sybercecurity

Most people will see this as unfair and it will distort economic measurement by doing alway with price signals. I would think the blowback will be about the abuse that can (likely will) happen.

"I see based on your social media posts you have a family member in hospice. Now you're buying a airline ticket to their city. You must really want to see them so I'm guessing you'll pay a 100% markup..."

There were stories like that about the old Eliza program. All it did was reframe what was typed into a question but that was enough to get some people to talk about their feelings and, in some cases, work through issues. So I can see an LLM being a better version of Eliza.

It's getting to the point where the news should be who isn't in on the deal.

Record breaking and not using source address spoofing? That doesn't sound good.

The reasoning in the post aligns with some other talks I've heard about how really we can only set policies and credentials around names: hostnames, service names, etc. IP address mean nothing now with cloud deployments.

Didn't something also happen to the band Chumbawamba? For those lucky enough to not remember, they were a one hit wonder in the late 90's (song called "Tubthumping"). The bad was made up of fairly hardcore leftist/anarchist/anti-capitalist members. Once their one hit made it big, they were supposedly asked to do a bunch of corporate gigs, shows, etc. Half of the band wanted to do the gigs, other half didn't want to take corporate money so the band broke up.

What is the business case for Tesla Diners? I can only think of Tesla/EV drivers on road trip looking for a place along their route to kill time while recharging. That can't be that big enough of a market.

Noticed that too. The first part sounded a lot like like the same doom-n-gloom stories from generations past. I've been told my life will be over/meaningless due to nuclear war, AIDS, global warming, peak oil, etc. AI seems to be the media's latest boogeyman. Maybe in sharper focus for them since it aims directly as their business model.

The later part just feels like the normal Internet boom stories, but trying to tell it through a fatalistic POV: If you can't beat 'em, join 'em until they devour you.

This feels like another case where there should be legislation, but would never get done. It would also require admitting that auditing requirements are so burdensome that they are used to arbitrarily enforce policies, which no one wants to do.

I haven't seen the text of the bill, so don't know for sure. If it says "resolvers must block site" then yes, running your own resolver would still work. If it says "domain registries must remove delegation" then it won't, but that could only be enforced for registries that are based in the US. Unless your ISP blocks well-known DNS ports, which none due as far as I've found.

The article says one of the requirements for the complaint needs to be that the site to be blocked must be found to be foreign based, so I guess the assumption is that the current set of laws to take down the site or sue are unavailable.

Thread was pretty much a greenfield deployment at the time, so it use of IPv6 was easy to specify. There was now legacy IPv4 to support or otherwise it would probably be a mess as well.

>But governments haven't, so they're the last ones left standing because someone must determine what is permissible.

That is somewhat intentional. Governments haven't, usually because they believe they will lose in court (at least in the US), but they still want restrictions so there is pressure put on payment processors to make the determination. That way, it is a private entity doing the banning and not the government. Or at least that is the appearance.

This looks like a WiFi version of the Helium network. At least you don't need to buy a LoRaWAN (now 5G) access point/miner to participate.

> "...he incumbent vendor uses restrictive licensing practices that make it prohibitively expensive for the government to fire them and switch to a different vendor."

That's only one part of lock-in. The more expensive part is the cost of migration. This includes replacing other tools or code, and retraining people to use the new vendor's products. It's often thought of as cheaper to just stick with the vendors you (and staff) know than embarking on a migration project with a unknown cost.

This could be dismissed as a sunk cost fallacy, but that thinking is common.

Thanks. I was wondering what that rattling noise was when I turned my head.

One theory is it is the feedback from all the Ghibli stuff that went on a few months back. These tones first started appearing there for skin tone or even sky, then started appearing everywhere.

Probably correct - and looking to stop the inevitable one upmanship that would happen. If one team has an encoded image, then the next wants to do a little game, then a more complex easter egg, etc. until something breaks or causes a PR issue.

Apparently no solution that has gained traction, and no single solution that works everywhere. Source address filtering (BCP 38) got us part of the way, but it's difficult/undesired to do in data centers.

IoT devices (speculated to be used here) would have to have a solution upstream. Things like MUD (RFC 8520) have been proposed, but have problems too - developers need to be able to list all communications of their device and make that available somehow (MUD profile server). Some consumers will never do it on their own, and may want to prevent alerting a device manufacturer they have a device (think connected adult toy...).

Also given that IoT devices may never be updated by their owners, expect to see IoT botnet DoS attacks for years.

Who cares? It's cheaper if you plan on letting go of all staff except for one overworked person who just follows prompts from the AI.

Probably, but security folk are pessimists by nature so we assume it will happen since it's in the job description. We also know that the actual transition to PQC algos will take years.

This article confuses recursive servers and root servers. K and I are authoritative root servers, and only respond with delegations to the appropriate TLDs (or error codes). DNS4EU is a public recursive service, like Google and Cloudflare. DNS4EU may have other issues like the referenced article suggests, but the article is conflating different DNS roles.

My initial thought as well. May be overly chatty, but there may be a good intention behind it like "system seems to be idle for a while, now would be a good time to check for updates"

I'd wager Windows does something similar. Linux distros may do it, but also may not since they may not be obsessed with happy eyeball problems and user perception of speed/latency.

The actual article doesn't mention AI, but the more likely factor of the potential fallout/punishment of recent court ruling against Google.

Q-Day is in a superimposed state! It's everyday from today to the heat death of the universe. We won't know for sure until we measure it.

We might be near the point where the answer to: "Who do you trust - me or your own eyes?" changes. From https://quoteinvestigator.com/2018/07/31/believe-eyes/

I assume that "donation" also doesn't include graduates giving things to returning students. No way to even track that.

This amount doesn't really surprise me. This has been happening ever since students were in dorms. Even in my little liberal arts school, people would dumpster dive for stuff in the dorms where the rich kids lived. The dedicated divers would even go around after Thanksgiving break and the end of fall semester, when the kids who were too into partying left (or were kicked out) and just left stuff behind that the RA threw out.

Where is PQC used? End-to-end or SMTP over TLS (hop-by-hop)? If it is end-to-end, can you easily export a user's public key so they can share it with others?

Wow - looks impressive. Like the direction it's going. Doing things where access policies can be set as code is the way to go IMHO.

One issue I've heard from ZTA early adopters is the lack of interoperability between the various ZTNA solutions. Not a big problem unless you have two organizations that have different solutions that now have to work together (merger, partnership, etc.). Ironically, I have overheard people complain enough that they would pay for a FOSS solution...

That sentiment isn't shared across the whole of the US. One area is in kid stuff. Thrift/secondhand stores selling baby/small child clothes are very common in most suburbs. Kids outgrow stuff very quickly so a lot of parents go to stores that specialize in baby clothes, toys, and various stuff. New designer kid's clothes are mostly bought by grandparents or first time parents. There are some stores the specialize in secondhand sports equipment too - so parents can have a trial run to see if their kid really likes a new sport before investing in it.

Online marketplaces seem to dominate the secondhand market in the US though. Or there is a storefront but also has a big online presence.

I used MailMate (https://freron.com/) before and I liked it. Very customizable and the search functionality is better than Apple Mail or Outlook. Has some tool extensions to allow it to interact with some other apps.

It does not have a built in calendar though, so you will need to either get something else (there is an extension to allow MailMate to work with some calendars).