KeepFlying

joined 2 years ago
[–] KeepFlying@lemmy.world 1 points 7 months ago

If you're hosting static content it's a lot easier. If you've only opened ports 80/443 and don't have any kind of user input or scripting you're (probably) fine. Most likely you'd get DOS'd before someone would hack you. Assuming you're keeping your software up to date.

In general though limit what is exposed to the Internet. In this case don't open any extra ports.

If you want to be more secure (likely overkill for most threat models), treat your webserver like it's always infected. Don't do anything else important on it, and keep it segmented from your other computers with firewall rules.

Realistically no one is going to bother to hack you unless you're posting shit that makes people angry. You're mostly going to get prodded by bots looking for known vulnerabilities in Apache or the like, and you can stay protected with frequent updates.

If you're hosting something dynamic or with code like PHP or something with user accounts and the like, then it's slightly more complicated.

[–] KeepFlying@lemmy.world 0 points 7 months ago

That argument only works to explain and support the existence of millionaires and multimillionaires. With millions of dollars you can hire out most menial tasks easily. Especially if you're still living in a reasonable home.

It falls apart when you reach excessive levels of wealth. Your first few million buys you a lot of time to specialize, but your $101st million buys you less. Even moreso when you get to billions.

[–] KeepFlying@lemmy.world 6 points 7 months ago (1 children)

On top of everything else people mentioned, it's so profoundly stupid to me that AI is being pushed to take my summary of a message and turn it into an email, only for AI to then take those emails and spit out a summary again.

At that point just let me ditch the formality and send over the summary in the first place.

But more generally, I don't have an issue with "AI" just generative AI. And I have a huge issue with it being touted as this Oracle of knowledge when it isn't. It's dangerous to view it that way. Right now we're "okay" at differentiating real information from hallucinations, but so many people aren't and it will just get worse as people get complacent and AI gets better at hiding.

Part of this is the natural evolution of techology and I'm sure the situation will improve, but it's being pushed so hard in the meantime and making the problem worse.

The first Chat GPT models were kept private for being too dangerous, and they weren't even as "good" as the modern ones. I wish we could go back to those days.

[–] KeepFlying@lemmy.world 2 points 7 months ago

I have a Google container and a Facebook container to somewhat segment those accounts from everything else (obviously they're both sophisticated enough that it doesn't limit tracking much. But it's something).

It does make Google login a bit awkward if I try to log in from a nom-google container though unfortunately. I usually have to reopen in the Google one.

And I have one for my work accounts when I need to check work email from my personal PC. I don't want to accidentally log in to that account casually.

[–] KeepFlying@lemmy.world 1 points 7 months ago

Yeah.

There's always a chance they like/need you enough to give you a heads up on the test so you can have a chance to pass it.

[–] KeepFlying@lemmy.world 11 points 11 months ago

You've just opened a wikipedia rabbit hole. Wish me luck I may never return.

[–] KeepFlying@lemmy.world 4 points 11 months ago (1 children)

Okay yeah that makes sense. So that rules out founding cults that use the information as their holy book. But it could allow for "keep it secret, keep it safe" cults where there's a holy object that they know is important but don't know contains the data. (But it can't be SO interesting that people try to inspect and understand it and inadvertently discover the data).

I wonder if you could rely on your buddy in the future knowing what your favorite password is and encrypting the data somehow.

Does it need to be discovered ASAP in that 20 year gap or can it be later on in that period once they know that you specifically are selected for the mission?

[–] KeepFlying@lemmy.world 10 points 11 months ago (4 children)

I know wrong community but, what year did early civilizations think it was? Was their year zero our 10,000BC? What was their "the big thing that started the calendar"?

[–] KeepFlying@lemmy.world 9 points 11 months ago (3 children)

Does it only need to be discovered by the people 100 years in the future, or can people before that be aware of it?

Because this reminds me of the nuclear waste protection research. You found a religion that fears glowing cats....

[–] KeepFlying@lemmy.world 5 points 11 months ago (1 children)

I use it to (semi) automate bit repetitive tasks. Like adding a bulk set of getters, generating string maps to my types, adding handlers for each enum type, etc. Basic stuff, but nice to save keystrokes (it's all auto complete).

Anything more complex though and I spend more time debugging than I saved. It's hallucinated believable API calls way too often and wasted too much of my time.

[–] KeepFlying@lemmy.world 2 points 11 months ago

I run Debian on most of my systems and run all of my services in docker (with rare exceptions for node_exporter or stable core tools). My base systems get automatic security upgrades, and then I'll manually check in every few weeks whenever I feel like it.

My services in docker are version locked to a specific major version (when there's a tag available) so I can usually re-pull to get minor version updates freely without breaking issues. My few more finnickey services get manual upgrades from me every 6 months or so only.

I usually stick to an OS version for as long as I can, and to that aim I stick to LTS versions with long support windows.

4 major versions in 12mo is...a lot. Especially if those include breaking changes for you. Yikes

[–] KeepFlying@lemmy.world 7 points 1 year ago (1 children)

Looking at how bad our current system is, there's clearly no need to prevent the videos from getting out because the officer can get away with it despite that.

And even if the officer doesn't, the department can just scapegoat them and just keep doing the same things.

All the more reason to not waste a 0-day or risk the knowledge of a backdoor getting out.

view more: next ›