Start with game jam. I recommend to start with Godot. It's quite easy with a bunch of tutorials. I have done couple of game jams.

For a steam game you need to have at least 2 hours of playtime, as everyone will just refund it.

There really is an XKCD for everything. Even if it was drawn years before what its applicable to

Btw, this is exactly the thing DNS CAA should prevent, and a reason why you should always have it set up for your domains.

EDIT: Neverming, CAA is only checked on issuance-time, so the CA should refuse to create the cert, instead of browsers checking for it. WTF? What usecase does that have?

EDIT: Neverming, CAA is only checked on issuance-time, so the CA should refuse to create the cert, instead of browsers checking for it. WTF? What usecase does that have?

Omg, I can't believe this is happening.

I was the only one in our pentesting company who has reported "You don't have DNS CAA record" as a finding. I was usually told it's not really a worthwhile finding, that the risk is pretty low.

Haha, I was right!

Reminder that you should set that up for your domain.

Honestly you'd have to fork an entire distro because at this point shameless AI development is taking place from the bottom to the top. Debian, KDE, kernel, etc.

Nobody hates AI 'by virtue of being AI", there are a dozen different legitimate problems.

Game jams are awesome! Even if the game is awful (most of mine are, at least), you still learn a lot about managing a project and getting something from start to finish. Godot is your best bet, it has been used in lots of great indie games (off the top of my head, Brotato used Godot I think), and GDScript (Python with optional explicit types basically) is far easier to approach compared to C# (Unity) or C++ (Unreal)

If you already know how to make nice art/sounds, great! If you don't, like when I first started, that's also fine! There are lots of good free assets (see OpenGameArt, Kenney, bfxr, Jummbox, etc.), and pixel art is also fun to learn. I use Aseprite, but any software will do.

I hope Linux is going well for you! Remember that you can easily hop between distros by copying the home directory to a new install.

Linux is nothing. My grandma can use Linux. The only complicated things about Linux are when I choose to make it so, because it's cool that I can change things. If that's your draw to Linux, you may be into programming also, and far be it from me to discourage you. But it is exponentially harder to program, a lot of work for games specifically, especially as a single dev, and you are unlikely to make any money from it unless you get good marketing. It's got to be for the love of the game (literally) and of learning stuff. There's no way to know if you have what it takes besides trying.

Astonishingly, the private keys were 4, 56, 66, 115, 155, 156, 230, 237.

Oh for-- even Let's Encrypt spends a hot minute trying to break your keys. Trivially small numbers should be spotted immediately.

Those keys are the private keys of 8 intermediate certificates. With those keys you can sign any certificate and from a browser(or any other app the consumes TLS) it will look like it was signed by the official intermediate certificate.

So yeah, an attacker could sign fake certificates for any site and pretend to be signed by the trusted eMudhra CA. It requires MitM.

As for revoking a cert, there are a few ways, but none of them are fully reliable. This works by having revocation list endpoints that list all the revoked certificates. Which is why you should already be fine if you are using a desktop browser(mobile could still be outdated). But for IoT devices, they tend to both not check the revocation lists, and not get updates to remove the compromised root. As a result we might have issues with this for a long time.

This is also why there has been a big push to have short expiry times for certificates in the industry for multiple years now. Because with shorter lifetimes, the open window for using a compromised certificate is limited.

I'd try the Godot Engine if I were you, given you know how to program. If not, I recommend learning the basics of programing first.

I don't want to sound discouraging, but for many it's a lengthy process to make any decent game. That's specially true if you want to learn about creating assets. As long as you do it for fun that doesn't matter though. Point being: don't expect to spend a month and create a hit. Just have fun doing it.

I don't quite understand, what are those keys and how are they different from certificates, and how is it really used by an attacker. Is it that an attacker may use those to sign MitM fake certificate but claim it to have been checked by eMudhra? Is there really no way of terminating a CA certificate?

The private key sizes of the compromised keys ranged from 3 to 8 bits. Astonishingly, the private keys were 4, 56, 66, 115, 155, 156, 230, 237.

I mean, I think SteamOS (and Linux in general) is a lot less sloppy than Windos...

I gotta jump over to BSD.

The idiocy is self-explanatory.

There is a Wayland?

went on vacation and another dude cleaned it up

the utopia/dystopia extreme views we keep seing

It's almost like the person going on vacation comes away with a positive view, and the person cleaning up after them comes away with a negative view . . .

25% is an idiotically low number

I genuinely can't tell if this is sarcasm or not and that makes me uneasy.

Welcome to Lemmy, where the hive mind has decided progress is bad, and will criticize anyone who disagrees until they either shut up or become one with the hive mind. People who still speak their own disagreement are the minority, and are rewarded with copious downvotes. They've made up their mind, and discourse is heavily discouraged.

With discounts I was able to price one of Lenovo's at CAD 7K (USD 5K). I haven't had a new laptop in 9 years, with the last being a $2K Yoga in 2017.

I play games, home lab, and really want to take a deeper dive in to local LLM's. If it were to last me 9 years again, I could maybe reason through it as a huge treat to myself. It's tempting but in the end I can never justify pulling the trigger.

But I also want to main Linux. Gaming on ARM is progressing thanks to FEX but not a guarantee, and as evidenced by the write up there are a lot of workarounds to get Linux going. I'd worry that too much time would be spent tinkering with just getting/keeping the laptop running rather than doing the stuff that I want on it.

A fork would need lots of initiative from existing kernel developers. Distro people are more of userspace integrators, less system programmers. I think distros will experiment with rebasing against different kernels, maybe a revival of Debian GNU/kFreeBSD or something. At the end of the day though, it's up to laptop and phone manufacturers whether to put money into developing hardware support on top of those.

Yes that's us

lmao

Man, this is going to garner a lot of hate by people who hate AI just by virtue of it being AI.