Conversation

Notices

1. Embed this notice
   Soatok Dreamseeker (soatok@furry.engineer)'s status on Thursday, 23-Jan-2025 03:47:25 JST Soatok Dreamseeker

   It's bizarre watching people realize slowly, in real time, that tech companies do not, in fact, have their backs.

   They never did. They only pretended to because it was fashionable.

   They would kill you and your entire family if it made their growth in profits increase by 0.1% this quarter, and they'd do it with a song in their hearts.

   And they would do so without fear of prosecution, because they've basically bought out the entire political system through lobbying and can blatantly bribe Supreme Court Justices without consequence.

   Why would they be incentivized to actually protect your privacy? Especially when your data is so valuable for growing their profits?

   To a lot of business types, encryption isn't a question about privacy. It's about access controls. And they implicitly believe they get access.

   So, too, will their buddies in the government.

   You cannot, and should not, expect billionaires to have your backs. They don't give a fuck about you. They never will. Don't believe them.

   • Matthew Lyon and Rich Felker repeated this.
   • Embed this notice
     Soatok Dreamseeker (soatok@furry.engineer)'s status on Thursday, 23-Jan-2025 03:47:23 JST Soatok Dreamseeker

     in reply to

     Remember: https://neveragain.tech

   • Embed this notice
     Soatok Dreamseeker (soatok@furry.engineer)'s status on Thursday, 23-Jan-2025 03:47:24 JST Soatok Dreamseeker

     in reply to

     • Matthew Green

     Today we heard the US government is planning to invest half a trillion dollars into an "AI Infrastructure" project.

     Hey, didn't @matthew_d_green just write about this topic?

     https://blog.cryptographyengineering.com/2025/01/17/lets-talk-about-ai-and-end-to-end-encryption/

     Now, despite all the things we call "oracles" in cryptography, none of us can see the future. This is just the totally foreseeable consequences of the system as it existed yesterday.

     I'd like to share a few thoughts on this matter.

     The people should absolutely learn to break AI systems. I feel that this will become crucial to online privacy in the coming years.

     But I also implore you to keep AI 0days secret. Don't disclose them publicly--especially to AI companies!

     Feel free to share them privately with your friends (over E2EE chats) and only use them if they can help people.

     And, to be clear, this is coming from Mr. "I drop 0day on my furry blog" himself.

     Ryan Castellucci :nonbinary_flag: repeated this.
   • Embed this notice
     Rich Felker (dalias@hachyderm.io)'s status on Thursday, 23-Jan-2025 14:58:57 JST Rich Felker

     in reply to

     • garfieldairlines.net
     • crypticcelery

     @crypticcelery @garfieldairlines @soatok None of the stuff the giants are building has nonnegative value to society or the economies of anyone but themselves.

     Everyone else can do way better not replicating the giants but with open publicly funded interoperable infrastructure.

   • Embed this notice
     crypticcelery (crypticcelery@chaos.social)'s status on Thursday, 23-Jan-2025 14:58:59 JST crypticcelery

     in reply to

     • garfieldairlines.net

     @garfieldairlines I can see where you are coming from, but do we really need our own tech “giants”? Granted, I think they would be subject to stricter regulation (for now…).
     But should we, if we ever get of our asses to build our own stuff, not strive for something at least marginally better? Not monopolistic giants, but truly a set of alternatives (to put it in “market” speak: competition)?
     @soatok

   • Embed this notice
     garfieldairlines.net (garfieldairlines@fedi.garfieldairlines.net)'s status on Thursday, 23-Jan-2025 14:59:00 JST garfieldairlines.net

     in reply to

     @soatok@furry.engineer we (Europa) also need our own tech giants… but no one stands up for the job. Because we are depending on the USA or China… pick your poison.

     Rich Felker repeated this.
   • Embed this notice
     caranea (caranea@mastodon.social)'s status on Thursday, 23-Jan-2025 15:00:46 JST caranea

     in reply to

     • garfieldairlines.net

     @garfieldairlines @soatok
     Europe doesn't have "tech giants" because we tend to dislike monopolies, both culturally and legally. Take T-Systems (DE) and TI Sparkle (IT), who will happily cooperate on a project, but not yield a centimetre when competing, and sure as heck refuse any attempt at a merger (as would their respective governments). In the end, things like Linux & Mastodon are our equivalent of a "tech giant" (also fun to look back at the "Java Anon Project" -- sort of TOR, but in 2001).

   • Embed this notice
     Rich Felker (dalias@hachyderm.io)'s status on Thursday, 23-Jan-2025 15:03:35 JST Rich Felker

     in reply to

     • Matthew Green
     • Seyd

     @Seyd @soatok @matthew_d_green The answer is really simple: that "AI" is smoke and mirrors garbage. Yet another instance of fascists intentionally making the world worse in hopes they can profit from it. The sooner the bubble pops the sooner we can put this gratuitous threat behind us.

   • Embed this notice
     Seyd (seyd@declin.eu)'s status on Thursday, 23-Jan-2025 15:03:43 JST Seyd

     in reply to

     • Matthew Green
     @soatok @matthew_d_green
     
     If the client's plaintext is sent to the AI before encryption, then there can be no talk of end-to-end encryption. This creates a similar threat to the presence of keyloggers and sniffers, making the client environment vulnerable.
     
     Thus, the question of whether AI will pose a threat to end-to-end encryption is irrelevant, as end-to-end encryption does not address the issue of malware. Other protective measures must be employed to deal with this threat model.
   • Embed this notice
     Rich Felker (dalias@hachyderm.io)'s status on Thursday, 23-Jan-2025 16:49:59 JST Rich Felker

     in reply to

     • Seyd

     @Seyd The issue I'm talking about is not the whole of privacy and malicious user devices, but specifically the supposed demand for AI having access to private user data and that being used as an excuse for client-side backdoors bypassing e2ee.

     That excuse goes away when the AI scam does.

   • Embed this notice
     Seyd (seyd@declin.eu)'s status on Thursday, 23-Jan-2025 16:50:01 JST Seyd

     in reply to

     • Rich Felker
     I don't understand why to write here about certain things, but please don't explain it to me. I don't want to give a reason for the continuation of any ideological discussion. By the way, your message resembles an AI product — a lot of fluff, but little substance.
     
     The issue of privacy is much deeper, and AI doesn't fundamentally change anything here. Even without AI, you can't be sure about the security of your phone. The software has grown to enormous sizes, and auditing tens of gigabytes is difficult. Users can install additional software, and there are many specialized processors in phones that can affect privacy.
     
     Cybercriminals sell infected devices on marketplaces. Often, manufacturers themselves install firmware with malware on devices.
     
     https://iz.ru/1823322/dmitrii-bulgakov/nanesti-zarazenie-kak-tehnika-s-marketpleisov-stanovitsa-istocnikom-virusov
     
     https://www.wired.com/story/android-tv-streaming-boxes-china-backdoor/
     
     AI is just another ingredient in this complex issue.
   • Embed this notice
     Rich Felker (dalias@hachyderm.io)'s status on Thursday, 23-Jan-2025 17:40:25 JST Rich Felker

     in reply to

     • Seyd

     @Seyd It's changed my attitude towards you.

   • Embed this notice
     Seyd (seyd@declin.eu)'s status on Thursday, 23-Jan-2025 17:40:27 JST Seyd

     in reply to

     • Rich Felker
     Right now, on a planetary scale, personal data is being collected, financial information is being stolen, and devices are being used for DDoS attacks or cryptocurrency mining. This is a common problem. Will AI become a disaster for end-to-end encryption? No. The issues with end-to-end encryption lie in the realm of computational complexity, not in whether your data is being stolen by a regular keylogger or AI.
     
     By the way, my avatar was created by AI, and this message was also translated by AI. Has this knowledge changed your attitude towards the drawing and the text?