Notices by Taggart :ifin: (mttaggart@infosec.exchange), page 2

Hey @cloudflare, how come you're protecting beamed[.]st, the DDoS service that's attacking Ubuntu? It's an obvious criminal enterprise that literally advertises botnet access.

Has any "open" model published data on the energy requirements for training? It sure would be nice to know those sorts of details.

@GossiTheDog Thanks, I'm aware of the extremely limited reports from them and from their claimed attackers. What has been provided is insufficient, imo. Especially since their statuses don't reflect reality.

@ifin has been tracking the situation here.

https://discourse.ifin.network/t/ubuntu-services-under-attack/356

I feel like I'm taking crazy pills. Three days into service interruptions, with a major patch to install, and no word from Canonical. It's a shocking abdication of responsibility of care for their users.

If anyone who knows wants to share with me confidentially what's going on, DMs are open.

We find that LLMs consistently prefer resumes generated by themselves over those written by humans or produced by alternative models, even when content quality is controlled.

Horrifying.

https://arxiv.org/abs/2509.00462

Ugggh this one is going to suck. cPanel is everywhere and most are not patched frequently.

https://www.bleepingcomputer.com/news/security/cpanel-whm-emergency-update-fixes-critical-auth-bypass-bug

RE: https://infosec.exchange/@mttaggart/116478503783177069

This is from July, but I missed it at the time. If anyone says "Oh but streaming video takes energy too," this is the response. Netflix is not planning 50GW of data center energy usage by 2028. They are not advocating for the use of federal lands for data centers and power generation—including natural gas. This document outlines a terrifying future for power usage and generation in the United States.

It's a threat in ways other data center usage is not.

https://www.anthropic.com/news/build-ai-in-america

@cwebber Ooof high school memory unlocked. At least Mac Hall had the good grace to stay in the early 2000s.

Listen, I have a Framework. It's a great laptop—maybe the best I've ever had. But I can't support a company that funds, in any form, an actual real-life Nazi like DHH. I also need them to, y'know, take ownership of the massive misstep doing so is/was.

Oh my god, OpenAI reinvented Recall, but for macOS.

"Chronicle" is an opt-in feature that scans your screen, saves screenshots temporarily, and sent to OpenAI's servers.

https://developers.openai.com/codex/memories/chronicle

Yo did we forget about the Framework-funding-fash thing or

What happens when you must wonder if everything you read is synthetic, meaningless, intentionless wordloaf? What happens when most of the text around you actually is?

This is not about economics. It's not even about climate. It's about the damage to the metaphysical fabric of human existence.

https://www.mississippifreepress.org/editors-note-we-unknowingly-published-an-ai-column-by-a-fake-author-heres-what-happened/

Persona is handling this "feature." They're not being subtle about telling you who they are!

https://support.claude.com/en/articles/14328960-identity-verification-on-claude

@cwebber FWIW, the California legislation was opposed by big tech's lobbying firms. IMO what we have here is a fundamental disconnect between technical people and non-technical people in understanding how to address a perceived issue (the internet is scary for kids). Polling consistently shows broad support for this issue, which is in part why this is a bipartisan bill.

I'm not agreeing with it; I'm just saying the motivations might not be from Big Tech itself.

@campuscodi FYI, this thing is almost certainly slop. Also see the nonexistent OAuth8 (??) and other proposed specs, none of which exist.

RE: https://social.coop/@cwebber/116408556882122186

I wrote a bit about the CA law, and I am of the opinion that it's silly and unenforceable as written, but not the end of the world. I also think it was important that the Governor (who sucks) basically begged for amendment before it went into effect. I suggest an exemption for open source. The text of the Congressional Bill has yet to be published, but if your reps are on the Energy and Commerce Committee, now's the time to make noise to them.

https://taggart-tech.com/ab-1043/

https://energycommerce.house.gov/representatives

This cost, which somehow nobody wants to talk about, is an erosion of the foundation of our society. Faster code generation is simply not worth this cost. What's worse, it's self-defeating: A generation educated by generative models will be ill equipped to build new things.

https://arstechnica.com/science/2026/04/to-teach-in-the-time-of-chatgpt-is-to-know-pain/

It was my job for a decade to try to keep tweens and teens safe online. Let me tell you what you already know: no law or technology can do it. There are no lengths kids won't go to to talk to friends without prying eyes. The harder you try to lock it down, the dodgier their solutions will be.

@tchambers I have asked after this, and I believe the general consensus is that generative alt text without context is worse than nothing.

RE: https://mastodon.social/@AltTextHealthCheck/116318070750735303

Pretty disappointing, i.e. We can do better.