Jernej Simončič �

@jernej__s@infosec.exchange
253 Followers
147 Following
21.3K Posts

We should stop calling them “ad blockers”. If a site serves up a few banner ads as images like the old days, that’s fine. I don’t object to a site paying the bills, or seeing a banner ad.

They’re malware blockers and privacy protections. I don’t want a site popping up bullshit and trying to track me across the net. If that’s what a site is serving, it’s more than an ad, and I absolutely want to block it.

@tjw On the day Opteron was supposed to tape out, a colleague discovered a logic bug. After some analysis, we figured out we could fix it by disconnecting a wire from one gate and attaching it to another. But running through or design flow would take days, and the ripple effect of changing connectivity could cause more problems. So I loaded the chip mask into VIM and modified the polygons directly, then we taped it out.

Don’t remember for sure, but I don’t think we told management 🙂

OK, OK, ok, story time.

Way back when (early 90s), when Omni was consulting for McCaw Cellular (or AT&T Wireless, not sure which it was at the time), we were working on apps for NeXTSTEP for sales, customer care, and such for cell phones, nation wide. We'd occasionally get a crash reports and I don't even remember how those got back to us back in the day before automated collection and reporting, but eventually we were able to reproduce it.

Back then NeXT was using gcc as the system compiler and it turns out that the `new[]` C++ operator would allocate room for the stuff you asked for, plus an extra word at the front of the block, where it would store the count (and then give you the shifted address). Except at some point that changed because it was silly and that redundant count was removed. Except that *also* `delete[]` still took the pointer given and loaded the word *before* it to load the count (and then did nothing with it). Given enough hours, you'd eventually have `delete[]` looking off into a previous unallocated page get a stern talking to from the MMU.

Having discovered this, and not having a way to patch the compiler or system libraries, I instead wrote a perl script to process the assembly output of the compiler, find instances of this and fix them, hand verifying each fix was correct while the hack was needed, and every compiled file went through this until we got new tools that fixed the problem for real.

Duct tape and bailing wire, y'all.

Motherboard manufacturer Gigabyte has failed to patch four vulnerabilities in its UEFI firmware.

The vulnerabilities can allow attackers to take over the System Management Mode (SMM), a highly privileged section of the CPU

https://kb.cert.org/vuls/id/746790

CERT/CC Vulnerability Note VU#746790

SMM callout vulnerabilities identified in Gigabyte UEFI firmware modules

it should clean right up

General reminder:

The domain name putty.org is *NOT* run by the #PuTTY developers. It is run by somebody not associated with us, who uses the domain to interpose advertising for their unrelated commercial products. We do not endorse those products in any way, and we have never given any kind of agreement for PuTTY's name to be used in promoting them.

Please do not perpetuate the claim that putty.org is the PuTTY website. If anyone is linking to it on that basis, please change the link. The PuTTY website is https://www.chiark.greenend.org.uk/~sgtatham/putty/ and it always has been.

You can check this by downloading the source code, which cites that URL in many places (the README, the documentation, some strings in the actual code), or by using the "Visit Web Site" menu options in the official Windows binaries (the ones signed with my personal Authenticode certificate). The true PuTTY website is the one that PuTTY itself says it is.

Many search engines list putty.org above chiark. I don't know if this is due to active SEO on the part of the domain owner, or a heuristic in the rankings. Either way, don't believe them. It's not our site.

PuTTY: a free SSH and Telnet client

Read “The Psychology of Money”

On having enough.

#books

×
Happy horse on Mars day!
Please Stop Praying For My Horse, You Are Making Him Too Powerful

@CactuarJoe

(In Coleman Francis nonsensical voice-over voice)

"A man neighs, someone shoots at him. Horse on the Mars. How did it get there?"

@CactuarJoe (Rod Serling voice) “You're traveling to an outer dimension, a dimension not only of moons and stars but of horse. A journey into a wondrous universe whose boundaries are that of AI Overviews. That’s the signpost up ahead – your next stop, the MoonHorse Zone!”
@CactuarJoe Her name was Rose and she was magnificent!
@CactuarJoe I wasn't aware that horses are so evolved and intelligent to do that. Probably they're are rivals with NASA right now.
@psyhackological @CactuarJoe They heard about all the mares on the moon but overshot.
@psyhackological @CactuarJoe Analysis of their telemetry suggests an error with the mane engines.
@CactuarJoe it's a godawful horse affair, to the girl with the mousy hair
@CactuarJoe @cstross It was a horse with no name, from America.

@CactuarJoe is that the horse there was in New Orleans?
They called (it) the Rising Sun.

Caused a lot of trouble, I'm not surprised it was sent to Mars.

@CactuarJoe I *still* can't believe the Pope made this an official feast day.

@CactuarJoe

I'm really surprised thos didn't make the news.

@CactuarJoe Tragically we didn’t even know about Mars horse’s heroic sacrifice until AI had the courage to reveal it to the world
@CactuarJoe Fun, but it would be lovely to know the source for this. I love to laugh at AI hallucinations as much as any other AI sceptic; still, I fear that it is too easy to just come up with something outrageous and create a meme that makes it seem that an AI claimed it, for kicks or for clicks.
@tml @CactuarJoe (a source for the... sourceless plagiarism machine?)

@MxVerda @CactuarJoe No, but some source that would indicate what plagiarism machine created this, as a response to what prompt, and when.

You do realise that people who are just trying to be fun, or eager to get clicks, easily can create a fake screenshot like that, don't you?

@tml @MxVerda @CactuarJoe but there are several reasons why that doesn't matter.

@petealexharris @tml @MxVerda @CactuarJoe Yes, it doesn't matter.

It is wrong to call this stuff "artificial intelligence", as well, because the people working on it obviously are under the grip of fallacies. Human intelligence must resemble chimpanzee intelligence, and so cannot possibly resemble anything based on language!

These jokers have confused their internal conscious dialog with their intelligence. And they think they can upload their "selves" into a computer, but it is impossible.

@petealexharris @tml @MxVerda @CactuarJoe So it really doesn't matter how we make fun of them.

They aren't hallucinations, because these are not intelligences. They are random pattern generators. They are useful if you know what they actually are.

ChatGPT once quoted my answer to a puzzle but gave my opponents' argument as the defense of it! It was mere random output from its databases.

@skry @CactuarJoe Yes, I know how to google myself, too. But didn't find any actual information about the things I wanted to know (what plagiarism machine created this, as a response to what prompt, and when).

In fact, in the discussion you link to, people wrote:

"It's hard to know if this one is real or satirical but Google corrects viral AI misinfo pretty quickly.

But only after it's gone viral of course."

And:

"99% of these google ai responses are fake".

@tml @CactuarJoe I thought you wanted a source.

Verification is impossible because the Google model has changed.

@skry @tml @CactuarJoe Don’t forget that he knows how to Google 😳
@davidbcohen @skry @CactuarJoe May I remind you that it was skry who first boasted with their impeccable googling skills.
@tml @skry @CactuarJoe Despite your assertion I don’t see any boast. Which is strange because you seem so certain that you are right…

@davidbcohen @skry @CactuarJoe Certain? No, I am not certain at all. I can very well believe that the AI in question indeed wore that. AIs certainly are known to come up with wildly idiotic hallucinations.

But I can also imagine that some person came up with that as a wannable viral joke.

Which is why I just would want to see a deeper investigation into this. Like the original source, and whether the person who got it posted any notes about what they actually asked etc.

@davidbcohen @skry @CactuarJoe But hey, I know, this is the internet, people don't care about verification, sources, etc.
@tml @skry @CactuarJoe I think you know that I was referring to your certainty that @skry made a boast about google skills. Which they didn’t. So let me ask you - did you hallucinate that or were you going for a viral joke?

@davidbcohen @skry @CactuarJoe Ah OK, I did not realise that, thanks for clarifying.

So yeah "boast" was the wrong word to use. I should just have said that skry was the the first one to mention googling. In a sarcastic way, "I googled that for you", which can be seen as implying that the other person would not know how to google.

@tml @davidbcohen @CactuarJoe No, it implies that someone appears to be demanding that other people prove something to them by doing research for them.
@skry @tml @CactuarJoe That’s the best way of being able to cast doubt on results that differ from your world view, natch!
@tml @CactuarJoe I thought some source material might be related to nickname of https://en.wikipedia.org/wiki/Tardigrades_in_space but their nickname is water bears, not horses.
Tardigrades in space - Wikipedia

“Sojourner Rover: Mars Pathfinder’s Historic Adventure”

YouTube
@CactuarJoe So the desert with the horse with no name was actually on Mars, who'd have thought.
@CactuarJoe Clearly this was a horse with no name, in the desert -- but did it enjoy being out of the rain? NASA needs to study this question. (Sadly, however, all Deceased Equestrian Initiatives are currently cancelled.)
@woozle @CactuarJoe surely the military can fund a U.S. Space Horse

@mattmcirvin @CactuarJoe

The Royal Trumpian Mounted Astroturf Guard 🚀

@CactuarJoe I really want to see the horse space suit!

@markc568 @CactuarJoe this reminds me of a question I saw on here

how would a centaur wear jeans,

like four legs ?

or only behind legs?

@thierna @CactuarJoe If all four legs, would it be like two separate pair of jeans? Or some kind of elaborate single four-legged garment?
@CactuarJoe things are getting dire, horses don't even exist to begin with!
@VileLasagna @CactuarJoe that is, of course, unless the horse is the famous Mr. Ed
@CactuarJoe I been to another planet on a horse with no name. It felt good to get off of the Earth.
@LinuxAndYarn @CactuarJoe though I've passed one hundred thousand miles I'm feeling very still, and I think my horsey knows which way to go
@CactuarJoe A horse on Mars in 1997!?
@CactuarJoe We should abolish Christmas in favour of Horsemars.

@CactuarJoe OBLIGATORY ( apologizes for the ad, this is the original, I can't find the tekkno mix any more on YT ) ..

https://www.youtube.com/watch?v=xDpxt901D8Y

I Love Horses and Horse Riding Magazine Advert - 2004

YouTube

@CactuarJoe

I've been through the desert
On a horse with no name
It felt good to be out of the rain
In the desert, you can remember your name
'Cause there ain't no one for to give you no pain
La, la, la, la, la, la
La, la, la, la, la, la
La, la, la, la, la, la
La, la, la, la, la, la

@CactuarJoe it's a known fact that the horse was given an infinite supply of #gravy for it's life support systems and grew potatoes in the martian soil to make chips from as written about in the film #TheMartian
@CactuarJoe Not for the first time, history failed to recognise that the vikings landed there first...
@CactuarJoe @TheBreadmonkey That AI response is a bit pony…
The Army Is Giving Up on War Horses

Technological innovation comes for us all. The U.S. military is finally done horsing around. According to a report from Task and Purpose, the …

Gizmodo - AJ Dellinger
@CactuarJoe the name of the horse was Clever Hans
@CactuarJoe That's a sad story for a lot of reasons.