A Mouse

u/mouse@midwest.social
12 posts · 122 comments

Recent posts

Recent comments

I also posted this on the cross-post, here's a response.

I work at Mullvad. (co-CEO, co-founder)

Some aspects of the described behavior are as we intended and some are not. The cause is not exactly as described in the blog post. As for mitigation, we are already testing a patch of the unintended behavior on a subset of our infrastructure. If any of you try to reproduce the blog post's findings you may get confusing results throughout the day.

We will also re-evaluate whether the intended behaviors are acceptable or not. Some of this is a trade-off between multiple aspects of privacy, and multiple aspects of user experience.

Please note that this is my current understanding, which may change. I was only made aware of this an hour ago, and most of that time was spent talking with Ops, considering what to do immediately, and writing this post.

Finally, for those of you who do security research: when you find a security or privacy issue, please consider notifying the maintainer/vendor before publishing your findings, even if you intend to publish right away.

https://news.ycombinator.com/item?id=48145679

Here's a response.

I work at Mullvad. (co-CEO, co-founder)

Some aspects of the described behavior are as we intended and some are not. The cause is not exactly as described in the blog post. As for mitigation, we are already testing a patch of the unintended behavior on a subset of our infrastructure. If any of you try to reproduce the blog post's findings you may get confusing results throughout the day.

We will also re-evaluate whether the intended behaviors are acceptable or not. Some of this is a trade-off between multiple aspects of privacy, and multiple aspects of user experience.

Please note that this is my current understanding, which may change. I was only made aware of this an hour ago, and most of that time was spent talking with Ops, considering what to do immediately, and writing this post.

Finally, for those of you who do security research: when you find a security or privacy issue, please consider notifying the maintainer/vendor before publishing your findings, even if you intend to publish right away.

https://news.ycombinator.com/item?id=48145679

Steam's AI Generated Content Disclosure states:

The developers describe how their game uses AI Generated Content like this:

-Some base textures have been AI generated during the development

-Some of the imagery and speech audio in the in-game TV programs are AI generated

-Some in-game radio music is AI generated

And a post by the developer specifically stating where AI is used.

Here is a specific rundown of the AI used in the game:

-One TV program that has two episodes, around 5min in length each (images and speech is AI, but written, edited and music composed by humans)

-One TV commercial 10sec in lenght

-Paintings on the house walls (same as in MSC)

-Food pictures/textures, around 12 separate pieces

-"Carbon fiber finish" texture, but this is definitely not important so it can be removed :D

-And then maybe half (in minutes) of the music on the radio, generated by AI and lyrics written by humans except for one instrumental song. These can be removed (apart from one song that is part of the game feature), but there is no replacement. Lets just say that without them, the radio experience is... rather interesting.

on Headscale · c/selfhosted · 10 pts · 289d

Look at either putting it behind a reverse proxy or using the built in Let's Encrypt / ACME configuration.

Suggested documentation:

The config linked to in their documentation states

# Address to listen to / bind to on the server
#
# For production:
# listen_addr: 0.0.0.0:8080
listen_addr: 127.0.0.1:8080

# Address to listen to /metrics and /debug, you may want
# to keep this endpoint private to your internal network
metrics_listen_addr: 127.0.0.1:9090

Port 8080 TCP is used for the connection, 9090 TCP is for metrics and not suggested to port forward. If you use a reverse proxy, you do not need to port forward to either of those ports directly, and instead to the reverse proxy.

on 8BitDo controllers? · c/linux_gaming · 1 pts · 291d

The last thing I can suggest are the last two comments on the steam-devices repo: https://github.com/ValveSoftware/steam-devices/issues/64#issuecomment-3092449971

Try adding these to a file such as /etc/udev/rules.d/71-8bitdo-pro-2.rules

# 8bitdo pro 2 bluetooth hidraw
ACTION!="remove", KERNEL=="hidraw*", KERNELS=="*2DC8:6006*", MODE="0660", TAG+="uaccess"

and/or

ACTION!="remove", KERNEL=="hidraw*", KERNELS=="*2DC8:6012*", MODE="0660", TAG+="uaccess"

The reason I added ACTION!="remove" is due to a recent change with systemd.

ACLs for device nodes requested by "uaccess" udev tag are now always applied/updated by systemd-udevd through "uaccess" udev builtin, and systemd-logind no longer applies/updates ACLs but triggers "change" uevents to make systemd-udevd apply/update ACLs. Hence, the "uaccess" udev tag should be set not only on "add" action but also on "change" action, and it is highly recommended that the rule is applied all actions except for "remove" action.

Recommended example:

ACTION!="remove", SUBSYSTEM=="hidraw", TAG+="uaccess"

The following example does not work since v258:

ACTION=="add", SUBSYSTEM=="hidraw", TAG+="uaccess"

8BitDo Ultimate 2 Wireless Controller.

It uses the xbox layout. It has hall effect triggers and TMR joysticks (similar to hall effect), 2 back paddle buttons, 2 extra bumper buttons, and gyro.

The software does not work, or at least didn't work on Linux with wine when I tried a few months ago. However for just regular controls and if using Steam Input it doesn't matter.

https://www.8bitdo.com/ultimate-2-wireless-controller/

https://www.gamingonlinux.com/2025/04/8bitdo-ultimate-2-is-getting-full-steam-input-support-for-more-buttons/

There's an option labeled Use AI to suggest tabs and a name for tab groups.

On 141 it's listed in Settings under the General => Tabs section.

It changes browser.tabs.groups.smart.userEnabled.

Looking at it further, either option will disable it. Here's the code that checks both values, https://github.com/mozilla-firefox/firefox/blob/FIREFOX-ANDROID_141_0_3_RELEASE/browser/components/tabbrowser/content/tabgroup-menu.js#L481

The ?ref tag is from the Ghost blogging platform. https://forum.ghost.org/t/remove-ref-from-links-in-posts/37701/2

This is called “Outbound link tagging” - you can configure this on the Analytics Settings page (/ghost/#/settings/analytics)

And yeah, they do the same as GamingOnLinux with not including the content in the RSS feeds.

Forgot to give my opinion. The ref tag doesn't bother me because it's not giving any private information up, besides where I am from just like the referrer header does. I am kind of conflicted with the RSS feeds because I personally use them for many things, however I understand that these places need to advertise to make money (though I block ads too).