Mikina

joined 2 years ago
[–] Mikina@programming.dev 80 points 2 weeks ago* (last edited 2 weeks ago) (2 children)

So this is the thing I'll eventually end up in jail for bypassing. I coul've sworn it would be drugs.

Oh well.

[–] Mikina@programming.dev 1 points 1 month ago (1 children)

The algorithm is probably made to maximize the time you spend on the platform, and is really good at it. (I mean, just look how good are ML algorithms on text -> picture, and add to it that the algorithm that does your info -> engagement has decades of data and training on billions of people).

My theory is that it has misaligned, because it turned out that radicalizing people into right-wing bullshit will glue them to the social network very effectively, so it just started to do that. It makes sense - once you start spewing right-wing bullshit, it will probably isolate you from your IRL friends, you will have an echo chamber on the social network, and it is made to sound like some kind of deep truth no one else knows.

You getting left-wing content might be simply because it would not be efficient to try to convert you, so the algorithm is trying something else that's more effective on the (minority?) of people like you.

[–] Mikina@programming.dev 10 points 1 month ago* (last edited 1 month ago) (2 children)

Remember that (I think) C++ race condition in RTG software, that killed people with something like 0.0001% probability and it was a huge deal and a reason to immediately retire the devices (or maybe just fix the bug, the point is that in medical, it's super important to have a high success chance)?

I'm sure AI doing diagnosis will be able to get to a higher success chance, lol.

EDIT: From a quick search, it looks like mis-diagnosis chance in doctors is around 10%. I still don't think AI can do better.

[–] Mikina@programming.dev 15 points 1 month ago (1 children)

I highly recommend looking into Matrix Ansible Deploy, has an amazing documentation and actually works robustly. It will make the whole process of hosting it way easier, I only needed to change like 5 config values, give Ansible the SSH key for my server, and then basically run "just setup-all" from a Ansible docker.

[–] Mikina@programming.dev 8 points 1 month ago

It's extremely easy, the Matrix ansible deploy project is very simple to use (with at least basic tech literacy), is very well documented and as far as I've seen in the past few years of using it do deploy and update my Matrix instance - it's also very robust. I haven't seen it fail a single time, which tends to be a problem with larger Docker/Ansible projects.

I'm paying 7$ a month for a cheap server on Hetzner, you also need a domain name, and the whole setup took like an hour.

[–] Mikina@programming.dev 7 points 1 month ago

I recommend transfering to Cloudfare, since they have guaranteed wholesale price (no added fees, and only what the tld owner and ICANN asks), so they should be cheapest (since anything less is selling at a loss for the registrar, at least ifI understand right).

Namecheap has started overcharging me like 20+$ on a renewal compared to CF. So, transfering after a first year (which is where registrars like Namecheap take a loss and give you a discount) is probably the cheapest way how to go about it.

[–] Mikina@programming.dev 6 points 1 month ago

As far as I know, Cloudfare is the only registrar that offers you wholesale price, as in the price asked by the tld owners. So, you a registrar can't go lower, because that's what they pay for it.

But, a lot of registrars will give you first year at a heavy discount (so, at a loss), just so they can ramp up the price to wholesale + a lot extra. I got my domain for like 5$, and they then asked for 40$ for renewal, while wholesale is around 25$.

So, I just transfered to Cloudfare for the renewal. Tbh I don't remember if it was the first or second year, and what are the transfer rules, but I think it should be possible to just buy a first year at heavy discount with i.e Namecheap or something, and immediately transfer to Cloudfare for the first renewal at wholesale price.

[–] Mikina@programming.dev 8 points 2 months ago (2 children)

While there's no doubt that they have technically break the rules, just the fact that they afaik patched the few textures before this controversy (as far as I know, it's possible that it was a reaction to this?), this simply sounds like a (very succesful) PR attempt by Indie Game Awards.

There's no doubt that Clair Obscire isn't a AI slop that cheapened on artists or art with GenAI, whis is the spirit of the rules IGA has. If you don't take the rules literaly, they deserve the award. And that's IMO important.

I've never heard about IGA before this, so it worked to draw attention to them.

I'm very OK with having rules in place to reject work where you replaced artists with AI. But this is not the case.

[–] Mikina@programming.dev 66 points 3 months ago

I'd say that's because here on Lemmy, we already don't give a fuck about and wouldn't touch Chrome or Edge with a ten foot pole, but some of us trusted Mozzila, which is now starting to do dumb AI shit. And having your trust broken hurts.

Astroturfing would not be recommending LibreWolf as an alternative.

If you look into alternatives, Brave is one that's usually mentioned but there's always someone quickly posting all of the dumb shit they did.

[–] Mikina@programming.dev 2 points 4 months ago* (last edited 4 months ago)

That sounds kinda cool tbh. I'm mostly intrigued about the class system, although I've bever really looked into it.

It sounds pretty similar to Fellowship (although with an RPG part), though, and I'm loving that game.

[–] Mikina@programming.dev 3 points 4 months ago

If I'm getting back to a game with gear treadmill, I can just clean uo my inventory and start the next exoansion with a clean slate.

I have around 70% of the world cleared, several characters leveled to max, but I got through kike half of HoT and a bit of Path of Fire. I opened my full inventory that had a lot of random crafting stuff, consumables a a gew gear sets and I had no idea what's anything for, or what am I even supposed to do next. Did a few quests then gave up in trying to sort it out, since it was just too overwhelming.

I'll probably give it a try again, love thw game.

 

Hello!

I've recently stumbled upon an amazing blog about getting credentials from Bitwarden vault through DPAPI and Windows Credential Storage, and what suprised me is that any low-privileged process can just ask for all information in Credential Storage, without requiring any user input (the article discusses it in the second half, even though the first half is about abusing DA credentials), through the CredEnumerateW WinApi call.

Since that vector was pretty interresting, I tried running their PoC for listing the cred storage on my, and several colleague machines, and was surprised that every machine had domain account credentials listed in plaintext, that could be grabbed by any low-privileged process just by calling this WinAPI.

I suspected that it's because of Outlook or Teams, because I found articles from few years ago mentioning that they do get saved there. However, one colleague did not have his credentials there, even though he was using Teams and Outlook, and had his password saved.

So, how did that password get there? Why most people we tried the PoC with do have a domain password saved, but some do not? Or is it because of Windows Hello? I'd love to get some kind of solution/recommendation about how to avoid having your password, in plaintext, in such an insecure space. Or was I dumb enough to save it into Edge somwhere, and have promptly forgotten about it?

And more importantly - how this isn't a pretty severe vulnerability, and is considered "as designed" by Microsoft? The fact that any process can just ask for your credentials is mind-blowing, plus it isn't even detected by EDRs we've tried it with when discussing it with our SoC.

 

There is one argument I've seen missing in most of the de/federation discussions, that I think should be mentioned, and warrants it's own discussion.

I've seen a lot of people mentioning that defederating with Meta means we have broken the promise of Fediverse, that you can use one account to interact with whatever service you choose, and that it should be inclusive.

But I don't agree that's the main idea. There is something that's more important, and to make sure I'm not misinterpreting it, I'll just directly quote various websites about the Fediverse I've found (I was just taking top results for Fediverse on DuckDuckGo, but I did select only the parts that are the most important point for me personally). But I do concur, I was not able to find a single source of truth, and I'm not really sure how credible the resources are, so please disagree with me if it's wrong or I've chosen some no-name site that just matched my rethorics.

https://www.fediverse.to/ has the following sentence as the main hero header:

The fediverse is a collection of community-owned, ad-free, decentralised, and privacy-centric social networks.

Each fediverse instance is managed by a human admin. You can find fediverse instances dedicated to art, music, technology, culture, or politics.

Join the growing community and experience the web as it was meant to be.

Another search result is for fediverse.party, which has the following quite in https://fediverse.party/en/fediverse/ :

Fediverse (also called Fedi) has no built-in advertisements, no tricky algorithms, no one big corporation dictating the rules. Instead we have small cozy communities of like-minded people.

The page also mentions some link for knowledge about the fediverse. Some of them are only tutorials about how to join, but there's also https://joinfediverse.wiki/What_is_the_Fediverse%3F , with the following part:

How does it compare to traditional social media?

...

Morals

  • Traditional social media is neither social nor media. It is not made for you, it is made to exploit you and it is full of misleading ads and fake news.
  • This is because the aim of traditional social media is to make a whole lot of money.
  • The aim of the Fediverse is to benefit the people.
  • The aim of traditional social media is to control and steer the users.
  • The aim of the Fediverse is to empower the users to control the Fediverse.

I wasn't able to find more websites directly about the fediverse, and I did not want to quote random articles. But for completion sake, here is a list of FAQ/About sections of websites that are about the Fediverse, but don't directly support or imply the point of view I was trying to make (one that can be best summarized by the Morals in the last quite):

The split seems to be 50:50, but at least for my DuckDuckGo search results, the https://www.fediverse.to/ is the first result you find, and that one is pretty clear about what Fediverse should be. I wanted to start a discussion about what do the users here see as a main selling point of the fediverse, and whether morals and non-profit nature of the instances is important to most of the users as it is to me, or whether you'd rather have interconnectness and inclusivness.

view more: next ›