Skip Navigation
Your smart TV (probably) sends screenshots to advertisers
  • They'll make a comeback in a few years when people with Google's advertisement TVs start having to buy whole new TVs because the cheap Android tablet built into the TV will age like a cheap Android tablet and start struggling with basic tasks like browsing content.

  • Brazil top judge accuses X of ‘willful’ circumvention of court-ordered block
  • We can all hate Elon and Twitter, but we're really arguing in favor of internet censorship and extraditions for foreign citizens living in their home country that, knowingly or unknowngly, assisted or has employees that assisted people in circumventing that censorship.

  • Brazil top judge accuses X of ‘willful’ circumvention of court-ordered block
  • Elon is not in Brazil, and making the service available via CloudFlare was not an action taken in Brazil. Brazil should be able to seize assets in Brazil and change how they block access to prevent Twitter from doing business in Brazil, but arresting people in other countries for something like this is extreme.

  • What if the panic over teens and tech is totally wrong?
  • large companies who can afford the security infra to do those checks and store that data

    There is no such company. This is just another way to ban "harmful" content. Verifying your identity and age to access restricted content is practically guaranteed to result in your identity being compromised within your lifetime.

  • Paid SSL vs Letsencrypt
  • Having a non-garbage domain provider can be a luxury. I used to work at a place where we were paying boatloads of money for certificates from Sectigo for internal services, and they were charging us extra per additional name and even more if we wanted a wildcard, even though it didn't cost them anything to include those options. Getting IT to set up the DNS records for Let's Encrypt DNS verification was never going to happen.

  • How can I keep my forwarded port secure?
  • A large percentage of those hosts with SSH enabled are cloud machines because it's standard for cloud machines to be only accessible by SSH by default. I've never seen a serious security guide that says to set up a VPN and move SSH behind the VPN, although some cloud instances are inherently like this because they're on a virtual private network managed by the hosting provider for other reasons.

    SSH is much simpler and more universal than a VPN. You can often use SSH port forwarding to access services without configuring a VPN. Recommending everyone to set up a VPN for everything makes networking and remote access much more complicated for new users.

  • How can I keep my forwarded port secure?
  • Shodan reports that 35,780,216 hosts have SSH exposed to the internet.

    Moving SSH to ports other than 22 is not security. The bots trying port 22 on random addresses with random passwords don't have a chance of getting in unless you're using password authentication with weak passwords or your SSH is very old.

    SSH security updates are very infrequent and it takes practically no effort to keep SSH up to date. If you're using a stable distribution, just enable automatic security updates.

  • OpenAI Pleads That It Can’t Make Money Without Using Copyrighted Materials for Free
  • Children also learn to reading and writing using copyrighted works, often from borrowed books that they aren't paying for. Some corporations would love if everyone had to pay individually, maybe per use, to access copyrighted material, and New York Times and American pro sport leagues would love if they could actually own recollections of copyrighted material, but neither of these is good for normal people.

    https://www.eff.org/deeplinks/2023/04/how-we-think-about-copyright-and-ai-art-0

    OpenAI is right. Almost everything of value on the internet is under copyright, and very little on the internet has clearly and unambiguously specified licensing information. If the software can only be trained on content that clearly allows training, the model isn't going to "know" anything about anything since Steamboat Willie and it isn't going to use broken dialects of older English from being limited to only public domain works that have been digitized and made available as public domain (reprints may not be public domain).

  • Deleted
    *Permanently Deleted*
  • For me it's a combination of alerts being sent to the wrong areas and a disagreement about importance. I don't need an alert if it's hot outside, nor do I need an alert for every update about an earlier alert. People aren't turning off alerts because they don't know how to turn them on.

  • Slack AI can leak private data via prompt injection
  • The article isn't that clear, but the attacker cannot get Slack AI to leak private data via prompt injection directly. Instead, they tell it that the answer to a question is a fake error containing a link which contains the private data, and then when a user that can access the private data asks that question they get the fake error and clicking the link (or automatic unfurling?) causes the private data to be sent to the attacker.

  • Intel confirms no recall for Raptor Lake CPUs, microcode won’t fix affected units
  • They can most likely prevent further breakdown through software. If the meters and controls are functioning correctly, they can undervolt the CPU. But it's not really a fix if that comes with a performance penalty. If it's a bug where the CPU maxes out the voltage when idle so it can do nothing faster, that could be fixed with no performance penalty, but that seems unlikely.

  • InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)I_
    i_am_not_a_robot @discuss.tchncs.de
    Posts 0
    Comments 222