bsmartt

damn this reddit thread is 3 months old? t1 here as well, and i struggle pretty bad. having been t1 for 20 years or more, i just can't click every article my friends and family send me promising progress for diabetics or potential cures. its just not worth getting my hopes up even when its a reputable outlet making some extraordinary claims. this sounds really promising but yea. its also depressing. its kinda too late to save me even if this comes very soon. which i doubt it will. However, this so called 'smart insulin' sounds to me much more like the shit produced by non-diabetics pancreases. like theres just no way the non-diabetic body is making a hormone that doesnt fully kick in for 90 minutes. that just wouldnt be as resilient and effective as what i witness in the people around me. its insane how they can, for example, eat a tub of ice cream on a whim and not be blasted into the 400s. or just go wild exercising at length on an empty stomach and not have an emergency low sugar.

if anything this is a very promising benchmark for the new tech,. we're getting close.

so what this means if NPUs are anywhere close to CPUs in the benchmarks is that NPUs are going to blow past CPUs very soon, because CPUs dont have much more weight to shed whereas NPUs are just getting started.

You dont seriously think MSFT expects this shit to benefit consumers do you? Their datacenters are overheating and the billing meter is still ticking while they burn, they need to figure out how to get consumers to start paying for this shit before they go broke and wall st sells them off for parts..

Either way, these are some of the first personal computers to have NPUs. They will improve. CPUs are 20 years optimized, this is literally the first try for some of these companies

what are all these folks hoping to accomplish? By crying and starting shit about windows recall, all you did was signal to their shareholders and the financial analysts that windows recall actually substance and not just a marketing facade. Otherwise, why would all those nerds be so angry?

So microsoft takes some of the criticisms on twitter and gets them in before shipping. Free appsec, nice.

Now, microsoft doesnt care about your benchmarks, dude. Grandma isnt gonna notice these workloads finish faster on a different compiled program utilizing different chips. Her last PC was EOL'd 10 years ago, it certainly cant keep up with this new ai laptop.

i dont think anyone who is well versed in today's threats is saying to the company board members "i mean, really guys, this whole security/risk thing.. all smoke and mirrors... wasting our money on fun and games". BF as a consulting company is pretty fucking on point in my perspective, but if i were going to throw shade at a more broad swath such as the whole infosec industry from <insert stealth / yc funded AI based cyber startup> to <DARPA / Giant AntiVirus corp> I would probably diverge slightly with something more like 'there is so much snake oil, lack of proven and holistic solutions, freemium consumer products shamelessly bait and switch'ing everyday people who caught an infected flash installer online, etc, hiding amongst however many legitimate value propositions on offer that it's like ... when disaster does come, I'd reckon is more or less a coin toss as to whether our investment into CYBERHaxPreventor56000 will have delivered some portion of the price tag in returns to us. Seem like a fair response to your points?

Just so we're all clear, the question about facebook and phones specifically is not new..

2016: https://qz.com/697923/heres-how-to-stop-facebook-from-listen... https://www.independent.co.uk/tech/facebook-using-people-s-p...

2018: https://money.com/how-to-turn-off-phone-microphone-facebook-...

2019: https://newatlas.com/computers/facebook-not-secretly-listeni...

google search that badboy, my man

So the "Hey siri"/"alexa"/"Ok Google", those features don't show your mic is recording, i dont think. Whether it's TVs or phones. all of the speech recognition and hands free control features are probably enough. there are masses of consumers that opt-in to these companies collecting data "to improve services" and other sketchy stuff. Honestly, I would think if you wanted to build a business around this it would be much better to go after the data collected behind EULAs that never got read than try to collect data from people who have all that shit turned off..

I promise you there are better ways to manipulate people in this situation. Like a keylogger. That way, your hypothetical LGBTQ child can't evade your monitoring by using an incogneto tab or simply pausing recall when they login.

steal their browser data. i haven't wiped my browser history in years, and that is just easy to search list of URLs dont need to be parsed out of some db blob (not something many anti-LGBTQ parents know how to / are going to do...). Steal their cookies and access their logged in social media accounts directly. Steal their saved passwords. Browse through the cached images and videos.

> Even then, we're still talking about a perfect surveillance engine

not even close. not going to beat this to a pulp but just to give you an idea, this does not scale well, not at all. are you going to look through 25 gb of photos? what if it's 90% cat pictures.

would you enable it when interviewing candidates for your team. so when you go to complete your assessment you can go back to something they said or some code they wrote?

current laptop here is late 2023 mb pro with m3 max, and some things i really like about it, but i miss the x64 arc. 2 days ago I needed to run a kali linux vm and i plugged in an external ssd where i keep a bunch of my VMs. Theyre useless now though since they aren't aarm64 , theyre x64. I have a lot of stuff related to vagrant and packer that cant even be migrated the products themselves dont support or even just shit the bed on execution. Mixed bag.

i think you are wrong. they are trying to convince the average consumer that they need this new laptop with special hardware because they have exclusive magical features (read: OCR) like windows recall. theyre making it intentionally exclusive and locally computed specifically to brag about new capabilities.

fine, but that then requires a google chrome sandbox escape or visiting an attacker controlled page, my point was just that the initial claim was rather oversimplified.

i mean... no one is going to convince you of anything if youre speaking of some hypothetical future possibility. But at least acknowledge theyve improved on security. Defender is included with windows, theyve been steady shipping significant and effective protections like device guard and smartscreen. and maybe you hate edge, but it unquestionably better than IE. i can't defend the heavy marketing and ads in windows 11 other than to say power users can disable that shit entirely. If that isn't good enough, then i think youre right and probably won't ever be one of their customers. thankfully there are other choices though :)

i get the impression you aren't much aware of the existing ways employers monitor activity of their workforce at scale for both windows and mac users without needing to browse through GBs of screenshots on a regular basis.

have you bothered to do any research whatsoever? there are privacy oriented config controls documented in the top hit on google: https://support.microsoft.com/en-us/windows/retrace-your-ste...

and already developer apis for interop.. https://learn.microsoft.com/en-us/windows/ai/apis/recall

i really don't see this being used in the enterprise environment. first off, employees without a need for an NPU probably wont be given one. its like who right now is giving out hardware to employees with sick graphics cards? i don't think anyone. There are much easier ways to spy on your workforce already, like deep traffic inspection.

thanks for the links. as far as i can telll 38193 is just a priv esc so they need code execution locally first. but the two exploits you linked could possibly be chained together and that would be a pretty sophisticated attack, especially when they were 0day. but still, if you are behind a router they cant just throw this at any consumer.

> To help maintain your privacy, Recall processes your content locally on the Copilot+ PC and securely stores it on your device.

its an attempt by microsoft to flex about their new "AI PC" which just means it comes with this npu that is optimized for the processing workloads associated with various ai usecases. an attempt to profit on the AI hype by pitching their users reason to buy a new computer.

it really isnt as bad as people on twitter say it is. msft is easy to throw shade at, and a lot of bandwagoning. trust me, im an expert.

linux has had some pretty bad bugs as well. "North Korea" (not sure why you threw that in? are they exploiting this specific vuln ITW?) can only drop this if they can send you packets which they'd need to be on your network to do, or for this machine to have ports open directly to the public internet, and that shouldn't be the case for my mama's laptop...

this isn't the case, both are stored. microsoft's website has a number of pages about the feature.

I got downvoted and patronized pretty hard in a thread a while back for pushing back (as much as I dont ever want to defend microsoft). https://news.ycombinator.com/item?id=40595344

I think it got shipped a bit hastily, but also dont think hackers will find it more attractive than dropping keyloggers, banking trojans, or ransomware. And screenshots can be photoshopped, so I don't know, I really doubt anyone will care to flip through 25 gb of screenshots.

Also, I'd be interested in a feature like this enabled while interviewing candidates as well as interviewing with potential employers, or while taking courses online, probably a lot of stuff ive not yet thought about too.

Would you rather your it department have a root cert trust authority installed in your trust chain or recall running? The levels are already astronomical if wanted.

Following this logic you really shouldn’t use Microsoft products. Or Apple. Or google. Or Mozilla. Either way, you are better off with a bug in this dumb as hell feature than you are with a bug in your web browser. Yet here we are, spurging out over recall.

We can talk about vulnerabilities that’s the first decent point I’ve seen in this entire comment section.

So youre saying that since there will be vulnerabilities (discovered and hopefully patched quickly) this Is a privacy violation?

If anything what you point out is good, we should all audit the feature on launch. Probably gonna be some good bug bounties here.

The nsa doesn’t need recall to gather signals. They can gather higher fidelity data directly as text, network traffic. If the historical data is what concerns you, that assumes the nsa wants to sneak in and then sneak out, but they will just stay there forever. Why only 3 months when you could stay forever.

well good news, this feature can be 100% disabled by your IT team, and you dont need these snapdragon high end consumer laptops in your hospital anyway.

why am i having to defend microsoft? have we all lost our minds? or do we just shoot first, ask questions later for the lulz

the data is encrpyted.the data is encrpyted.the data is encrpyted.the data is encrpyted.the data is encrpyted.the data is encrpyted.

right, azure ai running on your device. microsoft cannot access shit on your device.

by saying this, you are also claiming microsoft has windows 11 backdoored.

and thanks for the heads up, thats news to me.