Plus, check this out. The platform says I have 12 followers but only 4 show up. Major problems over there.

I think the author was too generous, the majority of signups are bots/AI mixed with super casual side accounts. 2.2 million Brazilians sign-up in a couple days? I call bullshit. Even if that were true, they signed-up and don’t use it. Why do I believe that?

It’s because the awesome account I follow Quanta Magazine gets 20 hearts/likes/whatever and often less than 10, with 0 or 1 comment. Super weak interaction across the whole platform if you check out accounts that should be popular.

Great point, thought the same thing myself. The Athena repo works well on CachyOS for example. Thanks for the input.

I think Debian was one of the first major Linux distros to fully implement full PIE and ASLR and is probably the most robust implementation. The only downside in my mind to Debian is the target size, opportunity gain, huge. Thanks for your comment.

Whoa, the downvotes are real! I had to slice up that title text and render it to path for the 3D effect, took forever, was like 30 layers. It took forever to get it just right and replacing Mastodon with “Lemmy” was just too much work. Was that it? I don’t get it ;)

Masterful wordsmithing, I must find a place for this quote in my future writing. I’ll save and credit.

This gets a vote from me for “Best of the Internet 2024”, brilliant pacing, super braced, and with precision bluntness. I’m going to pretend the Monero remark is not even there, that’s how good it was.

Thanks for all the comments affirming my hard working planned 6 month AI honeypot endeavouring to be a threat to anything that even remotely has the possibility of becoming anti-human. It was in my capability and interest to do, so I did it. This phase may pass and we won’t have to worry, but we aren’t there yet, I believe.

I did some more digging in Perplexity on niche security but this is tangential and speculative un-like my previous evidenced analysis, but I do think I’m on to something and maybe others can help me crack it.

I wrote this nice article https://www.quadhelion.engineering/articles/freebsd-synfin.html about FreeBSD syscontrols tunables, dropping SYN FIN and it’s performance impact on webhosting and security, so I searched for that. There are many conf files out there containing this directive and performance in aggregate but I couldn’t find any specific data on a controlled test of just that tunable, so I tested it months ago.

Searched for it Perplexity:

• It gave me a contradictorily worded and badly explained answer with the correct conclusion as from two different people
• None of the sources it claimed said anything* about it’s performance trade-off
• The answers change daily
• One answer one day gave an identical fork of a gist with the authors name in comments in the second line. I went on GitHub and notified the original author. https://gist.github.com/clemensg/8828061?permalink_comment_id=5090233#gistcomment-5090233 Then I went to go back and take a screenshot I would say, maybe 5-10 minutes later and I could not recreate that gist as a source anymore. I figured it would be consistent so I didn’t need to take a screenshot right then!

The forked gist was: https://gist.github.com/gspu/ac748b77fa3c001ef3791478815f7b6a

[Contradiction over time] The impact was none, negligible, trivial, improve

[Errors] Corrected after yesterday, and in following with my comments on the web that it actually improves performance as in my months old article

1. It is not minimal -> trivial, it’s a huge decision that has definite and measurable impact on todays web stacks. This is an obvious duh moment once you realize you are changing the TCP stacks and that is hardly ever negligible, certainly never none.
2. drop_synfin is mainly mitigating fingerprinting, not DOS/DDoS, that’s a SYN flood it’s meaning, but I also tested this in my article!

Anyone feel like an experiment here in this thread and ask ChatGPT the same question for me/us?

I also just realized why I’m getting heat here, lawsuits.

I just gave legal cause that practice was not properly disclosed by Microsoft, abused by OpenAI, a legal grounds as a README.markdown containg code as being software, not speech, integral to licensed software, which is covered by said license.

If an entity does find out like me your technical writing or code is in AI from a README, they are perhaps liable?

It all started with this today:

Perplexity AI Is Lying about Their User Agent https://rknight.me/blog/perplexity-ai-is-lying-about-its-user-agent/

The comments so far aren’t real people posting how they really feel. An agenda or automata. Does that tell you I’m over the target or what?

Look my post is doing really well on the cyberescurity exchanges. So to all real developers and program managers out there:

Recommend the removal of any “primary logic” functional code examples out of your README.md, that’s it.

PSA, Here to help, Elias

Discussion Primer: From my perspective and potential millions of others, the readme is part of the software, it is delivered with the software whether zip, tar, git. Itself, Markdown is a specifiction and can be consider the document as software.

In fact README is so integral to the software you cannot run the software without it.

Conclusion: I think we all think of readme, especially ones with examples of your code in your readme, as code. I have evidence AI trains on your README even if you tell it specifally not to use readme, block readme, block markdowns, it still goes after it. Kinda scary?

I want everyone else to have the evidence I have, Science.

12 upvotes, twelve, a 6:1 ratio, for “sticking up for Canva” from GHOSTai Media

@Ghostalmedia

I’m from space!

359 Posts 3.94K Comments

Absurd bot numbers. Please don’t anyone thinks the above is a real person with a real opinion, I certainly don’t. You (“They” when I’m talking to the aware reader of this post) are a paid influencer, bot, AI, group account, etc. The internet is dead because of insanely stupid posts and accounts like this one. Every real designer I know would not touch Canva with a 10ft pole and the Affinity buyout stinks.

Go back to space!

Canva is on the traditional corp Extend, Embrace, Extinguish mission to snuff Digital Content Design that is local only and has no AI. Canva bought Affinity Design Suite, which was the reaction of the non-corp creative world to not have to Adobe Creative Cloud, may it burn.

I believe we are in the era of “the great rug pull” of consumer empowered technology, moving to corp empowered technology stack, with them in control at all levels.

[REVERSAL OF FORTUNE]

• “Please enter your public confidence score”
• …
• “Score not accepted, sending code to last lawsuit device”
• …
• “Your corporate charter cannot be found. This is an isolated, ‘one-of-a-kind occurrence’ that has never before occurred. Please try making another Business.”

When you find out you were only good because you drank the trillion dollar brand Kool-Aid.

Here is female founder’s LinkedIn background image, web search result top 20, with that thing on.

https://media.licdn.com/dms/image/D5616AQEGTRY3gObKdg/profile-displaybackgroundimage-shrink_200_800/0/1700176960650?e=2147483647&v=beta&t=GoILNFlkyeka_159L39sV2nlT57Phcz9ngiMCGm6eQ8

Demographic is…I mean was?

Here is an awkward photo of both Founders: https://images.fastcompany.net/image/upload/w_596,c_limit,q_auto:best,f_auto/wp-cms/uploads/2020/09/i-Bethany-and-Imran.jpg

Quote from the subtitle of the article

and you can’t stop it.

Don’t ever let life-deprived, perspective-bubble wearing, uncompassiontate, power hungry manipulators, “News” people, tell you what you can and cannot do. Doesn’t even pass the smell test.

My advice, if a Media Outlet tries to Groom you to think that nothing you do matters, don’t ever read it again.

Thank you for adding this, erm, maybe a bit “insider” info, as I always wondered how easy and reliable it was to map MAC to Manufacturer on mobile devices. Given what you say, the IETF tracking database could technically contain, or used as metadta, for another system to identify all device models.

Yeah, and what is that MAC generation scheme Apple/Android uses from a Security standpoint, what conditions make it regenerate and how often? How easy is it to map a “new” random MAC against a Model again when it re-enters the network and fingerprints itself again.

Lots to think about it.

I recently invented a “People First” Cybersecurity Vulnerability Scoring method and I called it CITE, Civilian Internet Threat Evaluation with many benefits over CVSS. In it, I prioritize “exploit chains” as the primary threat going forward. Low and behold, this new exploit, although iOS, possibly one of the most sophisticated attacks ever using one of the longest exploit chains ever! Proof positive!

Depending on how you define it; I define the Kaspersky diagram has 8 steps. In my system, I define steps that advance the exploit discretely as stages, so I would evaluated Triangulation to be a 4 stage exploit chain. I should tally this attack to see how it scores and make a CITE-REP(ort).

You can read about it if interested. An intersting modeling problem for me was does stages always equate to complexity? Number of exploits in the chain make it easier or harder to intrusion detect given that it was designed as a chain, maybe to prevent just that? How are stages, complexity, chains and remediation evaluted inversely?

https://www.quadhelion.engineering/articles.html