@mttaggart@infosec.town

mttaggart

@mttaggart@infosec.town

Displaced Philly boy. Threat hunter. Streamer. Educator. Dad. Captain in the fight against #llm insanity. #infosec, #programming #rust, #python, #haskell, and #webapp. #opensource advocate. Cofounder of https://infosec.exchange/@thetaggartinstitute. Made wtfbins.wtf. Not your bro. All opinions my own. #fedi24 #searchable

This profile is from a federated server and may be incomplete. Browse more on the original instance.

mttaggart, to random

Sci-fi sure loves an ancient race of circle-makers huh

mttaggart, to random

Rough week for the Goog. Couldn't have happened to a nicer company. www.theverge.com/2024/5/28/24166177/google-search-ranking-algorithm-leak-documents-link-seo

mttaggart, to random
mttaggart, to random

Once again the Verge totally misses the point on , as they dismiss the security and privacy concerns with "If someone has access to your computer, you're already screwed because your computer is already collecting all this."

Like...DFIR pros with full control over a system know how to get at most of what a constant stream of screenshots provides to attackers/abusers, but having a straight up database of images is a level of access I don't think they've thought through. And as I've said, many infostealers are already primed to pull these kinds of databases.

mttaggart, to random

My wife tells me that she is observing conversations on X where regular, non-tech users are beginning to consider Linux because of Recall.

That's how bad an idea this is.

mttaggart, to random

I just got a TEXT MESSAGE from Google Gemini asking me to chat with it.

BLOCKED

mttaggart, to random

Dang this is a long outage

mttaggart, to DuckDuckGo

Uh, is broken for anyone else?

mttaggart, to random
mttaggart, to random

It is worth noting that the Recall feature is only going to work on newfangled PCs with that special NPU chip. So for now, a reasonable defense is to... not buy one of those laptops

mttaggart, to random

Listen.

It's not about whatever Microsoft is doing with these features today. Maybe it's apocalyptic, maybe it's not. But what we're seeing is next-level disregard for user choice about their OS. Yes, even for Microsoft, this is exceptional.

And in the constant pursuit of monetizing our data or extracting training sets, we must confront the question of what they will push on us next, without consent or reasonable recourse.

This is not an OS under owner control, and as such, should not be trusted for any purpose where data security is a concern.

I struggle to think of a use case where it isn't.

mttaggart, to random

I'd like to thank Microsoft for doing everything in its power to usher in the Year of the Linux Desktop.

mttaggart, to random

Holy crap do not let LLMs write shell commands for you, and don't bake that functionality into your terminal!

iTerm2, what were you thinking?!

gitlab.com/gnachman/iterm2/-/issues/11470

mttaggart, to random

My new favorite hobby is to tell the middle/high schoolers I pass on walks that I had a pair of Jncos just like those, then watch their face warp into horror.

mttaggart, to random

There is never going to be a GPG/PGP renaissance. People will not suddenly flock to this hard-to-use tool en masse. Please stop pushing it as the solution to things. We've tried. It didn't take.

mttaggart, to random

When the wet bulb temperature deaths start in the US, they will start in the South. And they won't stop because there's nothing like the necessary infrastructure to cool/dry people at scale.

RE: m.ai6yr.org/users/ai6yr/statuses/112457830153885796

mttaggart, to random

The writing is on the wall.

Actually it's not writing. It's neon letters directly wired to a fusion reactor.

The internet you knew? It's gone. There is no recovering it. There's too much money and incentive behind the idea of making the entire village into a strip mall run by LLMs. Your gardens are forfeit.

I don't know if a is possible, but even if it isn't, we gotta get to work building the intentional, human web. The one that rejects generative content, the one that verifies humanity through mutual trust, the one that takes privacy and safety of our neighbors as the highest value.

There are many tools available, but united effort must join together around them. Carefully, intentionally, we have to start moving what matters away from the polluted land.

mttaggart, to random

I am SO SICK of hearing "people are lazy," as an argument for, well, anything.

I've been on this planet for a minute, and I can think of maybe four people I've ever met who could truly be called lazy.

I know tired people. Sick people. Hurt people and angry people. Fast people, slow people. Scared people and confused people. And yes, many brilliant hardworking people who achieve beyond all expectations.

But most everyone is working hard just to get by. It is no moral failing that they do not have the time nor inclination to care deeply about the thing you do. In fact, thinking so is rather lazy of you.

Also, it makes you kind of an asshole.

Always remember: if everyone around you is an idiot, guess who's the jerk?

mttaggart, to random

I guess Bluesky decided to punt on E2EE for their DMs and the locals are not pleased

mttaggart, to random
mttaggart, to random

I wonder if any large enterprise has gone full borderless with something like Tailscale as the primary networking plane.

mttaggart, to random

All this LLM crap, especially the latest from Google, has me really bummed out. I did not sign up for a life of avoiding lies from the literal lying machine being shoved down my throat.

But now, I am apparently forced to fight a war against these things, in defense of whatever is left of fact.

mttaggart, to random

We need a name for the group of us who embrace technology, but not needless generative models. Luddites, but for LLMs.

mttaggart, to random

I want you to read both of these stories, and watch the video in the first one, then tell me that access to human-created information isn't in absolute peril.

I continue to hope for and predict a of the internet that gets those of us who care out of the deluge of generative slurry these advertisers want us to drown in.

arstechnica.com/gadgets/2024/05/google-is-reimagining-search-in-the-gemini-era-with-improved-ai-options/

arstechnica.com/gadgets/2024/05/gmails-ai-powered-email-summaries-can-dig-through-your-inbox-for-you/

mttaggart, to random

I feel like yesterday's Duo outage was a near-miss asteroid.

We can talk up how clear a response process for something might be, but we know that for every org that has this locked in, there are 10 that don't. A point of failure like MFA, especially one that we've been yelling about being critically necessary, creates its own risk.

  • All
  • Subscribed
  • Moderated
  • Favorites
  • megavids
  • modclub
  • DreamBathrooms
  • mdbf
  • magazineikmin
  • InstantRegret
  • Durango
  • Youngstown
  • slotface
  • thenastyranch
  • love
  • kavyap
  • GTA5RPClips
  • normalnudes
  • tester
  • khanakhh
  • ngwrru68w68
  • everett
  • osvaldo12
  • rosin
  • ethstaker
  • Leos
  • anitta
  • cubers
  • tacticalgear
  • cisconetworking
  • provamag3
  • JUstTest
  • All magazines