Skip to content
linux-nerds.org

linux-nerds.org
  1. Übersicht
  2. Technology
  3. McDonald’s AI Hiring Bot Exposed Millions of Applicants’ Data to Hackers Who Tried the Password ‘123456’

McDonald’s AI Hiring Bot Exposed Millions of Applicants’ Data to Hackers Who Tried the Password ‘123456’

Technology
62 49 0
Anmelden zum Antworten

  • flango@lemmy.eco.brF

    Large Language Model Performance Doubles Every 7 Months

    Technology technology
    53
    1
    100 Stimmen
    53 Beiträge
    219 Aufrufe
    V
    in yes/no type questions, 50% success rate is the absolute worst one can do. Any worse and you're just giving an inverted correct answer more than half the time
  • 2xsaiko@discuss.tchncs.de2

    The Decline of Usability: Revisited | datagubbe.se

    Technology technology
    2
    0 Stimmen
    2 Beiträge
    14 Aufrufe
    2xsaiko@discuss.tchncs.de2
    Just saw this article linked in a ThePrimeagen video. I didn't watch the video, but I did read the article, and all of this article is exactly what I'm always saying when I'm complaining about current UI trends and why I'm so picky about the software I use and also the tools I use to write software. I shouldn't have to be picky, but it seems like developers (professional and hobbyist alike) don't care anymore and users don't have standards.
  • U

    The Rise of Ukraine’s Domestic Defence Industry: Innovation Under Fire

    Technology technology
    1
    1
    34 Stimmen
    1 Beiträge
    9 Aufrufe
    Niemand hat geantwortet
  • bimbimboy@lemm.eeB

    Danish Ministry Replaces Windows and Microsoft Office with Linux and LibreOffice

    Technology technology
    22
    1
    479 Stimmen
    22 Beiträge
    98 Aufrufe
    professorchodimaccunt@sh.itjust.worksP
    GOOD lets chance of spAIyware on there
  • J

    The Browser Company, makers of Arc, launches Dia, an AI-first browser.

    Technology technology
    9
    1
    25 Stimmen
    9 Beiträge
    43 Aufrufe
    S
    I didn't care much about arc because it was chromium, but damn this is just bland and uninteresting compared to it
  • P

    Discord unveils Discord Orbs, a new in-app currency that users can earn by completing Quests, which reward participants who interact with ads

    Technology technology
    137
    1
    154 Stimmen
    137 Beiträge
    27 Aufrufe
    brewchin@lemmy.worldB
    If you're after text, there are a number of options. If you're after group voice, there are a number of options. You could mix and match both, but "where everyone else is" will also likely be a factor in that kind of decision. If you want both together, then there's probably just Element (Matrix + voice)? Not sure of other options that aren't centralised, where you're the product, or otherwise at obvious risk of enshittifying. (And Element has the smell of the latter to me, but that's another topic). I've prepared for Discord's inevitable "final straw" moment by setting up a Matrix room and maintaining a self-hosted Mumble server in Docker for my gaming buddies. It's worked when Discord has been down, so I know it works. Yet to convince them to test Element...
  • P

    30% of South Korean schools have adopted AI-powered digital textbooks since the country's education ministry began a full-scale rollout in March 2025

    Technology technology
    16
    1
    35 Stimmen
    16 Beiträge
    24 Aufrufe
    M
    This is what I want to know also. "AI textbooks" is a great clickbait/ragebait term, but could mean a great variety of things.
  • deltawingdragon@sh.itjust.worksD

    Chrome using Gemini Nano for ‘Enhanced Protection’ against scams

    Technology technology
    8
    1
    1 Stimmen
    8 Beiträge
    37 Aufrufe
    L
    I think the principle could be applied to scan outside of the machine. It is making requests to 127.0.0.1:{port} - effectively using your computer as a "server" in a sort of reverse-SSRF attack. There's no reason it can't make requests to 10.10.10.1:{port} as well. Of course you'd need to guess the netmask of the network address range first, but this isn't that hard. In fact, if you consider that at least as far as the desktop site goes, most people will be browsing the web behind a standard consumer router left on defaults where it will be the first device in the DHCP range (e.g. 192.168.0.1 or 10.10.10.1), which tends to have a web UI on the LAN interface (port 8080, 80 or 443), then you'd only realistically need to scan a few addresses to determine the network address range. If you want to keep noise even lower, using just 192.168.0.1:80 and 192.168.1.1:80 I'd wager would cover 99% of consumer routers. From there you could assume that it's a /24 netmask and scan IPs to your heart's content. You could do top 10 most common ports type scans and go in-depth on anything you get a result on. I haven't tested this, but I don't see why it wouldn't work, when I was testing 13ft.io - a self-hosted 12ft.io paywall remover, an SSRF flaw like this absolutely let you perform any network request to any LAN address in range.