Welcome to Incremental Social! Learn more about this project here!
Check out lemmyverse to find more communities to join from here!

@douglasg14b@lemmy.world avatar

douglasg14b

@douglasg14b@lemmy.world

This profile is from a federated server and may be incomplete. Browse more on the original instance.

douglasg14b ,
@douglasg14b@lemmy.world avatar

Build it, don't turn it on, watch all the residents complain about new ailments and conditions caused by the 5G.

Reveal that it's never even been powered to really hammer home their ignorant bullshit.

The cognitively impaired should not be able to do this sort of shit.

douglasg14b ,
@douglasg14b@lemmy.world avatar

And depending on the results of the upcoming election the FTC may no longer exist afterwards anyways.

douglasg14b ,
@douglasg14b@lemmy.world avatar

That's not how systemic problems work.

This is probably one of the most security ignorant takes on here.

People will ALWAYS fuck up. The world we craft for ourselves must take the "human factor" into account, otherwise we amplify the consequences of what are predictable outcomes. And ignoring predictable outcomes to take some high ground doesn't cary far.

The majority of industries that actually have immediate and potentially fatal consequences do exactly this, and have been for more than a generation now.

Damn near everything you interact with on a regular basis has been designed at some point in time with human psychology in mind. Built on the shoulders of decades of research and study results, that have matured to the point of becoming "standard practices".

douglasg14b , (edited )
@douglasg14b@lemmy.world avatar

I'm not sure if this is just a rhetorical question or a real one?

Because I didn't claim it isn't negligence. It is negligent, however, it is not a problem solvable by just pointing fingers. It's a problem that solvable through more strict regulation and compliance.

Cyber security is almost exactly the same as safety in other industries. It takes the same mindset, it manifests in the same ways under the same conditions, it tends to only be resolved and enforced through regulations....etc

And we all know that safety is not something solvable by pointing fingers, and saying "Well Joe Smo shouldn't have had his hand in there then". You develop processes to avoid predictable outcomes.

That's the key word here, predictable outcomes, these are predictable situations with predictable consequences.


The comment above mine is effectively victim blaming, it's just dismissing the problem entirely instead of looking at solutions for it. Just like an industry worker being harmed on the job because of the negligence of their job site, there are an incredibly large number of websites compromised due to the negligence of our industry.

Just like the job site worker who doesn't understand the complex mechanics of the machine they are using to perform their work, the website owner or maintainer does not understand the complex mechanics of the dependency chains their services or sites rely on.

Just like a job site worker may not have a good understanding of risk and risk mitigation, a software engineer does not have a good understanding of cybersecurity risk and risk mitigation.

In a job site this is up to a regulatory body to define, utilizing the expertise of many, and to enforce this in job sites. On job sites workers will go through regular training and exercises that educate them about safety on their site. For software engineers there is no regulatory body that performs enforcement. And for the most part software engineers do not go through regular training that informs them of cybersecurity safety.

douglasg14b ,
@douglasg14b@lemmy.world avatar

Typical security negligence of startups.

Your data is essentially never secure if it's sitting with a startup. It's an atrocious world for security out there.

douglasg14b ,
@douglasg14b@lemmy.world avatar

Now we just need accessibility tools for the cognitively impaired that can't seem to read the damn article.

So let's say I wanna ping 1.1.1.1... every 5 seconds... forever. Alternatives? (lemmings.world)

Developers (two dudes) are super responsive and would likely release an IP customization feature upon request. Is there any service that would tolerate this [D]DOS-y kind of behavior that would feel more privacy friendly than Cloudflare?...

douglasg14b ,
@douglasg14b@lemmy.world avatar

I don't think the concern over pinging 1.1.1.1 is warranted.

ICMP is pretty raw Network traffic, meaning you're not really causing much actual load here.

You can't even really try to DDOS with normal ICMP packets. You usually have have to max it's size out at 64KB with an ICMP floor to even think of having an effect. Vs the, effectively inconsequential, 32 bytes of a normal ICMP packet.

You watching a short YouTube video is equivalent Network load as 180 days of pinging for Network up time.

Campaigns Can Now See What You Watch on TV. (www.notus.org)

Televisions that can stream platforms like Hulu or Max usually come loaded with technology that collects information on what viewers are watching, and buyers consent to have their viewing tracked when they open their new TV and click through terms of service agreements. Sometimes, data firms can connect those viewing habits to a...

douglasg14b ,
@douglasg14b@lemmy.world avatar

They keep giving us more reasons to sail the high seas.

douglasg14b ,
@douglasg14b@lemmy.world avatar

I'm going to guess because of the tools that don't use LGPL.

Which makes them quite limiting and kind of controversial since you have to adopt their license from my understanding, even if used as a library.

I try and use LGPL on all my projects since it allows others to use the Library as a library, and anyone that wants to modify or use the source has to copy left.

douglasg14b ,
@douglasg14b@lemmy.world avatar

This is what LGPL is for.

You can still use a library like a library freely, without restriction, but you are keeping your IP protected from being copied cloned and modified elsewhere.

douglasg14b ,
@douglasg14b@lemmy.world avatar

Imagine being to wishy washy that you can't even read the article before doing a 180 on your principles.

douglasg14b ,
@douglasg14b@lemmy.world avatar

Firefox?

This is only in the country that has regulatory authority, Russian, and is stated as temporary so Mozilla can figure out what to do about it.

douglasg14b ,
@douglasg14b@lemmy.world avatar

Welcome to the lowest common denominator.

It's an infuriating world.

douglasg14b ,
@douglasg14b@lemmy.world avatar

Did you read the article? No? Cmon. You should start doing that before drawing conclusions.

This is noted as a temporary block on the specific extensions ONLY within the country with regulatory power to ban Firefox. Russia.

Mozilla has stated this is temporary so they can have the breathing room to figure out how to navigate this. Since this goes against their principles.

It's either Firefox is banned in Russia, or they do this. Which causes more harm? That's a rough choice for them to need to make.

douglasg14b ,
@douglasg14b@lemmy.world avatar

This comment aged like milk given they had already lifted the ban.

douglasg14b ,
@douglasg14b@lemmy.world avatar

Your biggest mistake was automatically assuming anything in corporation says is a lie, and projecting that into me.

All that matters is the track record.

douglasg14b ,
@douglasg14b@lemmy.world avatar

"unfortunately your In-Flight Engagement Actions ™️ did not meet the requirements to qualify you for in flight perks such as entertainment and meals"

"Please ensure you are looking directly at the screen while ads are playing to accumulate In-Flight Engagement Actions ™️"

Coming soon to an airline near you.

douglasg14b ,
@douglasg14b@lemmy.world avatar

Super glue seems appropriate 🤔

douglasg14b ,
@douglasg14b@lemmy.world avatar

Naw, they'll find some way to "incentivize" (punish you for not) viewing ads and enforce it with eye tracking.

douglasg14b ,
@douglasg14b@lemmy.world avatar

It's very likely that as a sole developer you are actually practicing agile as it's intended and not corporate "agile".

There isn't a problem with agile there's a problem with it being mislabeled and misused as a corporate & marketing tool for things that have nothing to do with agile.

douglasg14b ,
@douglasg14b@lemmy.world avatar

If it was local only, and more security focused I would 100%.

My ADHD. brain needs an AI assistant.

Spotify is raising the cost of Premium subscriptions, again (www.engadget.com)

Spotify is officially raising its Premium subscription rates in the US come July, following reports of the move in April. The platform is increasing its Individual plan from $11 to $12 monthly and its Duo plan from $15 to $17 monthly — the same jump as last year's $1 and $2 price hikes, respectively. However, its Family plan...

douglasg14b ,
@douglasg14b@lemmy.world avatar

You.... Are kidding right?

You would have to be living under a proverbial rock to have no inkling that Spotify is a product still in use, or be willfully ignorant.

It's like saying:

  • People still use Google?
  • People still drive cars?
  • People still use Windows?
  • People still go to churches?

...etc

Not that I agree that we should use Spotify. But playing pretend that they are small, irrelevant, and have no effect on the industry they are in isn't doing us any favors when it comes to pushing back against it.

douglasg14b ,
@douglasg14b@lemmy.world avatar

Most people tend to be triggered by ignorance paraded as knowledge and petulant personal attacks due to an inability to engage like an adult.

To be fair.

douglasg14b ,
@douglasg14b@lemmy.world avatar

fails to see reality

Reality is shown to them

Doubles down on their ignorance of reality

This thread is a textbook example of:

Don't argue with morons. They will bring you down to their level and beat you with experience.

Instead of actually arguing the topic at hand you are trying to drag all repliers down to your level, act in bad faith, and beat them with personal attacks 🤣

Classic.

douglasg14b , (edited )
@douglasg14b@lemmy.world avatar

Where can one get a hold of these documents?

This appears to be the original blog post, but I'm not finding a way to download this. https://sparktoro.com/blog/an-anonymous-source-shared-thousands-of-leaked-google-search-api-documents-with-me-everyone-in-seo-should-see-them/

Is this not leaked past this one person?

Edit 2: No, these appear to be normal public docs.

Edit: seems these are the docs? https://hexdocs.pm/google_api_content_warehouse/0.4.0/GoogleApi.ContentWarehouse.V1.Model.QualityNavboostCrapsCrapsData.html

douglasg14b ,
@douglasg14b@lemmy.world avatar

Wait why is that commit still up if this is a data leak?

douglasg14b ,
@douglasg14b@lemmy.world avatar

Internal documentation leaking is still a data leak, it's just a subset of a data leak.

If it was sensitive information that commit would have been purged by now. The original PR (on the Google Clients repo) has no mention of problems, and there are no issues of discussions around rewriting the git history on that item.

This makes me think this isn't actually a problem.

My org is less practiced on operational security than Google and we would purge that information within minutes of any of us hearing about it. And this has been on blog posts for a while now.

douglasg14b ,
@douglasg14b@lemmy.world avatar

I'm not entirely sure why you think it shouldn't?

Just because it sucks at one-shotting programming problems doesn't mean it's not useful for programming.

Using AI tools as co-pilots to augment knowledge and break into areas of discipline that you're unfamiliar with is great.

Is it useful to kean on as if you were a junior developer? No, absolutely not. Is it a useful tool that can augment your knowledge and capabilities as a senior developer? Yes, very much so.

douglasg14b ,
@douglasg14b@lemmy.world avatar

Why the no?

It's local only, and actually used to improve the product as opposed to being another shitty chatbot.

This is how it should be done.

douglasg14b ,
@douglasg14b@lemmy.world avatar

Mozilla actually had a project for that: https://memorycache.ai//

They just suck at naming things, and unfortunately it's not getting much of the necessary dev time it needs to get out of the POC stage.

The biggest thing I want is local only models that use my activity & browsing history as a way for me to recall or contextualize events and information.

douglasg14b ,
@douglasg14b@lemmy.world avatar

Same. I have 5G off because it's just so bloody slow and unreliable.

Let's not even talk about the problems where periodically I can't make any outbound calls and no one can call me. Which has been a problem for at least the last 5 years, for both me and my wife.

douglasg14b ,
@douglasg14b@lemmy.world avatar

How does taxing revenue from digital technology where it's generated work?

Can you explain what that means for me.

douglasg14b ,
@douglasg14b@lemmy.world avatar

If north America & Australia's biggest exports start having effect they will be very pro-regulation. Just pro-regulatory-capture.

douglasg14b ,
@douglasg14b@lemmy.world avatar

Yep, and Google does the same shit.

On Pixel phones you have the search bar at the bottom, which you cannot remove, replace, resize, or configure.

In the EU you can configure it to change your default search engine. In North America you cannot, and are forced to use Google.

And on Google forums anyone who complains gets attacked by a wave of simps saying "Then just don't buy a pixel then, go somewhere else if you don't like it".

So tired of this shit.

douglasg14b ,
@douglasg14b@lemmy.world avatar

Butt hurt much

Please go back to Facebook, YouTube comments, or even Reddit with this petulant behavior.

No one here wants this sort of low quality, personally, attacking, bratty behavior in their discussions.

1000+ Firefox for Android extensions now available – Mozilla Add-ons Community Blog (blog.mozilla.org)

The new open ecosystem of extensions on Firefox for Android launched in December with just over 400 extensions. Less than five months later we’ve surpassed 1,000 Firefox for Android extensions. That’s an impressive achievement by this developer community! It’s exciting to see so many developers embrace the opportunity to...

douglasg14b ,
@douglasg14b@lemmy.world avatar

Can you list some of those, I'm curious.

douglasg14b ,
@douglasg14b@lemmy.world avatar

I mean, that's not surprising though is it? If a FOSS tool I made has an additional feature that requires my own backend to support, then there has to be a backend to support it.

The FE that uses it is still FOSS, and one could always build their own API to the specs outlined by the client.

They could OSS their server side code ofc, that'd be cool. But that also takes sometimes double the effort to do well, and keep custom tweaks and changes either separate and proprietary, or build out a complex way for them to be dynamically injected. So I don't really blame them on that one tbh.

douglasg14b ,
@douglasg14b@lemmy.world avatar

For real, we need unions. It's a slow boil now, knowledge workers are the next factory workers.

Soon to be displaced as corporations gobble up another chunk of worker wealth.

douglasg14b ,
@douglasg14b@lemmy.world avatar

It's really disingenuous to mud sling people with a different view by implying they themselves don't exist/are astroturfing/are bots.

I'm a real human who decided to use their service for kicks and actually like some of the benefits and control over the results compared to other search engines.

Especially when I'm doing research, which is usually half of all my time searching anyways.

Enough that I decided to pay for the service. I'm happy with it and want to share that happiness with others.
Are you saying that because I liked a service that I can't seem to get anywhere else I'm now the bad guy? Because I like something and want to share it with others, that's bad?

Is the alternative that you might prefer to be corporate astroturfing instead of organic discussion and growth? Like, really, seriously, what's the alternative here if people talking about and sharing something they like is not acceptable?

douglasg14b ,
@douglasg14b@lemmy.world avatar

... Contacting someone makes you an: "unhinged fucking freak who does not respect personal boundaries"?

More people need to go touch grass, this is insane.

douglasg14b ,
@douglasg14b@lemmy.world avatar

I'm in my house right now with a perfectly working thermostat that's 70 years old.

And given the mechanism of action it will continue working in another 70 years.

16 years for hardware used inside of homes is a ridiculously, absurdly, short lifetime. Even for a vehicle that would be pushing the edge of "too short".

That said 16-year-old software is not that old. If it's built using sane language choices it should actually be functioning and modern today.

douglasg14b ,
@douglasg14b@lemmy.world avatar

The US has an ideal, chosen, location for long-term mass storage.

Unfortunately State politics and news fear mongering are preventing it from being developed and utilized.

Just more footgunning.

douglasg14b ,
@douglasg14b@lemmy.world avatar

That's.... Not how internet infrastructure works.

And cables are not in straight lines between you and the destination.

douglasg14b ,
@douglasg14b@lemmy.world avatar

What a great way to dismiss an entire problems based that affects our society. It's easier to just hand wave it away as someone else's problem than to actually consider it...

When a problem becomes systematic it's now a societal and cultural problem and not an individual responsibility problem. Individual responsibility isn't working so it's now down to the society this is occurring in to solve the systematic problem in a systematic way.

That's how almost everything works

douglasg14b ,
@douglasg14b@lemmy.world avatar

Imagine not realizing that people have to work for a living... Or that adult mental health is at an all time low. Or that social media manipulation affects people who are parents as well as their kids.

Similarly just kicking the problem down the road like you're doing doesn't actually solve it. It just inhibits solutions and contributes to the problem.

So in this instance people that think like your comment states actually are indirectly part of the problem. Which is ironic.

douglasg14b ,
@douglasg14b@lemmy.world avatar

Most enterprise software has to meet constantly shifting goals requirements certifications and regulations.

In most cases it's complicated because it has to be and because it's been driven to be complicated over time to meet the complex needs of the business.

The software will represent the business, if the business is too complicated then the software will be too complicated. It's impossible to separate the software complication from the business in that sense.

douglasg14b ,
@douglasg14b@lemmy.world avatar

They state that they obsficate the metadata of chats sent to OpenAI

  • All
  • Subscribed
  • Moderated
  • Favorites
  • random
  • incremental_games
  • meta
  • All magazines