Off-and-on trying out an account over at @[email protected] due to scraping bots bogging down lemmy.today to the point of near-unusability.

  • 61 Posts
  • 1.7K Comments
Joined 3 years ago
cake
Cake day: October 4th, 2023

help-circle




  • tal@lemmy.todaytoWorld News@lemmy.worldFrench spy service drops Palantir
    link
    fedilink
    English
    arrow-up
    6
    arrow-down
    1
    ·
    edit-2
    2 days ago

    I don’t really have any personal intrinsic issues with Palantir, but every time I see it, it still boggles my mind that they chose that name. Like, from a branding standpoint, just why?

    https://www.youtube.com/watch?v=TBMiyEzOJmI&t=110

    Gandalf: “You know this?”

    Saruman: “I have seen it.”

    Gandalf: “A palantír is a dangerous tool, Saruman.”

    Saruman: “Why? Why should we fear to use it?”

    Gandalf: “They are not all accounted for, the lost seeing stones. We do not know who else may be watching!” He throws a sheet over the palantír, catching a momentary glimpse of Sauron’s eye and recoiling.

    https://en.wikipedia.org/wiki/Palantír

    The stones were an unreliable guide to action, since what was not shown could be more important than what was selectively presented. A risk lay in the fact that users with sufficient power could choose what to show and what to conceal to other stones: in The Lord of the Rings, a palantír has fallen into the Enemy’s hands, making the usefulness of all other existing stones questionable.

    1000009382

    I mean, yes, I like Tolkien too, but for fuck’s sake. Just pick some sort of suitably-bland name that, oh, alludes to “insight” or “data” or “analytics”, like “Deepsight” or something like that.






  • A federal judge in Mississippi has punished all four lawyers on opposing sides in a civil trial and canceled the proceedings after some of them, relying on artificial intelligence, cited fake legal cases in court filings.

    https://www.nytimes.com/2026/06/09/us/ai-lawyers-sanctioned-mississippi.html

    In an order filed on Monday, Sharion Aycock, a senior U.S. District Court judge, wrote that the four lawyers had violated Rule 11 of the Federal Rules of Civil Procedure when they certified that the information in their filings was factual.

    I think one concerning thing is that this is the easiest thing to check. I mean, at some point, I assume that someone is going to rig something up to LexisNexis to actually validate the existence of cited cases, because that’s pretty simple and mechanical. Heck, even those lawyers, even if they don’t have any tech people at their fingertips, could have had a paralegal check citations or something. It really shouldn’t be that fundamentally hard for a lawyer to avoid getting in trouble for this specific issue, even if they generated the text with an LLM.

    My bigger concern is that if lawyers are willing to put stuff like this out, they’re presumably also willing to put out information that hasn’t been checked where the errors are subtler and it’s harder to find erroneous material. In the case of citing nonexistent cases, it’s really easy to say “the lawyer clearly didn’t even look at this”, because it’s hard to make that kind of error if you have read over it. This is, once highlighted, flagrant and obvious. But…there’s potential for subtler errors, where it’s harder to tell whether the lawyer did at least try to review the material and just made a basic error, and thus it’s harder to impose punishments for it.


  • Magewell Pro Capture card

    I’ve been kind of shifting towards use of USB devices over internal cards.

    All of the USB devices that I have still can be connected to computers. Ditto for DE-9 serial ports, though I might need a USB adapter.

    But I’ve seen ISA->PCI/AGP->PCIe obsolete a lot of old hardware that I’ve had sitting around, and that’s just on the PC. That includes my video capture hardware.





  • I’d have some real questions about rollover risk on these. Three-wheel ATVs have a bad history and were banned in the US back in the 1980s — they’re less stable than quads and heavy enough to incur severe crush injuries in a rollover — and I’d expect that the batteries make these even heavier.

    And these aren’t just personal vehicles, like the ATVs, but being used to run a commercial service. The government probably has a heightened interest in safety of passengers of commercial service.

    Lives are cheaper in some places in the world, and maybe that’s not a luxury that that Zimbabwe can afford, if it needs inexpensive transport. But if there is one kind of vehicle that I’d be dubious about, it’d be something like these.


  • The attack targeted a wide range of sensitive credentials typically found in developer and CI/CD environments. Aikido’s analysis shows the malware attempted to collect GitHub Actions tokens, AWS, Google Cloud, and Azure credentials, HashiCorp Vault tokens, Kubernetes service account tokens and kubeconfig files, npm and PyPI publishing tokens, SSH private keys, Docker registry credentials, GPG keys, and .env files.

    This doesn’t solve the problem of people storing credentials where credential-stealers can steal them, but it’s not a bad idea to periodically invalidate your credentials and generate new ones, even if you don’t know that they’ve been compromised, just on the off change that someone has grabbed yours and has them stored up, ready to use them at some point in the future.

    That’s especially true if you develop or package software (and thus users of your software trust you to keep their systems secure) or have administrator access to any networks or multiuser systems (and thus your users trust you to keep their data secure).

    I’d personally rather like to see external hardware keystores used where possible. YubiKey-type things aren’t perfect — they don’t have a display, so you can’t use trusted hardware to visually validate whatever you’re signing — but at least they’re relatively cheap and keep someone who compromises a computer from grabbing credentials.



  • “They really know what they need,” and are putting “serious effort” into acquiring advanced machine tools, factory equipment, research and dual-use technology, said Christoffer Wedelin, deputy head of operations at the Swedish Security Service.

    Russia also needs sanctioned computer technology and software updates for machine tools, Martelius said.


    Even more important to the KGB was obtaining research data about Western technology, including integrated circuit design, computer-aided manufacturing, and, especially, operating system software that was under U.S. export control. They offered 250,000 Deutschmarks for copies of Digital Equipment’s VMS operating system.

    Peter Carl and Dirk Brezinski apparently met with the KGB a dozen times, filling many of their requests: source code to the Unix operating system, designs for high-speed gallium-arsenide integrated circuits, and computer programs used to engineer computer memory chips.

    Alone, the source code to Unix isn’t worth $130,000. Chip designs? Perhaps. But a sophisticated computer design program . . . well, maybe the KGB did get its money’s worth.

    The Cuckoo’s Egg, discussing the situation in 1986

    That was 40 years back and when the Soviet Union was still around. Some things haven’t changed all that much.



  • For passionate enthusiasts, Ferraris are not merely cars but works of art…the sound of the engine revving evokes a sensation comparable to listening to the music of Giuseppe Verdi or Giacomo Puccini.

    “I agree with him – the horse needs to be removed,” said Barone, adding that his main gripe was its lack of sound. “How can you have a Ferrari without any vroom?”

    I suppose that someone could make a device that polls OBD-II for the current RPM and feeds more synthetic ICE engine sound into the sound system.

    EDIT: Hell, if you’re freed from the constraints of an actual ICE engine, there’s probably some sort of sound that’s more psychologically-optimized to make the guy happy than whatever an actual engine puts out.