Skip to content
linux-nerds.org

linux-nerds.org
  1. Übersicht
  2. Technology
  3. You're not alone: This email from Google's Gemini team is concerning

You're not alone: This email from Google's Gemini team is concerning

Technology
234 152 0
Anmelden zum Antworten

  • P

    Robot eyes are power hungry. What if we gave them tools inspired by the human brain?

    Technology technology
    12
    1
    76 Stimmen
    12 Beiträge
    5 Aufrufe
    A
    Let's not? I think we've had enough robots with AI for now. Thank you.
  • P

    Experts warn mobile sports betting could be gateway to gambling crisis for young men in New York

    Technology technology
    31
    1
    195 Stimmen
    31 Beiträge
    8 Aufrufe
    isveryloud@lemmy.caI
    It's a loaded term that should be replaced with a more nimble definition. A dog whistle is the name for a loaded term that is used to tag a specific target with a large baggage of information, but in a way where only people who are part of the "in group" can understand the baggage of the word, hence "dog whistle", only heard by dogs. In the case of the word "degeneracy", it's a vague word that has been often used to attack, among other things, LGBTQ and their allies as well as non-religious people. The term is vague enough that the user can easily weasel their way out of criticism for its usage, but the target audience gets the message loud and clear: "[target] should be attacked for being [thing]." Another example of such a word would be "woke".
  • W

    Is Matrix cooked?

    Technology technology
    54
    100 Stimmen
    54 Beiträge
    15 Aufrufe
    W
    Didn't know it only applied to UWP apps on Windows. That does seem like a pretty big problem then. it is mostly for compatibility reasons. no win32 programs are equipped to handle such granular permissions and sandboxing, they are all made with the assumption that they have access to whatever they need (other than other users' resources and things that require elevation). if Microsoft would have made that limitation to every kind of software, that Windows version would have probably been a failure in popularity because lots of software would have broken. I think S editions of windows is how they tried to go in that direction, with a more drastic way of simply just dropping support for 3rd party win32 programs. I don't still have a Mac readily available to test with but afaik it is any application that uses Apple's packaging format. ok, so if you run linux or windows utils in a compatibility layer, they still have less of a limited access? by which I mean graphical utilities. just tried with firefox, for macos it wanted to give me an .iso file (???) if so, it seems apple is doing roughly the same as microsoft with uwp and the appx format, and linux with flatpak: it's a choice for the user
  • rmdebarc_5@sh.itjust.worksR

    Trump Mobile launches $47 service and a gold phone

    Technology technology
    129
    1
    358 Stimmen
    129 Beiträge
    9 Aufrufe
    S
    Why mention it? Because the media has a DUTY to call out a corrupt government! Because they're not doing their job!
  • D

    Tesla is trying to prevent the city of Austin, Texas, from releasing public records involving self-driving robotaxis

    Technology technology
    9
    1
    386 Stimmen
    9 Beiträge
    9 Aufrufe
    C
    Melon Usk doomed their FSD efforts from the start with his dunning-kruger-brain take of "humans drive just using their eyes, so cars shouldn't need any sensors besides cameras." Considering how many excellent engineers there are (or were, at least) at his companies, it's kind of fascinating how "stupid at the top" is just as bad, if not worse, than "stupid all the way down."
  • S

    DeepSeek's distilled new R1 AI model can run on a single GPU | TechCrunch

    Technology technology
    21
    1
    88 Stimmen
    21 Beiträge
    8 Aufrufe
    J
    The self hosted model has hard coded censored content.
  • V

    Microsoft wants Windows Update to handle all apps

    Technology technology
    45
    1
    62 Stimmen
    45 Beiträge
    18 Aufrufe
    N
    the package managers for linux that i know of are great because you can easily control everything they do
  • deltawingdragon@sh.itjust.worksD

    Chrome using Gemini Nano for ‘Enhanced Protection’ against scams

    Technology technology
    8
    1
    1 Stimmen
    8 Beiträge
    8 Aufrufe
    L
    I think the principle could be applied to scan outside of the machine. It is making requests to 127.0.0.1:{port} - effectively using your computer as a "server" in a sort of reverse-SSRF attack. There's no reason it can't make requests to 10.10.10.1:{port} as well. Of course you'd need to guess the netmask of the network address range first, but this isn't that hard. In fact, if you consider that at least as far as the desktop site goes, most people will be browsing the web behind a standard consumer router left on defaults where it will be the first device in the DHCP range (e.g. 192.168.0.1 or 10.10.10.1), which tends to have a web UI on the LAN interface (port 8080, 80 or 443), then you'd only realistically need to scan a few addresses to determine the network address range. If you want to keep noise even lower, using just 192.168.0.1:80 and 192.168.1.1:80 I'd wager would cover 99% of consumer routers. From there you could assume that it's a /24 netmask and scan IPs to your heart's content. You could do top 10 most common ports type scans and go in-depth on anything you get a result on. I haven't tested this, but I don't see why it wouldn't work, when I was testing 13ft.io - a self-hosted 12ft.io paywall remover, an SSRF flaw like this absolutely let you perform any network request to any LAN address in range.