Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (Cyborg)
  • No Skin
Collapse
Brand Logo

CIRCLE WITH A DOT

  1. Home
  2. Uncategorized
  3. @paco @BenAveling it is just a stupid electronic device

@paco @BenAveling it is just a stupid electronic device

Scheduled Pinned Locked Moved Uncategorized
597 Posts 265 Posters 303 Views
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • david_chisnall@infosec.exchangeD david_chisnall@infosec.exchange

    @fishidwardrobe @paco

    Marlinspike was kicked out of Signal after he pushed a cryptocurrency nonsense thing (in which he was an investor) into the app.

    He's been trying to make money from the latest nonsense fad for a while. I'm only surprised his name wasn't on some Metaverse thing.

    fishidwardrobe@mastodon.me.ukF This user is from outside of this forum
    fishidwardrobe@mastodon.me.ukF This user is from outside of this forum
    fishidwardrobe@mastodon.me.uk
    wrote on last edited by
    #255

    @david_chisnall @paco thanks for the update, i stand corrected

    1 Reply Last reply
    0
    • fabio@zirk.usF This user is from outside of this forum
      fabio@zirk.usF This user is from outside of this forum
      fabio@zirk.us
      wrote on last edited by
      #256

      @paco It's also only private for his customers. It does nothing to stop the LLMs from stealing private data. It's just a more private way to invade others' privacy.

      paco@infosec.exchangeP 1 Reply Last reply
      0
      • fabio@zirk.usF fabio@zirk.us

        @paco It's also only private for his customers. It does nothing to stop the LLMs from stealing private data. It's just a more private way to invade others' privacy.

        paco@infosec.exchangeP This user is from outside of this forum
        paco@infosec.exchangeP This user is from outside of this forum
        paco@infosec.exchange
        wrote on last edited by
        #257

        @fabio I don't follow. Nobody can fix privacy for stuff they don't own. So whatever we think of this privacy-preserving LLM service, of course it doesn't change the privacy invasions of the other LLMs in the market.

        "Confer" would tell you that this is the reason people should use them and not the other big AI players.

        My whole point is that the tech is badly broken and using broken tech privately is not a winning proposition.

        fabio@zirk.usF 1 Reply Last reply
        0
        • paco@infosec.exchangeP paco@infosec.exchange

          @godofbiscuits Maybe I am more of the target audience.

          I’m not gay, I just want to be supportive. I don’t have a use for a .gay domain, because it is too specific. I don’t do anything where “gay” is the theme or the content, and it isn’t part of my identity.

          So I can buy a funny domain .meow, do something playful that suits my needs, and I’ll be supporting lgbtq+ causes while I’m at it. I guess that’s probably why I’m enthusiastic.

          godofbiscuits@sfba.socialG This user is from outside of this forum
          godofbiscuits@sfba.socialG This user is from outside of this forum
          godofbiscuits@sfba.social
          wrote on last edited by
          #258

          @paco I think you made my point FOR me.

          paco@infosec.exchangeP 1 Reply Last reply
          0
          • godofbiscuits@sfba.socialG godofbiscuits@sfba.social

            @paco I think you made my point FOR me.

            paco@infosec.exchangeP This user is from outside of this forum
            paco@infosec.exchangeP This user is from outside of this forum
            paco@infosec.exchange
            wrote on last edited by
            #259

            @godofbiscuits Great. So at least we're on the same wavelength.

            I don't want to provoke irritation in (or support a project that irritates) the very people I want to support. Perhaps what you're saying is that this is going to have low appeal to people who themselves are part of the LGBTQ community? I can understand that.

            But is it bad? Is there a reason that well-intentioned folks like me should oppose it instead of support it? Is it more offensive than beneficial? I'm genuinely asking.

            godofbiscuits@sfba.socialG 2 Replies Last reply
            0
            • paco@infosec.exchangeP paco@infosec.exchange

              @fabio I don't follow. Nobody can fix privacy for stuff they don't own. So whatever we think of this privacy-preserving LLM service, of course it doesn't change the privacy invasions of the other LLMs in the market.

              "Confer" would tell you that this is the reason people should use them and not the other big AI players.

              My whole point is that the tech is badly broken and using broken tech privately is not a winning proposition.

              fabio@zirk.usF This user is from outside of this forum
              fabio@zirk.usF This user is from outside of this forum
              fabio@zirk.us
              wrote on last edited by
              #260

              @paco I'm saying it would only be a "privacy-preserving LLM service" if all LLM models it gives access to were trained without infringing on anyones privacy. Helping people to privately infringe on others privacy is not preserving privacy.

              1 Reply Last reply
              0
              • dymaxion@infosec.exchangeD This user is from outside of this forum
                dymaxion@infosec.exchangeD This user is from outside of this forum
                dymaxion@infosec.exchange
                wrote on last edited by
                #261

                @tiotasram
                So the point of SGX is that there's an intel-signed key that's only accessible inside the SGX enclave than can be used to sign messages to a recipient off-device to attest that the code is running inside the enclave; it can be validated against intel's CA. The idea is good in theory, but in practice there have been too many SGX vulnerabilities for me to want to rely on it, hence my comment.
                @paco

                1 Reply Last reply
                0
                • jsalvador@mastodon.socialJ This user is from outside of this forum
                  jsalvador@mastodon.socialJ This user is from outside of this forum
                  jsalvador@mastodon.social
                  wrote on last edited by
                  #262

                  @paco I'm about to get mine too, and thinking about buying two

                  1 Reply Last reply
                  0
                  • paco@infosec.exchangeP paco@infosec.exchange

                    @godofbiscuits Great. So at least we're on the same wavelength.

                    I don't want to provoke irritation in (or support a project that irritates) the very people I want to support. Perhaps what you're saying is that this is going to have low appeal to people who themselves are part of the LGBTQ community? I can understand that.

                    But is it bad? Is there a reason that well-intentioned folks like me should oppose it instead of support it? Is it more offensive than beneficial? I'm genuinely asking.

                    godofbiscuits@sfba.socialG This user is from outside of this forum
                    godofbiscuits@sfba.socialG This user is from outside of this forum
                    godofbiscuits@sfba.social
                    wrote on last edited by
                    #263

                    @paco i'm of the mind that it’s bad. Demurring/deferring to the idea that "gay" = even controversial coming from LGBTQ people themselves is a form of shame.

                    And shame has killed a lot of us.

                    1 Reply Last reply
                    0
                    • ramsey@phpc.socialR This user is from outside of this forum
                      ramsey@phpc.socialR This user is from outside of this forum
                      ramsey@phpc.social
                      wrote on last edited by
                      #264

                      @paco @dotmeow There’s the up-front costs for getting the gTLD, but then it’s something like USD $25k per year to maintain, isn’t it? Is the group setting up something for recurring donations, or will the cost of registrations/renewals cover the regular ICANN fees and infrastructure costs?

                      ramsey@phpc.socialR 1 Reply Last reply
                      0
                      • ramsey@phpc.socialR ramsey@phpc.social

                        @paco @dotmeow There’s the up-front costs for getting the gTLD, but then it’s something like USD $25k per year to maintain, isn’t it? Is the group setting up something for recurring donations, or will the cost of registrations/renewals cover the regular ICANN fees and infrastructure costs?

                        ramsey@phpc.socialR This user is from outside of this forum
                        ramsey@phpc.socialR This user is from outside of this forum
                        ramsey@phpc.social
                        wrote on last edited by
                        #265

                        @paco @dotmeow I do like how they’re planning to funnel the profits directly into queer community causes, though. Best of luck to them!

                        ramsey@phpc.socialR 1 Reply Last reply
                        0
                        • ramsey@phpc.socialR ramsey@phpc.social

                          @paco @dotmeow I do like how they’re planning to funnel the profits directly into queer community causes, though. Best of luck to them!

                          ramsey@phpc.socialR This user is from outside of this forum
                          ramsey@phpc.socialR This user is from outside of this forum
                          ramsey@phpc.social
                          wrote on last edited by
                          #266

                          @paco @dotmeow I just backed them.

                          1 Reply Last reply
                          0
                          • paco@infosec.exchangeP paco@infosec.exchange

                            @godofbiscuits Great. So at least we're on the same wavelength.

                            I don't want to provoke irritation in (or support a project that irritates) the very people I want to support. Perhaps what you're saying is that this is going to have low appeal to people who themselves are part of the LGBTQ community? I can understand that.

                            But is it bad? Is there a reason that well-intentioned folks like me should oppose it instead of support it? Is it more offensive than beneficial? I'm genuinely asking.

                            godofbiscuits@sfba.socialG This user is from outside of this forum
                            godofbiscuits@sfba.socialG This user is from outside of this forum
                            godofbiscuits@sfba.social
                            wrote on last edited by
                            #267

                            @paco you could just donate to LGBTQ causes directly.

                            1 Reply Last reply
                            0
                            • feld@friedcheese.usF This user is from outside of this forum
                              feld@friedcheese.usF This user is from outside of this forum
                              feld@friedcheese.us
                              wrote on last edited by
                              #268
                              @paco @dotmeow they know it's gonna cost them $25k every year just to keep the TLD active, right?

                              $6,450 per quarter ($25,800/year)
                              1 Reply Last reply
                              0
                              • dymaxion@infosec.exchangeD This user is from outside of this forum
                                dymaxion@infosec.exchangeD This user is from outside of this forum
                                dymaxion@infosec.exchange
                                wrote on last edited by
                                #269

                                @tiotasram
                                So, the claim with SGX is that if you trust intel to have done the implementation right and not have their keys compromised, then you can know the hash of the code that's running on the server and that that code is isolated from the rest of the OS and firmware. With open source server code and reproducible builds, you can then confirm that the server is running the code inside the enclave that it should be, and with ends to end encryption between you and the enclave (and keys held inside the enclave), that nothing in between you and the enclave has touched it. It's a good model, with two problems: the SGX code has to talk to the GPU and somehow keep all of that interaction inside the trust zone of the enclave, and intel and Nvidia need to have done their jobs correctly. The fact that they don't mention encrypted GPU memory etc. is the first big red flag for me. Even with that, though, SGX has had a lot of bugs over the years, and by most accounts Nvidia's attempts at GPU enclaves are much less secure.
                                @paco

                                1 Reply Last reply
                                0
                                • floatybirb@mastodon.socialF This user is from outside of this forum
                                  floatybirb@mastodon.socialF This user is from outside of this forum
                                  floatybirb@mastodon.social
                                  wrote on last edited by
                                  #270

                                  @paco Other things being equal I prefer a mix of genders on a planet.

                                  paco@infosec.exchangeP 1 Reply Last reply
                                  0
                                  • davidculley@hachyderm.ioD This user is from outside of this forum
                                    davidculley@hachyderm.ioD This user is from outside of this forum
                                    davidculley@hachyderm.io
                                    wrote on last edited by
                                    #271

                                    @paco https://infosec.exchange/@david_chisnall/115888276811158389

                                    paco@infosec.exchangeP 1 Reply Last reply
                                    0
                                    • floatybirb@mastodon.socialF floatybirb@mastodon.social

                                      @paco Other things being equal I prefer a mix of genders on a planet.

                                      paco@infosec.exchangeP This user is from outside of this forum
                                      paco@infosec.exchangeP This user is from outside of this forum
                                      paco@infosec.exchange
                                      wrote on last edited by
                                      #272

                                      @floatybirb agreed. Now, if you asked me whether I would want to live on a planet that was governed by all women or governed by all men, I’d pick all women every time. But population? Yeah. Variety is better.

                                      1 Reply Last reply
                                      0
                                      • davidculley@hachyderm.ioD davidculley@hachyderm.io

                                        @paco https://infosec.exchange/@david_chisnall/115888276811158389

                                        paco@infosec.exchangeP This user is from outside of this forum
                                        paco@infosec.exchangeP This user is from outside of this forum
                                        paco@infosec.exchange
                                        wrote on last edited by
                                        #273

                                        @davidculley I remember the stupid cryptocurrency thing, but I didn’t realise Moxie was driving that or that it led to him leaving Signal. I didn’t pay close enough attention. It all fits a bit better now.

                                        1 Reply Last reply
                                        0
                                        • gsuberland@chaos.socialG This user is from outside of this forum
                                          gsuberland@chaos.socialG This user is from outside of this forum
                                          gsuberland@chaos.social
                                          wrote on last edited by
                                          #274

                                          @paco this goes beyond basic compute resources and is also applied to user attention and familiarity. things get changed constantly because the developers think a new design is better, without attaching any cost to user discomfort and the time/energy it takes to relearn the new way, or the time/energy that needed to be invested in learning the previous way.

                                          modern Linux is rapidly following the same trajectory, unfortunately. in terms of sane alternatives we're basically left with the BSDs.

                                          paco@infosec.exchangeP 1 Reply Last reply
                                          0
                                          Reply
                                          • Reply as topic
                                          Log in to reply
                                          • Oldest to Newest
                                          • Newest to Oldest
                                          • Most Votes


                                          • Login

                                          • Login or register to search.
                                          • First post
                                            Last post
                                          0
                                          • Categories
                                          • Recent
                                          • Tags
                                          • Popular
                                          • World
                                          • Users
                                          • Groups