• 5 Posts
  • 170 Comments
Joined 3 years ago
cake
Cake day: June 18th, 2023

help-circle
  • I mostly work in gamedev where they aren’t that much feasible so I don’t have much real experience working with them and I might be wrong but from when I looked into it a while back, it’s basically just a docker container that you specify in a .devcontainer file (at least for VSCode, but other IDEs probably have something similar) and when you need to develop, compile or run your code, it runs it in the container. It also doesn’t have to run locally on your machine, if you can run docker somewhere else (i.e on a more powerful shared server).

    I can see several advantages (but I never really tested it in practice, so I’m mostly guessing) - containers are usually quick to start, you have the same and stable and replicable dev/build environment for all devs (since you just commit .devcontainers), so there aren’t some hidden dependencies and “works on my machine” shouldn’t happen too often. It also helps you keep your OS clean, so you don’t end up with 5 versions of python, 3 JDKs and 20gb of random NPM packages installed in your OS after 5 years of development - which is the most important advantage for me.



  • If you don’t use any identifiable information for the account (i.e email, post any photos with your face, or real name, that you use for anythinh else), use a VPN, an anti-fingerprinting browser like Mullvad, and most importantly use IG just for DM and nothing else, you should be pretty ok. Just the people you talk to (and what you talk about) will give them plenty of data, tho.

    One way to avoid having to use the website or their apps at all is to run your own Matrix server with meta-bridge, which can bridge Messenger (and I think even IG DMs, never tried that tho), so you minimize the contact surface you have with their site, because you are chatting through an unrelated app.

    If you don’t do most of that, Meta already has a shadow profile on you anyway, since they track stuff across websites based on numerous fingerprinting methods. I never really looked into it, but AFAIK most of websites have the “FB like” widget that Meta uses to track people across the internet, and I’d guess that Meta is pretty good at working with that data.

    Not sure about directly poisoning the analytics, but you could just run something like a VM with a pyton script with Selenium that just randomly browses web or IG.


  • Managing centralized security and device management correctly on multiple OSes must be a nightmare. From EDRs to app and device provisioning.

    You should do dev work in devcontainers anyway.

    Not that it’s an excuse or that I’m happy with that, but I can totally understand why companies do that, and tbh I’d rather see a properly secured than have the option to run Linux.

    But I’m biased, because I used to do Red Teamings, and the things I’ve seen…










  • Both are mesh networks, with slight differences. The idea is that volunteers run relay nodes with LORA (which has a range od a few KM, depending on visibility), and you also have client devices, and if you have a large local community of enough nodes and users, you can have an off-grid communication network where data is being sent node to node (both client and relay) before it finds the recipient. Both networks are encrypted.

    Most cities already have a pretty good coverage. Meshtastic has a few issues that Meshcore tries to solve, mostly in regards to scaling, but tbh I havent researched it enough to be able to correctly list them (just like this answer is mostly a simplification). There’s plenty of blog posts that explain it a lot better.

    You can get standalone Meshcore devices (with a screen and keyboard) for around 70$, and devices that connct to your phone through bluetooth and you send messages through the network from an app for even cheaper.

    My guess is that it’s not entirely adversary-proof, but it probably beats having a phone with you to communicate when you’re doing anti-goverment sruff.

    And if you’re asking about Anarchist Library, there’s this site that has a lot of articles, zines and books about good operational security, how to behave on protests, what to (not) bring, first aid against common crowd control, and general anti-goverment guirrella stuff so you can protest as safely as possible.

    https://theanarchistlibrary.org/special/index






  • Hmm, I wonder how well would formal verification work with LLMs. I’m not really a fan of vibe coding, but the little I know about formal verification, it could very well work as a way how to prove your vibe-coded slop isn’t shit.

    I’ve looked into formal verification once few years ago, but it’s too much math and thinking for me to grasp. If I remember it right, I guess the problem would be that you’d (or, LLM would, in this case) have to correctly describe the code in the formal verification language, and it would have to match 1:1 with the code, which is a point of failure? So we’d be back to square one, but instead of having to verify every single line of code, you’d have to check the proof. But maybe I’m wrong.


  • The scary part is the mental state he was able to get into with only a randomly generated text. If you haven’t already seen it, I highly recommend the Down the Rabbit Hole video about it, although it’s pretty heartbreaking. So much wasted talent.

    There’s people like him who are similarly psychotic, but couldn’t usually get to the point where they could access a tool that would trigger them. Personalized chatbots were mostly a niche non-tech savy person doesn’t really get to that easily.

    Now, it’s everywhere. A lot of people will loose their sanity over this.


  • I wouldn’t be surprised if something like that popped up very soon. Probably is in the works on someone’s drive already.

    I remember hearing an arugment against AI coding that if it’s so good, why aren’t there apps popping up left and right? Which was true at the time.

    Now? In the past month, I’ve seen a pretty in-depth Murloc-tamagotchi addon in WoW (that kills your FPS), a whole open-source custom World of Warcraft client, an E2E Tor-based messenger (that signs messages with 128b CBC key), a game engine based on a lost Standart Model of physics that was mentioned by Tesla, but lost to time, that someone reverse engineered (which had very TempleOS vibes, as far as the authors mental state goes), a Matrix protocol on Cloudfare microservices (that skipped message signature verification), and I could go on.

    Open-source is going to become a hell to navigate. I was already anxious about using FOSS tools due to malicious typosquatting clones, supply chain attacks and general security of using someone’s FOSS code on my PC. Now, add vibe coded shit to the mix, and finding a good FOSS projects and tools will be hell :(