Notices by RootWyrm 🇺🇦:progress: (rootwyrm@weird.autos)

@snosrapkungfu ah! I see you have found RootWyrm's Theory of Modern LGBTQIA+ Fantasy Writing! (or is it a law? Either way.)

To wit: when your characters have access to magic, nobody has to worry about 'passing' or transitioning. They can just do it.

(This is not necessarily a bad thing.)

Perhaps the most offensive thing to me of all, is that these LLM-loving AI-boosting idiots who perpetuate falsehoods like 'AI can read minds with fMRI' and 'AI can magically find vulnerabilities' and 'AI will cure cancer' is that we have known this is bullshit for years.

Years.

IBM Watson was launched as a magical cure-all in 2013. By 2022 it had been pulled from everything because despite years of 'refining' and 'training,' following it would have killed over 50% of patients. At it's best.

Y'all in #infosec need to actually start paying attention to those of us who are experts in the LLM slop.

It is not inevitable, it is not effective, and depending on it in any way will fuck your business permanently as well as your brain. It does not magically detect vulnerabilities or magically make things better. It floods everyone with sewage when they're stupid enough to believe it's wine.

https://arxiv.org/abs/2604.04721

@reflex @davidgerard to put an even finer point on it still, because it's very easy to:

Replace 'AI' with 'fascism' and they would be saying the same things. Replace it with 'Nazis' and no surprise, they are saying *exactly* that too. (But don't you dare call them Nazis!)

They love BSky because it platforms and defends bigots, terrorists, and Nazis and is at war with it's own users over it.

@futurebird as someone with many years of experience who has also written hard sci-fi 'AI,' I assure you, this is not madness.

Madness is the result of not knowing better. This, this is absolute fucking incompetence paired with severe psychosis as implemented by people who are so deeply unintelligent as to think a CPU is literal magic and lossy matrix multiplication is bleeding edge neuroscience.
But who insist they are the smartest on the planet despite all evidence to the contrary.

@david_chisnall yes, I have. And under absolutely no circumstances whatsoever is there any valid or legitimate reason to demand someone's age except to surveil or come back later mandating it be tied to other identifying information. Period.

I worked for a VERY short period for a company you've never heard of which is VERY involved in this shit. They can EASILY tie you to things with your DOB and IP address alone.

@david_chisnall and you think they can't ID you from that alone? You think it's going to stop there? Because it's not, period. It has never once stopped there in the history of forever.

"Oh the kids are faking it." -> MUST provide actual valid ID which is verified.

"They said they're over 18 but visiting Roblox." -> It's Junior

"They didn't set over 18 but they're visiting bank XYZ." -> It's Mom.

@david_chisnall I'm not going to spend the time to disassemble every bogus argument "for" bad legislation advancing fascist ideology.

I'm just going to say flatly that it's bad legislation written by the ignorant who intend to advance fascist surveillance.

And anybody defending or implementing it has declared themselves an enemy of freedom and democracy.

@badsamurai I would caution anyone "politically exposed" that Eventbrite's founders are very deeply linked to Thiel and Palantir. And there is a significant likelihood they are 'volunteering' data to Palantir and the regime.

@mhoye nobody who has ever went to work at Palantir, did so without knowing this the whole time. It's why they must all be found, doxxed, arrested, and tried. There are absolutely no innocent people there, at all.

@soatok @Foxboron you cannot trust *any* CA subject to the whims of the regime. Transparency logs do not fix that problem, they do not keep them honest, and they are now a risk.
Because it is not "why did you request a certificate." It is "you're keeping secrets from us, the penalty is death. Also we hijacked your certificate with the CA's assistance to see what you were hiding."

@Foxboron @soatok just having a hostname is more than enough to be a major problem. "Why are you getting a certificate? What are you encrypting?"

People need to start accepting the fact that the United States regime is very, very actively Nazi and is only going to get worse by the day. They're already showing up at the homes of protesters with guns drawn. Anyone who thinks that Palantir isn't already collecting it to flag dissenters is an ignorant fool.

@soatok people really, really urgently need to wrap their heads around the fact that transparency logs are now a huge risk surface in an accurate and appropriate threat model, and we need to stop using and advocating them immediately.

Because do you know who doesn't like encryption, and who is going to be looking at those logs, and can figure out who owns example.com?

Yeah.

We need to start ripping those down as fast as possible.

@soatok as arguably the most experienced among us:

Oh, no, you sweet summer children.

ALL security questions are political problems first and foremost. No, seriously, ALL of them. Don't believe me?

Ask why Department X isn't allowed to access Resource Y.

Ask why data-at-rest encryption is required but not data-in-flight encryption.

Oh and then there's FedRAMP! Where only U. S. citizens can touch things, unless they're writing the application itself. For reasons.

UhHUH.

@soatok I once did the actual math.

Doing the security standards for a large company subject to thousands upon thousands of laws and regulations, quite literally 84% of my time was spent on writing justifications, explaining mitigations, and meetings with deeply non-technical people.

5% was actually implementing technical measures.

Less than 30 minutes of it was addressing actual technical security issues.

This is in the context of a six week process.

@FurryBeta @soatok oh, that's nothing. I have yelled repeatedly because email CAN be secure. We fucking have TLS1.3 transport. We've had good local filtering mechanisms since the 1990's.

And guess what? The big three are the biggest fucking impediment by refusing to enforce TLS, intentionally sabotaging known secure methods, and continually misleading users and customers.

@da_667 @GossiTheDog this is full on unprecedented. The 80's and 90's never, ever got this bad. We are literally at the point where specs that would be marginal 8 years ago are rapidly crossing into 'or I could buy a car' territory.

A system with a straight up unusable 16GB, 7800X3D, basic B850, 4070, and 1TB SSD will now cost you over $2,500.

@whitequark @demize @xgranade how does road salt end up on telephone poles burning down transformers every year?
Spray. Lots of spray and blowing and switching to corrosive chemical sprays. It's very, very much a whole thing EVERY year first serious melt where salt plus water on transformers blows them up en masse.
Shit gets everywhere, rusts everything.

@whitequark @demize @xgranade Marley SPX systems are VERY costly, and in the US, water is so cheap Nestle gets to pump 360,000gpd for free. So guess what happens?

Yep. "Fuck that, we can build another well." One of the reasons companies are building in Ohio besides bribes? It's not the workforce. It's the state bending over backwards to prevent any opposition and give them superior water rights with infinite draw.
Which they are using.

@whitequark @demize @xgranade and because water is so cheap and they're getting special treatment?
They're certainly not upgrading any of the old installations. And they're also not fixing the biggest source of loss by far - LEAKS.
HP back, god, 15 years ago now was very proud (and justifiably so) of a bunch of new technology. And as a throwaway line mentioned that 10% or more of ALL water usage at data centers was just from leaking pipes. If those leaks aren't inside, they aren't fixed.