DethNinja

“Users” in this case are supposed to be software engineers. Thus, I don’t see how Amazon’s claim can be misleading. Server side encryption is very valuable, especially against breaches on the cloud provider.

I would expect any mid to senior level engineer to understand the implications and add further security (local encryption before upload etc.) measures as neeeded.

I think your guide and HardeningKitty type solutions are good for non-targeted attacks and for your average user.

Main problem is that targeted attacks are rife in the software industry. Even small startups get frequently targeted by competitors.

In order to defend against the targeted attacks you need to plug hundreds of holes in the Windows, some of these can be plugged by HardeningKitty but to truly secure it:

- You need to figure out which services you can disable without crashing the OS and keep them at a minimum. This entirely depends on how you use OS and which type of software is installed at the endpoints.

- Use stuff like Windows Application Guard, disable lolbas as much as possible (https://lolbas-project.github.io/).

- Secure the WSL itself.

- Windows opens ports according to it's own mind. Only way to unplug these open ports is to add another hardware firewall separate from the endpoint itself. So you can't even trust the inbuilt firewall of Windows.

- Windows is a very dynamic OS and each update can result in more open holes or might just automatically discard previously applied settings. Thus, you need to keep monitoring this 24/7.

- Windows registry has a very large amount of paths for malware persistence. This amount is far beyond malware persistence paths on Linux. Unfortunately, Windows Defender doesn't care much about this, so you need to monitor this yourself.

And this is just the beginning, even if you plug all this stuff, you might get attacked by zero days. Monitoring all that will also require SIEM solutions on top of it. Most of the SIEM solutions are just focused on compliance. Building a SIEM solution for real security instead of compliance is also a very hard task.

This is at best a very basic list. Securing windows against targeted attacks are far harder than securing Linux.

For people that are interested about more advanced ways to secure Windows:

https://github.com/scipag/HardeningKitty

https://github.com/sandboxie-plus/Sandboxie

HardeningKitty is a good start but truly securing Windows is actually super complicated.

Did they ever disclose exact amount of engineers that were laid off? Twitter laid off lots of people but I doubt majority of them were engineers.

This looks amazing. Lots of people complain about node based editor but there is a real need for non-destructive/parametric 2D workflows.

Why not make this commercial though? I wouldn’t mind spending a small amount of money on such an editor.

Is it still int32 though? Most of the user space APIs give this value in int64 so I thought kernel would’ve kept it as int64 as well.

This is a common misconception. AI is not copying anything. It is studying the images in a similar way that humans do. Entire size of the stable diffusion model is around 6gb, with pruning it goes down to 3gb. Training set is in terabytes. So it is common sense that no copying is done.

I think artists need to be fair about AI, is there any artist that created their style without ever studying other artists? That is high improbable because humans need to observe to create art. There is even a saying that "Good Artists Copy; Great Artists Steal".

Is there any reason to use these cloud based solutions when open source alternatives like KeepassXC is available?

What is the memory requirements of this model?

It is commercial code, so I can’t share it. However, algorithm is really simple to implement in Houdini:

* Generate depth image from 3D meshes

* Send depth image to local HTTP server running Hugging Face diffusers library. Generate textured image.

* Cast textured image to a 2D plane surface that covers the camera extends.

* Traverse the UV surface of the 3D meshes and find closest point on the 2D stable diffusion image plane. Copy the RGB value to UV texture and you’re done.

Depth Guided models are amazing for game art texturing: https://hackaday.com/2022/12/18/image-generating-ai-can-text...

I already incorporated this to Houdini to generate 3D distance meshes and it works wonders. If anyone is interested in experimenting with this, I really recommend Hugging Face diffusers library.

I wonder when we will be able to generate studio quality 3D models from a single 2D image. I know there are solutions that can do this but it is still nowhere near professional quality.

Do modern browsers check this though? It would introduce a large latency to each request, I bet none of the browsers do that.

Moreover, Chrome removed the browser extension API for TLS certificate details, so it is not even possible to do CT log verification via extensions.

Only way to do CT log verification would be by customising an existing TLS MITM software. As far as I’m aware no such solution exists at the moment.

Certificate system is actually rather insecure, and although solutions are possible to develop, nobody has taken time to do it.

It is great that people are concerned about UUID entropy, because some implementations actually got much less than ~120 bits.

However, I think article missed the point that you shouldn’t use UUIDs as a security measure anyway.

This is pretty neat.

I wonder what would be the maximum CPU & Ram you can go without installing any moving parts (fan or pump) on a mini itx board.

Has anyone got a setup if you want to use more than 12 cpu cores?

It is most certainly possible to escape browser sandbox and inject to a vulnerable driver through JS.

Do Windows care about vulnerable drivers? Is there anyway to prevent installation/execution of drivers with such CVEs?

> at worst it cost money.

I would say at worst they would woke up an eldritch abomination.

Even multi-hop is not enough to hide your IP. There are timing correlation attacks, you need to build a system with jitter and randomness to somewhat hide your IP. It is a very complicated topic. You cannot hide your IP by just chaining two VPNs.

TOR isn't adequate too, far too many state actors maintain the nodes.

Only option is to use a public WiFi. There are still issues with public WiFi usage but it is still far better than other options listed.

That being said, Multi-Hop VPN is more secure than single hop as the article claims.

There is a test and experience record verification process, optionally a recorded interview.

You cannot get a P.Eng license just by paying membership fees.

There is also a discipline process for engineering misconduct.

I worked for large companies all my life and all of them are actually like this.

I wonder how one can find companies with no office politics, and one that rewards real engineering work. Do any of the FAANGs actually qualify for this?

I’m very jealous of people capable of pulling this off. I guess there is no way to do something like if you are not in the right circles.

I can explain it, but you won’t like it:

* Entire economy is right now controlled by FED and mega funds like Blackrock. What Engineers or public think is at the moment is unimportant, entire shift to Metaverse is directed by these mega funds / mega investors.

* So, people that control the economy desperately want Metaverse to happen.

* The reason is that they believe Metaverse will give much needed bread circuses to citizens and keep them happy during the incoming calamities like climate change.

* Moreover, they can easily forcefully strap low income workers to VR/AR glasses and control them more effectively during the work.

* Though there are couple of major problem with this plan.

* Most of the companies working in this area is just interested in suckering the investments. This is very similar to blockchain startups.

* Public won’t be very interested in AR tech, and forcing AR top down will actually create genuine social issues.

Zero maintenance is an impossibility. What happens when hosting provider goes bankrupt?

However, there is a way to make minimal maintenance websites.

Make a static website and upload it to a provider that you believe won’t go away for at least 30 years.

Checkout Astro.js for this purpose, you can then upload it to any CDN. I prefer to use bunnycdn due to costs but there are other providers too.

I think open source firmware is one of the major requirements for security in 2022.

It is fairly easy to backdoor or infect firmware, yet very few companies use components with open source firmware.

Infections can be dealt with frequent firmware verification but only solution for backdoors seems to be open source firmware.

I wish somebody would create an online playground for learning x64 assembly.

It isn't so hard to install NASM and start from there, but it would be substantially easier to learn if there was an option like codeacademy for assembly.

> How about stop giving away money period…

That would be very convenient for the ruling class, after all most of the printed money was handed out to them. This would result in some form of feudal system.

Right now government either has to hand out money to workers directly or tax the rich further.

Turkey’s problems goes further than a simple interest rate increase.

Even if they increased the interest rates, they would still have substantial inflation.

Truth to be told I don’t think such third world economies can ever recover. It is too late for the patient.

So far I’ve used six languages to build everything from web apps to desktop applications and C++ is still by far my favourite language.

It is sad that it is still haunted by prejudice due to pre-C++11 era but modern C++ is easy to learn and use, and I recommend every programmer should give it a try.

I think hardware protection against EMFI isn’t important for consumer electronics or even commercial servers.

1. It requires physical access.

2. Password based disk encryption would still protect against EMFI attacks for data exfiltration. There are easier methods to bypass TPM than EMFI.

There is a chance you might’ve been hacked.

You would be surprised to see how easy it is to hack domestic routers.

1. Find and disinfect the devices, including the router. If you don’t have enough technical knowledge, then buy a new router.

2. Use 30 character long random password on the router.

3. Disable UPnP.

4. Anything with WI-FI and weak password can be hacked within minutes, so check your other devices as well, especially IOT ones.