Skip to content
linux-nerds.org

linux-nerds.org
  1. Übersicht
  2. Technology
  3. Windows Is Adding AI Agents That Can Change Your Settings

Windows Is Adding AI Agents That Can Change Your Settings

Technology
26 16 277
Anmelden zum Antworten

  • T

    UK households could face VPN 'ban' after use skyrockets following Online Safety Bill

    Technology technology
    343
    1
    950 Stimmen
    343 Beiträge
    8k Aufrufe
    spacecadet@feddit.nlS
    You obviously didn’t know how it works if I had to explain it was already possible. If you read my comment properly, you'll see that I wrote: "I know TLS termination and interception and recertifying with custom certificates is a thing" And it isn’t “madness" Yes it is. TLS interception should never be normalized because it breaks the chain of trust upon which TLS is based. It can be useful in some situations, like the fortigate firewall where you control the certificate, but ISPs nor the government should be trusted to wield this power over virtually the whole country. It is a very slippery slope. I am not aware of any mobile device that prevents you installing a new root CA. On Android, apps can't install their own root CA. The user has to manually download it, then jump through a bunch of hoops and deeply nested menus to install it and in the process ignore all the scary warnings that they're communication may be intercepted if they install and trust this certificate, and (at least on Pixel phones) they get a permanent warning in their notification tray that someone may be eavesdropping on them. Which is correct. It is a vastly better option than onerously demanding adults provide their identity to random and potentially adult themed websites where they could be victims of identity theft or extortion I'm strongly against age gates myself, but you're objecting for the wrong reasons. You're not providing your identity to the adult website. You're providing it to the third party identity verifier, who then certifies to the adult website that you are an adult without passing on your actual identity. Keep this in mind when you're arguing against it, because pro-age-gater puritans can use it to undermine your argument. I object to it first and foremost on principle. I shouldn't have to request permission from a third party or the government to do perfectly normal legal adult things in the privacy of my own home. Secondly, there is still a privacy problem at the "identity verifier". They may swear up and down that they do not store my identity data, but there is no way to prove that one way or another so I cannot trust that my data can't be leaked through them. Thirdly, when viewing adult content, I don't want there to be any association between my real identity and the adult content whatsoever, even through a third party, and I don't want there to be anything that uniquely identifies me. Finally, I object to the (re)demonization of all things sexual in our societies. We seem to be backsliding into puritanism under the guise of protecting the children, while we're doing nothing to protect them from real actually harmful online things that are damaging the younger generations beyond repair. I have a Gen Z stepson, and all the ways in which he is fucked up by the online world (no attention span, permanent online-ness, no real world friends, always seeking instant gratification, unrealistic expectations about life, an overly materialistic worldview, plenty of manosphere bullshit, ... ) have precious little do do with viewing porn.
  • E

    Apple sues YouTuber for alleged iOS 26 trade-secret theft

    Technology technology
    14
    1
    144 Stimmen
    14 Beiträge
    181 Aufrufe
    S
    You can read it two ways: gee they’re so WFH friendly they drive their people hard and they work nights and weekends
  • C

    Microsoft alerts businesses/governments to 0-day attack on SharePoint server software

    Technology technology
    4
    75 Stimmen
    4 Beiträge
    57 Aufrufe
    S
    Just moved. It sucks. Why is everything so bloated with microsoft and poorly imemented.
  • S

    Spotify X Mod APK

    Technology technology
    1
    2
    1 Stimmen
    1 Beiträge
    17 Aufrufe
    Niemand hat geantwortet
  • P

    Experts warn mobile sports betting could be gateway to gambling crisis for young men in New York

    Technology technology
    31
    1
    195 Stimmen
    31 Beiträge
    330 Aufrufe
    isveryloud@lemmy.caI
    It's a loaded term that should be replaced with a more nimble definition. A dog whistle is the name for a loaded term that is used to tag a specific target with a large baggage of information, but in a way where only people who are part of the "in group" can understand the baggage of the word, hence "dog whistle", only heard by dogs. In the case of the word "degeneracy", it's a vague word that has been often used to attack, among other things, LGBTQ and their allies as well as non-religious people. The term is vague enough that the user can easily weasel their way out of criticism for its usage, but the target audience gets the message loud and clear: "[target] should be attacked for being [thing]." Another example of such a word would be "woke".
  • gedaliyah@lemmy.worldG

    Have LLMs Finally Mastered Geolocation? - bellingcat

    Technology technology
    3
    1
    50 Stimmen
    3 Beiträge
    40 Aufrufe
    R
    Depends on who programed the AI - and no, it is not Kyoto
  • C

    Interactive McCabe-Thiele Diagram Calculator for Binary Distillation - ChemEnggCalc

    Technology technology
    1
    1
    1 Stimmen
    1 Beiträge
    19 Aufrufe
    Niemand hat geantwortet
  • deltawingdragon@sh.itjust.worksD

    Chrome using Gemini Nano for ‘Enhanced Protection’ against scams

    Technology technology
    8
    1
    1 Stimmen
    8 Beiträge
    72 Aufrufe
    L
    I think the principle could be applied to scan outside of the machine. It is making requests to 127.0.0.1:{port} - effectively using your computer as a "server" in a sort of reverse-SSRF attack. There's no reason it can't make requests to 10.10.10.1:{port} as well. Of course you'd need to guess the netmask of the network address range first, but this isn't that hard. In fact, if you consider that at least as far as the desktop site goes, most people will be browsing the web behind a standard consumer router left on defaults where it will be the first device in the DHCP range (e.g. 192.168.0.1 or 10.10.10.1), which tends to have a web UI on the LAN interface (port 8080, 80 or 443), then you'd only realistically need to scan a few addresses to determine the network address range. If you want to keep noise even lower, using just 192.168.0.1:80 and 192.168.1.1:80 I'd wager would cover 99% of consumer routers. From there you could assume that it's a /24 netmask and scan IPs to your heart's content. You could do top 10 most common ports type scans and go in-depth on anything you get a result on. I haven't tested this, but I don't see why it wouldn't work, when I was testing 13ft.io - a self-hosted 12ft.io paywall remover, an SSRF flaw like this absolutely let you perform any network request to any LAN address in range.