[–] 1 point 1 hour ago

I got into it with another sys admin on shifting port numbers. "Security through obscurity is not security!" to which I responded "Obscurity cuts out most of the bots" (therefore easier to spot real threats).

Eventually we just went the secret squirrel bastion route.

  • source
  • parent
  • context
  • [–] 8 points 3 hours ago (1 child)

    Marjy skipped taking the next batch of Kool aid and realized that they were driving full speed to a cliff. Warning the others only upset the flock.

    My bet is in a few years she'll slink on back to office claiming to be one of the "good" Republicans.

  • source
  • parent
  • context
  • [–] 16 points 1 day ago (2 children)

    practically need to rotate logs every hour if you foolishly leave ssh open on a open network. usually a bastion with ssh listening to port 34000 or such is a good first step.

    that said the conditions for this exploit are fascinating. no pam, shadow password set to *, using a alternative to glibc. The sacrifices to be more efficient feel on par with replacing a tank's armor with paper mache and hope.

  • source
  • [–] 1 point 1 week ago

    One child policy has done a number on China. Even more sinister example is Ethyl gas or gasoline with lead. that went for almost a century. Was also just wondering what ancient cities were like when they dumped their waste out on the street.

    It is absolutely astounding our species has survived as long as it has.

  • source
  • parent
  • context
  • [–] 5 points 1 week ago (1 child)

    Does this include FEMA staff as well? My partner works for that agency and they've been bleeding staff for years now, can't imagine getting dragged into this chaos not speeding that up.

  • source
  • [–] 1 point 2 weeks ago (1 child)

    A mixture of electric and natural gas. Natural gas to bring the whole house up to ~65F (~18.3c) and then I have electric radiators to make only the areas I am using comfortable.

    That usually trends $120~$150/month in natural gas or around $1000/year. Financing a heat pump + installation could be $170 to $200 month in payments for 15 years.

    I know the price of natural gas is going to sky rocket relatively soon but as Terry Pratchett's boot theory illustrates, it is expensive being poor.

  • source
  • parent
  • context
  • [–] 9 points 3 weeks ago* (last edited 3 weeks ago) (9 children)

    I would love to get one but to retrofit my house would cost about $20,000 which I currently don't have laying around with me.

    My PV system provides an immediate and on going benefit which is why I could finance part of that. Unfortunately a heat pump is only useful for me about 8 months a year and will never "pay for itself"

  • source
  • [–] 10 points 3 weeks ago

    It just means mask has slipped.

    White phosphorus and cluster bombs are still used by the US.

    Meanwhile the list of fuckery is so long it's hard to pick a starting point.

  • source
  • [–] 1 point 1 month ago

    Nixon died an old man in his bed.

    Practically everyone in government involved with the Iran Contra affair are free citizens or lived most of their lives in freedom.

    The Jan6 crowd battered and tortured multiple police officers protecting the capital. I believe on committed suicide later and another died of health conditions strongly correlated to their abuse.

    Imprisonment was really effective as a means for punishing those responsible \s

    Now depending on how things go, if the false flag national emergency is not stopped prior to the midterms, all of the people raping women and children in the ICE detention facilities in Florida & New Orleans, murdering people for the crime of existing at the wrong time & place, and who knows what else will go unpunished.

    Imprisonment as a means to an end doesn't work.

  • source
  • parent
  • context
  •  

    2019 VW petrol Golf R w/39K miles

    CEL = Check Engine Light

    tl;dr Started with a car with no CEL. After oil change, CEL. Another shop discovers it is due to an electrical connection to a part of my turbo assembly not being securely plugged in. Do I tell the garage owners?

    Prior to drop off no CEL, ~3 hours later, after they have closed, I turn on the car and immediately get a CEL.

    Verified I didn't have a lake of expensive oil under my car and the oil was in fact in the engine. My road side emergency bargain basement odb2 reader wasn't showing any codes and trying to clear/reset did nothing.

    Garage responded the next morning and explains they forgot to clear something in the VW computer and its just a 2 second fix. Unfortunately I am gone for the next month. The car is parked the entire time and no one drives it.

    Month and change later, I finally get home, get the car to the garage, and they say "Oh actually it's P033, your waste gate actuator." As someone who has owned more than one VW, I am unfortunately familiar with that code. Except this car only has 39K miles and those are NOT redlining on the track miles.

    So I take my car to another garage and repeat verbatim the above. I told them to treat this like a crime scene and take their time. Five minutes into the diagnostics check they discovered the electrical connector to the DV (diverter valve, basically the uncool ninja alternative to a blow off valve) wasn't properly/completely plugged in. After reseating that connector the CEL didn't come back. I never felt any turbo lag nor heard or felt anything to suggest the DV wasn't working, I am guessing the connector was just loose enough to freak out the ECM.

    This is the problem. I have used that first garage for over 10 years and got on well with the owners. Unfortunately a new guy to the company is the only person who touched the car from oil change onward. I've gone over my maintenance records and I just don't see why anyone was messing with the DV or anything over there on my engine bay in over two years. Also I have a hard time imagining the connector magically jiggling loose in the hour or so after the new guy parked it outside for pickup.

    I don't have the energy to scooby doo this shit and piss the ECM off so it throws the same code and then take it to them to see what they would do. So I will never know.

    Do I tell the garage owners? I don't see how there is anyway to make this right that I am comfortable trusting them with my car.

    What would you do?

     

    I watched a deep dive video into the weird and wonderful world of AI slop memes which revealed a plot/campaign to legitimize AI "art"

    Video source but I am going to summarize to the best of my ability:
    "The Bizarre Rise of Tung Tung Tung Sahur (And the Lawsuit Nobody Expected)" https://youtu.be/6BdRjuaGlJ0 (~22 minutes). Side note: I think Frankie Fey does an amazing job with researching and presenting these bizarre insight into what the "kids" are up to these days.

    tl;dw
    Gen Alpha and Gen Z use AI to make what they thought are public domain memes.

    A RoBlox game called "Steal a brainrot" created by "SpyderSammy" used these memes in a Roblox game that prints money for the developer (Millions of USD per Month).

    September 2025, SpyderSammy removed a very popular AI slop meme character called TTT (initials, name is much bigger) because of "Mementum Lab" demanding compensation. Mementum lab is trying to seize control of public domain memes - https://www.mementumlab.com/

    Lots of drama ensues along with an escalating legal battle.

    April 2026 the the AI slop meme character TTT shows up in Fortnite as an skin (think of it like an aesthetic costume for you player character) with a one time approximate purchase cost of 10~12 USD.

    https://fortnite.gg/cosmetics?id=22470

    Fortnite is a game created by Epic Games which is a massive money printing machine masquerading as a game. To be fair it has an almost cult like following and is supposedly a lot of fun. https://en.wikipedia.org/wiki/Fortnite

    Epic Games is owned by Tim Sweeney - https://en.wikipedia.org/wiki/Tim_Sweeney

    In my opinion, Tim Sweeney is a greedy and disingenuous asshole billionaire.

    https://www.tomshardware.com/tech-industry/artificial-intelligence/epic-boss-tim-sweeney-blasts-steam-for-putting-ai-tags-on-games-says-move-is-irresponsible-of-valve

    Tim Sweeney also owns the Unreal Engine (a massively popular and ubiquitous tool for making games that is also a money printer).

    Put it all together. MemetumLabs is trying to turn AI slop into property with a monetary value. They failed to extract money from the Roblox meme game made by SypderSammy LLC. Tim Sweeney via his game Fortnite has swooped in to help try and make MemetumLab's more legitimate.

    Additionally there are substantial rumors that the next version of Unreal Engine (version 6) is going to be packed with AI slop generating "features".

    Not relevant to this post, Fortnite is why Wall Street has murdered a big chunk of the games industry as they try to make their own perpetual money printing machine.

    Thank you for attending my Ted Talk, please exit through the Gift shop.

     

    Closest I've seen to this being done was the movie Black Hawk Down. Meanwhile can you imagine everyone screaming at each other in the John Wick films? Other movies like Aliens would have been a whole different level of horrifying as the sound fades away until its just the sound of the actor's muffled heart beat and their cluelessness that the xenomorph is crawling up behind them.

     

    disclaimer: This isn't an issue specific to the company involved, more than likely they were fooled into believing AI assisted customer service would work, just like everyone else.

    A centaur is the idea of a human directing the AI horse. A reverse centaur is the AI being carried by the human, telling them where to go.

    tl;dr It doesn't work and even if it could, everyone is definitely using it wrong. AI has created an even worse bad solution to a difficult problem. LLM's and chatbots are replacing critical thought and empowered employees (if there were any) with Douglas Adam idiots boxes directing people unable to point out the machine isn't right. Yeah.....

    I wanted to change my email address with a prepared meal service called CookUnity. Going to settings I didn't find any option to do so.

    After emailing support, "To change your email address you need to cancel your account and create a new one."

    Replying back "Are you absolutely sure? Also does anyone over there realize how unhinged (this is)?"

    AI responds back in the affirmative that I need to cancel my account and create a new one.

    One last question "Before I do this, I just want to be sure I won't be punished for doing this."

    This time a human proceeded to phone bomb me with repeated call after call until I could answer. Their accent and command of the English language suggested they were some unfortunate soul in a call center somewhere in god knows where. My brief conversation gave me some idea of how the "Customer Experience" is implemented.

    Unfortunately it turns out later, with no surprise, I was indeed punished for creating a new account.

    To be clear, this is not some Greek tragedy solely inflicted upon me but is definitely happening everywhere with everything and it has been like this for sometime, but now these AI companies have added themselves (and their service fees) to an already broken system.

    I speculate the process is like: Alice has a problem, she contacts customer support. An LLM processes her message, generates a response as per the policy (or lack thereof) in the system prompt, and then Maria the reverse-centaur located who knows where on Earth does a quick QA and maybe some minor adjustments. Maria's income is very likely weighted by some inane metric like closed tickets which actually doesn't work for promoting quality and instead just pushes quantity.

    The response Alice gets back may or may not be helpful. If the issue was Alice not understanding how to use or not knowing how to achieve something with the service, maybe the LLM was able to rephrase things so it makes sense. Alternatively if the problem is a policy conflict or an edge case problem, the LLM is going to give a beautifully written, magnificently marked up, ultimately useless response. In this case Maria may not be able to escalate the issue because perhaps that is another inane metric? How many tickets did she escalate? This feels a little insidious as this unfortunate reverse centaur can't actually do anything but get in trouble with their metrics or click Approve.

    Beyond my lament that AI sucks, it is worth noting that all of these companies are probably infected with these AI services so deeply that when the prices go up, the companies won't be able to escape because it will cost real money now for the possibility of saving money later. That's way too risky!

     

    I really like these studios and their games, Keen and CD Projekt, but both have blanket bans in their licensing. I mention them only because I am familiar with them and they are not unique.

    From CDPR

    [No technical misuse] Don’t modify, merge, distribute, translate, reverse engineer, or attempt to obtain or use source code of, decompile, or disassemble our Games and/or Services, unless we expressly allow that in this Agreement or it is allowed by the applicable law.

    [No hacking or cheating] Don’t create, use, make available and/or distribute cheats. By cheats we mean things like exploits, automation software, robots, bots, hacks, spiders, spyware, scripts, trainers, extraction tools, or other software that interact with or affect our Games and/or Services in any way (including any unauthorised third party programs that collect information about our Games and/or Services by reading areas of memory used by our Games and/or Services to store information).

    As a modder, I have to partially decompile the executable to see what is going on and how to make adjustments. Often its a tree among the forest, laser focus thing where I am stepping along in an attached debugger. Alternatively Cyberpunk 2077 has mods designed to support other mods (eg CyberEngine) which is hooked into at least a third of the game logic.

    While I am not afraid of being financially ruined by the current operators of these studios, things change and sometimes not for the best.

    There has to be a better alternative where Game studios don't hold the legal sword of diamocles over a modder.

    view more: next ›