Okay but there's good news: if you buy a second product from Anthropic it can find those bugs for you.

do you miss when you enjoyed being on websites? introducing killthecomputer.com

People were persuaded to give up piracy because legitimate platforms were seen as priced low enough to be worth avoiding the hassle and potential risk of hunting down pirate sites and downloading movies or music. As people are squeezed financially and prices rise, that logic just does not hold now.

one morning gregor samsa awoke and found himself metamorphosed into a hunky seismologist with a heart condition in an erotic visual novel for adult women

Took another couple of pokes at this, I've found 7~ sites that are part of this network. They all have a subpath under /r/ which they use as a URL shortener. It redirects to a shortener hosted at shurly[.]net Which feels really familiar... www.vice.com/en/article/g...

🚨 ICE Glasses are coming - specialized smart glasses designed by and for the Department of Homeland Security, documents reveal: www.kenklippenstein.com/p/exclusive-...

Ah, well, you did try and comment it out...*however*, comments are still shipped...

Both sites have had terrible engagement on X. But I found that many Al-Fassel articles have somehow found their way into the citations of Grokipedia, Elon Musk's Wikipedia clone: grokipedia.com/page/trebil

yikes. we really gotta do some kinda "least authority" type thing for oauth tokens, like you see with "here are the smallest subset of capabilities" for a system service so you're not just running stuff as unrestricted root. i suspect this isn't the last we'll see of something like this.

🙃

And how are those models trained? A small group of underfunded open source developers? Or did it require a corporation pouring vast amounts of compute at data from the kind of vast scraping tasks that get your connection killed for TOS and the kind of piracy that regular people get jailed for?

When I see the README is documentation is punctuated with emoji like in the first image my immediate thought is "oh no, slop". Then seeing the second image and wiping the sweat from my brow like "ah, phew, they're cool and just having fun with trees".

The other day there was a story about "Narwhal Labs", running a really offensive ad. recruitment[.]narwh[.]ai is a page for Remoteli, who lets you "Hire exceptional remote professionals from Africa". So much of AI (both data and technical) is done by outsourced and precarious labour on purpose.

I’m sure this is unrelated to the fact that last month data workers revealed they were asked by Meta to review video from Meta Ray Bans of user’s intimate moments like having sex or using the bathroom.

I love remembering the long, long ago days of a brand new government and all the serious discourses on what exciting things would at last be done to save our failing state

The euphemism for this is "content-derived metadata" or at least it was in the post-Snowden era. The below is taken from the 2015 Investigatory Powers Act Report (link in alt txt) and although it's specific to GCHQ's wishlist, it's very likely a shared wish. LLMs are a new twist on this older issue.

For some reason I came back to 20+ notifications that no longer existed by the time I'd checked. Is this related to it being down or separate weirdness?

Having said that 313 Team aka the Cyber Resistance in Iraq are claiming an attack on their Telegram channel, they have been trying to make a name for themselves taking down recognisable platforms with DDoS. The group is pro-Iranian and I think run or are affiliated with a booter service.

QAnon and PizzaGate never went away, they were absorbed into the Right Wing psyche. It's part of their understanding of how the world works, the foundation myth of the new right.

Your push notifications can betray your privacy. Here are the settings you can enable to do something about that: www.eff.org/deeplinks/20...

is that their torrent or was that a drive-by? lol

Hackers really should be reading history of revolutionary and civil rights movements so they don't find themselves publicly musing what should be rhetorical questions like "Does the FBI intentionally inject discord into groups with political power to stop progressive movements?"

For those counting this would be relaunch number 16.

it's not like it was a new department with new staff and new powers and new tasks. they just got a change in priority, permission to be less subtle and sail under a more honest flag. its the intended endpoint of a GWoT political project. this is, in fact, exactly what they signed up for.

well there's a few rounding errors from floating points but, yup, that looks a lot like pi.

its weird that phishing pages have anti-debugging. but also if some suspicious email link is sending browsers to `about:blank` I feel like that's immediately a red flag? can't think of a legitimate reason that'd ever happen. surely you've got a better cover action you could take?

Why yes, I do have a nemesis

For the second time today, and now from the other side, I've seen a "law is quasi-equivalent to code" argument being discussed again. I'm pretty sure there's a Dan Kaminsky Blackhat (?) talk from 10 years ago that muses on this from the technical side but they should not aspire to be similar.

googling "dachshund to olympic size swimming pool conversion rate" so I have some useful context for size.

CPU-Z and HWMonitor nerd (@d0cTB) put out a statement. Compromise was present for approx. 6 hours. This is an extremely short period of time. Also, extremely fast response by the nerds at cpuid.

I tried to package littlesnitch for Linux for NixOS. obdev.at/products/lit... However, as it stands I think some kind of BPF/kernel hardening is making it really unhappy and if I'm lucky OOMkill will get it before the system locks up. Maybe you'll have better luck? gist.github.com/cyberworm-uk...

As someone who is obsessed with and would love to know the identity of Phineas Fisher, I really get the temptation to try to find Satoshi Nakamoto. I would love to know the real story there too. But at this point, after...what? Half a dozen failed attempts? Perhaps it's time to let it go.

This is maybe not shocking but it's definitely something to keep in mind, that notifications of sensitive information outside of an app otherwise handling sensitive data correctly can violate those precautions. Push notifications especially have been very problematic in this regard recently.

I encourage you to look at the Wikipedia entry for this guy who "cannot cope with lying politicians" and that our culture makes everyone "chronically dishonest". Just the opening paragraph. It's 4 sentences long and it's all you're going to need.

Liberal Currents accidentally showing that they're mostly a reactionary neo-liberal outfit primarily designed to punch left then quickly deleting it when people noticed.

very curious on the 10 PETABYTES of data exfiltrated because they is an unfathomable number. 10PB is 10,000 TB. Even in cold storage that's roughly $43,000/month. If it's "hot storage" you're looking at something like, $150,000/month, that doesn't even include the fees for moving the

So it seems to be about having to upload your government ID to Microsoft to be able to develop kernel drivers drivers, a high security context to be sure but... cmon. I don't think we'll ever see the Year of the Linux Desktop but nobody is making it more feasible than Microsoft.

New, by me at TechCrunch: The developer of the widely popular Wireguard VPN says he is also unable to ship software updates to Windows users after Microsoft locked his account, marking the second high-profile app developer (VeraCrypt) in the past few weeks to face this issue.

@bloodwork.show Is this violence work? It's very "mercenary" but there's not a lot of hitting people with swords or shooting them with guns. It is about a forcible projection of state power though. Is too abstract or is it violence?

NPR calling "zero click" a "technology" feels extremely euphemistic (also, less importantly technically not quite right). I don't feel like if it was a Russian or Chinese APT they'd call their rootkits a "technology" that lets them read emails.

I wrote a bit of relatively bad code to fix a problem (defining tailscale serve configurations from NixOS without using "services") that no one has. cyberworm.uk/posts/tailsc... I also added extras to the end of the post about shells with some practical examples. cyberworm.uk/posts/shell/...

this is the ceasefire agreement that trump agreed to, which to me looks like an insane strategic defeat for the US

A few thoughts. First layer, Iran being the reasonable party in the ceasefire is obviously darkly funny. Second, the US and Israel have a recent track record of simply not following ceasefires and never being held to account for it. Thirdly, Trump habitually breaks "deals".

🔒Want to build privacy tools that protect people worldwide? The Tor Project is hiring a Senior Android Engineer/Mobile Team Lead to own the technical direction of Tor Browser for Android & lead a brand-new mobile team. Deadline to apply: April 10. 👉 torproject.org/about/jobs/senior-mobile-team-lead

Cisco, IBM, and the data center lobby is trying to kill an *already existing* right to repair law in Colorado by massively fearmongering lawmakers into exempting their tech under the guise of "security" of "critical infrastructure" www.404media.co/data-center-...