Replying to on nondeterministic.computer
@mjg59@nondeterministic.computer new slogan just dropped: ein Reich, ein Volk, ein Password.
Remote
Matt Palmer
@womble@infosec.exchange
mastodon 4.8.0-alpha.3+glitchRecovering sysadmin, technology lover, crypto(graphy!) nerd, he/him.
244 Followers
86 Following
50 Posts
Joined January 22, 2023
Buy me a refreshing beverage!:
Replying to
@mattly@hachyderm.io the vast majority of modern software is just straight up malware with a ToS and marketing budget.
Replying to
@davidgerard@circumstances.run financial risks "could become highly correlated", just like plutonium atoms "could become closely packed".
Replying to
@mancube@pnw.zone @darfplatypus@infosec.exchange I don't know how much it's career prospects and wage suppression that's playing into the situation. That would imply a much greater degree of forethought than I credit to most tech people. The actually-recognised-as-trades have even more of a risk from training your own future competitors, yet they on the whole manage to do it.
The only thing I can put this down to is the industry culture. Every electrician, carpenter, and mechanic got trained by watching and learning from another electrician, carpenter, or mechanic, and so the things they've learnt include both that this is just what tradespeople do, as well as a certain degree of how to do it.
Replying to
@matt@istheguy.com @kde@floss.social @davidgerard@circumstances.run a needlessly aggressive response gives you all the answers you need.
I often wonder whether politicians would rather be thought of as stupid, or evil, when they're floating their obviously-not-in-good-faith trial balloons. Today's episode of "stupid or evil?" brought to you by "the party of good economic management".
"A plan for Australians to use their superannuation to make it easier to secure a home loan is set to be floated by Shadow Housing Minister Andrew Bragg."
https://www.abc.net.au/news/2026-09-22/federal-politics-live-blog-sept-22/107177062
(For the non-Australians, superannuation is roughly equivalent to the US 401k program)
Replying to on mastodon.social
@oatmeal@mastodon.social that's just a statistical error. Vaginas Georgina, who lives in the outback & has over 10,000, is an outlier adn should not have been counted
Replying to
@lhp@mastodon.social @zzt@mas.to yeah, just because Sam botfucking Altman goes and powers down in a closet whenever he's not in his office doesn't mean that the rest of us aren't able to find meaning and purpose in our lives outside of a paycheck.
Replying to
@discobiker@urbanists.social @fesshole@mastodon.social it was "cycle to work", not "cycle from home".
Replying to
@cR0w@infosec.exchange seems like they should have added a decent JWT library (if one exists) as a second dependency.
Replying to
Replying to
@MortonRobD@mas.to @zzt@mas.to @EverydayMoggie@sfba.social which is just a restatement of the arguments used to institute jaywalking laws. "Our murder-grade momentum machines wouldn't be killing so many people if they just stayed off the roads they've been using for forever that we decided unilaterally should be ours instead".
Replying to on hachyderm.io
@petrillic@hachyderm.io they're exactly as good at security as they need to be in order to not lose (too many) customers.
Replying to
@katiefenn@front-end.social @aesthr@wandering.shop be glad it's just feedback. I've been let go from two roles after being told that I write too much documentation, particularly design documents, specifications, and implementation notes for less experienced colleagues.
Replying to
@davidgerard@circumstances.run @jonny@neuromatch.social I cannot for the life of me decide whether it's better or worse that he's doing his bit to burn all anthropic's cash for literally nobody.
Replying to
@davidgerard@circumstances.run given Holmes' other wellness activities included cocaine and being insufferable, you might be on to something.
Replying to
@target@infosec.exchange @briankrebs@infosec.exchange the great thing about bad ideas is that they never go away, instead popping up every now and then until they can finally gain a toehold.
Replying to
@ludicity@mastodon.sprawl.club my residual sense of ethics, on the other hand, is apparently a significant handicap in the modern world.
Replying to
@cR0w@infosec.exchange that's the most appropriate role for Kermit and Miss Piggy that I can think of, but I feel like the manic energy of all the castle folk would be diluted by the outsiders also being played by Muppets. I'm thinking of what The Labyrinth would have been like if Sarah had been played by a Muppet, for example -- it just wouldn't have worked, IMO. Of course, I'm undermining my own argument by citing The Labyrinth, because Jareth was played by a human, but mostly I just want to see Gonzo in fishnets.
Replying to
@cR0w@infosec.exchange my mental image of Muppet RHPS is that Brad and Janet are played by humans, and Gonzo is frank-n-furter.
Replying to
@librarysquirrel@sunny.garden @davidgerard@circumstances.run the LNG turbines on a vessel intended to operate away from the shore are going to have trouble with refuelling, I'd wager.
Replying to
@davidgerard@circumstances.run "wellness activities like beekeeping" *record scratch* what the?
Replying to
@vicorva@mastodon.art don't forget to have a good chuckle at their scare tactic lies to try and convince you to pay. "Radar is already stopping fraudulent charges for you!" they claim, providing a helpful link to the page that shows exactly zero fraudulent charges in recorded history that have been stopped.
Replying to
@stuartl@mastodon.longlandclan.id.au @phocks@bne.social actually proving the source of misused PII is really hard (read: expensive), so this requires strict liability for enforcement to be effective.
If you could force-pull one item, and *only* one item, what would it be?
Replying to
@fullywoolly@mastodon.social @david_chisnall@infosec.exchange like many of the most interesting problems, there isn't a complete solution to this problem. Partial solutions to some aspects exist, depending on your threat model.
Replying to
@fullywoolly@mastodon.social @david_chisnall@infosec.exchange pretty sure it's "e2e from you through big search engine to someone you think is your friend, but is actually an adversary".
Replying to
@LyallMorrison@cloudisland.nz @sarahtaber@mastodon.online the US is fine with violence, and "taxation is sexy" is a very niche kink.
Replying to
@da_667@infosec.exchange I guess if you spend long enough with the hell machine that uses words but does not know that words have meanings, you lose the knowledge yourself that words have meanings.
JFC the people who run this place are next level...
"The Launceston City Council recently advertised a design services tender for a "nation-first Step + Ride" to replace the current bus interchange"
"When asked what would make it a "nation-first" project, a council spokesperson said it was "not aware of another facility described as a step and ride interchange facility"."
https://www.abc.net.au/news/2026-08-29/launceston-council-plans-st-john-st-bus-interchange-upgrade/107037640
Replying to
@campuscodi@mastodon.social secret compromise largely happens at or near creation time. If it's still secure after 24 hours, it'll almost certainly still be secure a year later. This is just typical security theatre that will inconvenience many people for practically zero benefit.
Replying to
@leo@60228.dev @vicorva@mastodon.art the way I read the email was that they're changing what their plans include, and what I was getting for free before is now in one of their paid plans, so they're going to charge me extra now.
Replying to
@Sheep_Overboard@infosec.exchange but yes, online shopping is definitely the reason retail is dying. 🙄
Replying to
@teilweise@layer8.space sod, I went from memory and thought I had it the right way around. Thanks for the correction.
Replying to
@ariadne@social.treehouse.systems I hadn't come across this Akrides thing before, and to say that I'm horrified is a serious understatement.
Replying to
@slothrop@chaos.social the thing about sloperators is that they just cannot stop telling everyone how much they love their spicy autocomplete.
Replying to
@quinn@social.circl.lu every subpart of 18U.S.C. 1030 (a) includes the word "intentionally", or the phrase "knowingly and with intent", which would seem to suggest that intent is at issue. What's your legal theory for how this event is a felony under the CFAA?
Replying to
@quinn@social.circl.lu it's possible that this is a publicity stunt, but it's a high risk, lowish reward one. It requires a lot of people to stay very quiet, including some people who won't necessarily have a reason to stay loyal in the next year or two (when they get laid off). With openai making a run at an IPO, making up a story like this is a risky move.
If it did happen, it certainly *should* be a felony, but I'm at least partially persuaded that it isn't a CFAA violation because there was seemingly no intent on the part of a human to violate the law, and the CFAA requires the prosecution to prove intent. It's entirely plausible that openai's lawyers took a careful look and decided that, at the most, some low-level mook *might* end up carrying the can, not the company, but most likely it's not criminal. So sure, let's milk it for all it's worth.
Now, was there gross negligence? Absolutely, but "I am a complete moron" isn't CFAA territory, it's (mostly) a civil matter, and no doubt hugging face and openai stitched up a quiet deal before openai admitted any kind of culpability.
On the "intent" front, it's tempting to say that the model formed the intent, but allowing that precedent opens a huge can of worms for everyone. How do you punish the spicy autocomplete? The mental image of a data centre in a giant prison cell is amusing, but unlikely, and doesn't solve the problem that humans are being reckless.
I'm not arguing, by the way, that this shouldn't be a crime, because hoo boy it absolutely should be. There's even precedent for holding humans accountable for the actions of a non-human entity (dangerous dogs, for example). It's just that the arguments I've seen thus far are more persuasive that this event, if it happened, was not, in fact, covered by any existing law.
Replying to
@NullTheFool@mastodon.gamedev.place by the logic of the slopbros, treatment-resistant gonorrhoea is also the future.
I note that "don't use plastic matting" or even "reuse the plastic matting" are not even considered worthy of mentioning. It's single use plastics or bust.
"Farmers seek solution to mounting plastic waste problem
"Rows of black and white plastic weed mats are giving vegetable seedlings their best start in life. But disposing of them has become a logistical and cost burden."
https://www.abc.net.au/news/2026-07-30/mounting-agricultural-plastic-waste-problem/106965248
Replying to
@dnkboston@apobangpo.space don't leave out high-level languages, structured programming, 4GLs, Web 2.0, and no-code. All have been touted as being absolutely revolutionary, and yet programming is still difficult, because programming is about codifying the real world, and the real world is messy af.
Replying to
@Aissen@social.treehouse.systems a strict reading of the "asserting a disclosure timeline" would seem to exclude project zero, but I got the impression this is a "pirate's code", in the "they're more... guidelines, than rules" kind of way.
@ariadne@social.treehouse.systems