RE: https://infosec.exchange/@InfoSecSherpa/117485271703936739
It's "agentic" so it's okay.
RE: https://infosec.exchange/@InfoSecSherpa/117485271703936739
It's "agentic" so it's okay.
Peter Thiel: konkurencja jest dla przegrywów
Peter Thiel: zło jest takie jakby dobre, właściwie
Władysław Kosiniak-Kamysz: Dziękuję zespołowi inżynierów i polskiemu oddziałowi firmy Palantir za przeprowadzone działania i prezentacje.
Palantir i umowa o poufności z MON. Ujawniamy szczegóły porozumienia
https://www.rmf24.pl/fakty/polska/news-palantir-i-umowa-o-poufnosci-z-mon-ujawniamy-szczegoly-poroz,nIdn,1022895
This week in #InfoSec
Sury PHP repo has upgrades already.
I see upgrades also for 7x and 8.0.x, 8.1.x, which I thought are not getting the patch. Unclear what that means, but those updated packages were not there 10min ago, so it seems related to the CVEs?
a lot of people are currently frantically trying to figure out how to update that system they deployed a couple of years ago
but it's the ones that should be doing that but aren't that I'd worry about
this is probably a good moment to consider going static site for your next project :blobcatcoffee:
Oh you want to run an independent OS on your device to not be encumbered by that? Tough luck buddy, your banking apps will not work, and your national ID app will not let you confirm your age to log in to your social network to even complain publicly about this.
Some people are so distracted by shiny LLM gimmicks that they miss the forest for the trees.
Apparently some people are claiming that "closed-source software is over" because LLMs can decompile proprietary software effectively enough to then make working(ish) "independent" versions of it.
Apple's, Google's, and Microsoft's control over their respective OSes would like to have a word.
Oh you have this slop-generated copy of Photoshop? That's cute, but I'm sorry Dave, I can't let you run it.
The necessary machinery is already there. A switch just needs to get flipped.
The day started with a major Google Cloud outage in Europe, proceeded swiftly to the eMudhra root cert dumpsterfuck, and now the critical PHP vulns are starting to hit.
Cool, cool. :blobcatcoffee:
deep cut, I wonder if anyone actually gets this one
inb4 you sank my battleship?
4, 56, 66, 115, 155, 156, 230 and 237? Amazing, I have the same combination on my luggage!
Looking back, Mozilla could have just as well added Honest Achmed's root CA anyway:
https://bugzilla.mozilla.org/show_bug.cgi?id=647959
First two:
"enables recipients who access the service through an account to transmit content in real-time to an indeterminate number of other recipients of the service, including through live streaming of audio-visual content;"
"enables recipients who access the service through an account to contact, communicate and otherwise interact with other recipients of the service not part of the recipient's pre-existing connections or subscriptions;"
So, make posts friends-only, and accounts locked.
I am reading the EU Kids Act, and I want to be clear and concise: fuck online age verification.
That said, if I am reading it right, fedi instances *could* be configured in a way that spares them from age verification requirements?
Age verification is basically Chapter II Section I Article 6 point 1 of the Act:
https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:52026PC0681#:~:text=minors-,Article,service,-%2E
There are 5 things that each individually can make a social media service or video-sharing platform required to do age verification:
Tesla: stonks 15% down year to year
Musk: OH LOOK A FLYING CAR
Media: OOOOOHHH A FLYING CAR!!1!
🤡