• 0 Posts
  • 124 Comments
Joined 3 years ago
cake
Cake day: November 16th, 2023

help-circle


  • Yes, in ways that were actually greatly beneficial. Some companies were complete vaporware, but it proved a huge boom for fibre optic infrastructure and on the whole, building out modern telecom infrastructure. In a few short years, people went from dialup and T1 connections to DSL and high-speed cable. People weren’t connected, and now they suddenly needed to be. It was an entirely new enterprise.

    Unfortunately, these AI datacenters aren’t really the same. They’re not benefitting the public in a lasting sense. These are hot, they’re loud, and they’re expensive. The biggest benefits you may see from them after the bubble bursts is the infrastructure that was required to sustain them.

    Improvements to sustainable, and cleaner energy sources are probably the biggest benefits. Reclaiming and rebuilding old nuclear plants, increased solar and wind projects. Governments that are willing to sell their constituents down a river for the business of a tech conglomerate won’t benefit from this, but for the states that are now passing legislation to require these kinds companies to put their money into the communities they want to operate in may build lasting improvements.

    It’s a small silver lining, but it’s there. That said, I can only imagine that when these companies see their business begin to get buried under the landslide of debt and reality that they will do everything in their power to escape liability for the waste of resources.



  • Darknet used to be good, but there’s been a shift in the content recently in which it feels like Rhysider doesn’t feel like he’s interviewing someone as much as he’s trying to be that annoying guy at the party who keeps butting in to try and tell your story for you.

    I can’t quite tell what changed, or when, but I feel like he used to give his subjects a lot more room to breathe instead of imposing his own personality over everything.


  • I don’t feel bad for Microsoft, but responsible disclosure is about more than that.

    It’s ethical. It gives the developer time to correct an error before it has the potential to affect anyone using their products. When you don’t follow that process, whether one set out by the developer, or a best effort on your part, you are now contributing to the potential harm caused by that vulnerability.

    This isn’t universal, and I have no doubt that Microsoft is also partly to blame, but there’s a significant element of attention seeking in the mix here. They could have reached out to other security researchers, validated the findings in private and found another channel to work through. Maybe he tried, but largely it seems like his actions are retaliatory and broadly harmful to anyone who has to administer these products.

    I have a lot of respect for security researchers. My job relies on the work they do and the skill it takes to do it. But part of that relies on doing things in a way that minimizes potential harm.


  • I was mostly making the comment in jest. I do rename, but my folder structures, as someone who downloads everything manually based on what I want to watch rather than doing the automated *arr stuff leaves it in directories only I consider sensible.

    I have Jellyfin behind a reverse proxy that lives in a DMZ and a WAF to go with it. I’m sure there’s still room for watching an unauthenticated stream because I forgot to rename a folder somewhere, but it’s not exactly an attack vector I care about. I’m more concerned about DDoS or impersonation attacks, which I also attempt to mitigate via an LDAP implementation behind the scenes.

    It’s not perfect, but it’s the best effort I can make at the moment.