corvad

Really cool to see this digitized and archived, it's such an important piece of history and really one of the earliest digital ic bases computers.

Interesting to see it folded into the Zero Trust product.

Please do not open up emails directly always login to your account.

https://xkcd.com/927/

I believe this is more like Borg if anything.

At the very least it should quell the markets for this week.

Who's gonna tell them...

The net effect of this order is that we must abruptly disable Fable 5 and Mythos 5 for all our customers to ensure compliance. Not great as it does break workflows for some.

As we have stated publicly, we believe the government should have the ability to block unsafe deployments, as part of a statutory process that is transparent, fair, clear, and grounded in technical facts. This action does not adhere to those principles.

The net effect of this order is that we must abruptly disable Fable 5 and Mythos 5 for all our customers to ensure compliance.

Not great as it does break workflows for some.

As we have stated publicly, we believe the government should have the ability to block unsafe deployments, as part of a statutory process that is transparent, fair, clear, and grounded in technical facts. This action does not adhere to those principles.

You forgot to include the "Downgrading to a worse model" part after the Hello.

You have now used $20 in extra usage credits...

It already came if you use workers I believe, still in beta though. I would love to switch to it but I still need the SMTP interface though. https://developers.cloudflare.com/email-service/

Their products are cool and I've been happy with them over the years, but their blog right now has had some blunders recently. Also their reliability seems to have been having trouble but does seem better recently.

One account gets compromised and your doomed. A lot of companies even have prod access be a request based system. Most modern security models with zero trust don't let everyone have access to everything, quite the opposite.

RAID is not a backup.

I still even now feel that K&R C should be a mandatory reading for CS students, but alas.

I find it doubly ironic since their own fork caused Bambu users' telemetry to hit Prusa's servers back in 2022, and (to my knowledge) Prusa didn't snap back with a C&D.

This for me was the most telling.

Has law enforcement been engaged? Yes. We've notified law enforcement, including the FBI, the U.S. Cybersecurity and Infrastructure Security Agency (CISA), and international law enforcement partners.

Hmm. I thought all these agencies say NOT to pay a ransom.

What's to say they didn't copy the data then shred a copy, or hell even just fabricate some shred logs.

I suspected as much as it disappeared from the ShinnyHunters page and it recovered so fast. The main thing I'm interested in knowing was how much was paid. Also I don't really like their statement that the data is safe or destroyed, those promises seem a little questionable with regards to these incidents.

Ah that makes more sense I was kind of confused by that.

AI right now feels like the go to for anything and everything that was tedious for humans to do or that took quite a bit of expense. What people seem to struggle to realize is that those exact things that they offload to AI are exactly what made their stuff reliable and well known like Cisco. If I am buying a router I really don't want vibe coded software, I want reliable software that had thought behind it especially if it supports a very critical part of a system.

Yes, agreed these are very different things. Also I'm not really sure the argument holds, there are plenty of AWS Command and Control hosted servers and AWS victims, is AWS to blame or blackmailing? The answer is a large no.

Many projects kind of take a different approach where for pull requests CI is not run until approvals from maintainers are given even for very simple jobs to avoid untrusted code running in ci.

At least my naive brain wonders if blocking force pushes to main would have stopped this as it is a setting in Github these days, unless I am misunderstanding the final attack vector since it seems it was force pushed.

Yes, but the exploit was with Github Actions not something that pnpm really prevented.

I'm not quite sure of what this really accomplishes, like is it just M.A.D.? Like at that point the creds have been stolen and the whole machine is toast.

It's always East 1... Jokes aside I don't understand how often east-1 is taken down compared to other regions. Like it should be pretty similar to other regions architecture wise.

I mean yeah, but the Pi Zero can also do TLS and much more complex tasks so I really don't understand why this is such a big "feat." It's a linux pc just running a webserver. Am I missing something here?

Some instances seem to be recovering. I wonder if a ransom was paid.