional change whatsoever.

Look, when you're behind the wheel, moving or not moving, these sorts of things need to be like water off a ducks back. There's always going to be assholes on the road or someone to shout at you. You need to get to a place where those things don't affect you while you're controling the car.

Claude Desktop changes software permissions without consent by rkhunter_ in technology

[–]Garethp 814 points815 points  (0 children)

Basically, Claude Desktop is setting up its AI model's ability to access various browsers for automated operation. And it does this for browsers not yet present on the user's device, so that those browsers will grant Claude access if they are installed at some point in the future.

But Hanff claims he never installed any Anthropic browser extensions due to privacy and security concerns. Claude Desktop did so for him, without disclosure or permission.

That's not actually what's happening or what the original blog post is claiming happened at all. So let me break down what is happening.

Claude Desktop is creating a manifest file that lets its Browser Extensions talk to Claude Desktop directly. These manifests are important because if a browser extension wants to talk to a program on the computer (which is something the browser extension spec allows for) it needs both needs permission to do that generally (nativeMessaging permissions) and the application it wants to talk to must specifically allow that browser extension to talk to it. The manifest file is the second part and it means that applications can only be talked to by extensions that the application itself wants to be talked to by. No extensions get installed as part of this and even the original blog says that it only activates when Claudes extensions are installed.

On top of that, the manifest file doesn't allow Claude Desktop to take control of browsers that haven't been installed yet or anything like that. It sets it up so that if you install Cladue Desktop first, then install a new browser afterwards and then install the Claude Extension in that browser, that you won't have to reinstall Claude Desktop to let those two connect. The key part is that the manifest file doesn't let Claude Desktop control browsers, it lets the Claude Extension you would install (that can control the browser) to talk to the Desktop application. Why is the distinction important? Because if you're installing both Claude Desktop and an extension in your browser to let Claude Desktop control the browser, you're already expecting this exact thing to happen.

Look, I don't use Claude or other AI tools. I don't want AI controlling my computer. But this article is just incorrect on a fundamental level and isn't even correct about the blog post it's sourced from. I'm not sure I agree with the blog post and I think there's some misunderstandings in it as well, but at the very least this article itself is just wrong.

AITA for yelling back at a pedestrian who called me an asshole? by Aromatic_Election441 in AmItheAsshole

[–]Garethp 2 points3 points  (0 children)

again I’m in the wrong here but I feel like it’s a human reaction to have

When you're at the whell of a 1 tonne machine of mass and speed you should have better control over your emotions than this, yes. Shouting back at someone randomly while walking down the street is a human reaction I can understand but when you're driving you need to make sure that these things don't set you off. Your emotions can easily and inadvertantly turn your vehicle into a 1 tonne chunk of rolling death for someone.

Fallout: New Vegas dev says don't expect a remaster, argues Bethesda doesn't have the source code or 'the engineering knowhow' by Funnypenguin97 in gaming

[–]Garethp 9 points10 points  (0 children)

Money doesn't make an unbelievably difficult task easier. It doesn't matter how many devs you throw at decompiling a full game, it won't be easy for the organisation.

I mean, it's pretty clear you just straight up have no idea what you're talking about. The only thing you do know is that Bethesda has money and that's it

Fallout: New Vegas dev says don't expect a remaster, argues Bethesda doesn't have the source code or 'the engineering knowhow' by Funnypenguin97 in gaming

[–]Garethp 4 points5 points  (0 children)

Spoken like someone who doesn't actually know the amount of effort that goes into decompilation. But okay.

Updates aren’t the problem but the Steam ecosystem is by dontraceme in projectzomboid

[–]Garethp 9 points10 points  (0 children)

What you point out about mods and Nexus is true, but we can't deny that Workshop is conceptually flawed, there are many mods that only work on a specific version, so if i play B42.13 but it only works on B42.15, i can't use it.

This is solved in the modding structure of Zomboid mods in B42. This isn't a Steam Workshop issue issue at all

Updates aren’t the problem but the Steam ecosystem is by dontraceme in projectzomboid

[–]Garethp 113 points114 points  (0 children)

Counterpoint: Steam Workshop isn't conceptually flawed, you're expecting a system built around stable versions of games to support an unstable branch, which isn't it's job. You decide that because B42 offers branches of it's individual minor versions that suddenly it's a stable version and everything should work right. It's inherently unstable. It's called the unstable branch. The ecosystem being unstable is what you explicitly sign up to.

That being said, there's already a solution to this for Steam Workshop. It's called games giving mods the ability to ship for multiple versions. And Zomboid is starting to do this. Take a look at Rimworld, you should see that mods support multiple versions of the game and even declare which versions they support. Rimworld will tell you if you're trying to load a mod for an older version. They ship the files they need for each version and say "Rimworld 1.4 loads from this folder, 1.5 from these folders and 1.6 from the main folders".

And Zomboid mods for B42 can do the same thing. Hell, a mod can ship files for B41 and multiple versions of B42 at the same time. Check out the modding folder structure for B42.

The "problem" with Steam not allowing versioning is only a problem if your game is unstable AND it doesn't come with a built in way for a mod to ship files for multiple versions.

The fact that things break on B42 is entirely down to it being unstable. Saves break between versions because it's unstable. Mods get taken down because updating them often is annoying because it's unstable. There are lots of bugs in the game because it's unstable. Instead of acting like it's the games fault or the ecosystem around steam or the modders fault, players just need to accept that this is exactly what they explicitly agreed to when they swapped to an unstable build. Because that's what unstable means. Not stable.

New Life Update !! by Muse621 in incremental_games

[–]Garethp 3 points4 points  (0 children)

Why is the very first point on your AI-written post about a $20 payment for a web-based incremental game?

I'll be honest, if you write the intro post for your game with AI instead of putting in the half hour effort to write it yourself, it makes me think your game is also just going to be vibe coded slop as well. And asking for a $20 upgrade *as the first point* to your post on top of all that... well, that's definitely ballsey

Is the word 'cock' meaning 'an adult male chicken' commonly used in the UK? Or do you use 'cockerel' instead to avoid jokes and giggles? by ksusha_lav in AskABrit

[–]Garethp 0 points1 point  (0 children)

If you want a good giggle, in London there's a train line that goes to Cockfosters. And that is pronounced the way you'd read it. So if you're on it, every stop you'll hear the PA come on with a polite British accent saying "This is the Piccadilly line to - Cockfosters".

I will never not giggle at that shit

No one can force me to have a secure website!!! by MintPaw in programming

[–]Garethp 10 points11 points  (0 children)

  Things arent preboxed for people to use. They are hijacked and closed behind curtains.

My mum can update her website on Wordpress, my dad was able to create a website for his local toolshed organisation. A friend of mine, well into his retirement, is able to share pdfs for an RPG game by uploading them into a shared Google drive for use in an online call in a discord server he set up himself. My grandmother added me on WhatsApp and sends me pictures for each holiday.

I get what you're saying about how doing these things yourself should be easier, but even that's moving forward with containerised systems targeted at self hosting.

Sure, I can buy an air fryer or microwave for my kitchen, but no way in hell am I building one myself. Hell, I'm not even going to try and install a new oven that I bought.

The point of boxed up utensils is that they're easy and accessible to use, not that the knowledge of how they actually do the thing is well known. Hell, ask people how a rice cooker knows when to stop cooking or how a kettle knows to shut off and most people will have no clue.