https://m.slashdot.org/story/435739

go to the cloud they said
itll be fine they said

Slashdot

@Viss

The purpose of Microsoft is [redacted].

You would not believe me anyway.

The [redacted] is two words, abbreviation EE.

@SpaceLifeForm surely you mean FVEY

@Viss

Same difference.

It all depends if the economic information is used for good or bad.

@Viss time to fire everyone in IT that read the documents. Including those that are now not going to patch it. 
@Viss That is almost as suprising as Slashdot still existing.
@Viss I find the cloud to be one of the most waste of resources ever.
@alex02 BUT SERVERLESS, ALEX
@Viss IT IS STILL A GODDAMN BOX THAT LIGHTS UP!!!
@Viss I hate the cloud second to NAT. Fuck NAT.
@alex02 why do you hate nat?
@Viss I just find it a messy solution to a problem and it has been a pita to deal with for certain projects cuz I am a broke ass and can't setup a vps all the time for stuff like my own vpn server via wireguard.
@alex02 have you messed with google cloud shell at all? theres a free tier. same with aws! plenty of power for a one user wg setup
@Viss I looked at them before, but they usually require a fuck ton of personal information including a working phone number (I don't have that). They also had a lot of fine print and weird tiers so I decided not to risk get screwed even more and not risk overdrafting my bank account.
@alex02 hm. ask around for a shell, i guess? digital ocean can do $5/mo vms

@Viss funny enough, there are a few projects and services that work to getting around the NAT, but haven't had a chance to properly look at any of their libraries and write programs.

Zerotier is a nice one, but they recommend wrapping the traffic with encryption on top of zerotier since it is e2e and shouldn't be trusted 100%. Not that it isn't safe to use, but just the nature of e2e.

Under the hood they usually use nat traversals and holepunching. It is quite interesting tbh...

@alex02 look into nebula - just like zerotier but you control the server end
@Viss nebula requires a lighthouse which needs to be accessible from anywhere. Same thing with tinc. In theory I could try to hardcode the various nodes, but haven't messed with that stuff in a while.
@Viss outsource your risk to an entity with no stake but profit, they didn't say.
@tjbutt58 you can outsource the work, but you cant outsource the risk - no matter how hard you flex that collegiate legal lexicon in the contract
Single Point of Failure: The (Fictional) Day Google Forgot To Check Passwords

YouTube
@Viss Didn't MS just say "security" is the highest focus now? lol
@kwramm they are the most recent org to get hauled in front of a congressional committee and outright lie, to then not be held accountable. yes
@Viss "IT departments at some companies have set up lax permissions" lolol...

@Viss lol. They announced a new health benfiets at work. But it's run by Telus and the user agreement states they can feed your health data to their AI.

No thanks

@Jam123 run awaaaaaay
@Viss yea I said nope to HR. My current benefits will do and if you take those away I guess I'll just die

@Viss I blame the internal IT professionals, not the default settings on this feature.

Yes.

@Viss
The companies using this flavor of copilot should be sued by anyone holding an NDA with them and get all information security related certifications revoked.

@Viss

HAHHAHAHAAAAAAAAAAAA
HAHAHAHHAHAHHAHAHAAHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

HA!

@Viss : predicted this nearly 2 years ago : https://ploum.net/2023-02-15-ai-and-privacy.html

The worst of all is that, even if those documents are hallucinated, it will cast a doubt.

Modern AI and the end of privacy

Modern AI and the end of privacy par Ploum - Lionel Dricot.

@Viss the idea that you can put all the private information on a huge pile and build a privacy solution on top of the outputs seems ludicrous.

@Viss They keep using phrases like "Copilot's magic".

It's. Not. Magic.