I just tried to squat on my standard internet name because proton abandoned security in favor of "AI", and Tuta refused to let me create an account because of my ip address. Which is a VPN.
Tuta doesn't allow access to users who employ a VPN?
Dutch public broadcaster NOS made a WONDERFUL 10 minute segment on the EU #ChatControl proposal. Perhaps you can coax YouTube to provide you with English subtitles, I think this video could help sway/inform other countries as well: youtube.com/watch?v=_Ek9R4TXq7…
Binnenkort stemt Europa over een wet waarmee beelden van kindermisbruik beter kunnen worden opgespoord. Oftewel 'Chat Control', zoals de wet wordt genoemd. E...
Many thanks to SWLing Post contributor Bruce, who writes: Hi Thomas, I came across this item on eBay and then found a copy on YouTube: Enjoy! – Bruce F. Wow–what a nostalgic treat! Than…
One of the ways that LLM-authored code improves productivity is by merely SAYING it does things. It's way faster than the whole time-consuming process of actually doing things. This is real code someone sent to me for review.
Here is a way that I think #LLMs and #GenAI are generally a force against innovation, especially as they get used more and more.
TL;DR: 3 years ago is a long time, and techniques that old are the most popular in the training data. If a company like Google, AWS, or Azure replaces an established API or a runtime with a new API or runtime, a bunch of LLM-generated code will break. The people vibe code won't be able to fix the problem because nearly zero data exists in the training data set that references the new API/runtime. The LLMs will not generate correct code easily, and they will constantly be trying to edit code back to how it was done before.
This will create pressure on tech companies to keep old APIs and things running, because of the huge impact it will have to do something new (that LLMs don't have in their training data). See below for an even more subtle way this will manifest.
I am showcasing (only the most egregious) bullshit that the junior developer accepted from the #LLM, The LLM used out-of-date techniques all over the place. It was using:
AWS Lambda Python 3.9 runtime (will be EoL in about 3 months)
AWS Lambda NodeJS 18.x runtime (already deprecated by the time the person gave me the code)
Origin Access Identity (an authentication/authorization mechanism that started being deprecated when OAC was announced 3 years ago)
So I'm working on this dogforsaken codebase and I converted it to the new OAC mechanism from the out of date OAI. What does my (imposed by the company) AI-powered security guidance tell me? "This is a high priority finding. You should use OAI."
So it is encouraging me to do the wrong thing and saying it's high priority.
It's worth noting that when I got the code base and it had OAI active, Python 3.9, and NodeJS 18, I got no warnings about these things. Three years ago that was state of the art.
Teach your developers ignore #AI generated warnings with this one weird trick!
If you look sy my previous post, under the erroneous "You should use OAI" message, there's a little icon and the word "Explain." You can ask the #LLM to explain the warning. Here's the explanation that Claude Sonnet 4.0 has for that warning. For those of you who don't want to read a screenshot, the LLM has prompted itself with:
Explain CloudFront Distribution Resources have an S3 Origin configured without an Origin Access Identity (OAI). issue in 70-frontend-stack.yaml at [29]
And the LLM's response to its own prompt is:
This is a false positive security warning. The issue is incorrectly flagged because:
You ARE using access control - Line 16-23 creates an Origin Access Control (OAC), which is the modern replacement for OAI
OAC is properly configured - Line 38 attaches the OAC: OriginAccessControlId: !GetAtt CloudFrontOriginAccessControl.Id
S3 bucket policy enforces OAC - Lines 120-135 ensure only CloudFront can access the S3 bucket
The security scanner likely only checks for the legacy OriginAccessIdentity property and doesn't recognize the newer OriginAccessControlId. Your configuration is actually more secure than using the deprecated OAI.
The warning can be safely ignored - your setup uses the AWS-recommended OAC approach for securing S3 origins.
Thanks for wasting my time AND egregious amounts of electricity generating a pointless "high priority" security warning.
@feld You can't do that unless you know that you should. And, as I pointed out, when the code was full of outdated techniques, I wasn't getting any warnings. I know what's out of date and what isn't. That's how I got into this situation. But a junior developer who doesn't know these things, and leans more on the LLM, will not know when the LLM-supplied code is wrong. They won't know they need to prompt the LLM to do something more modern.
I'm not much focused on myself, because I have what it takes to avoid steering myself into a ditch. But I'm thinking about what happens to someone less experienced who thinks they can use LLMs to do something that they couldn't otherwise do.
I'm paying Google ~100 euros a month for their services and the privilege of publishing Conversations on the Play Store.
For a week now, I have been unable to release any updates because I'm still hoping to talk to someone at Google about their false accusation that I'm collecting users' email addresses, and any publication would reset my slot in the queue.
we had the same problem, super annoying! After several tries we gave in and falsely specified that we would be collecting email addresses. It's very difficult/impossible to get beyond googles customer bot army, and to make them understand that an email app that requires credentials still does not have any collection by app publishers. Doh.
had a similar problem with our App, when their AI falsely claimed that we upload images from our users. Took 3 weeks and escalation to the European Team in Ireland to convince them that the App neither had access to the filesystem or the Camera. Looks to me that AI just seems to make it easy for the big guys to spend OUR time to fix their savings.
The #Google playstore bias against #FOSS apps should end, @daniel. I'm so sorry you face this.
Never would software freedom activists like myself, in 2005, imagined that 20 years later the most common computers that most users have would forbid users from installing FOSS, *AND* impede small FOSS businesses from operating boutique shops that provide useful FOSS apps to their users.
The computing world quickly slouches toward dystopia.
Well, technically you are right of course, an XMPP address is not an email address, but for the purposes of compliance it may be easier to pretend that you are collecting email addresses rather than get Google to change policies so you can say you are collecting XMPP addresses (for conversation.im users at least).
At the same time, the privacy policy also claims XMPP messages are encrypted which is not always (or even usually?) the case.
Byrokratický stát nutí naši zahrádkářskou kolonii utratit 40 tisíc korun ročně za účetní. Kdybychom si za to koupili motyky, můžeme okopat půl republiky. Před deseti lety, když jsem začal dělat předsedu, stačila na účetnictví paní s blokem a tužkou. Dnes? Nestačí ani jedna účetní. Musíme mít dvě: běžnou (20 tisíc ročně) a nově hledáme mzdovou (dalších 20 tisíc). Jen proto, že stát chce notifikace – sociálce, pojišťovnám, cizinecké správě. Abychom ušetřili, zkoušeli jsme účetní software rozchodit sami, ale ani po čtyřech víkendech jsme ty notifikace nedali. Má dáti – nedal.
Jo no, úřední zátěž furt stoupá. Sleduju to z pohledu našeho 16 členného bytové družstva. Pořád nové a nové zbytečné povinnosti, které nikdo nepotřebuje. Příklad z poslední doby: Nově máme povinnost dálkově odečítat teplou vodu a teplo. Ok, no problem. Ale máme ho odečítat měsíčně! Nikoho z nájemníků ten údaj nezajímá, ale nutí nás to platit firmu, která dálkové odečty měsíčně odečte a zpracuje. Nebo protože nám tenhle výdaj přijde absurdní chodíme každý měsíc s notebookem po chodbě a odečítáme to sami. Znovu, úplně zbytečně, nikoho to nezajímá. A odečítáme jen teplou. Pitná voda je jedno. Takhle kreténský nařízení to je. Jo a z pera Pirátu btw. Moc děkujeme. Každá takováhle blbost jen ztěžuje samosprávu, nikdo to pak nechce dělat a jen to skončí u nějaké správcovské firmy.
@stepan ono je to asi všude.. popravdě už mám v plánu s předsednictvím skončit, ať to zase chvíli dělá někdo jiný.. snažíme se držet poplatky při zemi, přesto lidi nadávají, až si člověk říká, že je pitomec, že to vůbec dělá..
ono to asi nemá jiné řešení než "restrukturalizaci" (= teprve když s tím seknou všichni, až se to úplně složí, tak se to bude moct postavit znovu a lépe.. nicméně tou dobou už budeme mít místo demokracie nějakou monarchii, nebo budeme Rusko, nebo další spolkovou republikou )
@stepan "Když se ministr Bartoš pokusil prorazit systém bez pijavic – bum. Stavební řízení, které tou dobou už fungovalo, sice špatně, přesto fungovalo – nyní nefunguje vůbec. A nebude až do roku 2028. "
@vick21 I played with it a very long time ago, and I couldn't understand and perceive the sonic representation at all. For me, the idea is very cool, but it would require a lot of practice to rewire my brain to follow the sonicscape. lol
@chikim Same here. The article also points this out. I think it took Nimer quite a bit of time to get a hang of this. But he seems to really like and use the app!
#dobreranko všem Vyrazil jsem dolů do města do pekárny pro pečivo dost na lehko (krátké tričko, kraťasy, sandály) a ejhle jen 11°C. Navíc v pekárně dnes nepekli chleba, tak ještě do #penny kde mne opět naštvali, postupně ruší pečivo od malých lokálních výrobců, i když jsou nejprodávanější. Prý to tak chceme. No, rozdíl na bochníku chleba je kolem 7-10Kč, chuťově a výdrží 300%. #penam výrobky jsou odpad, koupil jsem #odkolek podmáslovy chléb (nic moc) a vícezrnný lámankový a ač 2x dražší tak zase nic moc 🤷 Nevím jestli jsem nějak rozmazlený, ale i Babiččin chleba od PéCé je násobně lepší a po 5 dnech pořád skvělý. Takže ráno budu muset přes 3 pekařství abych nakoupil co nám chutná, prakticky 18km, to je už na kolo 🤦
Já mám výhodu. Kousek od baráku máme malou pekárnu. Tak chodím pro dobrý chléb tam. Jen musí člověk brzo ráno, protože je hned pryč. Odkolek je Babiše ten nekupujeme 😄
@archos Tak asi všechny tyhle super výrobny, pekárnou bych to nenazýval, stojí za prd. Jsem vděčný za PéCé (Pekárny a cukrárny Náchod a.s.) jsou v Náchodě, Broumově a u nás v Trutnově, zatím drží obstojnou kvalitu. Problém je s velkými super/hyper markety, prostě od nich postupně přestávají brát, přestože jejich zboží zmizí jako první, ač ne nejlevnější. Divná politika .....
@archos Mizerný chleba je s mrtvým žitným kvasem vyhnaný pekařským droždím, aby se zrychlilo pečení. Klasický chleba se žitným kvasem se vyrábí minimálně 6 hodin ale i 12. I velká pekárna umí dobrý chleba, ale pokud je tlak na cenu, tak za 2-3 hodiny vyrobí šmejd. A dokud bude poptávka...
> Ohio Republican Sen. Bernie Moreno is introducing legislation aimed at penalizing companies who outsource jobs and operations overseas while at the same time providing financial support to avenues that create American jobs.
> The bill, introduced on Friday and known as the "Halting International Relocation of Employment Act" or "HIRE Act," creates a 25% tax on "outsourcing payments" which are defined as any money paid by a U.S. company or taxpayer to a foreign person whose work benefits U.S. consumers.
Isn't sourcing anything from another country technically the same as: "any money paid by a U.S. company or taxpayer to a foreign person whose work benefits U.S. consumers." ?
Chceš mít svá data a komunikaci pod kontrolou? Na Oscloudu najdeš otevřené alternativy k běžným korporátním službám – vše na serverech v EU, bez sledování a bez předávání třetím stranám.
🔑 Úložiště a spolupráce Nextcloud – sdílení souborů, kalendáře, kontakty, poznámky, týmová spolupráce.
💬 Komunikace MXChat (Matrix) – moderní chat s šifrováním, skupiny i videohovory. Kompatibilní s klienty jako Element, SchildiChat nebo Cinny. web.mxchat.cz/
🐘 Sociální sítě Mastodon – svobodná alternativa k Twitteru/X, decentralizovaná a bez reklam. Najdeš nás na mamutovo.cz.
📺 Video PeerTube – sdílení a sledování videí bez algoritmů a reklam. Na Oscloudu běží kanál vhsky.cz pro komunitní návody a videa.
📸 Fotky Pixelfed – svobodná alternativa k Instagramu. pixelfed.cz
Proč Oscloud? ✅ servery v EU ✅ open-source software ✅ spravováno komunitou, ne korporací ✅ respekt k soukromí
Vítejte na mastodonní instanci Mamutovo!
Instance Mamutovo byla vytvořena pro běžné uživatele, kteří touží po klidném prostředí, ve kterém mohou svobodně sdílet své myšlenky.
To byla tehdy nějaká mánie, že podle předpisů musí být na ceduli plný název zastávky, přinejhorším lze jednotlivá slova vhodně krátit. A tady začal jezdit autobus s digitální cedulí, která tehdy uměla jen jeden řádek. (Ale možná to bylo aut.st., abych úplně nekecal. Nejsem si už jist.)
The head of the Montreal firefighters’ union says his members weren’t able to immediately respond to a fire Friday morning in Notre-Dame-de-Grace — even though the nearest fire station was three minutes away.
@FoxVK @schmaker lebo teraz musím čítať o "Prekliatych básnikoch" Arthur Rimbaud, Paul Veraline a Charles Baudelaire triezvy... objednal som si Kvety Zla od Baudelaira, Mrcina veľmi dobrá báseň páči sa mi to.
I admit there is one thing I sometimes use llm's for: generating largely meaningless crap for corporate processes and buereaucracy. Maybe the use of LLMs correlates precisely with the amount of meaningless devoid-of-meaning lifeless crap in our lifes?
🇩🇪Auch dank eures Engagements werden Belgien, Finnland und Tschechien der #Chatkontrolle im Oktober nicht zustimmen! Die Bundesregierung ist aber immer noch unentschieden, ob sie Briefgeheimnis und sichere Verschlüsselung retten will. Werdet jetzt laut: patrick-breyer.de/beitraege/ch…
🇫🇷 Französisch: Traduction du dossier Chat Control 2.0 🇸🇪 Schwedisch: Chat Control 2.0🇳🇱 Niederländisch: Chatcontrole
Inhalt der Seite:
Die Abschaffung des Digitalen Briefgeheimnisses
Hilf jetzt mit die Chatkontrolle zu stoppen…
🇬🇧Public pressure works: Belgium, Finland & Czechia will NOT approve the #ChatControl mass surveillance law in October. But other governments whose vote is crucial are still on the fence. Urge them to protect our digital privacy and encryption now: patrick-breyer.de/en/posts/cha…
🇫🇷 French: Traduction du dossier Chat Control 2.0 🇸🇪 Swedish: Chat Control 2.0🇳🇱 Dutch: Chatcontrole
The End of the Privacy of Digital Correspondence
Take action to stop Chat Control now!
The Chat Control 2.
🇫🇷 La Belgique 🇧🇪, la Finlande 🇫🇮 et la Tchéquie 🇨🇿 diront NON à la surveillance de masse #ChatControl. Mais d'autres gouvernements clés hésitent. Exigez qu'ils protègent notre vie privée et le chiffrement !
🇫🇷 French: Traduction du dossier Chat Control 2.0 🇸🇪 Swedish: Chat Control 2.0🇳🇱 Dutch: Chatcontrole
The End of the Privacy of Digital Correspondence
Take action to stop Chat Control now!
The Chat Control 2.
The LI-900 silica tiles used on the Space Shuttle were such poor heat conductors you could grab them with bare hands seconds after pulling them from a 2200 degree oven.
Recorded this video during my KSC tour 1 day before the launch of the Atlantis Space Shuttle for STS-135, the last Space Shuttle mission.==Updated June 3, 20...
Blah, I gotta cut the sata plug for the CD drive on my old server. Then attach proper sata power connector to it so I can use onboard sata since my hba is eating shit.
Day 4 of my #retirement #bikepacking tour on #Brompton folding #bike : Milano -> Lodi - 42 km, half of it stop-and-go in the suburbs of #Milano . 3 #ghostbikes within 1 km in the small village of Dresano. I dedicate this stage to all the #cyclers who were killed on the road.
I just added all three #ghostbikes (with photos) in three different spots in the small village of Dresano to #OpenStreetMap. None of them was already registered.
@thibaultmol Thanks for the addition. Your pictures will appear on @ghostbikebot as well and (if you linked your mastodon account from your OSM-account) it'll link to you as well
Gente bonica, están contratando en mi empresa un montón de perfiles, sobre todo de senior/lead (arte, C++ engineer, lighning, tools), y luego un rol que puede ser mid o junior, RPG designer.
Larian Studios is a game developer studio located in Gent, Belgium. Proud to be independent for 19 years, we create games for multiple genres and platforms. Thanks to our players, we get to spend our days making the games we love to play.
You're splitting a piece of your favorite food with someone you love (pizza or cake or candy or whatever) and when cutting it one side is slightly bigger than the other - but close enough they probably won't notice.
For Luxembourg, it's OSAPS: Office de la Surveillance de l'Accessibilité des Produits et Services accessibilite-produits-service… Fines up to 1M EUR in case of recurrence.
I've been telling my wife she can make a ridiculous amount of money working on carpal tunnel / RSI issues for nerds -- probably more than working on pro/semi-pro athletes.
About that other post you posted. That's crazy, people get surgery when they don't need it? I have a arm issue, I thought it was that and the Doctor just touched the arm and asked a few simple questions and knew immediately it wasn't that
@coolboymew yes, they give out carpal tunnel surgeries like free candy here in the USA. I mean why not?
✅ Wrist/hand/arm hurts or numbness, mobility issues ✅ Patient has job or hobby that definitely causes RSI ✅ Patient is willing to try anything ✅ Insurance is gonna cover it
They just do it. They don't even make you try physical therapy to fix your arm by making you actually exercise it and improve the overall mobility.
You get the surgery, heal up, and you think it's better because you've rested your arm and hand for weeks.
And then it comes back with a vengeance because removing the sheath around the tendon (Tenosynovectomy) makes it get even more agitated.
@coolboymew for my own case, I’ve fixed that with 1) changing how I slept (yep 🤷♂️), and 2) physio therapy. YMMV but I’ve never thought about surgery.
Investing in more ergonomic hardware is also a cheap way to prevent these health issues.
fix your sleep, fix your posture, do some exercise, get a better ergonomic chair/desk/mouse/keyboard setup. Do the things you can do. Do some physical therapy and medical massage (not the spas, you're not going for a Swedish or something -- gotta find someone who knows what they're doing)
If none of that is helping, THEN maybe consider a surgical intervention
I wonder how many different computing projects and companies have been named after Berkeley, California, or its namesake university, over the decades. The most well-known is probably the Berkeley Software Distribution (BSD) Unix variant. Then there's its commercial offshoot, Berkeley Software Design, Inc. (BSDi). In the 80s and 90s, there was Berkeley Systems, known for the After Dark screen savers for Macintosh, but also creators of the first ever GUI screen reader, OutSpoken, in 1989.
I'm reading _Dealers of Lightning_ by Michael Hiltzik, about Xerox PARC, and I learned about another company, Berkeley Computer Corporation, that developed an ambitious time-sharing computer from 1968 to 1970 or 1971. Some notable PARC folks, including Butler Lampson, Chuck Thacker (designer of PARC's Alto hardware), and Peter Deutsch, first teamed up at Berkeley Computer Corp.
There’s also the Berkeley Open Infrastructure for Network Computing, or #BOINC for short. One of the first scientific distributed computing networks, and it is still going strong these days. en.wikipedia.org/wiki/Berkeley…
)
Tuta
in reply to Steven D Rowe 🇨🇦🇬🇧 • • •Xenotar
in reply to Steven D Rowe 🇨🇦🇬🇧 • • •Tuta
in reply to Xenotar • • •Poloniousmonk
in reply to Steven D Rowe 🇨🇦🇬🇧 • • •I just tried to squat on my standard internet name because proton abandoned security in favor of "AI", and Tuta refused to let me create an account because of my ip address. Which is a VPN.
Tuta doesn't allow access to users who employ a VPN?
Tuta
in reply to Poloniousmonk • • •Poloniousmonk
in reply to Tuta • • •