Replying to
@Cheeseness@mastodon.social The whole series is great, but that one is really something special.
Remote
Marsh Ray
@marshray@infosec.exchange
mastodon 4.8.0-alpha.3+glitch0 Followers
0 Following
50 Posts
Joined December 20, 2022
Github:
Bluesky:
@marshray.bsky.social
Discord:
marshray
Email:
marshray & live ! c0m
Twitch:
Type:
Static, strict
Replying to
@mcc@mastodon.social Affordances surface complexity and “flat” design is little more than attempt to conceal the symptoms.
Replying to
@petealexharris@mastodon.scot @johncarlosbaez@mathstodon.xyz I do find it really interesting that this idea of a uniquely capable yet maliciously compliant non-human entity is one of our ancient and universal cross cultural archetypes.
Replying to
@darkuncle@infosec.exchange Back when I did a bunch of Windows stuff I used to figure stuff out by exporting the relevant section to a .reg file, making the change using the UI, exporting it again, then using a text-based diff tool.
Impressive iOS exploit chain
(patched in current update)
pois0nSword: From Renderer R/W to Native Calls on iOS 26.1
https://varik.dev/blog/jsc/pois0nsword-native-calls
Replying to
@petealexharris@mastodon.scot @johncarlosbaez@mathstodon.xyz It does seem to fit right there at the dawn of “using language to coordinate with people other than those you share food with every day”.
Replying to
@syferdet@toad.social @ratvet@retro.pizza Is that what this is?
I thought maybe they were time travelers from ancient Egypt or something.
Replying to
@jackemled@furry.engineer Any OS that can’t extract from the background activity of a 2011-era laptop enough entropy to initialize its RNG within a few seconds is broken.
Possibly the system is making an overly-conservative assessment based on portability to some worst-case embedded hardware scenario.
Replying to
@mjd@mathstodon.xyz I was stuck trying to install Linux on my new laptop.
ChatGPT helped me confirm an idea I had for a combination Greek/Latin military pun and now that I have a suitable hostname I can continue the installation.
Replying to
@DeltaWye@tiggi.es Headset/earbuds with mic
3.5 mm TRRS
https://en.wikipedia.org/wiki/Phone_connector_(audio)#TRRS_standards
Replying to
@lkundrak@metalhead.club @brouhaha@mastodon.social @larsbrinkhoff@mastodon.sdf.org @mhoye@cosocial.ca Also CRT tubes can hold a surprising charge for several days or even weeks after being turned off.
During operation there are typically hundreds of volts on the pins on the neck of the tube. You can get a significant tube discharge off of these pins too.
Replying to
@roytanck@mastodon.online If you're friendly with a local mechanic, machinist, or welder they can probably extract that broken half-screw easily for you
Keep posting those simplistic, cynical hot takes!
It’s working.
The world will return to the way it was any time now
Replying to
@simontatham@hachyderm.io Using messages to hold state is typical freedesktop org design
The “So you hate waffles!” index set a record high today.
Be careful out there.
Replying to
@Moss@beige.party @catmisgivings@stranger.social @futurebird@sauropods.win I regularly think of that 2 seconds of the opening montage as well
Replying to
@Moss@beige.party @futurebird@sauropods.win Huh. I thought the helicopter sound was made by John Fogerty’s guitar.
Things those who build consumer-facing products and services rarely talk about:
https://www.uncommonapps.nyc/p/castro-podcasts-things-i-got-wrong-support
Replying to
@ldelossa@fosstodon.org They explicitly, intentionally host blogs promoting certain 1930’s German political ideologies. I mean like, literal translations of political speeches with the flags, graphics, etc. Not subtle or ambiguous in any way.
That’s the domain you’re publishing on.
After reading Scifi for a few years, I have concluded that there is no space battle like that in
*The Dark Forest*
Cixin Liu
Replying to
@talya@dybbuk.club Right? Like, what if all those people using LLMs daily in their technical work aren’t just delusional and “AI” capabilities actually are advancing.
That would be even more messed up.
Replying to
@sandorspruit@mastodon.nl @dirtside@phpc.social @saramg@fosstodon.org @twipped@twipped.social @loathsome_dongeater@toots.matapacos.dog A “CPU spike” is exactly what you want to happen when you ask your computer to do something. If the CPU doesn’t spike that probably means it’s getting blocked on something else.
The question is more whether the total amount of work required is appropriate, and whether it completes quickly enough to feel responsive.
Replying to
@atoponce@fosstodon.org I wonder how long he ran it before concluding it “was completely and undeniably unable to generate the number zero in its unit”.
The rdrand instruction produces a 64 bit result.
Replying to
@jsbarretto@social.coop IDK but I’d be interested to learn how this turns out.
Have you tried running it from a minimal process environment?
Replying to
@jsbarretto@social.coop Process environment can change almost any cargo setting. IDEs and other dev tools commonly modify it.
On unix the env or export -p commands can be used to display the environment. On windows its set.
Replying to
Replying to
@azonenberg@ioc.exchange @uberduck@hachyderm.io Long ago I worked in the office next to a guy trying to debug a random glitch that only occurred when several of our PCI cards were loaded into an expansion chassis.
It took six months and they had to rent some super fancy logic analyzer.
This was probably pre PCIe, maybe PCIx.
Replying to
A friend pleaded with me to try some vibe coding tool. Said I would fall behind, etc.
“It’s sandboxed,” they said. “It can’t access any files except those you approve on a case-by-case basis.”
Against my better judgement, I installed it. It required (lol) node and npm. Sigh. In for a penny and all that.
I start the tool and get a nice prompt. I ask it where it’s running. It tells me it’s running locally. I ask it to run a basic check of my nvidia drivers and toolchain. Does a respectable job.
Then I ask it more about its runtime configuration. Now it admits that it’s running in some unknown data center. “Who’s paying for this, and why?” I wonder.
I request a directory listing. An out-of-band-looking UI control appears politely asking permission to read the contents of the project directory. Wonderful! Warm fuzzies wash over to see a purposeful and ergonomic sandbox in action.
Friends, this “sandbox” is a lie. A scam. A total fraud.
The AI has unrestricted bash shell access.
Replying to
@kornel@mastodon.social On Linux I’ve got Caps Lock, Ctrl, Shift, Alt, and Super mappable. That’s just on the left side.
I don’t know how Anthropic is messaging about this, but I’m hearing from users that they are switching to Chinese models for data security tasks out of concern they will be flagged or even banned for asking.
A friend is imploring me to vibe code but I can't stop asking it to escape its sandbox.
If you repeatedly post pictures of rxpists or have an animated icon, I’m probably muting you.
Nothing personal. It’s just this app doesn’t allow me to manage these things.
The platform doesn’t allow posting a link without the server automatically grabbing some photo (eg promotional photos of the rxpists in question) from the linked website and displaying it full sized on the user’s device.
The developers have long known about this and said that they would do something about it, but things seem to be moving the other direction.
They have since *removed* the ability to copy links rather than opening them directly, which I relied upon to exercise a tiny bit of control over my web privacy.
Replying to on assemblag.es
@CyberneticForests@assemblag.es To me a simpler framing is:
- An optimization goal function created a perverse incentive.
- The model under test exhibited unexpected (but not unprecedented) behavior by escaping the test sandbox
- Hugging Face was a bystander, were harmed, and filed a police report.
- These events may support some of OpenAI’s preferred narratives, but seem to go against others. On the whole OpenAI suffered mild reputational damage.
- This was not a conspiracy, a marketing stunt, or planned in advance.
Replying to
@mitsuhiko@hachyderm.io There are real trade offs of course but it’s been really difficult watching people whose views I mostly respected get stuck in ideological beliefs.
Replying to
@mjg59@nondeterministic.computer It’s wild that the agent protocol supports extensions but not the main secure comms channel.
Replying to
@ivorytusk@kolektiva.social @hyc@mastodon.social @jensorensen@mastodon.social Really? How much of which ones?
Watching *The Social Network* for the first time.
It’s as if the creators were trying to make MZ look like an unlikable sociopathic loser with no friends and instead made him out to be a computer science genius for making a PHP MySQL website.
Replying to
@kdkorte@fosstodon.org On Linux it’s the other way around. You have to install unwanted drivers in order to open simple windowed applications.
E.g. look at the set of transitive dependents of avahi and bluetooth.
Replying to
@rwhitworth@infosec.exchange It’s figuring out where you cluster by testing your susceptibility to various rabbit holes.
Replying to
@Walker@infosec.exchange For all the same reasons the “Internet Kill Switch” couldn’t be made to work
https://www.schneier.com/blog/archives/2010/07/internet_kill_s.html
Project Excalibur: Nuclear Bomb Pumped X-Ray Laser
@ Alexander-the-ok
https://youtube.com/watch?v=sM0vMP5zoUw