Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)F
Posts
2
Comments
96
Joined
3 yr. ago

  • I took a brief look at one and it seems they may have learnt their lesson from the first time around, unfortunately.

  • Pick Up That Can

  • Apparently he's a Quaker, so maybe that's how the euthanasia stance can pass muster. But Quakerism might also make even less sense with his views on race? I don't know enough about the reality of Quakerism to say.

    Also, looks like Harris also deliberately side-stepped the dinner bait but I don't know how much of that was because of Chomsky's presence. Epstein tried again a year later without the Chomsky attendee name-drop, but Harris might have just not replied.

    At least there are no surprises with Dawkins, even his sleazy friend Brockman seemingly finds him tiring

    Glib jibes aside, I haven't been able to bring myself to look at many of the docs that aren't just quasi-celeb emails, the few I did see were far too much for me. I'm horrified at nearly everyone from all ideological stances on a number of different levels I never considered. I can only hope the remaining victims someday are able to find some peace, and some kind of huge systemic reform can come from this. What a vile world we live in.

  • Commenting "This raises important questions worth discussing. The details matter here and I think we need more transparency around how decisions like this get made." on an illustration of a hedgehog on a bicycle pulling baby hedgehogs in an egg carton AND on a post about using bullet measurements to help Americans visualize 1cm? Slop.

  • The CIA wrote a document in 1990 "Yugoslavia transformed". It briefly discusses increasing repression of Albanian Kosovars advocating autonomy, and sporadic ethnic conflict, but at that point it even considered military force involvement in secession attempts unlikely. If there were a massive human rights abuse situation at the time of Laber's article, also 1990, how did the CIA miss that?

  • It's overall a good write up. I think for me there's are some pieces missing though, which I would love to see further explored, although it is not possible yet to fully do so. For example:

    • Why are Jeri Laber's files on Yugoslavia between 1980-1984 restricted until 2060?
    • Why is her correspondence with the dept of state between 84 and 87 restricted until 2060?
    • Why are there almost no files listed at all from HRW between 1984 and 1990 for Yugoslavia?
    • Why did she go there in 1988?
    • Why are Ivana Nizich's 1991 files on Yugoslavia and the World Bank/IMF information restricted until 2067?
    • Why are Amnesty International docs by HRW also restricted?

    If it weren't for the now releases CIA files from the 80s and 90s, you'd think the area had simply disappeared entirely.

  • Who needs pure AI model collapse when you can have journalists give it a more human touch? I caught this snippet from the Australian ABC about the latest Epstein files drop

    The Google AI summary does indeed highlight Boris Nikolić the fashion designer if you search for only that name. But I'm assuming this journalist was using ChatGPT, because if you see the Google summary, it very prominently lists his death in 2008. And it's surprisingly correct! A successful scraping of Wikipedia by Gemini, amazing.

    But the Epstein email was sent in 2016.

    Dors the journalist perhaps think it more likely is the Boris Nikolić who is the biotech VC, former advisor for Bill Gates and named in Epstein's will as the "successor executor"? Info literally all in the third Google result, even in the woeful state of modern Google. Pushed past the fold by the AI feature about the wrong guy, but not exactly buried enough for a journalist to have any excuse.

  • Out of curiosity, what sort of customizations are you doing with it? I'm just a bit surprised that docker rebuild or a non-trivial fork would be needed, so I'm assuming they're pretty big changes.

  • I'm not a spice merchant, and most exploits rarely involve a single step. This screenshot is just a system design red flag.

    You're free to examine the repo yourself and find your own spice, my 5 min look tells me that piefed needs to expend a significant amount of effort on infosec to maintain user trust in the longer term.

  • As others have pointed out, it does still require (with some caveats about the infra setup) the user to be an admin. But if someone manages to get in to the interface, or another person is granted admin access who shouldn't have been, it makes it more risky than it needs to be. It also for me is a design choice that indicates other parts of the system should be carefully examined for how they're handling and sanitizing input.

  • Any webserver you browse is possibly capable of ACE depending on the implementation. When it starts to hold user data is when that starts to be a big concern. The more points of entry, the more that needs to be secured.

    I don't have any experience with piefed admin, or any opinion on piefed itself, just too many years of web admin experience. And as soon as I see intentionally made doors that allow code input, I start to worry about how much experience the devs who made it have with web admin.

  • Well, just copy and pasted rather than written. I would have hoped that infra read-level permission, infra write-level permission and admin interface permissions were all separate to begin with, even if the person who spun up the instance obviously has all three.

    You do need a level of trust in an admin, of course, but wide open text boxes for putting in code are a questionable system design choice, in my opinion. It adds an extra point of possible entry that then relies on the security of the overall admin interface instead of limiting it to what should require highest level infra admin permissions to access. And if it is something that would be limited to someone who has those, then what is the actual utility of having a textarea for it in the first place?

  • I get that many people are concerned about is scoring systems, but it seems a lot more worrying to me that it allows arbitrary code execution.

  • Excellent job on taking care of Lester. I can tell he's in caring hands and I hope you both have many wonderful (and URTI-free, fingers crossed for that) years together.

    I'd say never feel silly about a vet visit. Even if why you booked it is no longer an issue (which is definitely something that can and does happen for any pet owner), you can always use the time to pick their brains, learn new things and build a good relationship with them.

  • But... Where are 102 and 103 then? Are they on a separate street?

    Oh wait I get it now. It's a weird choice but ok. Where I live we just subdivide by adding letters. E.g 20 subdivide and becomes 20 and 20A.

  • That depends on if you consider the "inferior" to be human, if they're even still alive after the eugenics part.

  • In retrospect the word quarterlies is what I should have chosen for accuracy, but I'm glad I didn't purely because I wouldn't have then had your vivid hog simile.

  • Amazon's latest round of 16k layoffs for AWS was called "Project Dawn" internally, and the public line is that the layoffs are because of increased AI use. AI has become useful, but as a way to conceal business failure. They're not cutting jobs because their financials are in the shitter, oh no, it's because they're just too amazing at being efficient. So efficient they sent the corporate fake condolences email before informing the people they're firing, referencing a blog post they hadn't yet published.

    It's Schrodinger's Success. You can neither prove nor disprove the effects of AI on the decision, or if the layoffs are an indication of good management or fundamental mismanagement. And the media buys into it with headlines like "Amazon axes 16,000 jobs as it pushes AI and efficiency" that are distinctly ambivalent on how 16k people could possibly have been redundant in a tech company that's supposed to be a beacon of automation.