"After 14 years of brutal war and the fall of the dictatorial regime, today the people of Syria can seize an historic opportunity to build a stable and peaceful future. The future of Syria is a matter for the Syrians to determine, and my Special Envoy will be working with them towards that end." - UN Sect'y Gen. AntΓ³nio Guterres
βCensorship was both a consequence of and a building block of the Apartheid system. There was no real freedom of expression,β says Anriette Esterhuysen about growing up in South Africa. Learn more in her Speaking Freely interview: eff.org/pages/speaking-freely-β¦
Oh, that didn't take long for OpenAI. From developing AI for the good of humanity to developing AI for kill-drones. I wonder if they keep their disclaimer: "ChatGPT can make mistakes. Check important info."
The year's not yet up, but our RB statistics already have their days full:
365 apps (29.9%)
So while we started establishing RB for our repo only in February this year, we have added more than 1 app each day, on average. Just a little more, and we cross the 30% mark π₯³
Na mojom telefΓ³ne viem byΕ₯ v recovery hneΔ, niekde v podvΔdomΓ mΓ‘m pocit ΕΎe som to uΕΎ videl... nechaΕ₯ ΓΊplne vybiΕ₯v telefΓ³ne baterku je asi jedna z moΕΎnostΓ ale neprΓde mi to ako tΓ‘ sprΓ‘vna.
Hey friends. I believe some of you are using Synology devices at home? How's the accessibility of their software? Is there any chance I can use my existing USB-C SSD drives in them? I assume I would have to plug them into the -sb ports on the unit. Thanks for any bits of wisdom!
@victor tsaran The web UI of synology DSM is manageable with a screen reader. The general user experience is that they have kind of desktop, the control panel and similar. Lists are not accessible by them-selves, there is a bit of aria and custom keyboard handling implemented in there. For setup I would say it's manageable. Accessing the actual files content is best made through smb / cifs, webdav, FTP / SFTP, . External drives connected through USB are supported however I have only seen older models with USB-A plug not USB-C yet.
Sure, you can use USB devices as secondary storage/backup locations. Not primary. Accessibility is ... interesting. Most things are completely usable, but a bit odd. They're really trying hard to make a webpage look like a desktop app. I don't think accessibility is quite as good now as it used to be in 2016 when I got my DS1815Plus.
I've been running them for 15 years or more... there's a usb port in the back to extend storage but you will need to buy in order for it to really work... drives to fit into it... it's doable with a screen reader... for the most part. Far better than other nas UIs I've worked with. Super easy to maintain, operate and extend. I've had drive crashes and done full device to device upgrades from 1 box to another and it's relatively painless.
@JStark I am stil learning, but if I read correctly, I would like to do a few things beyond using Synology for storage and media sharing. I read on their website that it is possible to run virtual machines on it? Did I get this right or misunderstood something? That would be a really cool use if I could pull this one off!
As a service to security researchers, I added this section to #curl's hackerone page:
AI
If you have used AI in the creation of the vulnerability report, you must disclose this fact in the report and you should do so clearly. We will of course doubt all "facts" and claims in reports where an AI has been involved. You should check and double-check all facts and claims any AI told you before you pass on such reports to us. You are normally much better off avoiding AI.
Just curious how it's that much different than, say, using any other autonomous mass scanner. What makes it any better or worse, than, say metasploit or any other dozens of autonomous tool suites routinely used in pentesting? Seems a little hypocritical to selectively single out something that's only SLIGHTLY more automated. It completely ignores the fully autonomous software that protects the internet every day, too. Explain that to this non hacker, could ya? What's the difference?
@Beggarmidas Other scanners are based on facts. They actually run curl's code and observe its behavior, or statically analyze the code, i.e. read it and report patterns that are known to be potential sources of problems.
With "AI" on the other hand, everything is fuzzy, everything is statistical probability. It can't reason, it can't observe, it can't really analyze things because it doesn't know what it's doing. It can only output stuff that sounds plausible, whether it's right or not.
@scy They are capable of generating false leads, too. That's a matter of correction through iteration, not a distinction in kind. To my admittedly outside view it just appears y'all are flipping out over something that at the end of the day is just a tool using other tools using other tools. I've used some of the hacker AI's. They still require extensive guidance just like the other tools. It just takes it up a notch. It seems a silly point of genuine nondistinction.
@scy Even back before I retired over a decade ago fellas like y'all that'd come in redteaming our setups were semi-joking that you were busy automating yourselves out of a job. Many of you even set starting around now as a prospective timeline. From an outsiders viewpoint it just looks like y'all are going strangely luddite as your prophecy starts to come true.
Day 8 - #adventOfIOSAccessibility. If a view has isAccessibilityElement to true, assistive tech won't look for any of its subviews. That means that if there are any buttons inside, they won't be accessible. In those cases, you can add custom actions to be able to activate the actions for those buttons.
Introduction In this episode of the Sound Without Sight podcast, we host a panel discussion, curated by Zenny Jabeera, exploring the different approaches that blind musicians might take to learning music and communicating musical ideas.
Newswire: Tek Talk of 12/9/24 at 8pm Eastern welcomes Humanware's Peter Tucic, Director of Strategic Partnerships, and Mathieu Paquette, Product Manager, to discuss the Victor Reader Stream 3 1.4 update groups.io/g/tech-vi/message/82β¦
Okay, guys: this wonderful fan-made series I've been following for years is complete now. It has witty writing, some of my fave Twelfth episodes (including the TV series), great acting, and wonderful arcs for the characters. Lots of references and Easter eggs for die-hard fans too. Give it a go if you haven't already!! #doctorwho #twelfthdoctorfanaudios #TheTwelfthDoctor #PeterCapaldi
Ancora sul caso #Romania. Far emergere il problema della mancanza di una sfera pubblica non proprietaria in un paese corrotto solo quando vince il candidato "sbagliato" suggerisce che la questione che sta a cuore non sia il pluralismo della sfera pubblica, ma la vittoria del candidato "sbagliato".
Sembra che gli sponsor scommettano sul fatto che il sostegno di Elon Musk potrebbe far pendere la bilancia verso il traguardo
"Guidati da X, i nuovi cambiamenti apportati al Kids Online Safety Act rafforzano il disegno di legge, salvaguardando al contempo la libertΓ di parola online e assicurando che non venga utilizzata per soffocare l'espressione", hanno affermato i senatori repubblicani Blumenthal e Blackburn in una dichiarazione congiunta
X helped make changes to the Kids Online Safety Act during a final push to pass the legislation before Congress adjourns, in an apparent bid to persuade Republican leaders.
Da venerdΓ¬ alle 14 non sono piΓΉ visibili Cusano Italia TV e Cusano News 7, i due canali televisivi dellβuniversitΓ telematica NiccolΓ² Cusano, anche nota come Unicusano, il cui amministratore delegato Γ¨ il sindaco di Terni Stefano Bandecchi. La chiusura dei due canali Γ¨ stata decisa nellβambito dellβindagine che la procura di Roma sta portando avanti contro lβateneo con accuse di evasione fiscale: tra gli indagati ci sono lo stesso Bandecchi e lβex rettore di Unicusano Giovanni Puoti. Cusano Italia TV e Cusano News 7 erano visibili finora sui canali 122 e 234 del digitale terrestre: lβuniversitΓ ha commentato la loro chiusura dicendo che comporterΓ la perdita del posto di lavoro per 250 persone. ResterΓ invece attiva lβemittente radiofonica Radio Cusano Campus.
Gemeinsam mit Dr. Annette Jantzen sprechen wir in diesem Advent in vier Folgen darΓΌber, wie die Geschichte von dem Kind in der Krippe damals von den ersten Christ*innen erzΓ€hlt worden ist und blicken in dieser Woche besonders auf die Rolle, welche daβ¦
A recent discussion on social media about the fact that I enjoy doing #Tactile (#Braille) #puzzles on #paper prompted a thought about producing them to share more widely. #Crosswords, #wordsearches, #Sudoku and so forth.
If anyone is interested, please feel free to fill and share my expression of interest form below.
Also, there was this British magazine called Conundrum. It was in Braille and had all these puzzles you had to solve from crosswords to word searches and quizzes. Pretty cool stuff, just didn't have the space to keep up with the issues.
We were watching a programme about the Winter of 1947 (UK) yesterday. War exhausted Britain, food rations, no central heating, 55 days of constant snow, 20 foot snow drifts, minus 21 temperature, coal shortages, electricity cuts,. Then the worst floods ever as the snow melted, then high damaging winds.
I wonder how we would cope with that. I hope we never have to find out.
I'd never seen the 2009 film Nativity. It was on the BBC last week so we caught up with it on Friday.
I really enjoyed it, the songs were catchy. It was young and predictable and all the rest of it, but the audio-description was my preferred type, less being more and with well-timed updates avoiding cutting through any unheard song lyrics. Old now, but one to enjoy over the festive period.
OK, testers needed. Thanks to @masonasons@fwoof.space reminding me to do so, and the fact that I want to show it to Jake, I brought my AudioQuake server back online. Yes, it's time for an old throwback. Fancy having a go? Download from 3.onj.me/programs/AudioQuake20β¦
The Blossoming Lamp is an awesome lampshade consisting of 14 interlocking pieces printed at once. Print in place and supportless to boot! When you pull up on the top the flower opens allowing more light out.
My first potential office job was a call centre. Walking around at interview, they were all so proud of the shared space, the open nature, etc etc. All I thought was how sorry I felt for the people on the other end of the phones fighting through all that background noise, and secondarily worried how I'd find my own spot as a blind person in this massive open space.
@Alper_Celik similar to previous ones. It talks about potential problems with functions but the actual code has the necessary checks and when I ask follow-ups it is super pollite and continues to ramble without pointing out specifics. I'm getting better at spotting the pattern.
"This experience has unfortunately made me reconsider my support for curl"
I'm sorry you feel that way, but you need to realize your own role here. We receive AI slop like this regularly and at volume. You contribute to unnecessary load of curl maintainers and I refuse to take that lightly and I am determined to act swiftly against it. Now and going forward.
You submitted what seems to be an obvious AI slop "report" where you say there is a security problem, probably because an AI tricked you into believing this. You then waste our time by not telling us that an AI did this for you and you then continue the discussion with even more crap responses - seemingly also generated by AI.
By all means, use AI to learn things and to figure out potential problems, but when you just blindly assume that a silly tool is automatically right just because it sounds plausible, then you're doing us all (the curl project, the world, the open source community) a huge disservice. You should have studied the claim and verified it before you reported it. You should have told us an AI reported this to you.
I'm sorry you feel less enthusiastic about curl now because of this. I hope you after some time in a future will come to reassess what happened here and maybe even understand why we act the way we do.
and (without following this specific encounter) the obvious: The way the reporter allegedly changed their opinion on curl should have been a change of opinion on LLMs and "AI".
Yes, there was disappointment and as a result frustration. But please, attribute it to the actual source, namely the tool having generated the slop report and not to the messenger or even the expert, telling you the report is slop.
@nils_ballmann sure, but I think it is completely human to feel a bit hurt when being shut down like that. Even if they brought it on themselves so to speak. I did my best.
It's IMHO also normal, that it's really hard to redirect this disappointment/frustration/pain towards the actual source. Both as the person friendly and cautiously doing it, as well as the person (forcefully) having to re-evaluate their choices.
And usually, denial is the easiest way out. I just hope that one day, it will get better and people start face their own mistakes.
This is something that I admire with the people around curl: Trying to cultivate a culture in which it's okay that mistakes happen, must be fixed and can be learned from.
@NeoFox @kyle_pegasus apparently I can't disclose them after I mark them spam, which is a bit of a bummer. But it follows the pattern closely of the previous AI report we got that I disclosed: hackerone.com/reports/2871792
## Summary:
The vulnerability in the program arises from a classic buffer overflow, triggered by the unsafe use of the strcpy() function without bounds checking. The program copies data from a...
@kyle_pegasus Gotcha, no worries Daniel, this is educational enough, thanks!
Also, thanks for all of the work you've done on curl! I genuinely had no idea it was maintained by such a small team before; really reminds me of that XKCD where 90% of the internet relies on some open source project that someone has been thanklessly maintaining, haha.
"I want to report that my instance of ChatGPT has imagined a vulnerability in your software." "That's great, my instance of ChatGPT has imagined you got paid. Bye now."
Hi,
Iβm Toni, and Iβm reaching out because Iβm hoping to raiseβ¦ Toni Moore needs your support for Please Help me Access Books with a Victor Reader Stratus
The Sisters Of Mercy "Lucretia My Reflection" (Extendend and Remastered Version)1987 - Merciful Release/WEA Records Ltd.Engineer: Andrew Eldritch, Larry Alex...
Provided to YouTube by Universal Music GroupForeign Affair (Remastered 2013) Β· Mike OldfieldCrisesβ 2013 Oldfield Music Limited, under exclusive license to M...
Robin Bedrunka π
in reply to SuspiciousDuck • • •