amalter

Is there any irony in a thread on browser malware that includes a "please run this bash script blind"?

Not that I don't trust you, but between now and when someone stumbles on this thread, your domain could expire and I could publish something crazy at that url.

These are mechanically linked controls. Literally the force of the other pilot is directly felt and observed.

What force feedback in addition would you have in mind?

The legal right is for all of Tesla's suppliers, service providers, partners, etc are allowed to "sympathy strike". This effectively exiles the company from doing business in the country. Tesla is not a particularly large employer in Sweden and does not seem to be particularly loved.

What they are doing (strikebreaker) is "legal" - but when they are removed from market by the sympathetic population, it will be an obvious outcome.

The surprise is that normally logical employers do not work this way in these countries. However, we've seen that emotional responses are often how Musk's companies operate. I expect it to end poorly for him in this case.

Sweden is not a large market, but events like this contribute to Tesla's reputational decline. The Nordic countries were some of the first and fastest to embrace Tesla. But a brand can be ruined faster than it can be built.

Oh, it's not an "interesting idea" that we're teetering on the edge of not being able to differentiate between machine-generated and human-generated content. It does seem that our AI learning models simply mimic our own thinking processes, absorbing and combining experiences to create results that sometimes outshine their origins.

The real question that'll soon dominate is, "How can we even tell the difference?"*

(* - Reworded with ChatGPT 4)

It's not as "vapid" as you imagine.

As an example; =maybe you have a family/friend group chat of 8 members and you're planning a birthday party or an event. If everyone is in the ecosystem, you can seamless share notes, todo's, hi-res pictures, videos, locations, etc.

Since for whatever reason your family has no idea what Signal/Telegram/WhatsApp are - you take the one person that's not on iMessages (and so preventing the group from using the tools) out of the group and say "Make sure to update so and so on the Notes here" or something. It's a practical decision. Often, that one Android user is the only one on Signal or WhatsApp. So to share pictures, you make a group of everyone on iMessage and send the videos and album over, and then send a separate WhatsApp to that person.

And sometimes you accidentally forget to send that seperate message.

The right answer is to all agree on a fully featured messaging app (For most non-US that's WhatsApp), or for the default messaging to be upgraded.

Then you get to RCS - which Google is now pushing, after going through a dozen (or two?) of their own attempts to lock users in with a bewildering array of conflicting messaging apps.

Apple should support it, although it's a bit rich to see Google try to "shame" Apple into it only because the failed at their execution.

There's no moral hazard if we pay out depositors and let the bank fail. The big "problem" in 2008 was that the bailed out banks were made whole with equity injections and then continued to grow. (Although the government did quite well on those investments).

SVB is dead. Shareholders are getting zero. The losses are not being socialized. But because we don't want a bank run on every regional bank, let's make depositors whole.

There is zero precedent for clawbacks from on demand accounts at a regulated financial institution. This isn't even a "capital B" Bankruptcy, so I have doubts clawbacks would be legal.

That would also throw gasoline on the fire as people cease to trust even withdrawn money as whole. It's now in your interest to get your money out of any bank showing any weakness as early as possible.

Clawback SVB money Monday and we'll have a run on First Republic Tuesday and possibly 20 other institutions by the end of the week until we get to Ally and that will empty the FDIC piggybank.

Which is why the cooler heads at the FDIC try to make all depositors whole. Hopefully they can find someone to take SVB's assets on in HTM valuation and maybe some government equity in exchange for ownership. (Remember the government made money on its equity deals in 2008).

Do you work on my team? This is exactly how we're using Duckdb with Databricks as the massive data bulldozer and Duckdb as the scalpel.

Return for an Iphone 14 Pro or just Iphone 14. My partner did the same thing. If you don't want the big screen and fancy triple camera system, get the cheaper options. They will still be rocketship fast with long battery life and beautiful screens.

Caught a medium severity case of omicron almost exactly a year ago when I was triple vax'd.

Took the bivalent booster about 2 months ago then went on a cruise and directly after to re:invent.

Since then had multiple exposures with people around me getting week long fevers. So far I had something in my system that made me feel "slightly off" - but nothing worse.

Yay antibodies.

I'm a big believer in "more antibodies the better" - but I am also on the side of "COVID amnesty". The pandemic was an immensely scary time for everyone, and got co-opted by politics of all stripes. We need to forgive each other and move on.

I now support everyone's choice - with the standard exceptions (Childhood vaccines, don't go out when sick, respect others).

Wastewater facilities are almost always run by local government. I expect it takes time to get buy in for a project like this. I didn't see if there was a grant to cover the testing, but you at very least need a worker to package up samples and mail them to a lab.

Still, this is tremendously useful where there is coverage, and looks like enough data to make sampling type of conclusions. Hopefully we'll eventually see some kind of network effect.

For example, I'm in the NYC area - and Newark NJ has coverage. There is enough overlap that I expect flu and covid curves (including strains) to be close enough to be interesting.

I disagree. I believe the intentions would start as a non-nuclear response, but would rapidly spill out of control into a full send of all weapons.

This is the reality of the "Assured Destruction" of MAD. If you can take out your enemies ability to respond you can "win". With a tactical nuke in play and Rus-vs-US force engagement moves us to DEFCON 1. The name of that level is "COCKED PISTOL". A cocked pistol is something to handle gently, any wrong nudge could set it off.

Then in the background you have air to air engagements over the Black Sea - blockades of Kaliningrad, SSN's chasing SSBN's. Dozens of Cuban Missile Crisis type situations all playing out in parallel. One bad call by one local commander and a head of state is given 6 minutes to figure out if this is a first strike.

Once the line is crossed almost all of us die. It might take hours, days or weeks - but it will be an near inevitable conclusion.

I think we'd need to invoke article 5 to stop Poland from rolling up on Russia in that case.

With the current hard-line politics and that absolute hate between the two, there is a hair trigger on that escalation.

The only distance between the Eastern European countries and the US is that the former want a stronger response, while the US is still leaving "escalatory" options on the table (ATACMS, Bradley based IFVs, Western Tanks, etc).

The former Warsaw block countries know intimately how Russia treats its "buffer areas".

All Russia has to do is GO HOME. They are the invaders and the aggressors.

There is no evidence Russia has a large inventory of useful standoff munitions.

For example, Russian has been making extensive usage of s-300 surface to air missiles in ground to ground mode.

While this capability was considered during design, it's an act of desperation. SAM's are mostly propellent with a small warhead. (The point is to catch up quickly with a delicate fast moving object and frag it to shreds).

The s-300 is pretty inaccurate in this role and is mostly useful as a terror weapon. (They are fast and hard to counter).

Additional, they have been repurposing air to ship missiles (kh-22's), which are notoriously inaccurate. The high causality shopping mall incident in late June was a kh-22 likely attempting to hit a nearby factory.

All said, there is no evidence that Russia has any surplus of tactical weapons. Estimates that up to 70% of dedicated LACM weapons have been expended already.

Alternatively perhaps you mean tube artillery and unguided MLRS systems like the Grads?

That is precisely how they battle. Artillery grinds down everything into rubble and infantry moves forward a few kilometers - rinse and repeat.

Ukraine has blunted this tactic by pressuring artillery supply with HIMARS, partisans and drone delivered munitions.

Now the big question is if Russia will use a tactical nuke as an area denial weapon. Russian troops have limited capacity to operate in a radiological environment, and NATO repercussions would be monumental.

Personally I believe a tactical nuke would bring us to the edge of a thermonuclear war.

Here's how I see it playing out;

Russia drops a small dial-a-yield outside Kherson to deter Ukrainian advance.

NATO attacks the Black Sea fleet and starts to provide air cover over Western Ukraine. Poland moves "peace keeping" troops along the Russian/Ukraine border.

Rus/NATO incidents start to occur, triggering an escalatory spiral.

Once you've used a tactical nuke once, it's easier the second and third and fourth time.

NATO article 5 is invoked after food supplies are poisoned from fallout.

Russia's conventional forces are totally depleted, leaving only the strategic air force and nuclear triad left as a response to NATO.

Putin deep inside his nuclear bunker, isolated from outside contact, makes a decision.

...

It certainly highlights the vulnerability of undersea pipelines to sabotage. If Russia had written off a restart of NS(1/2) this move further destabilizes the large EU economies, introduces fear and uncertainty into the political theater and sows discord between allies.

Any of the highly sophisticated players could have rendered the pipeline useless without this explicit show of force. A simple reversing of the cathodic protection undersea would permanently degrade kilometers of pipeline. There are dozens of proposed scenarios that would permanently damage both pipelines while maintaining at least the semblance of reasonable doubt.

So the "critical thinking exercise" is not just who gains from the NS destruction, but who gains from this flashy, public show of force.

At this point the "China Theory" that this forces Russia over the barrel on pricing is as good as any.

(Disclaimer - I think Russia totally did it, but no one here knows).

No. They are talking about limited disruptions to limited areas due to planned load shedding. If your power and phone are out for 4-6 hours - is that going to suppress your ability to protest?

I know I'm not supposed to do this, but is this "concern trolling"? I can't see how you could get from A->B unless you're trying to rabble rouse?

They would make 7 different messaging apps managed by 3 different business units, disband 4 of them, combine the remaining 3 into 2, deprecate those 2 and create 2 new ones, combine those 2 into 1, then suggest a vague international standard while rewriting that 1 into a new 1 that's incompatible with all the old ones.

Then complain that the competition is not "interoperable".

(Oh wait, that's actually what happened.)

To be fair, this is exactly what the TFA suggests:

Policymakers have mostly responded to the shock with broad-based price-suppressing measures, including subsidies, tax reductions, and price controls.

Going forward, the policy emphasis should shift rapidly towards allowing price signals to operate more freely and providing income relief to the vulnerable.

I will drop this apropos of nothing about the time that Scott Adam's created numerous sock puppets to influence discussion about himself on a "popular with the technorati" community blog - https://mefiwiki.com/wiki/Scott_Adams,_plannedchaos

They are doing you a favor. That bag would likely not have made it to its destination due to ground handling troubles outside their control.

Just had family flying TLV through Munich. 2 out 4 pieces of luggage lost (Lufthansa/UA codeshare).

If you are going to travel with a checked bag, 100% recommend airtag'ing them.

No politics? My fyp highly disagrees. However, the algorithm is amazingly good at keeping you in your political in-group.

You'll often hear content creators talk about "getting on the wrong side of TikTok" - meaning they started getting recommended to an out-group. (For example super cool super funny @melissadilkoateras ending up in MAGA feeds occasionally).

Cue brigading of reports, community violations, etc until the audience stabilizes.

I think the reputation is due to the zealous take down policy and the solid profiling that keeps you in your comfortable content window.

Do you have a list of other carriers who will not comply? I'll call my senator about these 3. I suggest others do the same.

As mentioned, there is concern about if the FCC can enforce these rules. But Robospam is bi-partisan. This is one issue I think even our dysfunctional government can agree on.

Just a note. Unfortunately the Russian's have reestablished the garrison and anti-aircraft systems on Snake Island (https://twitter.com/ArtisanalAPT/status/1525220038914895872?...)

The cost to do this when the island will likely continue to flip flop in control is callous military incompetence.

So much better said then my rambling screed above. People pick up on any excuse to avoid the diagnosis. Yes, the switch to plastic straws was stupid. Yes, the rich and powerful fly on planes and own yachts.

We live in this imperfect world. If we wait for it to become "perfect" top down, we'll just wait forever. And the climate emergency does to care about our partisan concerns.

I feel so for those with children. It's clear we're leaving them a world already condemned.

I just really don't get this. It's "gotcha" thinking and "if they don't live perfect austerie lifestyles they cannot change climate policies".

Leave out that High Ranking government officials travel with security, press, aides, etc. Yes it's wasteful, but it's likely the safest, fastest and easiest method to gather decision makers. It's such the long tail of carbon output on the climate emergency.

Additionally, these ministers _should_ be representative (Yes, I am aware that is abstracted in the EU). It doesn't matter who they are personally, they are representing their constituents.

Do I wish that each official would show up by bicycle, sailboat, carbon neutral balloon, train, etc? Indeed I do - and the more whimsical the better. Because it would be theater, but theater is an important part of governance. Having the ministers sacrifice sends a message.

But much more important is what they vote for, what they advocate, what policies they affect - as that is what will move the needle on a better or worse world.

But the real reason I might wish they take the bus is that it just provides this fodder for doing nothing. For other blowhards to point and use this as just another excuse to twiddle our thumbs until the extreme crisis arrives.

Until Al Gore personally delivers organically grown sustainable vegetables to every human on the planet, let's not change industrial policies, taxation, energy plans or researching funding. Let's concentrate on the theater and hypocrisy first, and leave the attainable, sustainable long term profitable policy changes for our grandchildren (fingers crossed there is still a democratic institution around as the world's greatest migration and refugee crisis encircles the planet).

Btw - Google tells me blood boils around the same as water - 100 C. I don't quite see those temperatures occurring, but it will sure feel like it on, say the Indian Subcontinent. Good thing no one lives there!

I believe we're talking about.. em, the exit points.

Natural birth is messy. Infants get covered in all sorts of slime, some of which occurs at "first light", right outside the body.

If this was the true concern of the Kremlin, why would they do the one thing that strengthens and enhances NATO in ways unthinkable even 6 months ago.

The war in Ukraine is the rebirth of NATO;

- Finland and Sweden on the fast path to joining. - Every member country making good on defense spending and more. - Eastern member countries inviting ever larger standing forces. - Renewed interest in Nuclear deterrents. - Reinforcement of other "NATO like" alliances like AUKUS.

If the true reason for the war was US-NATO provocation, the it was the most successful, long term, multi-administration conspiracy of the century.

Or - the Kremlin could simply be lying and have other ulterior motives for war (territory, hydrocarbons, empire, legacy, etc).

They are either stupid, or liars.

Fyiw - the only real "winners" here seem to be China.

I posted another response off this article and I still don't quite get the gist of his response?

The system we built in the 90s would have protected against this attack.

Is "the system" the human to human EV certificate process? There were so many obvious and awful social and technical engineering holes in that process that I find it hard to believe anyone would defend it?

Certificate expiration was always a danger. There was a single technical contact that could be spoofed or just walk away with the private key. The wider web audience never noticed the EV annotation, and basic human factors tells you they never would. Heck, we can't get people to notice HTTP downgrade attacks. The only protection is TLS everywhere - which never would be possible with slow and expensive authorization methods.

(I suppose it was good business for Verisign though...)

I'm not privy to any details, but a simple possibility would be to replace the destination address of any transfers initiated during the time period. You could even re-write all the DOM to hide double checks. It might have even been possible to initiate the server side request directly - but even if there was a 2FA confirmation of the transaction that included the address - I could easily see $2m worth of transfers successfully rerouted. This attack easily could have been against a bank with online wire transfers - the challenge there would be laundering the money.

I don't know much about this specific third party javascript and it's possible that tighter CSP policies could have mitigated some of the attack vectors. However, once you can MITM, it's really game over.

Before we blame usage of the js CDN, they could have performed the TLS attack on KLAYswap instead and then just reverse proxied while strategically rewriting data. It's possible that with this specific setup that the js CDN was the lowest hanging fruit.

This is such an fundamental and structural attack (BGP poisoning to screw with certificate ownership validation) that I find the comment by Phill Hallam-Baker incredulous. Perhaps there is a hobby horse against automatic certificate exchange (there is a mention on EV certs, which were such an obvious scam) or it's just a middlebrow rant about "javascript dependent pages".

There are many attacks possible with this method and plenty that will work on the simplest request/response Web 1.0 architectures.