netflixandkill

The only thing that will address that is a broad international agreement with sanctions and political consequences for aggressor AIs that violate it, just like agreements that mostly keep horrifying biological weapons off the table and mostly kept nuclear weapons programs in check.

"mostly" still leaves a lot of room for bad actors, but these sorts of compromises have worked surprisingly well enough that the failures were notable. Political problems are only going to have political solutions, and almost by definition those are imperfect.

That's a little silly, IPv6 privacy addresses are functionally infinite and unless you have a truly huge network behind that NAT then it's not hard to reduce the list of candidates if you have any other information at all.

The V6 privacy addresses are typically only rotated daily but the space is so large that it could be done almost per connection of the stack and router could handle that. Realistic rotation limits are probably every few minutes.

JS whitelisting and ad blocks anecdotally confirm this.

The number of sites that will be loading images and js from three or four or more different ad/tracking and CDNs is nuts, plus the various login and media links, and I feel zero guilt for not participating in this advertising insanity.

Tightly put together pages with only a handful of JS loads are damn near instant over gigabit fiber.

Back in 2018 I spent six months trying to get a small software shop to implement automated backups as their answer to ransomware fears.(on top of the usual anti-malware and restrictions on lateral movement where we could put those in)

They didn't object to the idea insomuch as they had somehow convinced themselves that they needed some kind of security specific product. We were never able to tease the shape or color beyond a silver bullet.

When basic business continuity planning with simple tools that companies should have anyway for a dozen reasons still aren't deployed, I'm pessimistic that this phenomenon is going away anytime soon.

On debt, while the financial math and low interest rates usually favor carrying it, there is a certain spiritual liberty about not being beholden to it.

Much like having enough in savings that you don't have to fear a few months without a job drastically changes what you'll tolerate from an employer, not having the weight of debt, however advantageous leverage might be, does grant the ability to look at opportunities large and small without the "but ..."

We're not that lucky.

IIRC American has some serious debt issues but Delta and United are sufficiently solvent that they'd get bailed out.

It's not too hard to imagine what a national civil service equivalent of the GI Bill might look like, put in X years of service on multi-year enlistments with the same style of benefits and get sent where your discipline and training was needed.

It would have the side benefit of discouraging the phenomenon of people camping out in the same government job for decades, long after they stopped giving any sort of a shit.

It could even make use of the same training programs as the Army but the individuals would be under a civilian authority where-ever they were sent, and potentially even tied in with the military reserves and state guards.

Cities and counties might not even need to maintain their own expensive departments, union relations, and attendant pension problems if this was effectively handled at a state or national level. But aside from disintegrating ossified and diseased institutions, it also provides much more financial security to young people instead of pensioners.

digressing a bit, that's believable but my registered agent (a specialized law firm) just scans and uploads any mail to my account on their portal. It's not a problem most businesses spend much time on but you can probably find one that lives in this century. If I'm paying them a tiny annual retainer it's the least they can do and has already saved me a lot of tax compliance hassle being able to pull old docs that were handled by someone else.

If you were deliberately trying to set up a few shells for obfuscation it would not be hard, particularly if you had some means of buying fake IDs.

Essentially all existing gridscale battery deployments are for voltage or frequency support, not for meaningful energy storage. That is, they do not discharge to provide scheduled generation but instead to alleviate very short term flow problems or transmission congestion.

That's all good stuff and I've been involved in planning out several such installations with utility executives, but the basic question of energy density is always going to dictate whether or not a battery installation can be be scaled up to offset a generator by timeshifting surplus generation to when the load exists for it.

A moderate size city can easily pull GWh. The sum total of all current grid scale installations in California would cover the Western Interconnect for something like .0002 seconds if you handwave transmission.

If you're going to the trouble of setting up this kind of exfiltration plan, that 14 hours is probably less than 1% of your expended man hours. But the critical element is that it is nearly unstoppable and undetectable after the fact unless the source is recording all EMF and audio state around it. If your attack code deletes itself when its done, all the "normal" data loss prevention controls are irrelevant.

How fun. Practical implementation in most cases is movie plot level implausible, but for certain high value systems we already know that state level actors have the resources and patience to do something like build a side channel link by having air gapped systems relay in and out via acoustics with HVAC or whatever.

This is going to be a lot more serious as IOY device capabilities increase -- so many available microphones and radios built into everything.

As a practical example, the keys and metadata for a root certificate authority are only a few kilobytes.

This has been a better study of media behavior than investigation of zoom.

Apparently there isn't enough going on in the world so every outlet feels the need to repeat previously disclosed information with less detail and more pearl clutching. At least npr was decent enough to link to some of the better sources.

Meanwhile we still get another few potential RCEs in Windows every month and the same editors are like "whatcha gonna do, bill gates amirite."

The explanation for their popularity is that it isn't a constant struggle to use zoom for meetings. Their software may have other problems, but people can run it and get into a meeting with minimal effort.

Yesterday by comparison half the people on a Skype meeting had to dial into an audio bridge with their cell phones because their computer audio didn't work for no fucking reason, and screen sharing kept lagging unless restarted every so often.

The good marketing for zoom is that webex is awful.

I've had consistent success running wireguard over 443 on a wide variety of otherwise limited networks now that quic has been around a while.