saidnooneever

love this show, its a bit samey after a while itss prrtty cool.

movie Echelon isalso nice if ur into this kinda thing

if yiu know the mean wary form cotext then understanding is no missed.

its easy to say until the grimnreaper comes knocking. Sounds more like coping that rationalizing.

please dont forget basic operational security when using LLMs. they dont do everything for you. you can ask them to do all sorts of stuff, that doesnt mean you should.

secrets, encryption, publishing to public internet, scanning for vulnerabilities in your packages etc. etc. you need to take your own responsibility for and never rely on some bot automation or third party.

that includes if its important projects not relying on scanning tools but opening files yourself and verifying what's in there.

read things before you put them in a place where everyone can see them forever....

this is basic stuff. you guys did it beforen LLMs surely.

YOU are responsible. not Claude, not any external vendor, not any downloaded script. You as a person.

i think it would be pretty trivial to determine the box is a pot from whois etc.

people who target these supermarket chains etc. are doing just that. not scanning the entire internet and popping all the fridges, but doing targeted attacks.

mostly your pot will just be a +1 on benign peoples scanners.

you want honeypots for things that are mass exploited, not for things used in targeted attacks.

just my 2 cents. respect the project can be fun to do ofc but i wouldnt expect much interesting results.

that being said maybe you can find parties who secure these chains, or themselves, and offer it as a TI sort of service. Seeing as they knew about these vulns for many months before they got hit, its unlikely they will pay for it or be interested.

its pretty trivial in any harness just to not have it post your shit to the public internet automatically. its a dumb idea to begin with

most games which require that big PC are poorly optimised and often times they arent even fun. these companies focus on visual fidelity and give all their engineers insane machines to build the games on. that has beenn destroying PC gaming way before AI/LLMs came into the picture.

I am using AI now to make a game engine that will run and make 'nice enough' graphics on simpler machines. things like laptops with iGPU and 4gb of ram.

U can still get quite ok graphics, and make very complex and rich gameplay systems using such a machine. It just needs to be the target machine while developing so the right tradeoffs are made.

not true. it wont be worth it anymore to implement Path Tracing or Ray tracing which is absolutely not needed for a prime gaming experience. its deterimental even because ull only get into games with a certain type of person who can afford a big machine.

Many games that come out still, and are quite successful, do not require such technologies.

intel makes gpus :). Maybe games will be finally made again in a way that a PC can run them without needing a 3k GPU in there to get toward half the refreshrate of your monitor.

gaming does not equate to only things like the last of us or cyberpunk which need extreme machines. a lot of visual fidelity can be reached still without having such a monster. Just need to not use certain features which are currently pretty much exclusive to Nvidia...

i wonder if the same millions invested in researchers in UK and EU would simply yield the same results but safer.

loved this game so much back in the day despite its ckunkyness at times. 2 felt cool still and later the whole atmosphere for me was lost. Still recognise and recall fondly a lot of the game many years later. ion storm, the intro music, dialogues.

great example in my mind of that games dont need to be perfect to be released or very memorable.

good writing is essential in my mind, dialogues and music / atmosphere. maybe its personal taste.

thanks for the lovely blog and memories :) totally makes me wanna go and replay them!

if you used the appropriate channels, be more of a karen perhaps and don't just sit and wait for a reply indefinitely. they have response times to try to adhere to. if its busy it can take longer but if they overshoot those times u can always remind them of your pending requests.

They do not block unupdated phones because that will force users to buy exceptionally expensive devices to keep updated. Another thing is actually supportability. Just like any enterprise software, it targets a set of common devices so they can provide support and QA on it.

Now, that isn't to say there aren't security issues, nor that QA is perfect on devices they do support (like with any enterprise software projects), but it is a valid reason from a business perspective to not support everything.

Why do you think generally OpenBSD and such platforms aren't supported by commercial software, nor most open-source software? It adds a lot of burden for testing and QA on developers who will need to become intricately familiar with yet another platform.

People stare blindly at some customer support answers and hinge everything on those words, but if you think carefully about how software, compatibility and support work, this all makes perfect sense.

Peter R De Vries was a prolific crime reporter / journalist who did exceptional work in the Netherlands for many years until he was murdered in cold blood.

I'd really love to see your banking app that works differently and cannot super trivially be attacked by malicious software. Can you show us your example of such an app? It might be helpful to show tha validity of your arguments.

this is valid, in NL most DNS is also heavy monitored and intercepted to do blocks if mandated etc. if you want to get around it u can tunnel ur tlsdns thingy to another place and they essentially cannot intercept it, they can still block the IPs it resolves to so its hit and miss depending on how the other end is implemented.

its usually not nefarious, that is just the simpelest (and usually, not always) wrong explanation.

people who think this is not normal probarbly didnt experience what kind of shit u could find on the pre google pre monitored internet. for sure shit u do not want your kids to find. if u dont understand, then likely u dont have kids and very weird fetishes...

but what if other hackers got into his youtube account, deepfaked him in this video and will make off with more of his money? :O

i recognise this. i do pen and paper still but i do also write bugs. when i do i try to make test programs to learn why, and ideally recognise where my pen and paper whent wrong, because those are gaps in my real understanding of how my language, the program or interactions with its environment and platform really work. Needless to say i always find myself having lots to learn still :). i think in reality only once or twice i wrote a program truly free of bugs. relatively trivial programs ofc (simple socket client/server with basic binary protocol or so. easy to reason about, no complex sync or threading requirements).

i never use syntax highlighting. one day someone told me it was very distracting, i turned it off and suddenly things were calm. Maybe its just taste but i do find it helpful. you really read stuff rather than assuming some color happening means its correct or incorrect subconsciously

so how were the api keys leaked?? as result of the breach? or did they leak them themselves and they were found and then used to breach?

this is a big problem i see at work where a lot of papers are read all the time. more and more its trying to sift through things written by LLM and ridden with mistakes, clearly reviewed also using LLMs. reading it is frustrating, u find 25 papers on a topic and only 1 has good info, but u read like 200+ pages and 5 were worth it. its put me off reading papers all together and i see a lot of colleagues growing frustrated. reluctant to write papers themselves seeing their results get swamped under slop.

we use payed platforms for papers, the usual ones, and they are still riddled with this slop. its incredible. U really need to find good researchers and only stick to their outputs, which sadly makes it very hard for new, honest, researchers to make any impression. A lot are simply skipped with a 'i dont know that guy and cant be bothered anymore' kind of tiredness.

I can only compared it to 'alert fatigue' in a security operations center, so many false positives a true positive might be mindlessly skipped as false. But with papers reading the things is much more time consuming... so its perhaps even more annoying and frustrating.

the worst one i saw was a 'paper' where people generafed a questionaire with an LLM, sent it to 6 'field experts' (random friends in the field) and then ran the answers through LLM and poof, paper done. made me want to chuck my laptop out the window.

its a classical effect of having a hammer and recognising everything as a nail to whack. its pretty tricky to find a problem well suited to a tool like LLMs.

i programming stuff using LLM of which the resultant programs are deterministic and dont use LLMs or tokens is a better or easier approach to having gains. because the resulting program can be easier to use and doesnt cost a lot to run. Automations are a good target, or integratig libraries into other programs. tedious things u know well how to do but take time to do manually. then once done fix a problem or workflow that u need fixed by the solution yielded.

ive not seen 1 app that does calls to an LLM that i find useful, apart from harnesses that produce code (which is only recently becoming more appealing and might depend on how good and fast u can write code, at which im not the best nor the fastest.)

not being able to read something which is encrypted is not a driver problem. do u expect the driver to crack the encryption? or guess the key?

nvidia has always been crap like this. Look at amd and intel, they let u write proper drivers (even if its real difficult to do so). No encrypted blobs or voodoo needed.

the nvidia drivers u need to use a card on Linux are unintelligible binary blobs. thats sad as it is. this is worse. they might give some shitty blobs at some point, after they made enough ppl give up on it and switch to give them and their partners their money, souls and firstborn

cmon Linus, give em the finger again !

more likely the bugs will shift complexity. this has happened before, but slower. then that added complexity will make the new backdoors and 0days even more expensive again.

in the beginning, ppl didnt know a lot, and default passwords and stack overflows were 0days.

then awareness came and a lot of that is actually fixed. Writing a modern exploit more often now requires many stages and a shit ton of skills and knowledge.

that will increase.

nothing will be 'fixed' in that utopian sense.

well made, and very depressing to see, half the bloody country is under alert :(.

can imagine some of the other neighbours who have had 'close calls' or shit falling over their fences so to say, might also be interested.

good effort, clear disclaimers too. thank you.

regardless of what happened truly, id say that someone isn't define by any specific thing that happened in their lives. however people do like to try and make it seem that way, because emotion and subsequent judgement cloud perception and prevent looking past things for a lot of people who cant detach themselves from their own emotions and or judgement.

people change all the time, and sitting in a small box without freedoms will surely cause deep introspection even in the most outward of people.

you can befriend anyone if theg are friendly to you, regardless of what happened in their lives historically. ofcourse be careful and learn lessons, but no need to be judgemental on things that never involved you in the first place.

for most people you can find some slice im their life and mark them as bad (maybe not wife murdering bad, but bad nonetheless). if you look critically at how you view people you will find that the people you do accept in your life simply dont have slices that you know of that trigger your emotions and cause judgement.

this is why i like some religions say judgement is only reserved for god. other then that it just causes more negativity from something that was already negative. spreading it more and more. (yes i know this last part will likely be hated on by the atheists, thats ok, judge away ;), still love ya!)

stainless steel might be less bad for environment if u chuck it in the bin but if you look at the entire process from getting ores to having the steel item i dont really think its a very big difference.

used to live nexto a huge steel refinery and many mental diseases and cancers in the area are up more than 50% not to mention lots of birth defects etc.

maybe its effects are more local idk. Not sure how glass and ceramic are made.

ofc not bad to try and eliminate plastics but having 1 plastic free device that is overly expensive is really just a status thing. it contributes nexto nothing to environmental goals which i think eliminating plastics belongs to.

u can just put the grounds in a cup and pour hot water on it afterall. tastes fine.

if you write your program first with pencil and paper u'll be amazed at what you can do yourself.

most people open an ide and start coding, or write some basic diagrams to get an overview/mental model. Back in the day any bitnlarge program would take hours to compile so really u did not want to have any bug or typo just to sit for hours until a compile error or logic mistake. Take it even further back to days before C and that is even more needed.

a lot of high level modern languages seem to alleviate that need, likely so that enterprise software can be written a bit faster because the features need to arrive faster.

still in more modern languages i'd recommend starting with pencil and paper, write most of it if not the whole thing out. u'll find much nicer patterns and will save yourself a bunch of refactoring. even for small programs.

i made my hobby my job early on and after few years honestly it wasnt enjoyable anymore. prompting makes it easy and laidback. its easy money and thats alright.

think about all the othet shit jobs you could have. i worked really dreadful stuff in factories before i made that hobby my job and i often reflect back on that time to realise it is not so bad even if i now just type a few lines and press 1 and 2.

no more 90 degrees ambient temperature nexto a steel oven

no more freezin -21 in some meat freezer 'de icing'

no more 5 years rotted catfood to clean up while colleague is vomiting nexto me in a bin...

things can be much worse dude.

its a state of mind. hone it

the world changes faster than perceptions change. say you invest heavily in getting 1 group represented more because the perception is they are under represented, at some point they will be represented enough but that perception takes time to settle in, at which point you might find them already over represented.

things are never in balance, but always being balanced. there is no point in which all will be equal, but potentially the sway of the pendulum can get less extreme, so there is 'better balance'.

(very generally put)