hal8999

@PogoWasRight@infosec.exchange Tonight, the role of Marco Rubio will be played by Jonathan Groff. 'Cause when push comes to shove.. I will ̶k̶i̶l̶l̶ deny visas to your friends and family to remind you of my love Da-da-da, dat-da, dat, da-da-da, da-ya-da

@GossiTheDog@cyberplace.social There was a kid who tried to inject himself into wikipedia for 'publishing' an A.I. slop novel. He was so hell-bent on seeming relevant, he injected himself into wikimedia commons and wikidata by making a family tree of all the people related to this famous author linked in wikipedia. It's quite ridiculous that they think they are actually doing something of value.

IIRC, didn't we officially say this was not a good thing at Abu Ghraib? They always blame training. https://arstechnica.com/tech-policy/2026/07/cop-charged-with-covering-bodycam-to-photograph-naked-prisoners/

@ravirockks@infosec.exchange soldier: hey A.I., what gloves do we need for this mission? A.I.: Thinking. Collecting info. What are "fingers"?

@squalouJenkins@fosstodon.org @nixCraft@mastodon.social It's a Treasury deal. Not security. Technology gets involved when things call home or leave a trace from somewhere under sanction. A bucket of rice is not as easily tracked. Nor is it as cool to complain about lowering the rice volume in one country, compared to lowering security postures worldwide.

@SwiftOnSecurity@infosec.exchange Always have a spare laptop for visitors.

@atoponce Is this news? It's over a year old. IIRC, it's designed to reduce the amount of data sent off-machine. They were talking about space consumption in Canary release in Feb of 2025 (https://groups.google.com/a/chromium.org/g/chrome-ai-dev-preview-discuss/c/PhgjQg4IoQk) Looking for all the models that have been downloaded for cache in browser, it's not just limited to one. chrome://on-device-internals/ You can use the Tools tab to 'Load Default' model, then type your prompt in the box below. It's slower than a cloud-based response. Ask 'how to spell "incorriggable" and it takes 2 seconds to spit out: The correct spelling is incorrigible. Takes 10 more seconds to explain each part of the word. Then it crashes. I'd rather handle spell checks on-box than send every word up to a cloud service. But, don't ask it what the range of radio delay is between the earth and the moon. Highest Quality says 2.5 milliseconds, and crashes. Fastest inference says 22 seconds, and crashes. Not usable.

@malwaretech@infosec.exchange The 'cybersecurity' people I hear speaking of gloom and doom also happen to have a product ready to release in a week or two, but can't demo it or explain what it actually does. They're selling.

@cR0w@infosec.exchange "Security teams are caught in a vice..."

Since I speak 'muricun, this statement is true. We see moral failing, wickedness, and corruption.

@georgetakei One could respond with a negative number. (Same for the amount of increase in the approval rating in its chosen party.)

RE: @404mediaco@mastodon.social

This should not have been a surprise to anyone who is actually concerned with privacy. Anyone shoulder surfing can read notifications. Why would you display private information to everyone who can see the screen?

If you're serious about privacy, you already turned notifs off as soon as you powered on your phone for the first time...even before deleting bloatware.

And then turned off notifs for every app that is installed. For apps where you need to know when to check...let it alert, but not divulge information.

Need to know if the freezer is too warm? Probably fine to show anyone. Text messages? Never show these, especially if the spouse is snarky or spicy.

Convenience is the opposite of security.

Second take: Hiding secret messages behind a biometric scan is silly on a iPhone that can be held in front of your face without your consent. Fingerprints or iris scans require physical force, so are marginally better.

Say it again: Convenience is the opposite of security.

Artificial Intelligence is spelled "O.P.M.". Meta is only risking 20% ownership in its own 2GW datacenter. The rest is funded by selling A+-rated 144A investments.

S&P rated it A+ because Meta's name is attached. But it's lower than Meta's AA- rating because Meta pledged no equity of their own into the project. They convinced Blue Owl to pledge $2.5BB of their own. Investors in Blue Owl and other private credit companies can't take their money out due to restrictions on share redemption.

Meta signed 11 different leases (one for each building). They won't pay rent until June 2029. Only on the hook for 4 years. And, if they don't have equipment consuming power, they only pay a minimum rent + $/MW consumed. Lease renewals are optional.

The properlty is on a 15-year amortization plan to pay back the local power utility with minimum monthly payments regardless of consumption.

Who are the Other People in O.P.M.? Probablly you. Pimlico, Black Rock, and a bunch of other investment companies that manage your retirement accounts and portfolios.

And, the businesses who are in the same insurance and re-insurance pools as the Meta/BlueOwl joint venture. Your portfolio probably invests in those, and in the insurance companies who will be paying out losses in the future.

Losses? If the datacenter won't come online until June 2029 or later, Will cheaper locations already be online? Will the A.I. bubble have burst already?

Other People's Money = you and me, eventually.

@GossiTheDog@cyberplace.social vibe-warring was the plan.

@adisonverlice @briankrebs Why would you think this violates HIPAA? Phone calls between providers for treatment purposes don't require patient authorization or spy-level encryption. Just follow 'minimum necessary' guideline. And don't do it while livestreaming or in front of an hot mic at a football stadium. If voice calls are not clear, you can write notes with a Magic Marker and fax it over PSTN if you have to.

@PogoWasRight @campuscodi "...Medimap...did not have two-factor authentication..." --nurse in affected facility Of course, it may have, but by a mechanism unknown to the staff. But usually those mechanisms are a downgrade to accountability for the sake of convenience, like allow-listed IP addresses.

@h2onolan@infosec.exchange Whenever my kid starts railing about corporate shareholders, I ask him about those DIS shares he's had since he was a little kid.

"C'mon Dad, let's try change from within by voting our shares against the shareholders."

@GossiTheDog auto-deleted? Maybe that's why I can't find the stuff you were talking about. I remember your asking if anyone in Asia region was seeing anything. What countries did you see exploits or attempts to re-direct download traffic?

@GossiTheDog@cyberplace.social This hack, brought to you by Carl's Jr.

@alice_watson @alice You say 'share', but I think it's really 'rent' and 'trade'. Yes...all those organizations (and more) really will get access to data generated by your visit and whatever latent data your browser gives them about your history elsewhere.