bawolff

Anthropic claims they have and they havn't been caught in a lie about this sort of thing yet. From a theoretical perspective, if a memory safety vulnerability in kernel network stack is exploitable, then root access would be the endgame so it fits.

hence the headline of the post.

> The post gives no details about what this vulnerability is

It is a very famous vulnerability that has been all over tech news sites. Sometimes it is ok to assume the audience has the slightest bit of background knowledge about the topic at hand.

> but this is a bug that could crash your system but is unlikely to expose your confidential system data to attackers

Given people have demonstrated getting root with it, unlikely seems questionable

> Especially given that the exploit can only be done if packets with IP options. IP options are commonly dropped or removed from packets on the open web.

It sounds like iphones use mptcp in the wild, which use tcp options, so im not sure how true this is.

Wikipedia is mostly going in the direction of just having very strict rules enforced via human review. If you get caught using LLMs and refuse to stop, you get banned. https://en.wikipedia.org/wiki/Wikipedia:Writing_articles_wit...

I think its working so far.

Wikipedia has always been different from other sites for leaning more on human labour instead of automated systems (so-called "soft security" https://meatballwiki.org/wiki/SoftSecurity ).

People talk about their being a market for google without the AI features, but i think the real market would be google that filters out slop results.

Bonus points for also filtering out paywalls.

I'm tired of search results being useless. The signal to noise ratio on internet search is much worse now a days.

> This is why I laugh every time somebody seriously suggests there's going to be a war with China because the West would collapse without Chinese exports. It's just not going to happen.

Sounds like all the more reason for china to start a war.

Just having one side dependent isn't going to stop war.

You can have all the resources in the world but it won't matter if you spend them on something else.

Well writer's block on one specific story. GRRM has written other stuff in the mean time.

Personally i feel for the guy, imagine the whole world insisting you only work on the project you started back in 1991.

It would be cool if you could filter by books my local library has (no idea if that info is publicly available)

my assumption is that psychedelics affect how different parts of the brain communicate.

On that hypothesis, it doesnt really surprise me that illusions based on context clues are interpreted differently.

A "bet" is just a slang for doing something based on a position you have.

Like most things, its attitudes later in life were formed in its infancy. Back in mid 2000s, there was a lot of people, especially teachers, who attacked wikipedia (sometimes rightly) for being unreliable. Thus it compensated.

I think its important to remember that Wikipedia wasn't always the only game in town, it was just the one that won. Part of that comes down to the choice of caring about prestige and reputation. Other projects like everything2 did not; look where they are now.

Wikipedia does not operate on "just trust me bro".

On the internet, nobody knows you're a dog.

People are so entitled. Nobody deserves a wikipedia article. If you dont like it start your own website.

Storage is cheap, but low quality articles, especially those on obscure enough topics that they are impossible to verify, have a real reputational cost.

In general, in online communities - i think there is no such thing as free moderators. If you aren't paying them in money then you pay them in power.

If they are specificly targeting you, then they probably dont need to use the coffee shop. The coffee shop is for low skill attackers targeting people at random.

If someone has it in for you and hired a high skill attacker, its not a stretch to imagine they compromised your home network.

I edited my comment

In 2008.

I don't think its wise to make current security decisions based on screw ups from almost 2 decades ago.

Have you never used wifi at a coffee shop?

Physical access to networks isn't that hard to come by.

most likely because the headline is false.

For the hezbollah attack, it wasnt detectable because they used a very small amount and they used PTEN which is harder to detect than other explosives. Even still there is a lot of speculation online that they might have detonated earlier than planned due to being discovered

I dont think they have done anything remotely comparablely stupid. I think a lot of people don't like Israel and that colours their assesment on how rational they view Israel's actions.

As far as USA goes - countries dont have friends they have shared interests. They are allies because their interests largely align, but they are very far away from perfectly aligning. I think people believe the propaganda that Israel is a vassal of USA too much - that isn't the case; Israel has more than enough power to plot their own foreign policy and they dont hesitate to do so when it suits their interests, just like any other country does when they have the ability.

It is election season in Israel right now, i cant help but wonder if there is some sort of internal politics going on with the article.

The article seems careful to say "manipulated equipment", which sounds more like snowden style eavesdropping devices than bombs. That would be more believable to me, as sneaking exploding devices into countries they are not at war with seems implausibly diplomatically stupid. It also mostly worked for hezbollah because they were a non state group that didnt have the budget to do supply chain security. I could see targeted spy devices being plausible, but hezbollah style exploding pagers doesnt seem all that plausible or even desirable against real countries.

Consider me doubtful.

If it was really true, i'm pretty sure they would STFU about it.

All companies will probably eventually die, but that isn't super relavent to topic at hand.

> bullshit jobs is a thing and many of these positions were make work anyways

Wouldn't those people choose to stay? Buyouts are much more attractive if you can easily get a new job.

I dont really see a problem with ftp over TLS. The protocol might be dated, but it still works fine.

unironically yes.

Security improved one blockbuster vuln at a time.

Closed source might have more money but they almost never invest it in security.

And yet people do. PHP is a very active project.

> I can't speak for anyone else, but I don't mind at all when an open source project switches licenses or whatever. They gave away the fruit of their labor, but I am not entitled to any more of it

It only bothers me when they try to claim their new license is open source or use misleading language when it isn't. Which seems to be what 90% companies doing that do.

People can do whatever they want with their intellectual property as long as they aren't lying about it.