• 442 Posts
  • 2.45K Comments
Joined 3 years ago
cake
Cake day: June 16th, 2023

help-circle





















  • It’s about surveillance and control. Censor what people can see, require ID so you can monitor who’s viewing what, and let people know you see what they’re doing so that they become wary of using the internet for political organization. Pedophiles and terrorists are just convenient bogeymen to scare people into assenting to this.


  • It’s almost funny watching the USA trying to remain a world leader while cutting its investments in absolutely everything: healthcare, education, energy generation and distribution, welfare, science, roads, electricity, railways, air traffic control, sanitation, everything that’s needed for a basic quality of life and to be even running in the same race as other countries. The USA seems to think it can get by with just the police and military. It won’t work.



  • Yes, it was a nice little machine, the first computer I used at home. I shared it with some friends because our parents couldn’t afford it unless we pooled our money. Each of us would have it for a week then take it to the next kid’s house. In those days you had the option of buying it prebuilt or (cheaper) as a kit, and I still remember how excited I was when my dad and I came out of the electronics shop with a bag full of circuit boards, chips and keys that would magically become a computer when soldered together.

    The Acorn story is really amazing: a tiny hobbyist company that got a break when the BBC commissioned the BBC micro from them, that went on to invent the ARM chips that are in billions of phones and other devices now.






  • I was impressed. It really felt like I had superpowers! But then I had the idea to audit the code the LLM just produced, like I did at my $dayjob for a Vue application. Feeling that uploading files could be a source of security issues, I asked the same LLM to focus on this specific topic.

    It found several dangers: directory traversal attacks, file size limits, system file overwrite, etc. I had no idea the initial code was this unsafe. I had reviewed the code, but without enough experience in backend development, how could I identify issues I didn’t know existed? And why, if it knew about all those dangers, did the LLM produced unsafe code in the first place?

    When I tried to fix the security issues, I quickly realized how this whole thing was a trap. Since I didn’t wrote it, I didn’t have a good bird’s eye view of the code and what it did. I couldn’t make changes quickly, which started to frustrated me. The easiest route was asking the LLM to do the fixes for me, so I did. More code was changed and added. It worked, but again I could not tell if it was good or not.

    I try to read these things sympathetically but… If it can slip that many very basic and common vulnerabilities past you without you noticing, and you have no ability to evaluate either the original code or the AI’s “fixes” to it, aren’t you just telling us you lack the skills to do the job competently in the first place? This sounds like a case of “all I know is how to bolt Vue components to one another, and outside of that I’m lost.” It tells us more about your own skill level than about how useful the AI would be to someone who understood more about programming.







  • There’s still the risk of GPS coordinates leaking out of the social media phone, and that leading Google to be able to correlate it with the person’s main phone. Even without GPS there’s the position based on nearby wifi networks etc. So you’d have to be sure all location services were disabled. Still, someone knows which cell towers your phones connect to and could correlate their locations if they repeatedly come close to one another, though Meta probably don’t have ready access to that data. Something’s always being sold to data brokers though, and it’s very hard to prevent them from spotting patterns that reveal who you really are.