a number of these things are actual security exploits

yes, sure, but in the sense of “social engineering the slopbot”, not “there’s a vulnerability in [x] which does not apply proper sanitation to non-body text content before evaluating it”

Ah, makes sense. My mind was going more towards actual security exploits, but… yeah. Makes sense.

Anyways, thank you Flere-Imsaho, I will never not love seeing your username on here.

I’m apparently too out of coffee dumb to properly get the joke. What’s the implications if some system parses the PNG text chunks in the same way it does the body of the email?

Yeaaaaah I saw that on the schedule and decoded to not go, lol.

Really? Which ones? I didn’t notice any

Not the person you replied to, but I also switched to Librewolf a couple of months ago, also greatly enjoy it. Here’s a link to my nix config where Librewolf gets made to behave a little closer to default Firefox in terms of usability. Honestly not too bad!

All the fash stuff is incredibly bad, but I cannot get over this:

I personally found a lot of enjoyment in the Framework discord. The format of a discord server is a lot more useful for chatting and discussion within a community than something like a forum (which seems a little more siloed).

WHAT THE FUCK ARE YOU TALKING ABOUT. EITHER YOU ARE INSANE OR I AM.

I cannot believe I am rooting for GEMA. What a weird world this has become.

Oh what the fuck why can Mozilla not just STOP. Just… STOP. Honestly sick of this shit.

Yeah but why would I make myself dependent on Cloudflare.

To be fair, you can simply selfhost MinIO.

Thanks, I appreciate the concern. Luckily, the entire core dev team is very critical/cynical about AI, it’s not just me, everyone I directly work with also wants to build the product for its intended purposes, not for AI-use. I think that somewhat lessens the pressure to go with the narrative.

Plus, I can’t see that happening while participating in discussions on this lemmy instance :D

In any case, thank you for the sound advice, Mawhrin-Skel Flere-Imsaho!

Realistically, the bubble bursting just means going back to pre-2025 target markets. But who knows.

Yeah… (Un)fortunately, everything not AI-related is pretty great in regards to the company, so I’ve decided to stick with it and hopefully still be there after the bubble bursts, unless they try to reassign me to the AI-project, then I’m gone.

I mean… yeah, you would hope that, wouldn’t you? And to be fair, they were selling the product beforehand as well. It’s just apparently a lot easier to sell the AI angle right now.

This scream into the void has been on my mind for a while: Apparently I work for an AI company now.

Kinda.

When I had the interviews with my now-employer at the beginning of the year, they were an open-source cybersecurity startup. Everything sounded great, we got along, signed the contract. I took a long vacation before starting the position, and when I got back, I was… amused? bewildered? to find that a), we are no longer open source; and b), we have pivoted, hard, towards AI.

Luckily, I still get to work 100% of the time on the core (cybersecurity) product (which is actually a really good and useful thing, sorry, not going to be more specific), it’s just that part of the dev team, as well as all of marketing and sales, now work on building and selling an AI product built on top of that.

At least it’s not a wrapper around ChatGPT, and does offer something kinda new and actually beneficial, but still, it’s an LLM product.

Now, for the actual scream-into-the-void: Once a month, in a company-wide meeting, I have to observe how people praise LLMs to the the moon, attribute nonsense or downright bugs to something akin to proto-sentience, and give absurd estimates of profitability based on the idea that AI will totally be used everywhere and by everyone, very soon now, you’ll see. What finally prompted (pun intended) me to post this is the CEO yesterday unironically referencing AI 2027’s “predictions”.

Can’t wait for the bubble to burst. I’m really curious to see if I’ll keep my job through that. At the end of the day, the stuff I work on luckily has nothing to do with AI, and basically every other application of the product makes more sense; but now the entire company has shifted gears towards AI…

All Söder does is spew bullshit and post bad tiktoks.

Hold on, we might just have found the first job LLMs actually can replace.

Piefuckers

Thanks for sharing that link! Interesting post and interesting blog in general!

Yes, any version of age control which would realistically get passed will be bad. This:

additionally, in my opinion no one who wants to enact such a thing is doing it in good faith. it is a pretense towards an ulterior goal[2]

is absolutely true. The fact that those privacy preserving approaches exist but aren’t used is all the proof I personally need of this.

I’d have imagined something along these lines:

• USER visits porn site
• PORN site encrypts random nonce + “is this user 18?” with GOV pubkey
• PORN forwards that to USER
• USER forwards that to GOV, together with something authenticating themselves (need to have GOV account)
• GOV knows user is requesting, but not what for
• GOV checks: is user 18?, concats answer with random nonce from PORN, hashes that with known algo, signs the entire thing with its private signing key
• GOV returns that to USER
• USER forwards that to PORN
• PORN is able to verify that whoever made the request to visit PORN is verified as older than 18 by singing key holder / GOV, by checking certificate chain, and gets freshness guarantee from random nonce
• but PORN does not know anything about the user (besides whether they are an adult or not)

There’s probably glaring issues with this, this is just from the top of my head to solve the problem of “GOV should know nothing”.