At 1/17/24 07:20 PM, BlueMonday1984 wrote:Backing track is "lost" by CRIM3S:
MUSIC can simply be flagged. I don't think I've mentioned that.
At 1/17/24 07:55 PM, Exedor wrote:At 1/17/24 07:20 PM, BlueMonday1984 wrote:Backing track is "lost" by CRIM3S:MUSIC can simply be flagged. I don't think I've mentioned that.
Way ahead of ya:
(Funnily enough, my first post here was regarding a submission using copyrighted music - I don't remember if I flagged it or not.)
At 1/17/24 01:42 PM, Dreggsu wrote:Newgrounds is now introducing mandatory 2FA, but instead of using an authenticator, you need to use your email.
Post by Tom announcing this:
https://www.newgrounds.com/bbs/topic/1531148
If you can't be a part of the solution, don't be a part of the problem.
As a 21 year veteran of Newgrounds, former Portal Moderator & 3rd in charge of the EGB, do you honestly think I would not have read that thread? I had an extensive chat (well over an hour) with Tom last night re: the log-in issue I'd been having & there is a problem with it as we eventually found out. They are currently working to fix the problem.
FYI, this is the last message I got from Tom, "Actually I think yesterday's update broke this and email 2FA IS requiring a code every time. Will give Josh the heads up."
The problem is, if you're using the same device to log-in to NG every time you should NOT be required to enter the 6 digit code EVERY time you log-in, ONLY if you are logging-in from different devices. Since I use 4 different accounts on NG every day to play a game here, I log-in/out multiple times daily from the same device & until yesterday I'd never had to worry about any 6 digit code verification or using multiple emails, I just used username & password & could swap accounts at will without having to retreive code from email over & over & over, which is just tedious.
So, anyway there is a problem with it & hopefully it will be fixed soon.
https://www.newgrounds.com/portal/view/914535 (NSFW)
Original creator is Lagoontoons (https://twitter.com/lagoontoons/status/1715898417090626020 (NSFW?) )
Uhhh, does this count as an audio visualizer?
No animation
How did this pass judgement?
10 poorly drawn pictures in slideshow form
At 1/17/24 02:42 PM, YendorNG wrote:Because for some reason I see passkeys as a grey-market commodity and an attack vector-- not as safe as phone authentication.
I get your intuition and I think it probably springs from the fact that passkeys are an open standard and hence make it known "how the trick is done". It's funny that should lead you to think of passkeys as being more ripe for exploitation as a grey market commodity though, because that's one of the areas where they are superior to both passwords and "hardware" authentication.
The key word here is commodity. The grey-market doesn't care about individuals, except in aggregate, and both password and phone authentication force the accumulation of authentication data into a single location that's ready to be commodified if stolen.
In the case of passwords, the mechanism is easy to see. Passwords are a shared secret technology and thus any party that wants to authenticate individuals has to centrally collect authentication data. It can try to make it harder to make use of this data (keeping hashes instead of plaintext, using a salted challenge system, etc) but ultimately these data collections are the commodity du jour of the grey market. The fact that people reuse passwords makes these "password dumps" even more valuable.
The through line for the commodification of "hardware" authentication is similar. I use "hardware" in quotes to denote the idea that authentication material is tied to a particular physical device that is supposedly unclonable in contrast to the often related idea of the authentication running on hardware that is physically isolated from more general purpose computing. The latter is one of the best security techniques we have today and can be used with passkeys as well. The former, while useful in many circumstances, does create a single point of failure ripe for grey-market commodification.
Since bits don't have colors, a party trying to authenticate a phone user can't actually know if a challenge-response calculation was done on a particular phone. So what happens practically is that these operations are attested by a third party signing one or more of the keys involved through a web of trust. Volia, a central point of failure (any signing key in the web) for hackers to concentrate on and steal. The gimmick here is that sometimes the grey market won't sell the keys directly, they'll sell signing services. This happened in the early days of Switch homebrew, you could buy signatures from the stolen keys of smaller developers. Hell, Microsoft recently had its own signing keys stolen!
Passkeys avoid this issue by dropping the pretense of being tied to hardware. Individually this might seemingly be more vulnerable because of the risk of cloning but the aggregate risk is much less.
Thus the great thing about passkeys is that they don't expose users to any second party risk whatsoever. They share a public key with the party they want to be able to authenticate with and that's it. If that other party gets hacked, the user don't care, the key can't even be linked back beyond whatever records the site chose to keep.
[Edit: Relevant to this discussion is the fact that over Christmas a pure software method for extracting data from the secure memory of iPhones was discovered and that modern day Switch homebrew does something similar. Hardware is an additional layer of protection, but it's not unbeatable. Passkeys are an important step away from shared secret systems. The hardware stuff is kind of orthogonal to that.]
At 1/18/24 12:49 AM, alsoknownas1 wrote:At 1/17/24 02:42 PM, YendorNG wrote:Because for some reason I see passkeys as a grey-market commodity and an attack vector-- not as safe as phone authentication.
ackchyually
I get your intuition and I think it probably springs from the fact that passkeys are an open standard and hence make it known "how the trick is done". It's funny that should lead you to think of passkeys as being more ripe for exploitation as a grey market commodity though, because that's one of the areas where they are superior to both passwords and "hardware" authentication.
ackchyually
The key word here is commodity. The grey-market doesn't care about individuals, except in aggregate, and both password and phone authentication force the accumulation of authentication data into a single location that's ready to be commodified if stolen.
ackchyually
In the case of passwords, the mechanism is easy to see. Passwords are a shared secret technology and thus any party that wants to authenticate individuals has to centrally collect authentication data. It can try to make it harder to make use of this data (keeping hashes instead of plaintext, using a salted challenge system, etc) but ultimately these data collections are the commodity du jour of the grey market. The fact that people reuse passwords makes these "password dumps" even more valuable.
ackchyually
The through line for the commodification of "hardware" authentication is similar. I use "hardware" in quotes to denote the idea that authentication material is tied to a particular physical device that is supposedly unclonable in contrast to the often related idea of the authentication running on hardware that is physically isolated from more general purpose computing. The latter is one of the best security techniques we have today and can be used with passkeys as well. The former, while useful in many circumstances, does create a single point of failure ripe for grey-market commodification.
ackchyually
Since bits don't have colors, a party trying to authenticate a phone user can't actually know if a challenge-response calculation was done on a particular phone. So what happens practically is that these operations are attested by a third party signing one or more of the keys involved through a web of trust. Volia, a central point of failure (any signing key in the web) for hackers to concentrate on and steal. The gimmick here is that sometimes the grey market won't sell the keys directly, they'll sell signing services. This happened in the early days of Switch homebrew, you could buy signatures from the stolen keys of smaller developers. Hell, Microsoft recently had its own signing keys stolen!
ackchyually
Passkeys avoid this issue by dropping the pretense of being tied to hardware. Individually this might seemingly be more vulnerable because of the risk of cloning but the aggregate risk is much less.
ackchyually
Thus the great thing about passkeys is that they don't expose users to any second party risk whatsoever. They share a public key with the party they want to be able to authenticate with and that's it. If that other party gets hacked, the user don't care, the key can't even be linked back beyond whatever records the site chose to keep.
ackchyually
[Edit: Relevant to this discussion is the fact that over Christmas a pure software method for extracting data from the secure memory of iPhones was discovered and that modern day Switch homebrew does something similar. Hardware is an additional layer of protection, but it's not unbeatable. Passkeys are an important step away from shared secret systems. The hardware stuff is kind of orthogonal to that.]
lol, that's so crazy dude
At 1/18/24 01:19 AM, gamejunkie wrote:JAMESUNIVERSE Shiny Text Intro by jamesuniverse
https://www.newgrounds.com/portal/view/914538
Intro?
yeah I had that one down as a pointless demo
At 1/18/24 01:16 AM, tox wrote:lol, that's so crazy dude
It's true.
Backing up your statements and explaining your reasoning == ghey
Making a bold claim that-ackchyually-the key mover in a space and the largest technology company by market cap to ever exist is wrong with no backup whatsoever == hella tight
Also: I'm a stupid moron with an ugly face and a big butt and my butt smells, and I like to kiss my own butt.
At 1/18/24 01:16 AM, tox wrote:lol, that's so crazy dude
Seriously though, fair enough. :)
At 1/18/24 07:03 AM, CzySzy wrote:Almost static visualizer
https://www.newgrounds.com/portal/view/914564
Its also stolen:
DIdn't this shit got taken down before? Because I swear we talked about this submission in here.
At 1/18/24 07:51 AM, BickerySebastian wrote:https://www.newgrounds.com/portal/view/914516
DIdn't this shit got taken down before? Because I swear we talked about this submission in here.
Yes we did, and I did not forget.
It was taken down because someone uploaded it on the creator's behalf, as well as theorized that the uploader was an alt made to get around a ban, both of which were not allowed on NG.
This time, the creator got unbanned and was able to repost it himself this time, for real.
CS - Musician, animator, and nostalgia enthusiast since 2020.
- they/she - 🏳️⚧️
At 1/18/24 01:49 PM, krinu wrote:At 1/17/24 04:47 PM, tox wrote:So this forum post went from military rp to a portal cleanup?At 1/17/24 02:42 PM, YendorNG wrote:At 1/17/24 02:35 PM, BlueMonday1984 wrote:At 1/17/24 01:42 PM, Dreggsu wrote:At 1/17/24 09:51 AM, gamejunkie wrote:Greetings my friends.
This is not EGB related BUT is of great importance. Is anyone having to go through the 2 step authentication process every time you log out & log back in? For example, if you log out & log back in (possibly if you use an alt account) once you've entered your username & password & pressed enter are you then prompted for a 6 digit code (which should be sent to your email)?
It's important to know if this is happening as yesterdays upgrades/updates might have screwed with the sign in system & if so we can have it fix pronto. Thanks for any & all replies.
If you're not sure, try logging out & logging back in & see what happens.
Newgrounds is now introducing mandatory 2FA, but instead of using an authenticator, you need to use your email.
Post by Tom announcing this:
https://www.newgrounds.com/bbs/topic/1531148
This kind of thing was a long time coming, especially after the account break-ins late last year.
I personally feel like the next step security wise would be to implement passkey support, but that's getting a bit off-topic.
Will you all please give those suggestions to tom instead of spamming it in here? Thanks.
Just to be sure on this idea, the ideals of the EGB is the defense of and protection for the portals
Portals are inherently tied to new grounds
Newgrounds is tied to its user base
It's user base is the customer in this case
Its a little Column A, a little Column B. Been that way since EagleRock kicked things off back in '05.
No animation, slideshow
Do not submit pictures in a slideshow format.
https://www.newgrounds.com/wiki/help-information/terms-of-use/movie-guidelines
This will inevitably get what it deserves but it's just a test & from memory tests should be placed in your personal file dump.
www.newgrounds.com/wiki/help-information/terms-of-use/movie-guidelines
Hate Speech
Your submission must not be racist or downright hateful towards specific groups of people.
At 1/18/24 07:49 PM, gamejunkie wrote:https://www.newgrounds.com/portal/view/914619
www.newgrounds.com/wiki/help-information/terms-of-use/movie-guidelines
Hate Speech
Your submission must not be racist or downright hateful towards specific groups of people.
Previous movie of his got the ZabuJard stamp of approval, so this might get a pass too. Maybe they both won't? Who knows? But keep this in mind.
CS - Musician, animator, and nostalgia enthusiast since 2020.
- they/she - 🏳️⚧️
the way he replied to me definitely reminded me of Sal Manella from Phoenix, wright
At 1/18/24 07:49 PM, gamejunkie wrote:https://www.newgrounds.com/portal/view/914619
www.newgrounds.com/wiki/help-information/terms-of-use/movie-guidelines
Hate Speech
Your submission must not be racist or downright hateful towards specific groups of people.
At 1/18/24 08:39 PM, Anonymous-Frog wrote:At 1/18/24 07:49 PM, gamejunkie wrote:https://www.newgrounds.com/portal/view/914619
www.newgrounds.com/wiki/help-information/terms-of-use/movie-guidelines
Hate Speech
Your submission must not be racist or downright hateful towards specific groups of people.
Previous movie of his got the ZabuJard stamp of approval, so this might get a pass too. Maybe they both won't? Who knows? But keep this in mind.
The ZabuJard stamp of approval means jack shit, my evidence is bad Foamy the Squirrel cartoons winning the Daily 5.
But never mind that, I'm leaning on a soft "Yeah, no, this shit's gotta go," because like yeah, I can see why it's hate speech, considering the description is just how to kill a British person in different ways, and also considering the previous movie just being offensive to some degree (I'm not black nor trans, so don't quote me on this.) because it doesn't use race or transgenderism as a way that constitutes criticism or making fun of stereotypes themselves, it's just a cat who can't get any bitches, does racist shit, and kills a black person. Every black person in the movie is depicted with blackface. You could say that the movie is deliberate on this because it's meant to show how Incel Cat's really racist, but said racist isn't remotely problematic nor is he punished for it, he can just evade any form of justice because apparently, his racism powers him to avoid prison. This even applies to trans people, as they're more or less stereotyped as sexual predatory deviants who merely use children as a way to spread their ideals.
If there was an artistic merit to any of what I've mentioned, at least I would defend as much as I can for what it is, but again, who knows, maybe there's a majority who'll support me on this or not.
At 1/18/24 09:18 PM, BickerySebastian wrote:At 1/18/24 08:39 PM, Anonymous-Frog wrote:The ZabuJard stamp of approval means jack shit, my evidence is bad Foamy the Squirrel cartoons winning the Daily 5.At 1/18/24 07:49 PM, gamejunkie wrote:https://www.newgrounds.com/portal/view/914619
www.newgrounds.com/wiki/help-information/terms-of-use/movie-guidelines
Hate Speech
Your submission must not be racist or downright hateful towards specific groups of people.
Previous movie of his got the ZabuJard stamp of approval, so this might get a pass too. Maybe they both won't? Who knows? But keep this in mind.
But never mind that, I'm leaning on a soft "Yeah, no, this shit's gotta go," because like yeah, I can see why it's hate speech, considering the description is just how to kill a British person in different ways, and also considering the previous movie just being offensive to some degree (I'm not black nor trans, so don't quote me on this.) because it doesn't use race or transgenderism as a way that constitutes criticism or making fun of stereotypes themselves, it's just a cat who can't get any bitches, does racist shit, and kills a black person. Every black person in the movie is depicted with blackface. You could say that the movie is deliberate on this because it's meant to show how Incel Cat's really racist, but said racist isn't remotely problematic nor is he punished for it, he can just evade any form of justice because apparently, his racism powers him to avoid prison. This even applies to trans people, as they're more or less stereotyped as sexual predatory deviants who merely use children as a way to spread their ideals.
If there was an artistic merit to any of what I've mentioned, at least I would defend as much as I can for what it is, but again, who knows, maybe there's a majority who'll support me on this or not.
I'm not gonna take any stances on this, but if you're gonna report that movie for hate speech, you're gonna have to report all 3 of them.
Yes, he made a 3rd one now.
CS - Musician, animator, and nostalgia enthusiast since 2020.
- they/she - 🏳️⚧️
At 1/18/24 07:34 PM, gamejunkie wrote:This will inevitably get what it deserves but it's just a test & from memory tests should be placed in your personal file dump.
the file dump is now hidden behind a subscription paywall, that came out in the last few months-ish, and as for the test idea, I do not have any documents or snapshots of time machine crawls that reference "test"
what year does the test rule come from? it does not exist any longer, so I'm just curious on a historical basis
At 1/18/24 09:16 PM, AlexToolStudio wrote:the way he replied to me definitely reminded me of Sal Manella from Phoenix, wright
Sal Manella speaks in L33t, you goddamn noob. This reeks media illiteracy.
And even then...
Gee, I wonder why he was acting like that.
In fact, I don't even know if I have bragging rights for just reporting "reviews" like these, because whenever I see a shitty reviewer, I take the chance to report any reviews they made that is violating the review guidelines. I mean, at least there's one way of getting whistle points, sure it's not fast and rewarding but fuck it, at least you're putting your knowledge of shit on the real deal.