Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)B

Bazoogle

@ Bazoogle @lemmy.world

Posts
0
Comments
353
Joined
3 yr. ago

  • ‘You Will Not Speak on Flock Tonight’: County Commissioner Refuses to Let Residents Opposing Flock Speak at Meeting

    Jump

  • I understand the subtext of this and why, and it isn't meant to be taken literally, but there's no way that's true. 2 lbs of copper?? Is that including solar panels?

  • ‘You Will Not Speak on Flock Tonight’: County Commissioner Refuses to Let Residents Opposing Flock Speak at Meeting

    Jump

  • He didn't get the cameras, the sheriff did. They want them to pass an ordinance to block their use

  • Google Chrome is killing all uBlock Origin bypasses, Microsoft Edge, Opera to follow

    Jump

  • What’s to stop the developers of a Chromium fork like Cromite from mainting MV2 compatibility themselves?

    It's a lot of work, mostly. And how many of those V2 extensions are going to continue to provide patches anyway.

    it just feels off to me in some uncally valley sort of way.

    Maybe it's the subliminal messages Google has been injecting over the years to make you avoid Firefox/non-chromium browsers.

  • Rsync author responds to online outrage about his usage of LLMs

    Jump

  • I think it’s just more the act of discovering what we can do with AI. It’s like openclaw, that could’ve been around last year, it’s not like AI wasn’t capable enough at that point, it’s just that no-one thought of using it like that

    What would you call developement/improvement if not exactly this? Some of histories biggest advancements are finding better ways to utilize things we already have

  • Rsync author responds to online outrage about his usage of LLMs

    Jump

  • How do you know those were the result of the AI?

    I quite deliberately tried to err on the side of fixing security issues for that release, and there were some valid (but unusual) use cases that got caught up in the changes.

    Seems to me like it was just his own fault. AI may very well have had nothing to do with the regressions, other than maybe not identifying them?

  • Rsync author responds to online outrage about his usage of LLMs

    Jump

  • Seems like he’s been pushed into using LLMs as a way to cope with the deluge of LLM-generated security reports

    It's not just LLM generated security reports, but vulnerabilities discovered by AI. Your wording implies they were just reports, and of less validity. Lazy LLM reports are not what he is trying to cope with, since there is nothing to do but close those reports. He is talking about real, verified, vulnerabilities that weren't discovered until AI tools. Not because humans couldn't find them, but none ever did. When it comes to finding, it really doesn't matter if it's found by human or AI, since that doesn't change its existence or severity.

  • Rsync author responds to online outrage about his usage of LLMs

    Jump

  • He did have a disclaimer. It says it was co-authored by claude

    What you see in the commit history with co-authored by claude is the tip of the proverbial software engineering iceberg.

  • Rsync author responds to online outrage about his usage of LLMs

    Jump

  • The point is that AI is developing at an insane rate. They don't specify, because you would always have to be naming new things every other week, by the very nature of the statement. Things AI was not able to do a month ago, it may be able to do incredibly well now.

    If you want an example, AI in security vulnerabilities has made quite a breakthrough recently. Not just Mythos, but multiple AI's are finding 15+ year old vulnerabilities in open source packages basically the entire world relies on. It couldn't do that a few months ago.

  • California Passes Backdoor Bill to Control the 3D Printing Hobby and Spy on Small Designers, Prototypers, and Hobbyists

    Jump

  • 2D printers were more than 15 years early https://www.pcworld.com/article/485139/counterfeit_money_on_color_laser_printers.html

    The biggest difference between 2D and 3D printers other than a dimension, is their complexity. People can make their own 3D printer, so trying to regulate it is absurd. With 2D printers, the governments just have the handful of printer manufacturers build the restrictions into the machine and it's much harder for a random person to get around.

  • 404: Room Not Found

    Jump

  • 404 jokes are overused. Get more creative with your HTTP response code jokes

  • 404: Room Not Found

    Jump

  • I would have exhaled slightly harder. Maybe. But I would make some quip in response

  • Microsoft's GitHub bans security researcher who posted zero-day Windows exploits because company 'ruined their life' — expert claims action is vindictive and promises further retaliation

    Jump

  • I don't mind being corrected, but calling an honest mistake a shitty thing to do makes me just want to get defensive and not be receptive to what you're actually saying.

  • Microsoft's GitHub bans security researcher who posted zero-day Windows exploits because company 'ruined their life' — expert claims action is vindictive and promises further retaliation

    Jump

  • Tor is a good idea. There are plenty of people that would happily seed the repository to spite Microslop

  • Microsoft's GitHub bans security researcher who posted zero-day Windows exploits because company 'ruined their life' — expert claims action is vindictive and promises further retaliation

    Jump

  • Of course he can... But then it's as simple as a DDoS attack to shut it down. He wouldn't want to host it on his own equipment, because there is a huge possibility for attack. He can pay for a server, but I assume he'd just setup the one. Unless he pays for a distributed server setup, there would be a single point of failure, and a single server to overwhelm. He can use CloudFlare, but then CloudFlare can decide they don't like his content either, and just block access altogether.

    All of those things are much harder with an existing website with a larger infrastructure, and content other than his own posts.

  • Microsoft's GitHub bans security researcher who posted zero-day Windows exploits because company 'ruined their life' — expert claims action is vindictive and promises further retaliation

    Jump

  • if that's bare minimum, what is the upper limit for reasonable reactions? Hang him?

  • Microsoft's GitHub bans security researcher who posted zero-day Windows exploits because company 'ruined their life' — expert claims action is vindictive and promises further retaliation

    Jump

  • I do feel like it's entirely possible it was a bug. I would imagine if they wanted to do a backdoor, they would require some form of key. There would need to be a form of revocation. If an employee, either for the government or Microsoft, went rogue then they could abuse that, or at the very least whistleblow and it would be easily verifiable for other entities.

  • Microsoft's GitHub bans security researcher who posted zero-day Windows exploits because company 'ruined their life' — expert claims action is vindictive and promises further retaliation

    Jump

  • His blog posts share his side of the story, but Microsoft has not made any comments about what happened.

    From March 26:

    I never wanted to reopen a blog and a new github account to drop code...

    But someone violated our agreement and left me homeless with nothing. They knew this will happen and they still stabbed me in the back anyways, this is their decision not mine.

    Then on April 15:

    Normally, I would go through the process of begging them to fix a bug but to summarize, I was told personally by them that they will ruin my life and they did and I'm not sure if I was the only who had this horride experience or few people did but I think most would just eat it and cut their losses but for me, they took away everything. They mopped the floor with me and pulled every childish game they could. It was soo bad at some point I was wondering if I was dealing with a massive corporation or someone who is just having fun seeing me suffer but it seems to be a collective decision.

    And one other thing, they do everything but support the research community, I won't disclose details but they sabotage people a lot. I mean just look at the past, Microsoft is the only major company who had a track of multiple vulnerabilities being publicly disclosed just because the researchers were soo upset by how MSRC treated them.

    Unfortunately, the folks who have the capacity to stop those disclosures, not only don't care but also seems to push harder for worst exploits to be released, I didn't want to be evil but they are actively poking me to start releasing RCEs which I will be doing at some point...

    I will personally make sure that it gets funnier every single time Microsoft releases a patch.

    There was a comment on the first post that I feel like is pretty on point, though a bit arm chair psychologist:

    You’re a smart guy. Maybe a savant. Just wondering if you’re BiPolar (like me) and see a different reality than what is real. Been there.

  • Microsoft's GitHub bans security researcher who posted zero-day Windows exploits because company 'ruined their life' — expert claims action is vindictive and promises further retaliation

    Jump

  • He's done more than two. This was his second round of releases. He was also the one that found the vulnerability in Windows Defender.

  • Microsoft's GitHub bans security researcher who posted zero-day Windows exploits because company 'ruined their life' — expert claims action is vindictive and promises further retaliation

    Jump

  • He also intentionally did it the day after patch Tuesday. July 14th is also Patch Tuesday. This is about retribution for him. How you view that is going to depend on your world view. I doubt any of us feel bad for Microsoft though XD