this post was submitted on 27 Apr 2026
1276 points (98.6% liked)

Technology

84222 readers
5114 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots


founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
[–] Ghostalmedia@lemmy.world 199 points 2 days ago (4 children)

the cloud provider's API allows for destructive action without confirmation, it stores backups on the same volume as the source data, and “wiping a volume deletes all backups.” Crane also points out that CLI tokens have blanket permissions across environments.

Well, there’s your problem.

[–] MountingSuspicion@reddthat.com 81 points 2 days ago (3 children)

I don't want to sound like a know it all here because I recently was reminded by a nice Lemmy person to actually TEST my backups, but damn. Every part of that is so dumb. I also have backups stored by a different company in addition to locally storing really important info. If your stuff is hosted and backed up by the same people, what happens if your account is randomly suspended or hacked or some other issue (like ai)?

[–] Ghostalmedia@lemmy.world 50 points 2 days ago* (last edited 2 days ago) (1 children)

If your company can be taken down by Camden the college intern, it can be taken down by Claude.

[–] logi@piefed.world 22 points 2 days ago* (last edited 2 days ago) (2 children)

People somehow think that they should give more permissions to Claude than to Camden. (Is that a name? To me that's a borough and an eponymous beer.)

E: oh yeah, and the market.

[–] frongt@lemmy.zip 6 points 2 days ago (2 children)

Of course it's a name. Camden borough/town/market is named after William Camden, 1551-1623. Using surnames as given names is a relatively common Americanism.

[–] lando55@lemmy.zip 6 points 2 days ago (1 children)

What was William Camden's take on unrestricted AI use in production?

[–] Ghostalmedia@lemmy.world 7 points 2 days ago

He doth protest

[–] Ghostalmedia@lemmy.world 4 points 2 days ago (1 children)

And now is a common first name that in circulation because of a bunch of Gen X and early millennial parents named millions of kids anything that ended in den, dan, or don.

[–] Semjeza@fedinsfw.app 1 points 2 days ago

I thought it was a common first name because of all the fooling around in the Cyberdog dressing rooms?

[–] ColeSloth@discuss.tchncs.de 0 points 2 days ago

Because people are a risk of messing with a company on purpose and with ill intent.

[–] homes@piefed.world 15 points 2 days ago* (last edited 2 days ago) (1 children)

If your stuff is hosted and backed up by the same people, what happens if your account is randomly suspended or hacked or some other issue (like ai)?

This should be one of the first questions you get asked when you’re being interviewed for the position 2 to 3 levels beneath the position of ultimate responsibility. And if you don’t immediately have an answer, the interview is over.

Fucking idiots had it coming

[–] logi@piefed.world 13 points 2 days ago (1 children)

It's an easy question to answer but a more difficult question to remember to ask. But I guess that's what those 2 to 3 levels are for 😏

[–] homes@piefed.world 9 points 2 days ago* (last edited 2 days ago)

Ooo, good point. Management can be shit a lot of the time.

But with all of those layoffs because of AI, those 2 to 3 levels get collapsed into one, and we’re left with the trainees running the show.

And here we are ¯\_(ツ)_/¯

[–] stoy@lemmy.zip 12 points 2 days ago (1 children)

Repeat after me:

"An untested backup does not exist"

[–] MountingSuspicion@reddthat.com 5 points 2 days ago (2 children)

Not to give myself more credit than I deserve, but I did test them upon setup, and had restored from backup 2 years ago. I didn't have any ongoing checks other than to ensure a backup happened. I have since instituted yearly checks of the backups themselves, but I did feel dumb when I realized how vulnerable my data was.

[–] stoy@lemmy.zip 3 points 2 days ago (1 children)

Hehe, I ment no disrespect towards you, I just find that to be an excellent expression to explain the importance of testing backups to non tech people.

Oh, for sure. And I really should've known better. No offense taken.

[–] frongt@lemmy.zip 1 points 2 days ago (1 children)

So in the event of a failure, you'd be okay with reverting to that last known good backup from a year ago?

Yes, but also I have to draw a line somewhere. I have a daily backup process. Some data is backed up to multiple places. I have backups of my backups. I cannot ensure that all three of the daily backups I run are fully restorable. I would love to know with 100% certainty that they all execute perfectly, but at the end of the day I have to trust the tools and processes I put in place for backups. A yearly checkup is probably more than sufficient for my purposes. I'm sure for certain businesses or sectors they need to be more on top of things, but I could manage just fine if all of it disappeared tomorrow. It wouldn't be awesome for me, but it'd be manageable.

[–] RIotingPacifist@lemmy.world 5 points 2 days ago

Management are pushing sysadmins to use AI, yet AI tools permissions models are worse than useless.

[–] danc4498@lemmy.world 3 points 2 days ago
[–] homesweethomeMrL@lemmy.world 2 points 2 days ago

PocketOS states that as well.