Henryk Plötz

How ChatControl passed in the EU parliament.

Ok, fellow hackers, I propose a pact: That new EU age verification app thingy ... do NOT help improve it. Don't publish findings. Don't responsibly disclose insecurities. Don't facilitate them making it bulletproof. If personal data is directly at risk, by all means, slam their asses into the ground. GDPR them into oblivion. But on its core functionality this needs to be, to become, and to stay, the most insecure, the most easily circumventable piece of shit code on the planet.

@isotopp@infosec.exchange Man muss das immer mal wieder explizit sagen: Der Unterschied zwischen einer Milliarde Euro und einer Million Euro ist, ziemlich genau, 1 Mrd. Eur. Ähnlich zwischen 1 Mio und 1k. Aus Sicht eines Milliardärs gibt es keinen besonderen Unterschied zwischen einem Millionär und einem Mittellosen.

@ZDL@mstdn.social I think you're confusing Andorra with Amsterdam. It's right between Amsterdam and Andalusia.

@zzt@mas.to @davidgerard@circumstances.run If someone asks whether you're in Brazil or a GDPR country -> you say yes! Similarly, if what someone is about to say is illegal in Germany -> maybe don't.

@erd@gei.st Kannst du bei der Gelegenheit für nur 20€/Monat den Qr-Code auf die Konkurrenz zeigen lassen?

@haekelschwein@mastodon.social Wie ist denn da eigentlich die Gesetzgebungskompetenz, wenn der Bund ein Gesetz machen möchte um die Durchsetzung der Bundesverfassung in einzelnen Ländern zu unterdrücken? Der Trick mit der Vergesellschaftung ist ja, dass die nicht nur verfassungsgemäß erlaubt, sondern womöglich gar geboten ist.

@JennyVeganny@mastodon.social @helenasteinhaus@kolektiva.social @Sanktionsfrei@social.tchncs.de Weil wir Menschen wirklich schlecht sowohl in großen Zahlen als auch in logarithmischen Maßen sind, muss das immer mal wieder laut gesagt werden: Der Unterschied zwischen einer Million und einer Milliarde ist ungefähr: eine Milliarde.

@Adrenochrome Yeah, no. Kate Weyer *does* post robin images on Facebook, but this is not among her recent posts. Also, she does occasionally post photos by her partner Lee Schofield, but they always include his logo, which is how I know how to spell his name.

@scy@chaos.social It's named for October, the tenth month of the year.

@codinghorror So ... roughly on par with normal developers then? ;-)

@davidgerard@circumstances.run And by "distributed" you mean "all over the place" or "in shambles".

@Natanox@chaos.social Well, this is mostly lawyer-driven. I do trust that lawyers are incredible scared people and will make sure they have sufficient paper coverage over their asses. Having an unchecked "[ ] process my voice" and then doing voice processing is the kind of thing that keeps the legal department up at night. My main point being, LG is the only one I've seen separating these concerns and allowing partial functionality without. Others do "Do you agree to: ?"

@david_chisnall @beyondmachines1 Compare with the Amazon design, who hard connect the "microphone disabled" LED to the microphone input amplifier powerdown pin.

@fanf@mendeddrum.org (After a couple of these interactions our service provider changed the forms. They are actually only interested in organization age for risk management purposes, so it's now ( ) <1 year ( ) 1-5 years ( ) >5 years

@fanf@mendeddrum.org :) We act as a middleman in some financial services stuff and so also have to properly identify our customers. Our upstream providers' form doesn't require a register number, but does have a "founding date". One of our customers is the Catholic Church, so ... roughly 33 A.D? Another field requires the "legal form" and one of our customers is an "organization according to old law". They do have founding documents, for they were "founded by Senate decree of October 12, 1874" or somesuch.

@adamshostack@infosec.exchange @mhoye@cosocial.ca I'm confused. I had to check the date. I am *very* sure I read the "the LLM deleted my prod and when confronted, it confessed!" story before. Roughly 6 months ago, maybe a year. Ahh, here it is: https://www.theregister.com/2025/07/21/replit_saastr_vibe_coding_incident/

@AndresFreundTec@mastodon.social @bert_hubert@eupolicy.social "My" "voice" "ismy" "passport?!" :)

@mhoye@cosocial.ca Don't worry, I'm pretty sure the text is extruded, too. I've never seen a "The pattern is clear." in a context like this on human text, but am encountering it unreasonably often in LLM generated text.

@lritter@mastodon.gamedev.place @dragosr@chaos.social No, not even factually correct. Normally I'd stop reading after the first argument is so hilariously wrong: "... is the best contribution of the draft ... kills any further incentive to push IPv6 ...". I present to you: ::ffff:1.2.3.4, which should resolve any ambiguity as to whether the author of this piece should be taken seriously on any IPv6-adjacent networking discussion.

@Natanox@chaos.social And, yes, the dark patterns are very dark here too. It will of course default to just agreeing to everything. And on various occasions, if you accidentally wander into a disabled function, you're encouraged again to agree. The remote has a dedicated microphone button. If you press this by accident it tells you that the function is disabled and "offers" to get you to the TOS screen to enable it. All abort modes are broken, the only way is to open the TOS screen and then exit from there.

@GossiTheDog A header injection? In *this* economy?!

@atarifrosch@fedifreu.de Nein-ish. Die Telefone wären parallelgeschaltet und wegen Mithörschutz ist das nicht zulässig. (Sieht man sonst manchmal in alten Filmen, so eine Installation wäre in Deutschland verboten ;) Was es gibt/gab ist ein https://de.wikipedia.org/wiki/AWADo ein automatischer Wechelschalter. Beide Telefone klingeln, aber nur das zuerst angenommene kriegt die Leitung, das andere wird totgeschaltet. Bei Abheben zum Wählen genauso.

@timwaterman@mas.to Anybody got the "World Targets in Megadeaths" binder ready?

Did you know that some data centers use dihydrogen monoxide, an asphyxiant linked to roughly 250,000 deaths per year?

@Merovius@chaos.social 82 is aisle, but you can only sit with a dark jacket. If you have a beige or tan suit, you'd better have booked 81, or you'll get dark stains on it.

@tayfonay Wow, that took long. We first prototyped something like this 20 years ago for 23C3, to play around with: https://events.ccc.de/congress/2006/Sputnik Though, you had to buy the tracker yourself.

@scy@chaos.social Mein Kopf so: https://youtu.be/0LhuyMjxNfA

@jukkan @davidgerard I already stumble at "Ocean 11". Either he's thinking of additional bodies of water, which to be fair, is nice sci-fi, or he's sloppy and careless in his communications. I'm pretty sure the "'s" played a significant role in the movie(s, both of them).

@revk@toot.me.uk That perspective threw me for a moment until I realized it's likely a 360 ceiling camera.

@NanoRaptor@bitbang.social Well, either that, or a bronze age Nanoraptor having a bit of fun with a T-shaped bison that only has left legs.

@davidgerard@circumstances.run I wondered "We still do Knightscopes? They tend to fall into lakes ..." and then checked the date, and pheww, no, we're not doing Knightscopes any more ;)

@carnage4life@mas.to There was a social media post some time back pointing out that the visible actant "Senator Warren" consists of many invisible actors behind the scenes that do the actual work (with a corollary that none of these could effect anything without the Senator-Warren-proper actor in front). I think of this often in the Trump context. We know some of it (like Project 2025), but given the sheer breadth of the con, I do be impressed at how he/they pull it off.

@Cheatha@chaos.social Zum Vergleich warum ich meinte dass das was mit der kaputten Struktur zu tun hat: wenn man nur gmail kennt und gewöhnt ist, hat man bestimmte Erwartungen. Wenn einem dann jemand vorschlägt, Email zu verwenden, sieht das aus dieser Perspektive furchtbar schlimm aus.

@Merovius @danimo @marix Ja, jain. Das ist kein Ausschluss, sondern der Ansatz für das Prinzip. Zäune entstehen nicht zufällig. Niemand ist versehentlich gestolpert und dann war da ein Zaun. Irgendjemand, irgendwann, irgendwo, hat sich etwas dabei gedacht und den Zaun hingestellt. Der Gedanke kann schlecht gewesen sein. Oder mittlerweile überholt. Aber solange man nichtmal eine positive Theorie hat, was der Gedanke war, sollte man nichts ändern. "Hatte wohl keinen guten Grund" reicht nicht.

@derpostillon Die Mustermann-Scheidungsurkunde fehlte lange in der Liste der Musterdokumente. Diese Lücke ist nun endlich geschlossen.

@carnage4life@mas.to It's amazing how effective "Stop the count" actually is, when you can enforce it from the top. Works on everything: reports on climate change, reports on the job market, reports on how you have restricted unbiased reports …

@Natasha_Jay Good soundtrack would be: John Williams -- Duel of the Fates

@GossiTheDog@cyberplace.social So, basically, KilledByGoogle? ;)

@moira@mastodon.murkworks.net TBF, as far as I can tell, LG are among the better implementations here. The oft-cited paragraphs are from the TOS they require you to agree to before you can use the service. Crucially, they won't enable the service unless you've agreed to the TOS. And they've partitioned the terms so the "LG isn't responsible for apps in appstore" is separate from the "in order to use voice input LG needs to process your voice". It's very easy to "accept" all of them, but it's possible to not do voice.

@cstross@wandering.shop Do they already have an internal project name? May I suggest something simple, two syllables, like .. Forbin! The Forbin Project, there, that rolls off the tongue nicely. No particular reason I came up with it.

@carnage4life@mas.to I would be confident that this would be fueling historians and political science researchers for decades to come, were I not concerned of the massively corrupted (non-)paper trail and already ongoing cover-ups (having learnt lessons from previous such subjects of study).

@Pepijn Hmm, yeah, my home country, sure, that's easy. But I've also been to quite a couple of other countries, often the capitals, often on sight-seeing. I guess I *must* have been at least close to another parliament building once. But I can't remember a specific instance or going inside. So voting 1.

@ospalh@chaos.social @l3viathan@mastodon.social @ryanc@infosec.exchange Correction: You still need to decide where *not* exactly.

@grumpy_website The Netflix TV UI is the other way round: You have to constantly move the cursor around, lest it will start playing random video for the item that was highlighted longer than 1 second.

@Cheatha@chaos.social Das ist eine spannende Fallstudie, weil das Gewünschte (direkte Zahlungen, einfach zu benutzen) zum gegenteiligen Effekt führt, primär moduliert durch die kaputte Struktur die man zu ersetzen sucht. Paypal funktioniert so, *weil* Paypal zentralisiert ist. Das Geld geht an Paypal und dann von dort an den Empfänger. Vielleicht. Wenn Paypal Lust drauf hat. Haben sie nicht immer. Wero geht direkt von Konto zu Konto (IBAN) und sorgt für eine einfachere Auffindbarkeit der dafür nötigen Daten.

@carnage4life@mas.to He does kind of answer the question at the end, not that it would make anything better. He'll just issue more stock! That's how magic money appears, right?

@mattblaze@federate.social @samlitzinger@journa.host ... in exchange for keeping all their uranium. After all, a point can be made, why bother, it's not very valuable stuff.

@danimo (This is a subtoot about rust coreutils:)