Skip to content
linux-nerds.org

linux-nerds.org
  1. Übersicht
  2. Technology
  3. Trump extends the TikTok ban deadline for a third time; there is no legal basis for the extensions and it is unclear how many times the deadline can be extended

Trump extends the TikTok ban deadline for a third time; there is no legal basis for the extensions and it is unclear how many times the deadline can be extended

Technology
36 30 0
Anmelden zum Antworten

  • return2ozma@lemmy.worldR

    American attitudes about AI today mirror poll answers about the rise of the internet in the '90s

    Technology technology
    71
    1
    145 Stimmen
    71 Beiträge
    0 Aufrufe
    C
    I think people would find new ways to struggle that they actually enjoy and would likely end up contributing. Imagine a couple of thousand people with their new modest but stress free budgets decide to join a yearly potato cannon contest, Sure its not going to invent anything new directly but you now have a bunch of people learning about ballistics and stoichiometry and high pressure engineering all egging eachother on to shoot that potato further. The competition gets more and more fierce and with the much lower stakes people start trying some more out there ideas, before you know it you have a modest but highly effective solution to reliably obtaining the correct gas mixture for something like a combined light gas gun. And that's a deliberately silly example, you'd get a ton more art, people deciding to be athletes, coders, all sorts of hobies that can encourage healthy competition and often benefit society in surprising ways.
  • T

    The Case for Software Craftsmanship in the Era of Vibes — Zed's Blog

    Technology technology
    11
    1
    61 Stimmen
    11 Beiträge
    0 Aufrufe
    K
    If you use LLMs like they should be, i.e. as autocomplete, they're helpful. Classic autocomplete can't see me type "import" and correctly guess that I want to import a file that I just created, but Copilot can. You shouldn't expect it to understand code, but it can type more quickly than you and plug the right things in more often than not.
  • M

    The hidden time bomb in the tax code that's fueling mass tech layoffs

    Technology technology
    31
    1
    210 Stimmen
    31 Beiträge
    7 Aufrufe
    T
    In 2025 it would be anything above 3.6 million. It's a ton of money but here's a list of a few people that hit it. https://aflcio.org/paywatch/highest-paid-ceos Now if they added in a progressive tax rate for corporate taxes as well.... Say anything over 500 million in net profit is taxed at a 90+% rate. That would solve all sorts of issues. Suddenly investors of all these mega corps would be pushing hard to divide up the companies into smaller entities. Wealth tax in the modern age could be an inheritance tax. Anything over the median life earnings of individuals could be taxed at 100%. So median earnings in my area is $65K * 45 years (20-65k) = $2.93 million.
  • P

    An AI analyst made 30 years of stock picks – and outperformed human investors by a ‘stunning’ degree

    Technology technology
    14
    1
    15 Stimmen
    14 Beiträge
    4 Aufrufe
    S
    Why call it AI? Is it learning and said-modifying? If not then is it not just regular programming but "AI" sounds better for investors?
  • J

    How a Spyware App Compromised Assad’s Army

    Technology technology
    2
    1
    41 Stimmen
    2 Beiträge
    4 Aufrufe
    S
    I guess that's why you pay your soldiers. In the early summer of 2024, months before the opposition launched Operation Deterrence of Aggression, a mobile application began circulating among a group of Syrian army officers. It carried an innocuous name: STFD-686, a string of letters standing for Syria Trust for Development. ... The STFD-686 app operated with disarming simplicity. It offered the promise of financial aid, requiring only that the victim fill out a few personal details. It asked innocent questions: “What kind of assistance are you expecting?” and “Tell us more about your financial situation.” ... Determining officers’ ranks made it possible for the app’s operators to identify those in sensitive positions, such as battalion commanders and communications officers, while knowing their exact place of service allowed for the construction of live maps of force deployments. It gave the operators behind the app and the website the ability to chart both strongholds and gaps in the Syrian army’s defensive lines. The most crucial point was the combination of the two pieces of information: Disclosing that “officer X” was stationed at “location Y” was tantamount to handing the enemy the army’s entire operating manual, especially on fluid fronts like those in Idlib and Sweida.
  • deltawingdragon@sh.itjust.worksD

    Chrome using Gemini Nano for ‘Enhanced Protection’ against scams

    Technology technology
    8
    1
    1 Stimmen
    8 Beiträge
    5 Aufrufe
    L
    I think the principle could be applied to scan outside of the machine. It is making requests to 127.0.0.1:{port} - effectively using your computer as a "server" in a sort of reverse-SSRF attack. There's no reason it can't make requests to 10.10.10.1:{port} as well. Of course you'd need to guess the netmask of the network address range first, but this isn't that hard. In fact, if you consider that at least as far as the desktop site goes, most people will be browsing the web behind a standard consumer router left on defaults where it will be the first device in the DHCP range (e.g. 192.168.0.1 or 10.10.10.1), which tends to have a web UI on the LAN interface (port 8080, 80 or 443), then you'd only realistically need to scan a few addresses to determine the network address range. If you want to keep noise even lower, using just 192.168.0.1:80 and 192.168.1.1:80 I'd wager would cover 99% of consumer routers. From there you could assume that it's a /24 netmask and scan IPs to your heart's content. You could do top 10 most common ports type scans and go in-depth on anything you get a result on. I haven't tested this, but I don't see why it wouldn't work, when I was testing 13ft.io - a self-hosted 12ft.io paywall remover, an SSRF flaw like this absolutely let you perform any network request to any LAN address in range.
  • D

    X.com blocks access to Ekrem Imamoglu, leader of Turkey political opposition

    Technology technology
    77
    1
    589 Stimmen
    77 Beiträge
    11 Aufrufe
    F
    When a Lemmy instance owner gets a legal request from a foreign countries government to take down content, after they’re done shitting themselves they’ll take the content down or they’ll have to implement a country wide block on that country, along with not allowing any citizens of that country to use their instance no matter where they are located. Block me, I don’t care. You’re just proving that you can’t handle the truth and being challenged with it.
  • S

    Microsoft's AI Secretly Copying All Your Private Messages

    Technology technology
    4
    1
    0 Stimmen
    4 Beiträge
    6 Aufrufe
    S
    Forgive me for not explaining better. Here are the terms potentially needing explanation. Provisioning in this case is initial system setup, the kind of stuff you would do manually after a fresh install, but usually implies a regimented and repeatable process. Virtual Machine (VM) snapshots are like a save state in a game, and are often used to reset a virtual machine to a particular known-working condition. Preboot Execution Environment (PXE, aka ‘network boot’) is a network adapter feature that lets you boot a physical machine from a hosted network image rather than the usual installation on locally attached storage. It’s probably tucked away in your BIOS settings, but many computers have the feature since it’s a common requirement in commercial deployments. As with the VM snapshot described above, a PXE image is typically a known-working state that resets on each boot. Non-virtualized means not using hardware virtualization, and I meant specifically not running inside a virtual machine. Local-only means without a network or just not booting from a network-hosted image. Telemetry refers to data collecting functionality. Most software has it. Windows has a lot. Telemetry isn’t necessarily bad since it can, for example, help reveal and resolve bugs and usability problems, but it is easily (and has often been) abused by data-hungry corporations like MS, so disabling it is an advisable precaution. MS = Microsoft OSS = Open Source Software Group policies are administrative settings in Windows that control standards (for stuff like security, power management, licensing, file system and settings access, etc.) for user groups on a machine or network. Most users stick with the defaults but you can edit these yourself for a greater degree of control. Docker lets you run software inside “containers” to isolate them from the rest of the environment, exposing and/or virtualizing just the resources they need to run, and Compose is a related tool for defining one or more of these containers, how they interact, etc. To my knowledge there is no one-to-one equivalent for Windows. Obviously, many of these concepts relate to IT work, as are the use-cases I had in mind, but the software is simple enough for the average user if you just pick one of the premade playbooks. (The Atlas playbook is popular among gamers, for example.) Edit: added explanations for docker and telemetry