I'm not actually a fungus studying your 'internet' to see if there is anything to be learned from a network that can't even transport nutrients for the greater glory of our mycorrhizial networks; but it's more entertaining than the truth. IT; IT security in the sense that I'm the member of the department who worries most.
Public Key
npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz Profile Code
nprofile1qqsqh7qz7zc9g2x29pfvezh2r6hnx6820rxpkrf4smy7kp9uzx3ua9sprpmhxue69uhhyetvv9ujumt0d4hhxarj9ecxjmntscm456
Show more details
Published at
2026-08-07T08:08:40Z Event JSON
{
"id": "aadb6e6ddb43fb918e74d0611ee37ee0035946c97350f20fbd0ab24be6adcca8" ,
"pubkey": "0bf802f0b05428ca2852cc8aea1eaf3368ea78cc1b0d3586c9eb04bc11a3ce96" ,
"created_at": 1786090120 ,
"kind": 0 ,
"tags": [
[
"proxy",
"https://cyberplace.social/users/fuzzyfuzzyfungus",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://cyberplace.social/users/fuzzyfuzzyfungus",
"pink.momostr"
],
[
"-"
]
],
"content": "{\"name\":\"fuzzyfuzzyfungus\",\"about\":\"I'm not actually a fungus studying your 'internet' to see if there is anything to be learned from a network that can't even transport nutrients for the greater glory of our mycorrhizial networks; but it's more entertaining than the truth.\\n\\nIT; IT security in the sense that I'm the member of the department who worries most.\",\"website\":\"https://cyberplace.social/@fuzzyfuzzyfungus\",\"picture\":\"https://cyberplace.social/system/accounts/avatars/114/398/884/971/394/453/original/7a7c4a51564f42c8.jpg\",\"nip05\":\"[email protected] \"}" ,
"sig": "d9494d1d927cef7a8860a3886151d242e900d3e68994a86a3f9113ce18a0dd6b2d331cbd3dcd0e5d5d4c8a9e754e147f15de69660be18c45ec30d00aee3f3c96"
}
Last Notes npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus I assume that, yet again, we'll successfully avoid thinking too hard about the fact that API keys are just single-factor password auth. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus Regardless of whether you believe the myth or assume humans will do it; the really depressing bit is how unrepresentative of software generally curl is. More things should spend thirty years very carefully and meticulously focusing on solving a particular problem well. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus Are disclosures OK right up to midnight; or is it restaurant rules where you get counted as an asshole if you order before closing in a way that will force the kitchen to remain active late? So just one of the on-draft vulns 15 minutes before closing is fine; but a medium rare RCE 15 minutes before the IR team gets to spit in it? npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus This might be the only time I've ever seen someone refer to Kash Patel as a 'security legend'. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus When Nadella said "We need to get beyond the arguments of slop vs sophistication." I doubt he had the argument being settled by market forces in this direction. Too bad the 10+ custom agents he claims to use in his daily routine weren't there to warn him. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus Unfortunately, securities fraud is one of the sitting president's favorite industries; so if they do get what's coming to them it won't be from the SEC. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus I'm not sure I entirely believe the "It's not that there's a gnawing hole in the balance sheet that demands sacrifice or a really lame machine cult in the c-suite; it's just that our PMs have failed glorious copilot" excuse for why MS ux what it is. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus I wish that the "We replaced people interested in creating value with people interested in cutting costs" where an isolated incident at a marginally relevant company; not a eulogy for a surprising percentage of the early 21st century. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus Dubai is like a pheremone trap for the sort of person who thinks that having a financial services sector means being a part of the developed world in all the senses that you usually take for granted. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus What sorts of "all manner of fields which aren't publicly disclosed for tracking the user's activity" are we talking here? Are these being inferred from the disclosed 'we screen-scrape you' mechanism; or is recall hoovering up other information from the target system in ways not disclosed? npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus Is this the nerd equivalent of The Most Dangerous Game? People get tired of targeting ads and fluffing VC bait; decide to move up to targeting humans for the excitement? npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus "Elite human capital". It's almost elegant how a single phrase manages to be profoundly dehumanizing and give them more credit than they deserve at the same time. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus I can't believe that a system fundamentally based on stringing together maximally probable outputs would be bad at generating high entropy passwords. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus Somehow this instance of a dubiously legal immigrant meddling in american elections will not elicit a brownshirt surge... npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus I'm not quite sure when the shift occurred; but moving economic incentives toward any% speedruns has really just kept on going badly. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus This seems uncomfortably similar to the issue where copilot was able to 'summarize' documents without leaving a trace of accessing them in the audit log. It's as though everything gets munged into RAG vectors or whatever ahead of time; and then they are trying to apply the effect the controls should have after the fact. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus It has to be really bad if you need to get rid of someone who did 4 years at facebook and 7 at palantir over their objections to your plan. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus It's not just corruption; it's depressingly and insultingly cheap. A whole million bucks a year to worm your way into DoD procurement? npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus Obviously assuming any sort of legal regularity under the current regime would be a mistake; but, in more typical cases, chopping the obviously necrotic bit of the business off the interesting part is pretty stock bankruptcy court stuff; and probably easier than usual when you the company you are dissecting was two or more until quite recently. Not sure if this is a self-overestimate elon plan; or if the plan is to only need the thinnest veneer. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus Which employees who work on technology their customers actually find valuable will they lay off to deal with this one? npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus It's cute how Askell skates past the possibility that 'AI' possessing those sorts of concerns would essentially mean that Anthropic is in the slaves-as-a-service business on a massive-yet-unprofitable scale; in order to focus on how people who aren't sufficiently awed by their tech demos are emotionally abusive. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus The depressing thing is that, while we see "looks about as healthy as he sounds"; a frothing percentage of the American electorate sees "He nearly died for us, but he didn't because he's not a wimp like jesus!" npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus I wonder if Nadella really doesn't understand the difference between impunity and consent; or if he's just playing dumb. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus Aside from the obvious anticompetitive potential; 'recall' seems far too dangerous to have undocumented behavior; especially when complexity has a nasty habit of meaning scope for vulnerability. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus Even better, your terrible document goes into sharepoint; which copilot uses to inform itself about your org, so you'll have the inhuman centipede of epistemology churning away in the background in no time. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus We're 'training on' her unique AI prompts. If you have enough low precision floating point compute; it's not plagiarism. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus What kind of person sees "Our platform gives IT teams complete visibility and control over every employee experience." and signs on the dotted line? Surely neither the IT team nor not the IT team want that grim vision of the future. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus Darktrace is the Mike Lynch project that didn't blow up in hilariously bitter litigation, somehow, if I'm remembering them right. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus What puzzles me, beyond all the reasons I'm more obviously not happy about it, is how much confidence this seems to betray in being a national leader as an activity one's security forces; rather than the broad consensus within the profession that foreign policy is about little people getting consequences, can reliably make safe. Were I a president poking at the idea that just bagging a president because simply isn't done would not be at the top of my list. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus Dammit Ubisoft; this would have been a perfect place for a Call of Duty: DevOps joke; but that's Activision IP. Thanks for nothing, Guillemot. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus The hilarious thing is the analogy. One of the most annoying parts of trying to use specific microbes to do something useful is having wild types show up and kick their teeth in because they don't waste energy on doing useful things for humans. Bad enough in baking and brewing, medical recombinant enzyme stuff is worse. You probably could derive an improved security posture with a genetic algorithm(or the power button) . But one that also runs the workload that's the whole point? npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus Picking one that turns out to be dodgy is visibly worse; but what would this guy be doing as headline speaker on 'the future of cyber security' even if he were squeaky clean? Especially when it's not exactly like there are no people with both technical chops and a sense of humor; it just seems distastefully unserious whenever one of these events grabs a tenuously related person. If you want to make a junket out of it just hold the event near an entertainment venue or something. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus No argument on that score. I was just comparing it internally to the 'drop a drive/format /dev/wrongone' school of losing 6TB of data; where that's sort of the beginning and the end of it. If I was your only plan for that 6TB I can't necessarily help you much; but your banishment from the 'fuzzyfuzzyfungus ecosystem' will have absolutely zero further effects. This guy sounds worried that he'll basically have to fake his own death before signing in with a new Apple ID. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus It sure is good that we don't have a large tech sector whose saleability to just about anyone outside the DC area depends on at least the appearance that the feds wouldn't do that; and that whatever benefit we get from overpaying Cyber Ninjas to be enough to make up for that... npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus At least the self-hosting nerds have limited abilities beyond accidentally dropping what they were trying to hold for you. A respectable corporation can do that, and has the firmware-level control that never actually stopped owning 'your' hardware and identity infrastructure whose opinion of you actually matters in multiple areas. Aside from the data loss; the Apple Developer Program is basically sharecropping; and it looks like Tim might not have a field for you this year. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus Aside from being aggressively crass; it manages to be not-even-wrong in the terminology being munged together. It's no longer preferred usage; but 'master/slave' has a fairly well defined engineering meaning; and applies when you've got very close control of the sort involving a master clock or a bus master or the like. Loose control, of the 'work on this, report back' flavor has been 'worker process' since forever. 'Agentic' is (supposedly) even looser; so 'agentic slave' is odd. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus I realize that this is Time; but could they really not find a single computer scientist to add some seriousness to the lineup of management bros and hypebeasts billed as 'architects of AI'? npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus There isn't; but there probably should be a level of engineering professionalism and change control where "an actor working within the scope of his authorization broke the system" is more damning than "an attacker broke the system" rather than less. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus The vastly different 'AI' adoption rates between suits and workers seems like it has to mean something interesting. I'm just not sure what the breakdown is between applicability to the kind of work that management does, the kind of people in management, or other factors I'm not properly grasping. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus Is this yet more reflexive deference to the latter day nobility vs. an uppity peasant; or is there something about this guy's expertise and experience that he totally fails to get across on linkedin? It's obviously not ethically better when it's one of those 'the boys with the golden numbers are untouchable' cases; but this just seems like a wildly outsized amount of impunity to try to provide for a seemingly stock-grade c-level. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus ""optimism bias infected some of the thinking of senior individuals working on the programme. The failures that I identified were systemic and institutional."" is at least a great line for almost any postmortem. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus This is obviously the answer only to certain cases, high friction; but has there been any improvement in allowing more nuanced control of when a full re-authentication has to happen on common target services? I think Google has forced full auth when you try to add a new FIDO key for a while; Azure PIM acquired a 'on activation, require MFA' option; but comparatively few things have breakpoints where an existing token isn't good enough; fewer still allow you to designate your own. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus That's quite the climbdown. When they were giving us the sales pitch(which mostly involved 'prompts' that were valid KQL and would have worked without an LLM) it was ~100k/year with some usage based pricing on top. Probably time to retreat from E5s before the next EA renewal. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus We seem to be attempting to speedrun the point where it honestly doesn't matter if 'AI' does anything at all, thanks to the amount of impunity you get if you claim that it's super important that you build it before someone else does. Seriously, though, whoever looked at the teetering pile of copyright infringement and scraping to the point of DDoS and was like "yeah, that looks privacy-compatible" will deserve their spot in one of the special hells. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus Tapping into the anxiety of iphone air buyers about their new offspring not reaching developmentally appropriate growth targets? Just give it a warm, soft, environment, establish a schedule of regular chargings, and see if it can catch up to the 17? npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus What never ceases to amaze me is the hunger for hyperbolic new ways for the world to be on fire when the world is already on fire; badly. N-day attacks keep working for years because nobody patches and 'new' products get released with the sins of a decade ago? Meh, whatever. BADVIBES uses a computationally expensive and unreliable obfuscation technique rather than one of the numerous, old, reliable, ones? zOMG! npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus I can definitely imagine the people who think that being embarrassed by what they've done ought to be a tort having a go, but what sort of legal theory would you actually hang "it's forbidden to report fingerprints of devices on the public internet" on? Especially when anyone who has ever watched the logs on an internet facing device can tell you how much recon is already happening, just by people who aren't as helpful, it would be a hard argument to make. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus I just don't understand what Deloitte was thinking here: sure, they probably shaved a few analyst hours off the job; but producing slop risks moving your market position from 'expensive consultancy' to 'margins knife-fight with everyone else who can produce slop' which seems like a losing proposition; especially with the job market for careful, competent, writers having been very on fire for a while now with the decline of print media. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus What they told us was true; from a certain point of view. https://cyberplace.social/system/media_attachments/files/115/494/371/606/394/892/original/27dc80aea9ab9865.png npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus Maybe it can keep the paper about AI totally vibing at material science company. https://economics.mit.edu/news/assuring-accurate-research-record npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus Having the SAP system protected by an ad-hoc rubber duck seems like one of those stories that is both literally true and conveys a metaphorical truth about enterprise resource planning as an area of endeavor. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus I'm curious where this will go. ICC itself probably isn't a super interesting EA; but it's only a high profile example of a much larger group of public and some private sector outfits whose ability to use azure is basically founded on happy thoughts and perceptions of normalcy rather than fact. Just hope that the EU is too polite to mention that nation-states that are willing to lean hard get 'operated by 21vianet', not 'DPF' trust-me-bro? npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus Is anything known about whether they had compartmentalization between projects; or is this one where we should assume that only hearing about some states just means that they concluded that the reporting requirements were lighter elsewhere(all 50 have...something; but they vary pretty widely)? npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus It tracks that this is what would come out of the business school side; but that should generate way more shame than it does. At least the Media Lab NANDA people put some effort into a vision of future state so dark all who beheld it would welcome the swift simplicity of terminators instead; rather than just snake oil. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus Does the power armor on Don-117 compensate for those pesky bone spurs? npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus I get the impression you mean the "painful and ill-advised" way; not the "beholding the most brilliant object in the solar system" way. Crazy hunch. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus I can totally imagine someone doing that at a technical level; but how did they get away with that setup in european airports? Is there some esoteric reading of the text where fingerprints aren't a data privacy issue; or are we doing don't ask/don't tell compliance now? npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus I think it's a question of who 'they' is. Whoever is monitoring AAD and any VPN access already has significantly more data; but Bob from the hall monitor school of very lower middle management who watches your teams status icon for greenness all day doesn't have any of that: now he gets a location; and because this is supposed to be about 'which building' Viva presumably gets a little building engagement dashboard at some point. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus This is, for technical debt, the equivalent of watching an investment banker tranching up CDOs in 2005 or so. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus Simulacra and Degeneration. I honestly hope this is just cynical lying; because the idea that someone, in seriousness, mistakes that for a game is a frankly chilling level of abnormal psych running around unchecked. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus This is going to get interesting. It's not like people borrowing against assets that are volatile is new; but you don't deal with the "my 50,000 shares of IBM disappeared into a mixer because I touched the wrong 'smart contract'" problem very often; while that is just Tuesday in cryptostan. I'm curious if this will only apply to a subset of the relatively tame ways of holding; or if they'll be just trust-me-bro-ing random custodial wallets someone made out of a hacked e-vape? npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus Damn. I suspect it's probably just two dueling projects working at cross purposes; but that makes the whole 'recall' fiasco feel like it was just some preparatory frog-boiling before the main event. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus What's honestly a bit puzzling, to me, is that what MS is doing here seems aimed straight at upsetting The Stakeholders. C-levels listen to paranoid nerd whining? Not so much. Legal start to sound a little jumpy at the number of behaviors that, essentially by design, violate our retention policies and data residency requirements; some of which might not be fully reliably disable able. Now someone cares more. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus Am I correct in understanding that the lack of NPU requirement and lack of song-and-dance about 'local' means "goes right back to HQ"? npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus "We really need to humanize 'generative' for this one..." npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus The company has received an at-rest availability SOW from a third party supplier. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus But I do white collar violence; leopards are supposed to be contractually forbidden from eating my face! npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus This is the ugliest combination of stupidity and naked self-interest since the robinhood guy proposed that day trading would be the replacement for work in the AI economy; and that's stiff competition. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus "Get the hell back to abstracting hardware, HAL" npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus They do sometimes help you identify who would enthusiastically violate Kerchoff's principle and sleep more soundly for doing so; but that's a fairly niche use case. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus What always struck me as exceptionally weird about the 'metaverse' hype is how it was mostly about how a mature, even ancient, tech would suddenly leap out of its niche at eat all the things because reasons. Not like there are no improvements to be made to MUDs, MMORPGs, multiplayer games generally, and certainly a lot of optimization to VR goggle tech or CAVEs that don't cost 6 figures; but the core "Goldman Sachs, Zuckerburg, say Second Life to have GDP of Developed World"? Lunacy npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus https://cyberplace.social/system/media_attachments/files/115/347/336/501/181/582/original/d8170c20ca59556a.png npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus Inefficient legacy history had to repeat itself to cover both tragedy and farce. The Age of AI can do both at the same time; truly a wonder of progress. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus I'm not sure that this was deliberate, rather than being an emergent property of leaving FOMO hypebeasts in charge; but there's a darkly elegant symmetry to funding your class warfare engine such that it will clean up the poors if it does work; and the cataclysmic bust will clean them up if it doesn't. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus Minimum requirements H200 NVL; recommended supported HGX with 8xH200/1,128GB RAM. You know it won't be worth it; even slightly. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus That vulnerability writeup is basically 'uses pickle'. Is there an accepted good practice for how to do so, or the is the rule basically "don't"? The python documentation always gave had an intimidating vibe; so I've tended to take the lightweight's way out and tried not to touch it anywhere it would matter, which is not the worst idea; but not entirely educational. https://cyberplace.social/system/media_attachments/files/115/330/686/342/743/943/original/31c1166b16ec2ac7.png npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus I just do not understand how the 2024 GE results delivered a nominally labor government that seems to mostly be what a tory technocrat who has been doing lines of linkedin thought leadership for the past 72 hours would think digital transformation looks like. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus It's always nice to see a paywall; because when it's 'free' you know that the vendor is holding a gavage tube and looking at you like a Moulard duck whose liver shows promise. At least if there's a price they'll need to open with aggressive upsells. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus I can't quite decide if setting up a bot to warn people to never interact with you in any way ever again if they value their time counts as spamming or honest public service. Maybe a bit of both? npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus I'm curious if any of the more offense-oriented feds are either thinking about(or have quietly already started) just unmanged service provider-ing unpatched friendly entities. It'd almost certainly be legally dubious; but has to be someone at the NSA/GCHQ/etc who is just tearing their hair out knowing that someone is going to run the exploit; and if it were them they could either patch or brick to get the hole closed; while others will likely be worse. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus The really scary thing is the 'AI can only be failed' tone of the piece. "Bain & Co. estimate there will be an $800 billion shortfall in the revenues needed to fund the demand for AI computing power." If you hadn't gone full kool-aide the fact that people are only buying at well below cost of production would be evidence of very soft demand. By that logic there's a ~$3,000 shortfall in revenues needed to fund my demand for RTX5090s, rather than me just not wanting one that much. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus I'm surprised that they bailed him, given that the penalties for cybering Collins Aerospace hard enough to disrupt major airports across a fair bit of western Europe seem like they would be enough to make you a flight risk. Though, under those specific circumstances, I suppose everyone is less of a flight risk than usual. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus They aren't wrong; but it is interesting how effortlessly HBR elides the aspect of the problem that is heavily top down, the demand for product as fast as it appears to be possible, rather than at the pace it can actually be produced with due care; in favor of the aspect of the problem that involves lazy workers with bad attitudes. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus How dire are the consequences of denying WerFaultSecure with a WDAC policy? It's not hugely common in practice, but if you go to sufficient effort or are blessed with deeply homogeneous hardware you can (unless you depend on the vulnerable drivers) WDAC attempts to just pull random dodgy drivers in; but I'm not sure how badly the OS takes it if an expected component is forbidden to execute. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus It's really too bad that Forbes is not speaking literally; but, as ever, by the time smug elite failure runs up against someone who doesn't care even slightly whether it's technically legal, because that's orthogonal to how they operate, a large number of innocent bystanders have been dragged in. If it were possible for the criminals to prey directly on the board we'd likely be in a whole different world of governance. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus "I did nothing to these people, but every day I have to see them gleefully cheer online about the anticipated death of my chosen profession. I had no idea we artists were so hated—I still don't know why." reminded me very much of: https://newsocialist.org.uk/transmissions/ai-the-new-aesthetics-of-fascism/ There are definitely the pure money guys, who just don't care; but 'AI' does have a creepy "whenever I hear 'culture' I reach for my transformer model." crowd. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus I'm just focusing on the positive: if webmail is unencrypted it's slightly less likely that AD CS is present and running with full support for all the ECSes. Hopefully? npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus Is there an 'enterprise' licensing tier that automatically adds a scary shaded hoodie and some haxx0r HTML code to the portraits of any malcontent children who have compromised my network in particular? You know, just to help me explain to the stakeholders? npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus Is anyone else seeing more of some sort of geotextile erosion control/revegetation substrate than actual overgrowth? Maybe I'm just used to imperial weeds which are 2.54 times larger than metric weeds? npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus But if you treat your suppliers like hostages who you are powerless to save Liam Byrne MP will show up with a sack of other people's money for free... npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus "He added that investing in data centres was "effectively" also investing in modernising the power grid but did not say that money would be shared directly with the UK's power supplier, the National Grid." If the US experience is representative it's this part where he goes from Jonestown-tier Kool Aide to just plain lying. You'll never guess what a chunk of really nasty volatile, reactive, load with a strong lobbyist does to everyone else's costs... npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus Risk mitigation is a cost center. For a while. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus I don't think I heard a single positive opinion outside of Redmond's kool-aide factory; but it wouldn't be surprising if the young had an especially visceral response. A mobile device, used for social media and bullying by your peers and life360 nagging by your parents, is a fairly potent argument for the idea that contemporary tech is an abusive relationship were knowledge inevitably ends up helping power out. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus It's minor compared to hospital ransomware and industrial disruption; but I have to wonder if someone is combing through those fashion brand sales data right now because that product category is basically ground zero for "I have disposable income that I may be spending on my not-spouse". It'd be a real pain vs. a single large payout from some sleazy IR bagman; but quite low risk and sophistication. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus I suspect that it's precisely that importance that drives the problem culturally. In an ideal world we'd all collaborate harmoniously; but in less-ideal worlds organizations tend to bend toward the perceived priorities of the business unit that matters; and in manufacturing that is going to mean the people who know how to get SAP working; not necessarily the ones focused on ensuring your SAP works only for you. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus 'Brand protection' is, architecturally, far from the stupidest attempt to ram 'AI' into an ill-fitting use case on when-all-you-have-is-some-billions-of-dollars-worth-of-hammers grounds; but the implied arrogance of treating making legal threats as something that needs neither care nor accuracy is exceptionally distasteful. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus Remember that frankly shabby breathless writeup of how there was a perfidious russian on NPM and how that was totally our problem just a week or two back? As always, it's the banal stuff people don't want to deal with, not the sexy stuff people want to sell you a solution for, that is probably just winding up for a swing at you. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus APT-OwainGlyndŵr threat actor is clearly gunning for you. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus Be nice. Thomas J. Watson has the steely glare of a man haunted by the idea that being able to tabulate the number of 'r's in 'Strawberry' won't save his company from another amoral salesman in the future. npub1p0uq9u9s2s5v52zjej9w5840xd5w57xvrvxntpkfavztcydre6tq5jk5fz fuzzyfuzzyfungus I assume that that outfit's customers are up to just cartoonish levels of no good; but the provider itself seems almost shockingly wholesome. Residential proxy by actually paying people to colo your gear; rather than using client malware or compromised routers? It's like something out of a nostalgic story.