Skip to content
linux-nerds.org

linux-nerds.org
  1. Übersicht
  2. Technology
  3. You're not alone: This email from Google's Gemini team is concerning

You're not alone: This email from Google's Gemini team is concerning

Technology
298 182 1.7k
Anmelden zum Antworten

  • P

    Robot performs first realistic surgery without human help: System trained on videos of surgeries performs like an expert surgeon

    Technology technology
    113
    1
    334 Stimmen
    113 Beiträge
    402 Aufrufe
    E
    Into volunteers it's not standard practise to randomly put a chip in your head.
  • E

    What is SIEM (Security Information and Event Management)?

    Technology technology
    1
    1
    3 Stimmen
    1 Beiträge
    12 Aufrufe
    Niemand hat geantwortet
  • D

    Connor Myers: As if graduating weren’t daunting enough, now students like me face a jobs market devastated by AI

    Technology technology
    30
    1
    198 Stimmen
    30 Beiträge
    164 Aufrufe
    D
    This guy gets it. And from my professional experience, Gen Z sucks at separating the two.
  • B

    Is AI Apocalypse Inevitable? - Tristan Harris

    Technology technology
    11
    1
    121 Stimmen
    11 Beiträge
    61 Aufrufe
    V
    Define AGI, because recently the definition is shifting down to match LLM. In fact we can say we achieved AGI now because we have machine that answers questions. The problem will be when the number of questions will start shrinking not because of number of problems but number of people that understand those problems. That is what is happening now. Don't believe me, read the statistics about age and workforce. Now put it into urgent need to something to replace those people. After that think what will happen when all those attempts fail.
  • A

    Palantir hits new highs amid Israel-Iran conflict

    Technology technology
    4
    1
    41 Stimmen
    4 Beiträge
    31 Aufrufe
    W
    I think both peace and war are profitable. But those that profit from war may be more pushy than those that profit from peace, and so may get their way even as an unpopular minority . Unless, the left (usually more pro peace) learns a few lessons from the right and places good outcomes above the holier than thou moral purity. "I've never made anyone uncomfortable" is not the merit badge that some think it is. Of course the left can never be a mirror copy of the right because the left cannot afford to give as few fucks about anything as the right (who represent the already-haves economic incumbents; it's not called the "fuck you money" for nothing). But the left can be way tougher and nuancedly uncompromising and even calculatingly and carefully millitant. Might does not make right but might DOES make POLICY. You need both right and might to live under a good policy. Lotta good it does anyone to be right and insightful on all the issues and have zero impact anywhere.
  • A

    Trump Taps Palantir to Compile Data on Americans

    Technology technology
    34
    1
    205 Stimmen
    34 Beiträge
    166 Aufrufe
    M
    Well if they're collating data, not that difficult to add a new table for gun ownership.
  • A

    Community organizations in Milwaukee call for oversight of police surveillance

    Technology technology
    1
    35 Stimmen
    1 Beiträge
    13 Aufrufe
    Niemand hat geantwortet
  • deltawingdragon@sh.itjust.worksD

    Chrome using Gemini Nano for ‘Enhanced Protection’ against scams

    Technology technology
    8
    1
    1 Stimmen
    8 Beiträge
    40 Aufrufe
    L
    I think the principle could be applied to scan outside of the machine. It is making requests to 127.0.0.1:{port} - effectively using your computer as a "server" in a sort of reverse-SSRF attack. There's no reason it can't make requests to 10.10.10.1:{port} as well. Of course you'd need to guess the netmask of the network address range first, but this isn't that hard. In fact, if you consider that at least as far as the desktop site goes, most people will be browsing the web behind a standard consumer router left on defaults where it will be the first device in the DHCP range (e.g. 192.168.0.1 or 10.10.10.1), which tends to have a web UI on the LAN interface (port 8080, 80 or 443), then you'd only realistically need to scan a few addresses to determine the network address range. If you want to keep noise even lower, using just 192.168.0.1:80 and 192.168.1.1:80 I'd wager would cover 99% of consumer routers. From there you could assume that it's a /24 netmask and scan IPs to your heart's content. You could do top 10 most common ports type scans and go in-depth on anything you get a result on. I haven't tested this, but I don't see why it wouldn't work, when I was testing 13ft.io - a self-hosted 12ft.io paywall remover, an SSRF flaw like this absolutely let you perform any network request to any LAN address in range.