Mastodon Feed: Posts

brib@bribstodon.xyz ("brib :neofox_floof:​ :Nonbinary:") wrote:

TIL even feature phones can go out of date

Boosted by glyph ("Glyph"):
jalefkowit@vmst.io ("Jason Lefkowitz") wrote:

How much do you want to bet that this just means it has a CLAUDE.md file that says “do not hallucinate cases”

https://www.404media.co/judge-learns-lawyers-on-both-sides-of-case-used-ai-cancels-trial-kicks-everyone-off-the-case/

Boosted by glyph ("Glyph"):
matildalove@wetdry.world ("Matilda Love") wrote:

@mcc not sure. i'm gormbivalent

Boosted by glyph ("Glyph"):
jenniferplusplus@hachyderm.io ("Jenniferplusplus") wrote:

So here's the other thing that bothers me about all this. Regardless of the eventual results, this thing they're doing is *incredibly* resource intensive. They routinely spend billions of dollars on training these models, and billions more on operating them. It's not simple to parse out what fraction of that is directly attributable to the massive scale vuln finder/fabricator. But for the sake of argument lets just pick a plausible number, and call it 50-100 million dollars.

What could we have gotten for 50-100 million dollars of sponsorship for security audits? Prior to this, the largest single investment into FOSS security I'm aware of was the 2015 audit of openssl, after the heartbleed incident. It's hard to find precise costs for that, but I found a few sources estimating 1.2 million dollars, and that is arguably the most security critical piece of software in the world.

But suddenly there's 100x more resources available to do this work, now that producing the artifact can be done with stolen labor? Now that they can externalize the cost of false positives onto the already mostly unpaid maintainers of these projects? Even if their claims are true, which we have no reason to believe and very good reason not to, it's still a travesty

Boosted by glyph ("Glyph"):
mttaggart@infosec.exchange ("Taggart :ifin:") wrote:

Over here writing code line by line, comment by comment. You know, like someone who "hates technology."

brib@bribstodon.xyz ("brib :neofox_floof:​ :Nonbinary:") wrote:

I'm also mildly shocked a YubiKey is £50 without (good) cheaper alternatives, I expected this to be a solved problem

brib@bribstodon.xyz ("brib :neofox_floof:​ :Nonbinary:") wrote:

Side question: Given the push to smartphone bans, how the hell do kids log in to educational sites? Do they simply never enable 2FA? Are there a bunch of easily hackable child accounts out there because no-one has engineered a working solution to this problem? Does that keep kids safe over teaching them effective security practices? Do schools have the money to give out YubiKeys? Can parents afford YubiKeys? Do these educational sites support passkeys? Do passkeys work on school computer systems? Is anyone working on this?

jwz wrote:

This ended some time last night. I really want to know, and can probably never know, how these fuckers got shut down.

brib@bribstodon.xyz ("brib :neofox_floof:​ :Nonbinary:") wrote:

I want to de-smartphone my life. I think I can mostly untangle myself except for one particular snag.

My 2FA codes are on my smartphone. For multiple reasons I don't want to move them all to Bitwarden. Ente looked promising until I checked the number of slop commits. YubiKey (the TOTP kind) is out of budget.

Any recommendations for migration?

Boosted by jwz:
alex@social.alexschroeder.ch ("Alex Schroeder") wrote:

I just found this user-agent in my web-server logs:

Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:72.0) Gecko/20100101 Firefox/72.0 (compatible; vision_data-collector; +https://github.com/rom1504/img2dataset)

And look at that, a tool of the devil!

"Easily turn large sets of image urls to an image dataset. Can download, resize and package 100M urls in 20h on one machine."
https://github.com/rom1504/img2dataset

Let me put it this way: I am not wishing you well, ye contributors to this project! You are building the weapons that are costing to hours and days of my life to defend against.
🔥

#ButlerianJihad

baldur@toot.cafe ("Baldur Bjarnason") wrote:

This blackbird had its beak full of worms and insects. It had to do that thing where you stop in your tracks and shuffle things around a bit so as to not drop your groceries. #bird #birds #nature #iceland #photos.

Boosted by baldur@toot.cafe ("Baldur Bjarnason"):
uglyreykjavik.bsky.social@bsky.brid.gy ("Ugly Reykjavik") wrote:

Of course, there is some rusty corrugated iron; we are in Iceland after all.#Iceland #Reykjavik #photography #streetphotography #decay #concrete #window #rust

Boosted by brib@bribstodon.xyz ("brib :neofox_floof:​ :Nonbinary:"):
kemona_halftau@sharkey.skydevs.me ("Amber :neofox_flag_trans: (kemona_halftau) :niko:") wrote:

i should follow more users

dysfun@treehouse.systems ("gaytabase") wrote:

so i actually read yarvin's programming language screeds before i knew who the fuck he was. or at least some of them. at some point "hmm this is an odd design" gave way to "what the actual fuck? what is wrong with you?"

dysfun@treehouse.systems ("gaytabase") wrote:

Now that LLMs can shit out volumes' worth of meaningless drivel in English, invent racist bullshit and implement the stupidest possible ideas for programming languages, is there really a place in this world for Curtis Yarvin?

😂

Boosted by aredridel@kolektiva.social ("Mx. Aria Stewart"):
anarchistmemedistro ("anarchist meme distro") wrote:

this is what terfs are trying to take from you
#anarchism #memes #pride #queer #history #politics #economics #feminism

dysfun@treehouse.systems ("gaytabase") wrote:

flat earther/rapper

somehow, that sorta goes together for me as a combo

jscalzi@threads.net ("John Scalzi") wrote:

Go over the @chicagomaroon newsroom because I'm editor in chief and we have a paper to put out

RE: https://www.threads.com/@with%5Foche/post/DZV8jOGCoH4

jscalzi@threads.net ("John Scalzi") wrote:

In science fiction and fantasy, this would be Nebula Weekend, run by @sfwa_inc, and which happened just this last weekend!

RE: https://www.threads.com/@analeighsbrana/post/DZYN4Woks4m

Boosted by cwebber@social.coop ("Christine Lemmer-Webber"):
ragectl@hachyderm.io wrote:

@cwebber this is not the SkyNet we were promised, this is the SkyNet we deserve.

dysfun@treehouse.systems ("gaytabase") wrote:

strawberry tart, the delicious alternative to a strawman

Boosted by jwz:
Jyoti@mas.to ("Jyoti Mishra") wrote:

jwz wrote:

RE: https://indieweb.social/@laurenshof/116720287681995824

New AGENTS.md just dropped

Boosted by jwz:
th@v.st ("Trammell Hudson") wrote:

Why is every crypto system made with rust these days?

typst ("Typst") wrote:

Test for compatibility with your projects now, locally or in the web app. Typst 0.15 has variable font support, MathML, multiple bibliographies, and a print version of the docs.

typst ("Typst") wrote:

We know some of you nerds installed the Apple prerelases yesterday. We dare you to do the same today (Typst 0.15 RC1 is available).

#WWDC #Typst

Boosted by jwz:
johnrogers.bsky.social@bsky.brid.gy ("John Rogers") wrote:

“Weren’t some of the LEVERAGE villain speeches a little over the top?”

RE: https://bsky.app/profile/did:plc:k4jt6heuiamymgi46yeuxtpt/post/3mnu5jjrgmv2h

Boosted by jwz:
catandgirl@socel.net ("Cat and Girl") wrote:

A brief history of reviewing things on the internet, vol. II

Boosted by brib@bribstodon.xyz ("brib :neofox_floof:​ :Nonbinary:"):
beep@follow.ethanmarcotte.com ("Ethan Marcotte") wrote:

And here’s @henry nailing the key point: it doesn’t matter if so-called AI “works.” What matters is that the value of your labor goes down, and workers are pushed further into precarity.

But what *really* matters, of course, is what we collectively decide to do about that.

https://henry.codes/writing/it-doesnt-matter-if-it-works/

aredridel@kolektiva.social ("Mx. Aria Stewart") wrote:

NAACP on data centers

https://naacp.org/articles/our-power-and-data-center-decisions-roadmap-holding-data-centers-accountable