Profile

Next time someone says that "public wifi" is uniquely risky, just send them this (or the output of `traceroute`, but I digress)

Infosec Exchange

Vinoth (Mobile security) (@vinoth@infosec.exchange)

This is insane! A few researchers from UCSD and UMCP scanned bunch of satellite links, found much of the traffic is not encrypted, and went on to d...

Tomorrow's nonsense word will be: B L I M P O R P Or, for those of you in Commonwealth countries, B L I M P O U R P

"In March, for the first time, fossil fuels generated less than half the electricity in the U.S. In California, at one point on May 25th, renewables were producing a record hundred and fifty-eight per cent of the state’s power demand. Over the course of the entire day, they produced eighty-two per cent of the power in California, which, this spring, surpassed Japan to become the world’s fourth-largest economy."

The New Yorker

4.6 Billion Years On, the Sun Is Having a Moment

In the past two years, without much notice, solar power has begun to truly transform the world’s energy system.

Woke up to uBlock Origin Lite being turned off by Chrome, because uBOL increased the permissions it requests. (Chrome does this for all extensions that increase their declared permissions, and that is good.) The point of uBOL is that it needs bare-minimum, safe permissions only; but now, it was asking for full control over all web pages. You should borderline never grant that level of permission to a browser extension. But! You can fix it. Here's how

"The point of cognitive automation is NOT to enhance thinking. The point of it is to avoid thinking in the first place. That’s the job it does. You won’t notice when the censorship kicks in." — @Baldur Bjarnason

Poisoning for propaganda: rising authoritarianism makes LLMs more dangerous

Writing at the end of the world, from Hveragerði, Iceland

I don't know who needs to hear this*, but AI is not physics *I do. It's the Nobel committee

This is a deep embarrassment for the tech industry. I got into software from the starting point of linguistics. I love language, and I loved the idea of lil language boxes with blinky lights. This feeling is grief — seeing the greatest corpora in the world, polluted. 📃.md

Alex Gaynor on the intersection of memory safety and sandboxing:

The impact of memory safety on sandboxing · Alex Gaynor

The government needs to adopt modern risk management and abandon checkbox compliance. AV hugely increases the amount of soft, privileged attack surface on a system, and is rarely — if ever — engineered to modern standards. In addition, it complicates rather than eases platform security engineering (insert beer, receive war stories). There are damn good reasons modern platforms simply don't allow, or need, AV.

Ars Technica

After cybersecurity lab wouldn’t use AV software, US accuses Georgia Tech of fraud

Researchers allegedly found security protocols "burdensome."

An obviously abuse-affording feature afforded abuse in the obvious way.

Infosec Exchange

BrianKrebs (@briankrebs@infosec.exchange)

Cloudflare making headlines again, probably not the way it would prefer. From @dangoodin at Ars: A familiar debate is once again surrounding Cloud...

Time is a flat circle:

What happened to Firefox Send? | Mozilla Support

Firefox Send has been discontinued as of September 17th, 2020. Thank you for trying Firefox Send in the past.