I also posted this on the cross-post, here's a response.
I work at Mullvad. (co-CEO, co-founder)
Some aspects of the described behavior are as we intended and some are not. The cause is not exactly as described in the blog post. As for mitigation, we are already testing a patch of the unintended behavior on a subset of our infrastructure. If any of you try to reproduce the blog post's findings you may get confusing results throughout the day.
We will also re-evaluate whether the intended behaviors are acceptable or not. Some of this is a trade-off between multiple aspects of privacy, and multiple aspects of user experience.
Please note that this is my current understanding, which may change. I was only made aware of this an hour ago, and most of that time was spent talking with Ops, considering what to do immediately, and writing this post.
Finally, for those of you who do security research: when you find a security or privacy issue, please consider notifying the maintainer/vendor before publishing your findings, even if you intend to publish right away.
Some aspects of the described behavior are as we intended and some are not. The cause is not exactly as described in the blog post. As for mitigation, we are already testing a patch of the unintended behavior on a subset of our infrastructure. If any of you try to reproduce the blog post's findings you may get confusing results throughout the day.
We will also re-evaluate whether the intended behaviors are acceptable or not. Some of this is a trade-off between multiple aspects of privacy, and multiple aspects of user experience.
Please note that this is my current understanding, which may change. I was only made aware of this an hour ago, and most of that time was spent talking with Ops, considering what to do immediately, and writing this post.
Finally, for those of you who do security research: when you find a security or privacy issue, please consider notifying the maintainer/vendor before publishing your findings, even if you intend to publish right away.
Here is a specific rundown of the AI used in the game:
-One TV program that has two episodes, around 5min in length each (images and speech is AI, but written, edited and music composed by humans)
-One TV commercial 10sec in lenght
-Paintings on the house walls (same as in MSC)
-Food pictures/textures, around 12 separate pieces
-"Carbon fiber finish" texture, but this is definitely not important so it can be removed :D
-And then maybe half (in minutes) of the music on the radio, generated by AI and lyrics written by humans except for one instrumental song. These can be removed (apart from one song that is part of the game feature), but there is no replacement. Lets just say that without them, the radio experience is... rather interesting.
Aw, that's a shame. I do want to point out that if you have PayPal, at least in the U.S. you can get a debit card that links the balance and other cards connected to the PayPal account.
# Address to listen to / bind to on the server
#
# For production:
# listen_addr: 0.0.0.0:8080
listen_addr: 127.0.0.1:8080
# Address to listen to /metrics and /debug, you may want
# to keep this endpoint private to your internal network
metrics_listen_addr: 127.0.0.1:9090
Port 8080 TCP is used for the connection, 9090 TCP is for metrics and not suggested to port forward. If you use a reverse proxy, you do not need to port forward to either of those ports directly, and instead to the reverse proxy.
The reason I added ACTION!="remove" is due to a recent change with systemd.
ACLs for device nodes requested by "uaccess" udev tag are now always
applied/updated by systemd-udevd through "uaccess" udev builtin, and
systemd-logind no longer applies/updates ACLs but triggers "change"
uevents to make systemd-udevd apply/update ACLs. Hence, the "uaccess"
udev tag should be set not only on "add" action but also on "change"
action, and it is highly recommended that the rule is applied all
actions except for "remove" action.
It uses the xbox layout. It has hall effect triggers and TMR joysticks (similar to hall effect), 2 back paddle buttons, 2 extra bumper buttons, and gyro.
The software does not work, or at least didn't work on Linux with wine when I tried a few months ago. However for just regular controls and if using Steam Input it doesn't matter.
Bookmarks for linking to services.
Grafana for graphs that I only look at if I am curious or looking into when a problem arises. I could use Uptime Kuma if I wanted a simpler solution or notifications.
You can look at the /boot/grub/grub.cfg file for details as to what each option is on the grub menu. It's not the prettiest file though.
Search for menuentry, that should be followed by the name of the entry and below details for what kernel and options it uses.
This is called “Outbound link tagging” - you can configure this on the Analytics Settings page (/ghost/#/settings/analytics)
And yeah, they do the same as GamingOnLinux with not including the content in the RSS feeds.
Forgot to give my opinion. The ref tag doesn't bother me because it's not giving any private information up, besides where I am from just like the referrer header does. I am kind of conflicted with the RSS feeds because I personally use them for many things, however I understand that these places need to advertise to make money (though I block ads too).
I also posted this on the cross-post, here's a response.
https://news.ycombinator.com/item?id=48145679
Here's a response.
https://news.ycombinator.com/item?id=48145679
Oh, thanks for this. One question, what's with the URL on the banner? The character between the "7" and "D" in the banner looks disfigured.
Steam's AI Generated Content Disclosure states:
And a post by the developer specifically stating where AI is used.
Yeah, 8(PCIe 3.0 x1)
It's listed in the specifications section near the bottom of the page titled "M.2 2280 NVMe Slot".
There's also 4get that is similar to SearXNG. https://4get.ca/
I have not tried it much personally though.
git repo: https://git.lolcat.ca/lolcat/4get
There's also archive.today that can bypass these paywalls. https://archive.ph/NfjJm
Aw, that's a shame. I do want to point out that if you have PayPal, at least in the U.S. you can get a debit card that links the balance and other cards connected to the PayPal account.
Look at either putting it behind a reverse proxy or using the built in Let's Encrypt / ACME configuration.
Suggested documentation:
The config linked to in their documentation states
Port 8080 TCP is used for the connection, 9090 TCP is for metrics and not suggested to port forward. If you use a reverse proxy, you do not need to port forward to either of those ports directly, and instead to the reverse proxy.
The last thing I can suggest are the last two comments on the steam-devices repo: https://github.com/ValveSoftware/steam-devices/issues/64#issuecomment-3092449971
Try adding these to a file such as
/etc/udev/rules.d/71-8bitdo-pro-2.rulesand/or
The reason I added
ACTION!="remove"is due to a recent change with systemd.Check out this repo for udev rules: https://codeberg.org/fabiscafe/game-devices-udev
Instructions copied from repo:
Thank you. I'll be sure to try it later.
8BitDo Ultimate 2 Wireless Controller.
It uses the xbox layout. It has hall effect triggers and TMR joysticks (similar to hall effect), 2 back paddle buttons, 2 extra bumper buttons, and gyro.
The software does not work, or at least didn't work on Linux with wine when I tried a few months ago. However for just regular controls and if using Steam Input it doesn't matter.
https://www.8bitdo.com/ultimate-2-wireless-controller/
https://www.gamingonlinux.com/2025/04/8bitdo-ultimate-2-is-getting-full-steam-input-support-for-more-buttons/
Bookmarks for linking to services. Grafana for graphs that I only look at if I am curious or looking into when a problem arises. I could use Uptime Kuma if I wanted a simpler solution or notifications.
Try contacting the Forgejo admin, they can enable the HTTP meta refresh challenge, though it does have a higher false positive rate. https://anubis.techaro.lol/docs/admin/configuration/challenges/metarefresh
Your Lemmy instance blocks the lemmygrad instance where IHave69XiBucks resides. My instance does too.
You can look at the /boot/grub/grub.cfg file for details as to what each option is on the grub menu. It's not the prettiest file though. Search for
menuentry, that should be followed by the name of the entry and below details for what kernel and options it uses.There's an option labeled Use AI to suggest tabs and a name for tab groups.
On 141 it's listed in Settings under the General => Tabs section.
It changes browser.tabs.groups.smart.userEnabled.
Looking at it further, either option will disable it. Here's the code that checks both values, https://github.com/mozilla-firefox/firefox/blob/FIREFOX-ANDROID_141_0_3_RELEASE/browser/components/tabbrowser/content/tabgroup-menu.js#L481
The
?reftag is from the Ghost blogging platform. https://forum.ghost.org/t/remove-ref-from-links-in-posts/37701/2And yeah, they do the same as GamingOnLinux with not including the content in the RSS feeds.
Forgot to give my opinion. The ref tag doesn't bother me because it's not giving any private information up, besides where I am from just like the referrer header does. I am kind of conflicted with the RSS feeds because I personally use them for many things, however I understand that these places need to advertise to make money (though I block ads too).