madsen

@madsen@lemmy.world
1 Post – 69 Comments
Joined 1 years ago

Didn't something similar happen in Turkey with Erdogan a few years back? Pretty sure he was accused of being behind it himself too; don't know what the final verdict was though.

I think it's a pretty common accusation, just like when a politician is attacked, someone will invariably suggest that they staged it in order to get more support.

3 more...

I read every single word of it, twice, and I was laughing all the way through. I'm sorry you don't like it, but it seems strange that you immediately assume that I haven't read it just because I don't agree with you.

Oh, this is great... And because the ChatGPT transcript is highly ranked on Google, it's almost certainly going to be used for training ChatGPT. A feedback loop of shitty information. Praise ChatGPT!

8 more...

Great. I'm looking forward to hearing all the Apple zealots change their tune on side-loading from "iOS is more secure because it doesn't allow side-loading " to "side-loading is amazing, I'm so glad Apple invented it!"

17 more...

Did you read the article? She's not saying that she didn't know that measles are dangerous, she's saying that she thinks people would vaccinate more and sooner if they knew the potential delayed effects of measles. Her son died 4 years after catching it and he wasn't vaccinated at 2 because he was on a delayed vaccination program (it doesn't say why). It's a super tragic story really and it doesn't seem like she's anti-vax or anything like it, quite the opposite.

5 more...

Downgraded my new desktop computer from Win11 to Win10 this weekend. Still considering if I shouldn't just go back to Linux now that Valve has made gaming on Linux viable...

10 more...

It's most likely resembling NSA code because it's using EternalBlue which was leaked back in 2017 by ShadowBrokers. The title of the article is misleading/click-baity. (No offense to the OP, I know you just used the title from the article.)

This is such a fun and insightful piece. Unfortunately, the people who really need to read it never will.

12 more...

It's not Mozilla's CEO that's doing anything shady here, it's a partner company, OneRep.

Edit: And Mozilla is breaking up with OneRep because of it. (Just in case someone had missed that part.)

1 more...

LibreWolf is a very decent Firefox fork. Open Source is great because bad CEOs can't really threaten the source code.

Not saying this one is bad though — I have no idea. The last one was raking in $7 million/year which is less than ideal for an open source project.

6 more...

For those that want to pay tribute to Bram, I suggest donating to ICCF, which is the charity that has also been mentioned in Vim's splash screen since the very beginning (see also: :help iccf in Vim/Neovim). I'm kinda embarrassed that I never got around to it before — I've been using Vim/Neovim for more than two decades!

No, that's not quite how git works. Everyone who's cloned the repo has a complete copy of the code — at least at the time they cloned/checked it out. If GitHub, Gitlab, BitBucket or whatever goes away, you can keep working without it, provided that people know how to use a remote from another machine. Git really is decentralized even if people tend to use it in a centralized fashion.

Edit: Spelling.

7 more...

Sleeping Dogs is probably as close as you'll get. That's a great game btw.

1 more...

Been using Bitwarden and Firefox for years and years. Never had any integration issues.

1 more...

Good find, albeit a bit horrifying.

I wonder what the GDPR implications of this is. As far as I understand, even free, privately run services are required to abide by GDPR and offer data insight and deletion. They're also required to state clearly what happens to user data.

Edit: Apparently people have varying takes and feelings on what the GDPR does and does not say, so I urge you to please read the summary of GDPR data privacy here: https://gdpr.eu/data-privacy/ as well as the summary of what constitutes personal data here: https://gdpr.eu/eu-gdpr-personal-data/ It's easier to have a good and fruitful discussion if we talk about what the GDPR actually says.

16 more...

I wouldn't trust an LLM to produce any kind of programming answer. If you're skilled enough to know it's wrong, then you should do it yourself, if you're not, then you shouldn't be using it.

I've seen plenty of examples of specific, clear, simple prompts that an LLM absolutely butchered by using libraries, functions, classes, and APIs that don't exist. Likewise with code analysis where it invented bugs that literally did not exist in the actual code.

LLMs don't have a holistic understanding of anything—they're your non-programming, but over-confident, friend that's trying to convey the results of a Google search on low-level memory management in C++.

4 more...

The headline is supposedly CISA urging users to either update or delete Chrome — it's not Chrome/Google itself. However, I'm having trouble finding the actual CISA alert. It's not linked in the article as far as I can tell.

You can use the regex: /\bx\b/i

It'll catch 'x' surrounded by word boundaries (stuff like spaces, dashes/hyphens, commas, etc.) but not 'x' with other letters on either side, so it won't match e.g. "sax" or "boxer", but it'll match "x.com" and "Elon's X" and stuff. It's probably not perfect though, so use with caution.

4 more...

Ikr? That's honestly the most offensive thing about it.

I just did a quick test with the DuckDuckGo browser. Didn't seem to have any issues loading a bunch of NSFW posts. You have to be signed in though, but I think it's been like that for quite a while now.

Vinyl has, AFAIK, been gaining a lot in popularity over the last 20 years. The last few years pressing plants have had trouble keeping up with demand — in part due to supply chain issues, but also because everyone and their grandma wants vinyl pressed.

Yes, either that or "I haven't thought this through well enough that I can explain it in writing, so please let me fumble through an oral explanation and—in all likelihood—waste your time".

Or, "I'm dyslectic and would prefer to talk rather than write", which is fair enough, I think.

That mess of knobs and buttons has been around since the '50s — longer than the more compact '80s synths: https://en.wikipedia.org/wiki/Modular_synthesizer Because of their size they are usually considered studio gear and not stage gear, which may also explain why the more compact synths were more visible earlier, because you rarely got to look into studios then compared to now.

To answer your question: A synthesizer (when talking about sound) is an instrument that generates sound by creating waveforms and possibly combining them in different ways to achieve different sounds. Typically they come with filters and envelopes, that further affect the resulting sound.

LMAO. The story will probably be that USB-C was barely being used until Apple wisely decided to start using it and the rest of the world followed suit.

Intro screens and the like can usually be dealt with easily in many games. Look up the game on PCGamingWiki — it's usually much easier (and less malware prone) than pirating.

1 more...

I agree, however, the domain had apparently expired (according to the article), which makes it a great deal harder to fix reasonably fast. I still think issuing a statement that they'd lost control of the domain would suffice, but no, apparently wasting food is better for the bottom line.

if you want data deleted, you can do that, but you’ll have to send that request to every server you (or your instance on your behalf) sent it to.

According to the GDPR an "organization" has to specify exactly who processes the user's data (i.e. every instance in a federation — past and present), and everyone that processes that data must make it easy to make data/deletion requests, to that's hopefully baked into Lemmy from the get-go because otherwise someone is going to find themselves in the middle of a GDPR nightmare sooner rather than later. It's not enough to say in the privacy policy that "user data spreads to federated instances" or something to that effect.

And given that usernames are connected to the votes, I'm pretty sure that it does not comply with the GDPR to just say that it "will place this interaction in the user's outbox and immediately deliver it on the user’s behalf to all".

Edit: Added link.

11 more...

I'm closing in on 30 years too, started just around '95, and I have yet to see an LLM spit out anything useful that I would actually feel comfortable committing to a project. Usually you end up having to spend as much time—if not more—double-checking and correcting the LLM's output as you would writing the code yourself. (Full disclosure: I haven't tried Copilot, so it's possible that it's different from Bard/Gemini, ChatGPT and what-have-you, but I'd be surprised if it was that different.)

Here's a good example of how an LLM doesn't really understand code in context and thus finds a "bug" that's literally mitigated in the line before the one where it spots the potential bug: https://daniel.haxx.se/blog/2024/01/02/the-i-in-llm-stands-for-intelligence/ (see "Exhibit B", which links to: https://hackerone.com/reports/2298307, which is the actual HackerOne report).

LLMs don't understand code. It's literally your "helpful", non-programmer friend—on stereoids—cobbling together bits and pieces from searches on SO, Reddit, DevShed, etc. and hoping the answer will make you impressed with him. Reading the study from TFA (https://dl.acm.org/doi/pdf/10.1145/3613904.3642596, §§5.1-5.2 in particular) only cements this position further for me.

And that's not even touching upon the other issues (like copyright, licensing, etc.) with LLM-generated code that led to NetBSD simply forbidding it in their commit guidelines: https://mastodon.sdf.org/@netbsd/112446618914747900

Edit: Spelling

1 more...

The domain is mentioned in the article.

From the article:

What sets Insanet’s Sherlock apart from Pegasus is its exploitation of ad networks rather than vulnerabilities in phones. A Sherlock user creates an ad campaign that narrowly focuses on the target’s demographic and location, and places a spyware-laden ad with an ad exchange. Once the ad is served to a web page that the target views, the spyware is secretly installed on the target’s phone or computer.

If they're using ads on a web page to install spyware, then they're most definitely exploiting vulnerabilities—unless they're showing the user a 'do you want to install XYZ?', in which case this isn't newsworthy at all. Ads aren't some magical thing that can just go around installing shit silently, so I don't know wtf the article is going on about, but it doesn't make sense.

Edit: The Register seems to have a more sensible take on it: https://www.theregister.com/2023/09/16/insanet_spyware/

The first game is a masterpiece. I had so much fun discovering all the nooks and crannies of the story. And then doing speed- and challenge-runs afterwards. There's content and gameplay for years of playing.

Plus it's singlehandedly responsible for my kids getting deep into Greek mythology.

9 more...

Cloud Saves may be difficult to deal with, depending on what games you play.

The response from OpenAI, and the likes of Google, Meta, and Microsoft, has mostly been to stop disclosing what data their AI models are trained on.

That's really the biggest problem, IMO. I don't really care whether it's trained on copyrighted material or not, but I do want it to "cite its sources", so to speak.

For me IRC scores points on not having push notifications, rich text, custom emojis, embedded images/video, etc. It's plain text communication — multiplayer notepad, if you will — and it's great at what it does. I love that I don't need anything but a terminal window for utilizing the full capabilities of IRC, and the lack of persistent chat history is a great counter to FOMO. (Yeah, you can stay online or have a bot that logs everything — the point is that most people don't.)

Nowhere does he say that he doesn't believe in Wunterslash, so I'm cool with him.

I get notifications for calls (obviously), SMS messages (of which I receive an average of 1 per month) and IMs from my immediate family. Everything else I check up on when I actually feel like I have the time for it. This has dramatically reduced the number of emails and other things I forget to reply to/act on, because I see them when I want to and when I have the time to actually deal with them; not when some random notification pops up when I'm doing something else, gets half-noticed and swiped away because I'll deal with it later.

I keep hearing "exploited in the wild", but does anyone have anything concrete on it — like, IoCs, PoC, victims ... anything?

I'd argue that it's for all skill levels — and you can always make your own levels.

It's free, so there's no reason to not give it a go.

Edit: Meant to reply to https://feddit.de/comment/4718792 but messed up and hit the wrong Reply button in Sync. Leaving it as is as to not cause confusion.

Couldn't you just program it to start (and stop) at a given time, or make a note of how long it says on the display that it'll take?

It seems (to me) like a very, very minor improvement for a huge cost, namely that your washing machine is on your network and is internet connected.

That's great. Don't get why they're not announcing it, but whatever, I'm glad it's gone.

5 more...