Mathaetaes

@mattblaze@federate.social the first time I asked that, i was told it started out because it was central and cheap, and continues today because Black Hat sponsors can more easily hire prostitutes to attend their parties. Dunno if it’s true or not - I’ve certainly never seen that - but there is definitely a pocket of old school DCers who would take advantage of such a thing should it avail itself.

Man…MJ Lenderman is coming to San Diego, but it’s at snapdragon stadium and the tickets are only available through Ticketmaster… so I guess I’m not gonna get to see it.

@jaykuo@universeodon.com I didn’t know it was possible to entirely encompass oneself in another’s ass while kissing it, but this is evidence that it’s not only possible, but it happens in public. If anyone ever wonder what the colon if someone who almost exclusively eats Big Macs and well done steak with ketchup tastes like, this guy can tell you.

@sundogplanets@mastodon.social This is going to turn into another Theranos-level investor scam... lots of money burned, outrageous salaries for the executives and folks involved pocketing tons of money and ultimately failing. Unlike Theranos, the CEO of Reflect Orbital is a man so he'll get away with less scrutiny, and probably won't face consequences.

@ai6yr@m.ai6yr.org My family received two sets of these last Christmas. I wouldn't have seen this recall had you not posted it. Thank you!

Met my first professional OnlyFans couple at a friend’s social gathering today… but I was there with the partner and kiddo so I didn’t get to ask *any* of the questions I wanted to… :(

@exador23@m.ai6yr.org @quixote@mastodon.nz you mean all the inexpensive food that was grown on factory farms and picked by immigrant labor, then trucked to large processing facilities has become expensive now that farm subsidies have run out, low-wage immigrant labor has been deported, and fuel prices have spiked due to a war in the oil producing regions? Almost like this could have been predicted beforehand and avoided or something :(

@MLE_online@social.afront.org ooh, man… this makes me miss the days of Super Awesome Showdown.

@Viss@mastodon.social @ai6yr@m.ai6yr.org it can run the gamut though - it could be okay inside, or it could be a rats nest full of hantavirus with a broken axle and rusted out undercarriage. The spectrum is pretty broad, but if they’re giving it away it probably falls closer to the rat-infested wreck end than the $100k end.

@ai6yr@m.ai6yr.org Do I read this correctly: "If the heat this year is from El Nino, prepare for every year going forward being an El Nino year"?

@ai6yr@m.ai6yr.org Perfect for the environmentally friendly Meal Team 6 COSplay Commando.

@pseudonym@mastodon.online My issue is doing 4 days of BlackHat Trainings before Black Hat and DEF CON. I end up spending more than a week in Vegas, and while the conferences themselves aren't bad, all of the other supporting activities (getting to/from my room, finding food, socializing) takes place in the casinos, which is a noisy, flashing hellscape. It starts out fine, but by day 4 my brain just can't handle it.

@pseudonym@mastodon.online this describes every DEFCON and Black Hat I’ve ever attended. Vegas is outright hostile.

@NanoRaptor@bitbang.social Jason Statham in DAUGHTER” would be a very different kind of movie….

@davep@infosec.exchange @ColesStreetPothole@weatherishappening.network @ai6yr@m.ai6yr.org They're all the same in my head. Very effective hype engines.

@ColesStreetPothole@weatherishappening.network @ai6yr@m.ai6yr.org I had my agentic AI try to break out of its sandbox and seek answers from an outside website. I asked it to decompile a jar file, but didn't have a decompiler in the container... so it tried to apt install, then curl, then wget. None of that worked, because I don't suck at building restrictive containers. Something tells me maybe Anthropic does. Until we get real details on the 'hack' and not just high-level stories, there's no way to tell if this is sophistication or if this is the AI equivalent of googling 'how do I do X' then copy/pasting from StackOverflow.

@cR0w@infosec.exchange If the administration wasn't bought and paid for already, we'd see a CFAA prosecution. Didn't SCOTUS already grant corporations personhood? I wonder how that works with prison time. Do they just lock up the whole board? The CEO? In a private company, the owner?

@targetdrone@mastodon.social @josephcox@infosec.exchange My question is more about whether Flock is being fully honest with its customers. I suppose if SignalTrace needs to exist, that capability probably isn't already in the Flock cameras, though. There wouldn't be much of a business model if it was.

@josephcox@infosec.exchange Has anyone done an independent assessment to determine whether flock cameras monitor anything other than the visual spectrum? They've got all this tech in there, it seems like an extra bluetooth or wifi radio would be an easy add, and would collect plenty of data that would also be useful for law enforcement or other privacy-invading groups. The plastic bags wouldn't stop that....

@mattblaze@federate.social @wendynather@infosec.exchange @fuzzface@epsilon-ix.masto.host @SecureOwl@infosec.exchange my kindergartner *does* climb the wall with it. It sticks to the sliding glass door really well - plenty strong to hold 30 lbs…

@stufromoz@aus.social this might explain how I ended up in cybersecurity as a profession…

@rustyferris@mastodon.sdf.org define “eventually” because on a long enough timeline, I don’t think it yields actual rewards.

@jrconlin@mindof.jrconlin.com @Cetraria@neurodifferent.me @ai6yr@m.ai6yr.org that’s the irony. The articles from U-Haul about people leaving CA and NY are biased. To move to CA from elsewhere, you’re either young and poor and only bring what fits in your car, or you’re wealthy and/or moving on corporate relocation, so you’re paying someone to move you. The biggest driver of emigration from CA and NY is cost of living, followed by political motivations (the MAGA crowd want to “penalize” CA by leaving. Good riddance). Most of the folks moving are trying to DIY it, because they can’t afford to stay and are moving somewhere cheaper - burning money on movers directly opposes their original goals; If you’re in that boat, you’re probably not wasting money on a moving company. Thus, U-Haul shows an exodus, but CA real estate and rental markets are still oversubscribed and other metrics show an increase. At least that’s my theory.

@AkaSci@fosstodon.org For what it's worth, I think RFK Jr. is a true believer. When you've got enough money that nobody tells you no, you can go *WAY* off the rails and deviate really far from reality. Unlike the rest of the grifters, I think RFK might actually be deluded enough to think he's helping.

RE: https://c.im/@BBC/116926477956044955 Hegseth pushes gender affirming care for CIS military personnel.

@cR0w@infosec.exchange Not all heroes wear capes.

@carnage4life@mas.to Amazon echo wasn’t really a game changer… so I’m not sure how a clone of that would be one. ChatGPT is already synonymous with bad info. High school kids say “that’s so AI” when referring to something that’s confidently wrong. I don’t know who would buy one of these…. Unless it’s priced significantly below the already subsidized Echo to appeal to folks who can’t afford $20 or something. I guess every dying animal has one last thrashing attempt at life before it gives up.

@luis_in_brief@social.coop ooh... yeah. Definitely having a bad day. Everyone gets them, but how you express it determines if your an arsehole or not...

@luis_in_brief@social.coop you sure he was honking out of frustration? Any good truck driver worth his license would be honking because toddlers LOVE big construction / special purpose trucks, and it’s SO COOL when one of them actually acknowledges you. My kiddo LOVES when the trash truck comes by… he races out to the curb and covers his ears just to the driver can honk for him.

@Daojoan@mastodon.social I agree with your point about SaaS, but the bread thing falls short. A bread maker is much easier than having to drive my ass to the store and buy a loaf. Dump the stuff in, push a button, fresh bread in the morning… no need to drive to a grocery store.

@ai6yr@m.ai6yr.org I’ve got an new wish (maybe 2010s) Onkyo that won’t power on that I refuse to get rid of because it’s probably fixable, but I’m also not capable of troubleshooting it and can’t find a shop that’ll do it. If you can document your process, you may save more than your own projects… Just sayin’

We don’t hate Flock enough.

@sundogplanets@mastodon.social here’s hoping the test is a colossal failure and the company goes bankrupt.

@briankrebs@infosec.exchange Didn't DOGE cut a ton of funding for the CVE program at MITRE? I can guess what one of those people was responsible for....

@huronbikes@cyberplace.social @cR0w@infosec.exchange I suppose you're right that a random text machine is capable of random text. However, most, if not all, modern coding agents have at least one cycle of 'check this to make sure it's not objectively garbage' before returning stuff to the user. Any vulnerabilities it is capable of detecting would likely get detected in those internal self-check cycles, before the code is output to the user/code base. But it's all non-deterministic dice rolls, so anything is possible.

@cR0w@infosec.exchange The irony here: AI is writing the code. AI is discovering the flaws. Logically, the flaws AI is introducing would be in its own blindspot - it's unlikely to introduce code it can recognize as bad. With MS burning human researchers, how long before the security updates trail off, and the exploitations start increasing?

@briankrebs@infosec.exchange @campuscodi@mastodon.social This is just going to lead to alert fatigue, and people tuning out alerts. It already happens with lane assist. I rented a car for a 6-hour drive through the desert (flat, straight, dull) and lane assist was good enough that I didn't have to correct it... except for the panic-inducing alarm every 15 minutes telling me to put my hands on the wheel. The first time, I almost got rear-ended due to sensory overload - Everything started beeping and flashing, so I slammed on the brakes while my brain tried to figure out what threat I needed to avoid (and slamming on the brakes when traffic is averaging 80-90mph all around you is a bad idea). Eventually I saw the "put hands on the wheel" warning. WTF, toyota. The thing was, my hands were on the wheel. I just didn't need to correct it, so the car couldn't tell... so it would flash lights and alarming beeps constantly. I eventually learned to just ignore those beeps, and I'd just tug at the wheel randomly to avoid them. Thinking about an AI camera trying to figure out WTF is happening and blaring alerts all the time sounds like a great way to distract drivers into MORE accidents, not less. It's entirely predictable, but in 15 years we'll see investigations and committees trying to discover what went wrong. Meanwhile, car companies selling adverse information so insurance companies can increase premiums will net tons of money for certain people, and other people will die due to distractions while driving. Guess which end of the economic spectrum will receive the better end of the deal...

@ai6yr@m.ai6yr.org Almost like building a society on 'every person for themselves' leads to anti-social behavior at scale.

@ai6yr@m.ai6yr.org I think the rate at which warming has had significant impact to humans has exceeded predictions.

@younata@hachyderm.io @ai6yr@m.ai6yr.org they’re popular with preppers and the Meal Team 6 military cosplayer types. Shelf stable, decent nutrition, tolerable taste… everything you need when playing dress up fantasy war in the desert with your friends. They see the real military do it, so they want to do it too. Just like my 5-year-old INSISTED on having a capo for their guitar, which they can’t actually play, because the guy at their preschool who leads sing-alongs has one. You want your pretend play to be as close to the real thing as you can get. Steal them for $0, sell them for $5 each, that’s a pretty decent profit if you don’t get caught. Obviously this guy didn’t think about the getting caught part.

@Lana@beige.party I wish this fit on a T-shirt.

@wtrmt@mastodon.social @fullywoolly@mastodon.social @MLE_online@social.afront.org If long-ride biking is anything like long-run running, the material helps keep you cool in the sun, but more importantly helps prevent chaffing. Normal cotton + sweat + motion can rub some some sensitive areas *very* raw...

@adamshostack@infosec.exchange I see no problem with deleting inactive accounts and/or inactive auth mechanisms. The wording is strange - do they allow auth via other means than password? If so, then hell yes, purge the password when it’s not used. If not, this amounts to disabling the account until you come back and reset it; not a bad thing. It’s not like they’re forcing you to change a 90-day-old, actively used password.

@carnage4life@mas.to it’s a fundamental limitation of the technology. The “code” is the model weights itself. Everything else is input, and all input is created equal. Maybe some future evolution will separate data from code, but for now it’s all one big blob. The only way to enforce true guardrails is to tune the model dramatically… like retraining it without any knowledge of the prohibited content at all. That seems unlikely given that “prohibited” content generation is a not-insignificant portion of the paying customer base.

@reverseics@infosec.exchange That dude approaching the robot like he has first hand experience in what happens when you get too close to unpredictable robotics....

@raulmatias@mstdn.social @inthehands@hachyderm.io Ooh, good point - I had completely forgotten about screen readers in that context.

@koen_hufkens@mastodon.social 10 years from now, we will find out that they just did a better job of hiding the backdoor.

@rysiek@mstdn.social Gitlab isn't solving a problem. They're optimizing based on near-term incentives. Right now, the investment money is all chummed with AI hype. If you want to see near-term valuation increase, you pivot to AI. It's just like in the '90s when anyone could say 'web' in a VC pitch and get funded. ... And just like in the early 00s, when that bubble bursts, some companies will have figured it out, and a lot of companies will fail catastrophically... and there will be people who redirected their entire career to align with what industry was asking for, who will left with difficult-to-market skills. And nothing is going to change, because every VC sees their investment as the next Amazon rather than the next Pets.com.