[-] remotelove@lemmy.ca 20 points 6 days ago

Most of this is just marketing crap from Anthropic.

Finding vulnerabilities in code and generating complex, multistep exploits with publicly available models is possible now. This biggest hurdles now is setting correct context and actually knowing what to look for. Any "guardrails" for this behavior are easily bypassed by framing the detection and exploit generation as a valid dev style question in the most difficult of situations.

They likely just trained a model without guardrails in this case.

What they are doing here is over-hyping a problem and framing it like they are the only ones with a solution. LLM security issues are more in-focus now that companies have dumped a ton of resources into building AI systems they don't really understand.

[-] remotelove@lemmy.ca 1 points 6 days ago* (last edited 6 days ago)

Environmental impacts aside for a sec, that would be cool if Taiwan dropped a fab up in Canadia. Fortunately/Unfortunately, I am not sure if a fab is compatible with Canada, it's climate or geo formations. Likely not.

Such a double-edged sword. There is a bunch of suck that comes attached to a fab, but from an economic and technology perspective it would be awesome.

(10/10, would rather see a fab managed somewhat responsibly in Canada rather than here in the US. I have no proof to go with that statement, but it seems logical.)

10
submitted 4 months ago by remotelove@lemmy.ca to c/webdev@programming.dev

My background: Long time IT security engineer here that can code when I need. For dev experience, I have worked with various languages over the years like assembly, C/C++, js, typescript, PERL, python, etc. When needed, I can hack out a specialized tool but I am absolutely not a professional developer.

My ask: I just want a simple web framework that I don't need to think about too much. There are a few ideas I have regarding security analyst workflow in a SIEM-type of environment and need a way to code simple tools as basic snap-ins to a central analysis console.

The ELK stack serves a inspiration (specifically Kibana). However, there is so much more I want to build into an security specific analysis console and building it one snap-in at a time seems manageable over time.

What is the current flavor of the day regarding Web app dev frameworks that might function how I want? What frameworks would be compatible with a broad audience over a long period of time? (I never liked open source applications that use super niche libraries or frameworks that become obsolete and stale after a few months.)

I hope I was able to describe clearly enough what I am looking for. I would google around for ideas, but I simply don't know the correct questions to ask about this kind of thing until I get more up-to-speed.

13
I ran a mile. (lemmy.ca)
submitted 6 months ago by remotelove@lemmy.ca to c/fitness@lemmy.world

It's been roughly 3 months since I was diagnosed with sky-high blood pressure and renal artery stenosis. I also spent a night in the ICU after a false alarm for a stroke. (I was on a super strong blood pressure med for the night and it required continuous supervision.)

Since then, I started taking walks. At first it was a quarter of a mile, then gradually pushed up to 5-6 miles, every day. Sometimes even up to 8-10 miles if time allowed.

Jogging started slow, as I could only handle about 1/8 mile at a time. [Insert knee strain injury here]. I worked up to 1/4 mile run + 1/4 mile walk for as many reps as I could handle for my daily routine.

Rucking once or twice a week was added and am almost at 40lbs of weight. (It hurts, but has taught me pain management.)

Sprints once a week for 10 seconds for about 5-8 reps somehow worked itself in to the routine. (Dunno where that came from.)

Finally this evening, I ran a full continuous mile and celebrated with a round of sprints after that.

I am 46 and hadn't ran a full mile in over 20 years. 3 months ago I thought I was going to die walking up a hill. Walking one solid mile was a huge milestone for me not so long ago.

I guess the point of this post is just a checkpoint and a reminder to myself that things are actually getting better and there are more milestones to reach.

Cheers.

1
submitted 7 months ago by remotelove@lemmy.ca to c/cars@lemmy.world

Just a quick post for Internet longevity. (There wasn't a dedicated Honda community I could find on Lemmy and fuck Reddit, so here I am.)

From what I could find online, some Honda and Acura owners will get stuck with a TT06 (or TT04) error when the system attempts to update itself. I bought my '23 Accord new and have been plagued with this for the last two years. This may affect other '23 models, but I cannot confirm this by just reading through rando Honda forums.

The first service bulletin with a fix, that doesn't work, is here for Accords: https://static.nhtsa.gov/odi/tsbs/2023/MC-10237040-0001.pdf The error will return after another update is available as it did for me. (Simply doing a TCU reset doesn't fix the issue.)

The Honda service tech will need to contact Honda and force an update override to get the latest TCU updates installed. (While I am not a Honda tech, I am a nerd. There was an off-by-one issue with time synchronization which I know can cause all kinds of issues with various flavors of hardware and software update systems.)

I had to call Honda and open a case with them directly, have them contact the service manager directly so they could get updated service instructions. (Weird.)

TCU updates that were installed for my Accord that seems to have fixed the issue:

Cheers! I was just doing a brain-dump while this was still fresh in my mind and the firmware screenshots were still at the top of my photo list.

My apologies for a somewhat irrelevant post in this community, but cars.

6
submitted 7 months ago by remotelove@lemmy.ca to c/fitness@lemmy.world

tl;dr: looking for a moderately intense upper body workout that will impact heart rate the most.

I am a "new" runner again after not going out of my way to exercise for the last 20 years or so. My blood pressure had gotten insane (resting rate was clocked at +180/+120 at a Dr. checkup earlier this year.) so I decided to take action.

For the past couple of months, I have been working my way up from walking, to power-walking, to almost jogging and now into actual running at probably a 8-10 minute/mile pace. Thankfully, I have always been on the thinner side, so I get to focus purely on cardio for now.

Of course, my posture and gait sucked ass at first and I was pushing too hard without much recovery time, so as a result, I am babysitting minor MCL injuries right now. There isn't anything torn or anything, just sore as hell. I literally just got back from a 2.5 mile walk, but it was kind of pointless as it was extremely slow pace and I had to stay focused on knee safety.

However, as a result of the walking/jogging/running, my resting blood pressure is already down to a reasonable average of 124/90 and my Dr. has reduced my BP meds (beta blockers). As hell has apparently frozen over, she even managed to crack a smile over my lifestyle changes. (She has seen me through some rough times to include my most severe alcoholism days, so I was just used to stern looks and pseudo-lectures.)

Through my fitness apps, I noticed a direct correlation between max heart rate achieved (over time) to reduction of BP and lower resting heart rate and I want more!

On my running down time/recovery time, I would like keep to pushing my heart rate a bit. What upper body exercises are best for heart rate as I still am able to commit 1-1.5 hrs per day to fitness? Until I can plateau my fitness level and switch to more "maintenance syle" exercises, I would prefer to keep pushing fairly hard.

Any suggestions would be appreciated and I hope my storytime post gave context to my situation. Cheers!

11
submitted 9 months ago by remotelove@lemmy.ca to c/asklemmy@lemmy.world

Quick definition for those who don't know: Cognitive dissonance occurs when a person's behavior and beliefs do not complement each other or when they hold two contradictory beliefs.

Story time! Please read this in it's entirety as there is important context as well as an actual point.

I have been spending some time with the in-laws over the past couple of weeks, because reasons. They are an immigrant family, but have been in the US since the tail end of the Vietnam war. All hold US citizenship and it's a large family.

Politics has cone up occasionally, but for the most part, we tend to steer away from those discussions when we mistakenly bring them up in conversation. Strangely enough, some are actually Trump supporters but I wouldn't go so far as to say anyone is full-blown "MAGA" or anything. I would describe the support as mild and truly ignorant of broader level politics.

So, there was some discussion about how immigrants needed to be kicked out of the US and there was support for mass deportations. Another conversation was about how "everyone"abused food stamps and welfare, but within about 10 mins, the discussion flipped to what products another person in the family could buy with their EBT card. Medicare and Medicaid is also a waste of the countries money, but then later there was a discussion about how to use those benefits for another family member.

Politics aside, cognitive dissonance is a bitch to deal with, especially when it's coupled with anecdotal evidence that may not even be real. I suspect that any experience with other "immigrants" I heard over the last couple of weeks are likely the result of a single, heavily biased experience coupled with gossip. (The gossip may create false memories of a situation the person believes is true. I think there is a special name for that.)

Telling a person bluntly that they are wrong is usually counter productive. Calling out the contradictions in beliefs can also be strangely unproductive as well. When a valid argument is made and a person realizes they can't resolve a conflicting belief, the tendency seems to be to fall back on a generic phrase like, "Well, I don't fully understand it, but that person must know what they are doing.", or something similar.

Provided that you actually give a shit, how do you go about cracking the shell of someone that has fallen victim to this kind of thing?

241
face. (lemmy.ca)
submitted 10 months ago by remotelove@lemmy.ca to c/cat@lemmy.world
96
submitted 1 year ago* (last edited 1 year ago) by remotelove@lemmy.ca to c/foodporn@lemmy.world

OMG. This recipe is one of the best I have tried.

43
Corm (lemmy.ca)
submitted 1 year ago by remotelove@lemmy.ca to c/squirrels@lemmy.ca
63
April ml Rule (lemmy.ca)
submitted 1 year ago* (last edited 1 year ago) by remotelove@lemmy.ca to c/196@lemmy.blahaj.zone

Don't you ever change, .ml!

299
submitted 1 year ago by remotelove@lemmy.ca to c/cat@lemmy.world
[-] remotelove@lemmy.ca 121 points 1 year ago

If Broadcom takes over Intel, get ready for a wild ride and don't expect any kind of innovation ever again. If there ever was a backdoor in Intel CPUs, expect it to be opened up and used for licensing extortion. (That seems far fetched until you realize how fucking shady Broadcom is.)

While I shifted to the AMD bandwagon a while ago, I really wanted Intel's GPUs to develop more over the next decade and split the market up a bit more. Sigh.

[-] remotelove@lemmy.ca 114 points 1 year ago

Wut? Was he talking about the previous Ukrainian government, sponsored by Russia™? I can't make sense of what he is saying, actually.

35

Weird title, sorry. Let me try and explain.

Goal: Convert simple higher level script into a low level logic gate mess. Basically, I want to build my own custom computers in Factorio with circuit networks. I can easily create any type of logic gate that I want, similar to how computers Minecraft have been built, but with more options.

It would be super nice to code in something similar to Python but have it "compile" into clusters of logic gates. Of course, functionality would be extremely limited, but that is OK and I don't need to boil the ocean.... yet...

(TBH, this sounds really close to what I know about programming FPGAs.)

13
submitted 1 year ago by remotelove@lemmy.ca to c/cat@lemmy.world
[-] remotelove@lemmy.ca 196 points 2 years ago* (last edited 2 years ago)

Spores are everywhere like you say and you only really see a tiny percentage of mycelium. Fungi kinda is everywhere already, but where it can grow well is much more limited.

Fungi can be remarkably picky about its growing conditions to thrive, otherwise, it's growth will be remarkably slow. However, if you put a tablespoon of dirt under the microscope, there could be dozens of mycelial strands in it trying to survive. They can all survive, to a degree, but there are a couple of issues preventing dominance.

If it can find a place to settle in and grow, chances are that many other spores may be trying to take hold as well. Fungi is insanely competitive and is constantly fighting for space. Fast growing fungi is what we normally see take over food sources and it's usually a type of trichoderma. Trichoderma will literally choke out other fungal growths simply due to its rapid development. If an existing colony is weakened for one reason or another and it gets a trich infection, it's game over.

For commercial mycelium development, (button mushrooms, oysters, etc.) growing conditions are generally perfect and the substrate used is tailored specifically per species. (It's mostly sanitized poo or specific types of wood.) Temperatures need to be adjusted for each growth phase as fungi can be very sensitive to that. Some strains of shiitake are rumored to require a physical shock to fruit. (Like, the substrate bag needs to be physically smacked hard. It's an odd characteristic.)

To sum all of this up, it usually comes down to competition. Where there isn't fungi, there is bacteria. Plants even have chemical defenses to both. Small critters and insects may eat all three of those things.

Next time you look at your garden, just remember you are looking at an actual battleground for millions of critters of all shapes and sizes.

[-] remotelove@lemmy.ca 179 points 2 years ago

They have kinda always been a thing. Nazi's were just one flavor of nationalist, after all.

Charles de Gaulle defined nationalism best: "Patriotism is when love of your own people comes first; nationalism, when hate for people other than your own comes first."

For most people, it's extremely easy to blame others for problems of their own creation. By the same token, people who can't see their own shortcomings will also usually latch on to leaders who are able to amplify that bias. For the Nazis, it was mostly against the jews.

Also, what you are seeing in the news is partially amplified by the news itself but also, politicians are getting more brazen in mustering the support of those groups. This has lead to people being a little more open about something that needs to stay taboo, IMHO.

[-] remotelove@lemmy.ca 103 points 2 years ago

Or someone slapped their cock on it.

[-] remotelove@lemmy.ca 212 points 2 years ago

It's one of the better EDR (Endpoint Detection and Response) tools on the market. For enterprises, they are able to suck down tons of system activities and provide alerting for security teams.

For detection, when I say "tons of data", I mean it. Any background logs related to network activity, filesystem activity, command line info, service info, service actions and much more for every endpoint in an organization.

The response component can block execution of apps or completely isolate an endpoint if it is compromised, only allowing access by security staff.

Because Crowdstrike can (kind of) handle that much data and still be able to run rule checks while also providing SOC services makes them a common choice for enterprises.

The problem is that EDR tools need to run at the kernel level (or at a very high permission level) to be able to read that type data and also block it. This increases the risk of catastrophic problems if specific drivers are blocked by another kind of anti-malware service.

When you look at how EDR tools function, there is little difference between them and well written malware.

Crowdstrike became a choice recently for many companies that got fucked over by Broadcom buying VMWare. VMWare owned another tool, Carbon Black, which became subject to the fuckery of Broadcom so more companies scrambled to Crowdstrike recently.

I hope that was enough of a summary.

[-] remotelove@lemmy.ca 184 points 2 years ago* (last edited 2 years ago)

That's fairly bold to ask for ~6% of the total world economy as well as a sizable chunk of the world's energy.

[-] remotelove@lemmy.ca 145 points 2 years ago* (last edited 2 years ago)

They can leech all the data they want from my employer. I don't give a fuck. Never use company assets for personal business as an addendum.

Just be a little more careful with your own stuff, s'all.

[-] remotelove@lemmy.ca 149 points 2 years ago* (last edited 2 years ago)
[-] remotelove@lemmy.ca 119 points 2 years ago

He is the one who paid to watch her have sex. The logic he is using is really twisted.

view more: next ›

remotelove

joined 2 years ago
MODERATOR OF
196