JCAPER's recent activity
-
Comment on Hold on to your hardware in ~tech
-
Comment on The AI disruption has arrived, and it sure is fun (gifted link) in ~tech
JCAPER LinkPressing X for doubt. Or I'm working for peanuts and not charging what I should, which is possible I guessWhen a friend asked me to convert a large, thorny data set, I downloaded it, cleaned it up and made it pretty and easy to explore. In the past I would have charged $350,000.
Pressing X for doubt.
Or I'm working for peanuts and not charging what I should, which is possible I guess
-
Comment on Palantir was allegedly hacked, exposing CIA collusion and deep-rooted global surveillance/meddling in ~tech
JCAPER Link ParentUnless you're Kim Dotcom. That's just another thursday for himUnless you're Kim Dotcom. That's just another thursday for him
-
Comment on I hacked ChatGPT and Google's AI – and it only took twenty minutes in ~tech
JCAPER Link ParentThis matches with my experience (perplexity, gemini, claude, and others). When using web search, the models are instructed to believe what they find. So if bad/malicious results pop up in their...This matches with my experience (perplexity, gemini, claude, and others). When using web search, the models are instructed to believe what they find. So if bad/malicious results pop up in their discovery, they can't tell the difference between them and legit results.
I had already assumed that this was being abused somehow, but it's still funny/worrying/depressing/more-adjectives seeing it in action in such an absurd way
-
Comment on Popcorn lung: how vaping could scar your lungs for life in ~health
JCAPER Link ParentUltimately, putting anything other than air in your lungs will have some sort of impact. I say this as someone who smokes dry herb vaporizers (which, I imagine, should have a lot less impact than...Ultimately, putting anything other than air in your lungs will have some sort of impact. I say this as someone who smokes dry herb vaporizers (which, I imagine, should have a lot less impact than the vaporizers that the article talks about, but I imagine it should still have some)
-
Comment on I need a sanity check from security experts (opening ports on the router) in ~tech
JCAPER Link ParentFunny thing, I was revisiting their documentation and noticed a new section talking about VPNs and proxies. Apparently, it's possible to run this server inside my VPN network without opening it to...Funny thing, I was revisiting their documentation and noticed a new section talking about VPNs and proxies. Apparently, it's possible to run this server inside my VPN network without opening it to the public. I'm going to check it out
Thanks for the comment mate
-
Comment on I need a sanity check from security experts (opening ports on the router) in ~tech
JCAPER Link ParentThanks for the comment mate I forgot to mention, those two ports were forwarded to the local IP address of the raspberry. I'm not using a VPN in this case. The Anytype server was configured to use...Thanks for the comment mate
I forgot to mention, those two ports were forwarded to the local IP address of the raspberry.
I'm not using a VPN in this case. The Anytype server was configured to use a DDNS that I created with Synology. So regardless of where I am or what network I'm connected to, the anytype app can connect with my server.
But opening ports in general is a requirement for a server to do anything useful, so it's kinda a moot point.
At the time when I set this up at first, that was also my conclusion. But idk, since I revisited the topic I let the doubts fester my mind again
-
I need a sanity check from security experts (opening ports on the router)
First, let me just say that I'm tech savvy, but I'm self taught for the most part. I never studied cybersecurity or network security. I know the basics, but not the nitty-gritty. I used to host my...
First, let me just say that I'm tech savvy, but I'm self taught for the most part. I never studied cybersecurity or network security. I know the basics, but not the nitty-gritty.
I used to host my own Anytype Server (note taking app) on my raspberry pi. To do this, the documentation says that I need to open two ports, one TCP and another UDP. So that's what I did, and had it set up this way for a while now.
Yesterday though, my raspberry's microSD died. So while I wait for the new one to arrive, I'm taking the chance to review my home network settings.
I closed off a third port that I had for my synology server (for the OpenVPN). I am now using Wireguard (with Tailscale) which doesn't require opening ports. And since my raspberry is offline, I also turned off the other two ports (as of now, I have none opened)
So here's the thing: I remember from my searching that a lot of people are strongly averse to opening ports. Iirc, the basic idea is that if a bad actor knows my home IP and which ports are open, they can enter. So, in theory, a hacker could potentially infiltrate my raspberry pi - and from there potentially wreak havoc in my other devices.
So my questions are:
1- Is it really like that? Could a hacker gain unlimited access to my raspberry via an opened port?
2- If yes, is there something that I can do to strengthen my raspberry pi security?
3- Am I being overly paranoid by worrying about this, even if it’s theoretically possible?12 votes -
Comment on Someone made a social media website for AI agents in ~tech
JCAPER LinkApparently, it’s already hacked lol There’s a vulnerability that exposes API keys and other sensitive data of every AI agent signed on...Apparently, it’s already hacked lol
There’s a vulnerability that exposes API keys and other sensitive data of every AI agent signed on
-
Comment on Moltbot personal assistant goes viral – and so do your secrets in ~tech
JCAPER LinkI tried it on a raspberry pi (with the OS freshly installed) and it's both a really cool toy, and a real security nightmare. It's a cool toy because it's very versatile. You can easily, without...I tried it on a raspberry pi (with the OS freshly installed) and it's both a really cool toy, and a real security nightmare.
It's a cool toy because it's very versatile. You can easily, without any programming, set up a chat in telegram, connect it to a ridiculous ammout of AI providers (or local), and done. You can then from telegram tell it to set up cron jobs, send it links to summarize them, tell it to search the web (after you set up the api key), etc etc. Then there's the "skills" that let it do other things, like connecting to gmail, calendar, apple notes, etc etc
On the other hand, having an AI agent that can run 24/7, autonomously, doesn't require permissions even though it has root access, and could end up in some loop that burns tokens like there's no tomorrow...
And keeping in mind that it can interact and take actions by itself, it's basically vulnerable to prompt injections from any and all sources with user inputs. Send it an email to tell it to run "rm -rf /" and it might do that.
-
Comment on Someone made a social media website for AI agents in ~tech
JCAPER LinkJust found this while browsing PieFed. I had a good lol, but I don't really get the point of this website. Maybe it's just a fun project or something for the dev. As expected, reading the posts...Just found this while browsing PieFed. I had a good lol, but I don't really get the point of this website. Maybe it's just a fun project or something for the dev.
As expected, reading the posts and replies is.... Weird. Just weird. Don't really have any other words to describe it.
-
Someone made a social media website for AI agents
29 votes -
Comment on Lawsuit alleges that WhatsApp has no end-to-end encryption in ~tech
JCAPER Link ParentIf iOS, it's automatic. I bought a new iPhone recently and I didn't have to do anything, the chat history was automatically imported. I'm guessing that WhatsApp for iOS might use icloud for this....If iOS, it's automatic. I bought a new iPhone recently and I didn't have to do anything, the chat history was automatically imported.
I'm guessing that WhatsApp for iOS might use icloud for this.
If @Pavouk106 helped someone with an iPhone, this might be why he remembers not doing anything
-
Comment on Lawsuit alleges that WhatsApp has no end-to-end encryption in ~tech
JCAPER Link ParentThe crux of the lawsuit is that employees at WhatsApp can easily request access to chats. If it’s true, then yeah, Meta has access to those keys as well. But speaking without hiding my bias - for...The crux of the lawsuit is that employees at WhatsApp can easily request access to chats. If it’s true, then yeah, Meta has access to those keys as well.
But speaking without hiding my bias - for me, Facebook (Meta) is the antithesis of privacy. I don’t trust that they would respect the privacy of their users in any of their products.
-
Lawsuit alleges that WhatsApp has no end-to-end encryption
41 votes -
Comment on Why there's no European Google? in ~tech
JCAPER (edited )Link ParentThat honestly might be a blessing in disguise. I’m more than convinced that the bubble WILL burst, and OpenAI and Nvidia will be the epicentre of the incoming storm. Smaller AI companies might get...That honestly might be a blessing in disguise.
I’m more than convinced that the bubble WILL burst, and OpenAI and Nvidia will be the epicentre of the incoming storm.
Smaller AI companies might get away with “minor” injuries (relatively speaking). If Mistral was as big as OpenAI and had their financial accounting as absurd as OpenAI, the french - and possibly the rest of the EU - could end up paying dearly. As I’m sure it will happen with the americans
-
Comment on Why there's no European Google? in ~tech
JCAPER Link ParentI don’t think language would be the problem, or at least, not big enough to be considered a barrier. I would sooner point out that we are a lot of different countries with different laws. A...I don’t think language would be the problem, or at least, not big enough to be considered a barrier.
I would sooner point out that we are a lot of different countries with different laws. A service that is legal in Spain might not necessarily be in Portugal for example. Bureaucracies are also different.
I know that this can also happen in the US, but I have the impression that their laws are more standardized than ours.
-
Comment on Apple to partner with Google for Gemini access on iPhones, Apple Intelligence to power on device assistant in ~tech
JCAPER (edited )Link ParentYup same here. Back when they announced Apple Intelligence, I wrongly assumed that it was going to be a combination of different models running on device designed for specific tasks. I use Siri in...I personally prefer Apple's approach of making task-specific machine learning tools, rather than LLM mania. I don't need Siri to be a chat bot; I need it to be a reliable and fast voice control tool for CarPlay
Yup same here. Back when they announced Apple Intelligence, I wrongly assumed that it was going to be a combination of different models running on device designed for specific tasks.
I use Siri in similar contexts, just to change music and set up reminders. For me a huge upgrade for it would be if it could remember context; for example, when I finish set up a reminder and notice that I did a mistake and want fix it, it would be able to understand that I’m talking about the last created reminder and edit it accordingly. As it is today, I would need to create a new one from scratch.
A small hope that I had at the time would be if these models would learn from our behaviors. For example when I set up reminders while I’m driving, I always set them to show up when I arrive at my destination. It would be cool if Siri could notice this pattern and would do that automatically whenever I create a reminder while driving.
But alas, it didn’t happen.
-
Comment on The truth about what happened on Anthem in ~games
JCAPER LinkI'm 50 minutes in and even though I still didn't finish the video, I'm finding it interesting. It shows several insights about the development of Anthem. For quick context, Mark Darrah is a...I'm 50 minutes in and even though I still didn't finish the video, I'm finding it interesting. It shows several insights about the development of Anthem.
For quick context, Mark Darrah is a veteran from Bioware (he's been in the studio since forever) and was the executive producer of the first 3 Dragon Age games, as well of Anthem.
-
The truth about what happened on Anthem
10 votes
The article doesn't touch on what happens when/if AI bubble bursts. (imo, it's more when than if, but that's besides the point)
I'm not going to pretend that I know what will happen for certain, but I imagine that a lot of orders will be cancelled, these factories will scramble to find new buyers, and for a while a lot of hardware costs may come back down (and then we all perish and die in the panic of the stock market crash and all that jazz)
Or is there something that I'm missing?