Todd Knarr

@sarahjamielewis@mastodon.social I'd love it if the codebase was modular enough that we could extract the mechanics (HTML rendering, JS and CSS engines, network communications, that sort of thing) from the browser itself, then see how much AI was integrated into the mechanics and how much was just a part of the browser wrapped around the mechanics.

@404mediaco@mastodon.social Community response: "Have the data centers close the blinds and turn off the computers."

@jvoisin@infosec.exchange This seems like a pretty dick move without even attempting to engage with Forgejo first. A combination of assumptions based on no evidence and "I don't feel like it" is not a good look. They aren't a large company with money to burn, they depend on people being willing to pitch in or at least provide details before going nuclear.

@kibcol1049@mstdn.social Hence my policy and what I advise others to do: appeal EVERY denial, and always demand peer review. Most of the time just the appeal gets them to reverse the denial.

@timbray@cosocial.ca The betting pool is now open on when something like this will really happen.

@ariadne@social.treehouse.systems That... person... has cause and effect mixed up something awful, doesn't he?

@wwahammy Skip the age verification signal entirely, apply AI to the task of identifying the age of the person they're conversing with and adapt accordingly. AI's really good at that, and it'd let you target even those minors who've spoofed their age well enough to fool the age verification system.

@TindrasGrove@infosec.exchange Most of us have. We've also internalized a fact from experience: anything _not_ using some form of 2FA will be compromised within a couple of months, and the owner _will not_ be able to recover from it. If you use a public computer make that a week, tops, and likely less than 24 hours. Some forms of 2FA, like SMS or voice call or email, are useless because they're so easy to compromise. The only reliable ones I know of are TOTP or an authenticator app (passkey) on a smartphone, ...

@cmccullough@polymaths.social Shit like this is why policy files are a good idea.

@me@jaehanley.social Yeah. Usually they're yelling "WTF are you using that for? It's not supposed to DO THAT!". If you have to force me to use tech, it's failed miserably.

@sarahjamielewis@mastodon.social Logically this ought to be easily handled as "fair use": you posted it to have it distributed, you can't complain when it gets distributed on the network you posted it to for the purpose you posted it. In reality, rules lawyers fuck everything up so we have to spell out every trivial detail exactly. And they still fund ways to fuck it up anyway.

@briankrebs@infosec.exchange Isn't the WHCD traditionally about roasting the current President? I'd pay good money to watch Trump have to sit there and take it.

@mattblaze@federate.social You may need to start being more eloquent about exactly how and with what these guys should fuck themselves before they get the hint.

@mekkaokereke@hachyderm.io @cmdrmoto@hachyderm.io @mathowie@xoxo.zone @MissGayle@urbanists.social I was around when it started, and it started as a (rather naive) attempt at essentially a form of check where you could tell that the check was genuine *and* that there was enough money in the account to cover it just by looking at the check, no need to call the issuing bank or waiting for the check to clear. Then the sales bros got their hands on it and turned it into an unregulated currency you had to buy with real money.

@JugglingWithEggs @1sxteenthDANE @randahl @pluralistic Itcs be similar to what senior and principal software engineers do today when it comes to cleaning up bad codebases. You're looking for the same kinds of bad patterns and confused structures.

@cratermoon@zirk.us @bruces@mastodon.social Often it's just so that, if they ever do have a need for that position, they have a stack of candidates ready to go without having to wait for responses to a job posting. Yes, that completely screws the job market over.

@lauren@mastodon.laurenweinstein.org I don't credit them with enough competence to do that deliberately. They have trackers, but only because they're automatic with whichever tools they used to build the site.

@heidilifeldman They can't go unanswered, yet he proceeds to not answer them at all. All he does is call her names. As an old white man myself, I suggest he's an insipid, delusional toad-nurbler who failed the entrance exam for sanitation worker school.

@GhostOnTheHalfShell@masto.ai @woozle@toot.cat @mekkaokereke@hachyderm.io @cmdrmoto@hachyderm.io @mathowie@xoxo.zone @MissGayle@urbanists.social And there's a problem there that's currently becoming a major issue for online sellers: the payment processors can cut you off, not only making it impossible for you to accept payments but to the point of having your bank account closed. For selling cat ears or purchasing a steamy romance novel. The idea behind Bitcoin originally was a method of payment that wasn't susceptible to that.

@GhostOnTheHalfShell@masto.ai @mekkaokereke@hachyderm.io @cmdrmoto@hachyderm.io @mathowie@xoxo.zone @MissGayle@urbanists.social The cryptobros would hate it because there goes their ability to speculate on it, but oh well, sucks to be them.

@trondhjort@hachyderm.io @kevlin@mastodon.social "The "Plan".

@emilymbender Very good discussion. Makes me think of all the other ways we use the word "power" and its derivatives, and all the ways "more power" can turn out to be the last thing you want.

@stux@mstdn.social @rbreich@masto.ai If he can post the screenshot, he can surely post directly, no? That he doesn't annoys me for one.

@mattblaze@federate.social @DaveMWilburn@infosec.exchange 120% This is Trump. Do you think he does anything without making a profit?

@JeffGrigg@mastodon.social @me@jaehanley.social Yes, C (and C++) should never be used for application programming. They're system-level languages first and foremost, despite all attempts to "improve" them. For applications you want more abstraction than they can provide. Java and C# are probably the lowest-level languages I'd use for application development.

@Athena@chaosfem.tw Emacs isn't an editor. It's a LISP implementation that happens to come with an editor written in it. 😁

@ScottMGS@justme.masto.host @pluralistic@mamot.fr Apropos post. The Evil Overlord is a useful source of wisdom yet again. https://mastodon.art/@MicroSFF/116523879463911381

@mattwillis@hachyderm.io @GhostOnTheHalfShell@masto.ai @mekkaokereke@hachyderm.io @cmdrmoto@hachyderm.io @mathowie@xoxo.zone @MissGayle@urbanists.social Yep. The only problem there is that most stablecoin issuers aren't maintaining 100% reserves, leaving people wondering if they can actually redeem all the coins sold. To work stablecoins need that guarantee that holders will never be stuck with worthless wallets.

@GhostOnTheHalfShell@masto.ai @mekkaokereke@hachyderm.io @cmdrmoto@hachyderm.io @mathowie@xoxo.zone @MissGayle@urbanists.social Not as what it's been turned into, no. But imagine a system where the US govt. would buy and sell it for $X/BTC. That would lock the price of BTC to roughly $X. Now you have a "currency" with a known value that offers merchants the benefit of knowing the payment is good on the spot, without having to wait or deal with network outages or system failures or payment processors being dicks.

@cwebber@social.coop I'm not sure it matters which came first, because no matter which you end up in a cycle where the initial choice reinforces the design and the design reinforces the choice. But honestly I tend to lean towards the algorithm choices being determined by the intended use cases. Personal experience says that's more common.

@cwebber@social.coop That can come from original design decisions, too. I routinely look at my intended use cases and pick algorithms and data structures to fit the expected needs. So, if BlueSky were looking at a centralized solution they'd pick shared-heap because it serves that better, whereas the Fediverse would be looking for a distributed solution and would pick message-passing as the better fit.

@navi Seems to me it's the other way around: the big DEs are the ones pushing Wayland hard.

@ariadne@social.treehouse.systems Very much agree, borne out by experience.

@stux@mstdn.social And it neglected to add the really damnimg information: "And I will do this again if given the opportunity, and no instructions you give me can prevent it."

@wolf480pl@mstdn.io @pgl@infosec.exchange @jayjacobs@infosec.exchange I believe so. The definition defined C as "attacker or environmental" conditions.

@creepy_owlet @jwcph @Ponygirl I've found it works for those cases only if I already know what to do and walk the LLM through the process like I would a junior engineer. That takes longer than doing it myself in both scenarios, but in the LLM case I don't get a more experienced junior out of it.

@ariadne@social.treehouse.systems They can call me when the AI agent can ping me with "Hey, I have an idea, tell me what you think." and then go back and forth with me like a human can. I hate the term "artificial intelligence". I want a synthetic or cybernetic intelligence that's as real a person as me, just running on different hardware.

@zmanion@infosec.exchange @wolf480pl@mstdn.io @pgl@infosec.exchange @jayjacobs@infosec.exchange As worded it has to mean conditions specific to the attacker separate from environmental conditions.

@GhostOnTheHalfShell@masto.ai @mekkaokereke@hachyderm.io @cmdrmoto@hachyderm.io @mathowie@xoxo.zone @MissGayle@urbanists.social An ideal system would have the central exchange (the one who guarantees to buy and sell at a fixed price) also mint and issue all coins, so transaction validation is the _only_ way to make money in the system.

@stux@mstdn.social Automated mail-back checks? When someone signs up, they go into a queue. After a random time (in the 10-20 hour range sounds reasonable) they get an email with base64-encoded random token. They have to reply back with ONLY that token in the body, no quoted text or anything. I figure the spammers will be either lazy or incompetent and won't be able to figure out how to deal with both the delay and creating the reply body without auto-quoting the original message.

@stux@mstdn.social That sounds like how a lot of rivers in the US got Indian-sounding names that mean "river".

@me@jaehanley.social Last time anything came close was C++, my reaction was "Looks neat. Give 'em about a decade to figure out how to use it in production without wreaking havoc on everything and it'll blow C out of the water.".

@mttaggart@infosec.exchange @flyingpenguin@infosec.exchange I'd love to have the kind of money Bezos and them do. Cloudflare would be out of business in a month, all I'd have to do is start up an equivalent service with one rule: any entity associated with an attack on our customers is blacklisted from our services.

@GhostOnTheHalfShell@masto.ai @mekkaokereke@hachyderm.io @cmdrmoto@hachyderm.io @mathowie@xoxo.zone @MissGayle@urbanists.social Go back and read up on the original ideas. The naive part was thinking that Bitcoin could remain separate from real currency. If it had, the original framework called for mining to be replaced by validating transactions and that solves the speed problem. Once it got connected to real currency without any way to control price, though, that all went out the window in favor of speculation.

@cstross@wandering.shop Green Orion slave girls. Red Martian princesses. How many hues do twi'lek dancing girls come in again? I expect a lot of exotic porn in our future.

@vathpela@infosec.exchange @ariadne@social.treehouse.systems Only if I prompt it first. 🙁 I want someone with initiative.

@stux@mstdn.social The proper response is "You first.". After all, if they're doing nothing wrong then they can't have any problems with being watched constantly themselves.

@jann@infosec.exchange Too few, probably because their bosses are in the US and speak only English.