Search
Items tagged with: cloud
People continue to think about #AI in terms of #2010s computing, which is part of the reason everyone gets it wrong whether they're #antiAI or #tech bros.
Look, we had 8GB of #ram as the standard for a decade. The standard was set in 2014, and in 2015 #AlphaGo beat a human at #Go.
Why? Because, #hardware lags #software - in #economic terms: supply follows demand, but demand can not create its own supply.
It takes 3 years for a new chip to go through the #technological readiness levels and be released.
It takes 5 years for a new #chip architecture. E.g. the #Zen architecture was conceived in 2012, and released in 2017.
It takes 10 years for a new type of technology, like a #GPU.
Now, AlphaGo needed a lot of RAM, so how did it stagnate for a decade after doubling every two years before that?
In 2007 the #Iphone was released. #Computers were all becoming smaller, #energy #efficiency was becoming paramount, and everything was moving to the #cloud.
In 2017, most people used their computer for a few applications and a web browser. But also in 2017, companies were starting to build #technology for AI, as it was becoming increasingly important.
Five years after that, we're in the #pandemic lockdowns, and people are buying more powerful computers, we have #LLM, and companies are beginning to jack up the const of cloud services.
#Apple releases chips with large amounts of unified #memory, #ChatGPT starts to break the internet, and in 2025, GPU growth continues to outpace CPU growth, and in 2025 you have a competitor to Apple's unified memory.
The era of cloud computing and surfing the #web is dead.
The hype of multi-trillion parameter #LLMs making #AGI is a fantasy. There isn't enough power to do that, there aren't enough chips, it's already too expensive.
What _is_ coming is AI tech performing well and running locally without the cloud. AI Tech is _not_ just chatbots and #aiart. It's going to change what you can do with your #computer.
Good tutorial in French explaining the features and benefits of Hetzner's Storage Share service, a cloud storage solution that integrates with Nextcloud, a popular open-source file management platform.
From just €4.29 per month, you can get your own Nextcloud instance as an alternative to Google, Microsoft, etc. It comes with 1 TB of storage, unlimited users and is hosted in Europe.
It's not free, but neither are the US competitors — it's actually cheaper than Google One (10€) or Microsoft 365 (13€).
You don't need any IT skills to install it; just create an account, pay and start using it. 🙂
You can do it only for yourself or offer storage to family, friends and your community too.
Article: next.ink/4687/on-a-teste-stora…
Hetzner Storage Share website: hetzner.com/storage/storage-sh…
#nextcloud #hetzner #cloud #EuropeanAlternatives #BuyEuropean
On a testé Storage Share, l'instance NextCloud d'Hetzner à prix serré - Next
Hetzner a révisé récemment les tarifs de ses services de stockage en ligne. Nous nous sommes penchés sur Storage Share qui, en plus d’un prix agressif, fournit une instance NextCloud.Vincent Hermann (Next)
We don’t want to spam you with posts, but the house is burning! Help us to put it out.
The world needs fair and sovereign digital and technical solutions. Here we are and we want to create one.
Please support us on this path and benefit directly through free monocles accounts. Become one of thousands of monocles users and get your privacy back.
#monocles #privacy #sovereign #xmpp #it #ethics #cloud #email #eu
monocles - Privacy is not a feature. It is a right.
Secure communication, fair cloud, ethical hardware - monocles offers a digital solution without tracking, without surveillance, without compromise.startnext.com
☁️ Microsoft getting nervous about Europe's tech independence
"The Cloud Act grants US authorities access to cloud data hosted by US companies. It does not matter if that data is located in the US, Europe, or anywhere else."
theregister.com/2025/04/30/mic…
Microsoft gets twitchy over talk of Europe's tech independence
: Brad Smith commits org to facing off with US govt in court to protect themDan Robinson (The Register)
Značku Hetzner budete pravděpodobně znát jako velkého německého poskytovatele serverových a cloudových služeb. Já jsem zatoužil vyzkoušet jejich klasický webhosting. Objednal jsem si nejvyšší tarif a pustil jsem se do testování. A kdy jste vy naposledy jste posílali kopii občanky pro zřízení hostingu? 
maxiorel.cz/recenze-hetzner-le…
#hosting #webhosting #cloud #php #hetzner
In case you don't know, I run an independent UK hosting company called Brightbox. We offer virtual servers, load balancers, SQL services, object storage, container registry and more. All entirely UK owned and operated. No bullshit.
If you give us a try, do let me know how you get on. I'm happy to help!
UK Cloud Server Hosting & Cloud Hosting Providers - Brightbox
Brightbox provides simple and flexible UK owned and operated cloud hosting designed for 100% uptime. Get started now with £50 free credit.www.brightbox.com
I couldn't find an existing list of Canadian alternatives to American Internet services, so I've started one:
worktree.ca/taffer/canadian-al…
Please spread far and wide, and let me know if you have any updates for the page!
#canada #cira #internet #cloud #alberta #british_columbia #bc #manitoba #new_brunswick #newfoundland #labrador #newfoundlandlabrador #northwest_territories #nwt #nova_scotia #nunavut #ontario #prince_edward_island #pei #quebec #saskatchewan #yukon #buycanadian #elbowsup
canadian-alternatives
A collection of Canadian alternatives to common Internet services in the spirit of the various Awesome lists.Worktree
#cloud
berthub.eu/articles/posts/comm…
Communications without Musk and Trump: Cloud Kootwijk - Bert Hubert's writings
In the beautiful Dutch booklet Over en Uit: Driekwart Eeuw Radiocommunicatie 1900 - 1975 (‘Over and out: 75 years of radio communications’), we read: 1916: As a result of British cable censorship, free communication between the Dutch government and t…Bert Hubert's writings
Unbelievable
#ElonMusk’s US #DOGE Service are feeding sensitive data into #AI software via #Microsoft’s #cloud
#Musk’s US #DOGE Service have fed sensitive data from across the #Education Dept into #ArtificialIntelligence software to probe the agency’s programs & spending…. The AI probe includes data w/personally identifiable info for people who manage grants, & sensitive internal financial data…
#law #security #InfoSec #CyberSecurity #NationalSecurity #Trump #TrumpCoup
washingtonpost.com/nation/2025…
🚀 Heinlein Gruppe gründet OpenCloud GmbH zur Stärkung des Open Source-Ökosystems in Deutschland 🇩🇪. @OpenCloud bietet sicheres, DSGVO-konformes File-Management und -Sharing und stärkt damit Europas digitale Souveränität.
Peer Heinlein betont: „Das digitale Ökosystem ist kritische Infrastruktur.“
🔗 Pressemitteilung: opencloud.eu/de/news/heinlein-…
#OpenSource #Cloud #OpenCloud #HeinleinGruppe #DigitaleSouveränität
Black Weeks at @Tutanota Save 62% On Our Legend Plan! 💎 tuta.com/blog/black-weeks-at-t…
#Encrypt #privacy #BlackFriday #Email #Calendar #FLOSS #OSS #OpenSource
Not endorsing the #degoogle hashtag here just because a hell of a lot of spackle is needed for a comparable experience, but if you're interested in #cloud email servoces, this is one of the better ones in this space.
Black Weeks at Tuta: Save 62% On Our Legend Plan! 💎 | Tuta
Get the deal from November 15 to December 4, 2024.Tuta
Vercel v dubnu updatoval ceniky. Misto tradicniho pomaleho utahovani sroubu to fakt napalil a zavedl "Edge Requests", za timto kryptickym popiskem se skryva jakykoli request. (cti: assety)
V EU za to platime $2.60/1M requestu.
Zjistil jsem to, kdyz nam Volebni Kalkulacka vesele napocitava 5.6M Edge Requestu za den. Jeste, ze nejsou prezidentske volby a senatori dodali odpovedi tak pozde!
Cas z Vercelu odejit.
Pro predstavu porovnani jednoho dne senatu a prezidenta.
I really like the idea of, instead of collaborating on a document via (for example) Google's servers and Google Docs, being able to have collaborators' computers talk to each other directly and share edits that way.
I really hope that "local-first" gains at least the sort of steam the FOSS movement has — as I've seen people comment, FOSS doesn't help if your computation is happening on someone else's computer.
What on earth?! Amazon S3 charges you for unauthorised requests to S3?!
That's just absolutely insane! I better check my AWS account and delete any unused buckets I have in there …
medium.com/@maciej.pocwierz/ho…
#aws #s3 #infosec #webdev #cloud
How an empty S3 bucket can make your AWS bill explode
Imagine you create an empty, private AWS S3 bucket in a region of your preference. What will your AWS bill be the next morning?Maciej Pocwierz (Medium)
AI App Builder
Build and deploy your custom AI application in minutes with AI App Builder. Choose cutting-edge models, ensure security, and empower developers effortlessly. Register now!OVHcloud
Nextcloud jako osobní cloud
Už 7 let používám Nextcloud pro osobní potřeby. V článku jsem sepsal, na jaké věci jej používám a jaké s nimi mám zkušenosti.
#caldav #carddav #chat #cloud #Collabora #dokumenty #Dropbox #fotky #kalendáře #kontakty #libreoffice #Nextcloud #RSS #úkoly
blog.eischmann.cz/2023/11/16/n…
Wer es immer noch nicht glaubt: eine mit Passwort versehene ZIP Datei darf man nicht als "sicher verschlüsselt" betrachten! Schon gar nicht in der #Microsoft #Cloud
Malware detected: Microsoft-Cloud hebelt ZIP-Passwortschutz aus
tarnkappe.info/artikel/it-sich…
Malware detected: Microsoft-Cloud hebelt ZIP-Passwortschutz aus
Wer glaubt, die Inhalte seiner ZIP-Dateien seien durch ihren Passwortschutz sicher, der irrt. Selbst Microsoft schaut da mittlerweile rein.Marc Stöckel (Tarnkappe.info)
Es ist ja nicht so, dass wir nicht schon länger vom Vendor-Lock-In gewarnt hätten. Nun hat Microsoft ihren Cloud-Kunden am 1. April ganz unironisch ein Preiserhöhung-Ei gelegt.
«EU-Cloud-Wettbewerber: Microsofts Preissteigerungen reichen an Erpressung»
🥚 heise.de/news/EU-Cloud-Wettbew…
--
#microsoft #cloud #vendorlockin #eu #erpressung #IToldYouSo
EU-Cloud-Wettbewerber: Microsofts Preissteigerungen reichen an Erpressung
Zum 1. April hat Microsoft die Preise für Cloud-Produkte um elf Prozent erhöht. Betroffenen und Konkurrenten stößt die Teuerung verstärkt äußerst übel auf.Stefan Krempl (heise online)
Hledám infra experta do banky. Bez kódování, jen vrtání se v systémech.
#infrastructureascode #devops #automation
#cloud #k8s #terraform #ansible
Hybrid #job #Praha, 1x týdně on-site.
Technický pohovor online ihned.
*MD doplním.
Díky,
Honza
I recently wrote a post detailing the recent #LastPass breach from a #password cracker's perspective, and for the most part it was well-received and widely boosted. However, a good number of people questioned why I recommend ditching LastPass and expressed concern with me recommending people jump ship simply because they suffered a breach. Even more are questioning why I recommend #Bitwarden and #1Password, what advantages they hold over LastPass, and why would I dare recommend yet another cloud-based password manager (because obviously the problem is the entire #cloud, not a particular company.)
So, here are my responses to all of these concerns!
Let me start by saying I used to support LastPass. I recommended it for years and defended it publicly in the media. If you search Google for "jeremi gosney" + "lastpass" you'll find hundreds of articles where I've defended and/or pimped LastPass (including in Consumer Reports magazine). I defended it even in the face of vulnerabilities and breaches, because it had superior UX and still seemed like the best option for the masses despite its glaring flaws. And it still has a somewhat special place in my heart, being the password manager that actually turned me on to password managers. It set the bar for what I required from a password manager, and for a while it was unrivaled.
But things change, and in recent years I found myself unable to defend LastPass. I can't recall if there was a particular straw that broke the camel's back, but I do know that I stopped recommending it in 2017 and fully migrated away from it in 2019. Below is an unordered list of the reasons why I lost all faith in LastPass:
- LastPass's claim of "zero knowledge" is a bald-faced lie. They have about as much knowledge as a password manager can possibly get away with. Every time you login to a site, an event is generated and sent to LastPass for the sole purpose of tracking what sites you are logging into. You can disable telemetry, except disabling it doesn't do anything - it still phones home to LastPass every time you authenticate somewhere. Moreover, nearly everything in your LastPass vault is unencrypted. I think most people envision their vault as a sort of encrypted database where the entire file is protected, but no -- with LastPass, your vault is a plaintext file and only a few select fields are encrypted. The only thing that would be worse is if...
- LastPass uses shit #encryption (or "encraption", as @sc00bz calls it). Padding oracle vulnerabilities, use of ECB mode (leaks information about password length and which passwords in the vault are similar/the same. recently switched to unauthenticated CBC, which isn't much better, plus old entries will still be encrypted with ECB mode), vault key uses AES256 but key is derived from only 128 bits of entropy, encryption key leaked through webui, silent KDF downgrade, KDF hash leaked in log files, they even roll their own version of AES - they essentially commit every "crypto 101" sin. All of these are trivial to identify (and fix!) by anyone with even basic familiarity with cryptography, and it's frankly appalling that an alleged security company whose product hinges on cryptography would have such glaring errors. The only thing that would be worse is if...
- LastPass has terrible secrets management. Your vault encryption key always resident in memory and never wiped, and not only that, but the entire vault is decrypted once and stored entirely in memory. If that wasn't enough, the vault recovery key and dOTP are stored on each device in plain text and can be read without root/admin access, rendering the master password rather useless. The only thing that would be worse is if...
- LastPass's browser extensions are garbage. Just pure, unadulterated garbage. Tavis Ormandy went on a hunting spree a few years back and found just about every possible bug -- including credential theft and RCE -- present in LastPass's browser extensions. They also render your browser's sandbox mostly ineffective. Again, for an alleged security company, the sheer amount of high and critical severity bugs was beyond unconscionable. All easy to identify, all easy to fix. Their presence can only be explained by apathy and negligence. The only thing that would be worse is if...
- LastPass's API is also garbage. Server-can-attack-client vulns (server can request encryption key from the client, server can instruct client to inject any javascript it wants on every web page, including code to steal plaintext credentials), JWT issues, HTTP verb confusion, account recovery links can be easily forged, the list goes on. Most of these are possibly low-risk, except in the event that LastPass loses control of its servers. The only thing that would be worse is if...
- LastPass has suffered 7 major #security breaches (malicious actors active on the internal network) in the last 10 years. I don't know what the threshold of "number of major breaches users should tolerate before they lose all faith in the service" is, but surely it's less than 7. So all those "this is only an issue if LastPass loses control of its servers" vulns are actually pretty damn plausible. The only thing that would be worse is if...
- LastPass has a history of ignoring security researchers and vuln reports, and does not participate in the infosec community nor the password cracking community. Vuln reports go unacknowledged and unresolved for months, if not years, if not ever. For a while, they even had an incorrect contact listed for their security team. Bugcrowd fields vulns for them now, and most if not all vuln reports are handled directly by Bugcrowd and not by LastPass. If you try to report a vulnerability to LastPass support, they will pretend they do not understand and will not escalate your ticket to the security team. Now, Tavis Ormandy has praised LastPass for their rapid response to vuln reports, but I have a feeling this is simply because it's Tavis / Project Zero reporting them as this is not the experience that most researchers have had.
You see, I'm not simply recommending that users bail on LastPass because of this latest breach. I'm recommending you run as far way as possible from LastPass due to its long history of incompetence, apathy, and negligence. It's abundantly clear that they do not care about their own security, and much less about your security.
So, why do I recommend Bitwarden and 1Password? It's quite simple:
- I personally know the people who architect 1Password and I can attest that not only are they extremely competent and very talented, but they also actively engage with the password cracking community and have a deep, *deep* desire to do everything in the most correct manner possible. Do they still get some things wrong? Sure. But they strive for continuous improvement and sincerely care about security. Also, their secret key feature ensures that if anyone does obtain a copy of your vault, they simply cannot access it with the master password alone, making it uncrackable.
- Bitwarden is 100% open source. I have not done a thorough code review, but I have taken a fairly long glance at the code and I am mostly pleased with what I've seen. I'm less thrilled about it being written in a garbage collected language and there are some tradeoffs that are made there, but overall Bitwarden is a solid product. I also prefer Bitwarden's UX. I've also considered crowdfunding a formal audit of Bitwarden, much in the way the Open Crypto Audit Project raised the funds to properly audit TrueCrypt. The community would greatly benefit from this.
Is the cloud the problem? No. The vast majority of issues LastPass has had have nothing to do with the fact that it is a cloud-based solution. Further, consider the fact that the threat model for a cloud-based password management solution should *start* with the vault being compromised. In fact, if password management is done correctly, I should be able to host my vault anywhere, even openly downloadable (open S3 bucket, unauthenticated HTTPS, etc.) without concern. I wouldn't do that, of course, but the point is the vault should be just that -- a vault, not a lockbox.
I hope this clarifies things! As always, if you found this useful, please boost for reach and give me a follow for more password insights!
"LfDI expects schools to offer pupils alternatives to the MS365 #cloud service for #school operations by the summer vacations in 2022.
From the coming school year, the use of MS 365 at schools must be terminated or its data protection-compliant operation must be clearly demonstrated by the responsible schools."
This is how the SA of Baden-Württemberg starts its press release stating that M365 is not #GDPR compliant and it must be discontinued.
baden-wuerttemberg.datenschutz…
Nutzung von MS 365 an Schulen - Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit
LfDI erwartet von Schulen, dass sie Schüler_innen bis zu den Sommerferien 2022 Alternativen zum Cloud-Dienst MS 365 für den Schulbetrieb anbietenPressestelle (Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg)
I'd like to find a community of other people in #tech, maybe people who are interested in talking about things like #cloud alternatives, #cryptography, or #softwaredev processes (like #agile, I guess), #programming. I haven't found too much of that on here. Point me at the good discussions and knowledge sharing, if you know where it is!
Look, software isn't everything, and I'm sure I'll get into some other stuff on here, but the above is what I haven't found yet.
#introductions #introduction