Desert Nomad, First Responder, Reverend, Intelligence Analyst, Computer Expert, Cowboy, Sorcerer, Metaphysician, Polymath.

  • 1 Post
  • 11 Comments
Joined 1 year ago
cake
Cake day: October 4th, 2023

help-circle
  • 10/10 and notice all the nitpicking of one irrelevant detail. That’s a credibility attack. The main thrust of the argument is 100%. It was just something personal that stuck out to the author. If that related Signal experience isn’t true there are thousands more that are.

    10/10 especially for the physical security mention. So-called Cybersecurity “Wisdom” will tell you that physical access means game over and that YOU DO NOT NEED TO PROTECT AGAINST IT. It’s a cohencidence that that group that tells that lie benefits the most from the telling of it.


  • Elias Griffin@lemmy.worldOPtoTechnology@lemmy.worldAI Loophole #1; Your GitHub README.md
    link
    fedilink
    English
    arrow-up
    0
    arrow-down
    1
    ·
    edit-2
    6 months ago

    Thanks for all the comments affirming my hard working planned 6 month AI honeypot endeavouring to be a threat to anything that even remotely has the possibility of becoming anti-human. It was in my capability and interest to do, so I did it. This phase may pass and we won’t have to worry, but we aren’t there yet, I believe.

    I did some more digging in Perplexity on niche security but this is tangential and speculative un-like my previous evidenced analysis, but I do think I’m on to something and maybe others can help me crack it.

    I wrote this nice article https://www.quadhelion.engineering/articles/freebsd-synfin.html about FreeBSD syscontrols tunables, dropping SYN FIN and it’s performance impact on webhosting and security, so I searched for that. There are many conf files out there containing this directive and performance in aggregate but I couldn’t find any specific data on a controlled test of just that tunable, so I tested it months ago.

    Searched for it Perplexity:

    • It gave me a contradictorily worded and badly explained answer with the correct conclusion as from two different people
    • None of the sources it claimed said anything* about it’s performance trade-off
    • The answers change daily
    • One answer one day gave an identical fork of a gist with the authors name in comments in the second line. I went on GitHub and notified the original author. https://gist.github.com/clemensg/8828061?permalink_comment_id=5090233#gistcomment-5090233 Then I went to go back and take a screenshot I would say, maybe 5-10 minutes later and I could not recreate that gist as a source anymore. I figured it would be consistent so I didn’t need to take a screenshot right then!

    The forked gist was: https://gist.github.com/gspu/ac748b77fa3c001ef3791478815f7b6a

    [Contradiction over time] The impact was none, negligible, trivial, improve

    [Errors] Corrected after yesterday, and in following with my comments on the web that it actually improves performance as in my months old article

    1. It is not minimal -> trivial, it’s a huge decision that has definite and measurable impact on todays web stacks. This is an obvious duh moment once you realize you are changing the TCP stacks and that is hardly ever negligible, certainly never none.
    2. drop_synfin is mainly mitigating fingerprinting, not DOS/DDoS, that’s a SYN flood it’s meaning, but I also tested this in my article!

    Anyone feel like an experiment here in this thread and ask ChatGPT the same question for me/us?


  • Elias Griffin@lemmy.worldOPtoTechnology@lemmy.worldAI Loophole #1; Your GitHub README.md
    link
    fedilink
    English
    arrow-up
    0
    arrow-down
    1
    ·
    edit-2
    6 months ago

    Your rapacious backwards insult of caring is gross and obvious. You called me “my dude” like a teenger whose chill, and calm, and correct, but just …a child and wrong in the end. How old are you child? My Lemmy profile is my name with my Seal naturally born March 4th, 1974 as Elias Christopher Griffin. I’ve done more in my life than most people do in 10. My mental health is top 3% as is my intellect.

    You are an un-named rando lemmy account named “catloaf” who averages 16 posts a day for the past 4 months with no original posts of your own because you aren’t original.

    I make only original posts. You seem nothing like a real person. Want to tell us who you are? What makes you special, outside of the mandated counseling you recieve or data models you intake?

    You know what, no one takes what you say seriously loaf of cat, I certainly didn’t, don’t, and won’t. Here is space for your next hairball



  • I also just realized why I’m getting heat here, lawsuits.

    I just gave legal cause that practice was not properly disclosed by Microsoft, abused by OpenAI, a legal grounds as a README.markdown containg code as being software, not speech, integral to licensed software, which is covered by said license.

    If an entity does find out like me your technical writing or code is in AI from a README, they are perhaps liable?



  • Elias Griffin@lemmy.worldOPtoTechnology@lemmy.worldAI Loophole #1; Your GitHub README.md
    link
    fedilink
    English
    arrow-up
    0
    arrow-down
    1
    ·
    edit-2
    6 months ago

    The comments so far aren’t real people posting how they really feel. An agenda or automata. Does that tell you I’m over the target or what?

    Look my post is doing really well on the cyberescurity exchanges. So to all real developers and program managers out there:

    Recommend the removal of any “primary logic” functional code examples out of your README.md, that’s it.

    PSA, Here to help, Elias



  • Discussion Primer: From my perspective and potential millions of others, the readme is part of the software, it is delivered with the software whether zip, tar, git. Itself, Markdown is a specifiction and can be consider the document as software.

    In fact README is so integral to the software you cannot run the software without it.

    Conclusion: I think we all think of readme, especially ones with examples of your code in your readme, as code. I have evidence AI trains on your README even if you tell it specifally not to use readme, block readme, block markdowns, it still goes after it. Kinda scary?

    I want everyone else to have the evidence I have, Science.




  • Microsoft and Apple pervasively install thier entire platform in their Operating Systems so you can’t just have what you need to have on one of their computers, you have the buy the whole platform.

    The Linux Eco-system is valued at $100 Billion, has nearly 40 million LoC, and is now Global Mega-Corp Consortium Funded. Link to Linux Foundation Financial Report 2022, “Read The Report”, Page 13.

    Top Sponsors:

    • Microsoft
    • Meta
    • Intel
    • Oracle
    • Tencent
    • Huawei
    • Fujitsu
    • Hitachi
    • Ericsson
    • Samsung
    • NEC
    • Qualcomm
    • VMWare (Now Broadcom)

    Notable Second Tier Sponsors:

    • Blackrock
    • WeBank (Facial Recognition only Chinese Bank)
    • Google
    • Alibaba Cloud

    Notable Third Tier Sponsors:

    • Apple

    If we are headed for a global AI monolith or Bladerunner type future, it will surely run on Linux! It’s everywhere and Linux will never again be steered by the community.

    Instead use and help make successful any Indie Operating System like Haiku, Aero, or Minix3 instead of literally working as the tinniest cog ever for a Global Mega-Corp Consortium.

    You can also just use GhostBSD which is a superb Desktop BSD experience based off of stable FreeBSD that installs and works like Mint. Control your own kernel and everything about your BSD with NetBSD. Now is a great time to get into BSD with NetBSD 10 RC1. Learn it now and you’ll have an OS that when released does only what you want it to do.

    Finally there is the fastest BSD, Dragonfly. I made a Dragonfly BSD setup script that will turn a $250 2019 Thinkpad T495 into a lightning fast programmer workstation that does only what you want it to, and hardened. It never even makes one call out to the internet unless you typed the command in or allowed it beforehand.

    If you insist on using Linux, then use a distro with an independent kernel that let’s them know you would not like the Linux kernel which has been badly managed by the Dictator Linus, globally taken over.

    1. Chimera
    2. Void
    3. Alpine (Works excellent as a Desktop)

  • What a superb list! Saved.

    I was thinking of writing a guide on how to lead a digitally private and secure “life” since so many bad guides are out there.

    I’d like to add that the best private and secure Operating Systems are:

    • BSD
    • HardenedBSD
    • Commercial UNIX (HP-UX, AIX, IRIX)
    • Void & Alpine Linux
    • Indie Operating Systems

    Private Search Engines


    Private Browsers

    • Lynx
    • Librewolf
    • Waterfox
    • Qutebrowser
    • Hardened Firefox (at my repo)

    Qubues runs containers yes, but the unique use of a paravirtualized Fedora Linux kernel itself leaves open lots of unique security holes and is therefore extremely hard reviewing the security of it yourself.

    GrapheneOS is constantly being showboated by Ed Snowden which is a red flag and I did experience app contamination on it. I would also suggest PostmarketOS. Definite no on CalyxOS.

    I’d like to throw in my own Free Open Source, git clone, security repositories for BSD and Firefox available on Bitbucket, Github, and my own self-hosted git server with the latest files. All my software is currently written in Python (my very first Python scripts!) and short so it’s very easy to review.