• 3 Posts
  • 478 Comments
Joined 3 years ago
cake
Cake day: June 7th, 2023

help-circle


  • Another investment area to consider is other Tax Advantaged savings accounts (e.g. IRA).

    I do not really want a credit card, but I need to start using one because my credit score dropped to 550 after not making a payment for a while.

    While they are a Faustian deal, you do want one. Much of our society is built around credit scores and the credit reporting companies. It sucks, but you have to deal with it. Find a credit card which doesn’t charge an annual fee, and which provides some sort of kick back you can make use of. Use this for everything, and pay it off completely every month. Use the points/miles/etc when possible.

    There are two primary reasons for this. First off, it gets that credit score up. You want a high credit score as it’s often used for things like background checks. It’s annoying, but you’re not going to win the fight against it. Second, using a credit card comes with some protection for you money. If your card number gets compromised (and it will eventually, if you’re using it) credit card companies have some legal requirements to refund you for the fraud. When paying for things with debit cards and ACH transactions, those protections aren’t as strong and you may end up out some money.

    The one thing I can’t emphasize enough is, pay the damned thing off every month! It’s easy for these to get out of hand. And with your current credit score, the interest rate is going to be in the range “fuck your wallet”. Letting any charges roll over is just pissing away money.

    Lastly, once you have your credit accounts created freeze your credit. Don’t let them trick you into “monitoring” or other bullshit half-measure, do the freeze.


  • I wouldn’t expect it to replace people. It will make workers more productive. However, because it is already pretty well spread through most companies, those productivity gains will only lead to competitive advantages for companies with highly skilled workers.

    Think of it like a chainsaw for lumberjacks. A lumberjack with a chainsaw is going to be far more productive than one with just a hand axe. But since every company equips their lumberjacks with chainsaws, they aren’t really at an advantage, chainsaws are now just a cost of entry for a company. Also, lumberjacks are required to know how to use a chainsaw. But they are ok.

    For knowledge workers, AI is our new chainsaw. We’re going to learn to use it. And it’s going to be part of our jobs going forward. From my own experience, it has it’s uses and is pretty good at certain tasks. It can also be endlessly frustrating at tasks where it’s not well suited or the training isn’t up to snuff. We just have to learn and adjust to a world where the tool exists and is used everywhere. The genie isn’t going back in the bottle.


  • Not surprising. Web search from the Start Menu was always a bad idea.

    Hell, I’ve had to deal with users getting their systems compromised because of this idiocy. User typed ‘ms teams’ in the start menu, clicked on the first link and ended up at an attacker’s page which mimicked the official Teams download page. User clicked “Download”, received the trojaned .msi file and ran it.

    Sure, there’s some blame to go around in that case (and we finally got some default configuration changes out of it), but the fact that Microslop’s greed led to a malvertising link showing up in a user’s Start Menu is indicative of everything wrong with Windows 11.


  • All of the above.

    Is it that ISPs are being paid by tech-bros to assign them these IPs?

    Bullet Proof Hosting is a thing. Some ISPs basically advertise to criminals about their ability to evade take down orders and unwillingness to work with law enforcement. So, some infrastructure ends up on these devices. However, the IP ranges from these services often get discovered and are added to public reputation and block lists.

    Along side this, cloud providers are pretty bad about policing their networks. On my own home server, I have blocked much of the Digital Ocean IP space, as it’s home to a lot of scanners, bots and other malicious traffic.

    Is it that residential devices have been hacked /contain malware that does this?

    This happens, a lot. The Mirai Botnet thrived on compromised home routers. People are pretty bad at updating their devices and many SOHO routers ship with some pretty bad vulnerabilities. It’s only a matter of time until someone finds an unpatched or misconfigured router and adds it to a botnet. People also get phished or install trojans all the time, adding to botnets. Darknet Diaries just had a fantastic episode on the Bayrob malware, part of which was turning infected machines into a custom botnet.

    Is it trivial for companies to assign themselves residential IPs?

    Some ISPs just look the other way when they get reports of malicious activity on their network. Also, attackers can force a DHCP refresh and just get a new IP when the old one seems blocked. Getting one in the first place is often as simple as signing up for service and/or compromising someone’s home PC and using it as a relay.

    Paid volunteers are doing this for AI companies?

    This probably happens. Afterall, we’ve already seen a company selling an AI product which was just workers in India.

    Obviously this is a problem because one can rotate / cycle through residential IPs and if I aggressively block each offender in my logs permanently, then the next person assigned this IP who may be a legitimate user will be unable to access my site.

    Look into Fail2Ban. This program monitors your logs and will ban IPs automatically based on criteria you set. This can include specific HTTP requests in your web logs. The ban can be permanent or can be time limited. For example, I have a container running in a cloud provider which I use to proxy requests through my ISP’s CGNAT setup. There is an NGinx reverse proxy running there and I have fail2ban watching the access log. If certain request strings are seen, the sending IP gets dumped in a permanent jail. I also have it scanning the sshd logs and banning IPs which fail to login 3 times within a short period.

    It’s far from a silver bullet, but it’s something which should be running on any web facing system. Attackers will always be rattling the door knobs. There is no reason to let them keep rattling away.





  • The thing about inbreeding is that it isn’t an instantly bad problem. The Habsburg dynasty was all about doing the nasty with cousins for a number of generations. It took a few rounds before the Habsburg Chin developed. Records also indicate that sister marriage was a common royal practice in pharonic Egypt.

    It’s all a matter of probabilities and compounding problems. The first generation of inbred kids will probably turn out ok. With the second generation things can start getting sketchy. The more generations you go, the more likely you are to get Crimson Tide fans.

    This is also why populations under a certain size can be problematic. When the family trees of a population start looking like brambles, problems start sticking out like thorns.





  • I think it’s pretty telling that so many of the people they talk to and a lot of the focus of the article isn’t really about older gamers, it’s about their money.

    The opportunity is substantial. The 40+ segment in the US is on track to grow from $19 billion in 2022 to $43 billion by 2030, a 132% expansion at a moment when the rest of the industry is shrinking. These are players with the most disposable income, the longest gaming literacy, and the highest brand loyalty.

    I’m in that “40+ segment” and I suspect part of the “problem” these companies face is that older gamers have seen the enshitification of so many of the brands we love. Our tolerance for bullshit is basically gone at this point. Micro transactions, season passes, fucking ads in games, all of that bullshit is a quick way to not get our money.

    I also suspect “brand loyalty” is basically gone for the same reason. As a kid, I looked for the Electronic Arts logo. If I saw this logo on a game package, I knew I was looking at a good game. I haven’t bought an EA game in years. I don’t expect to buy an EA game any time soon and I basically ignore everything they do. Sure, if a trailer for Starflight 3 dropped, I’d sit up and take notice. I’d also expect it to be an enshitified mess wearing the skin of a beloved series to sucker me in, before pouncing on my wallet.

    So ya, maybe just make good games and older gamers will inevitably buy them. I mean, Larian can pretty much say, “hi we’re making…” and I’ll have my wallet out and be pulling bills before they get any further. And maybe that’s your “brand loyalty”. Game companies who make good games and aren’t private equity firms wearing the dead skin suits of brands we used to love.



  • We walked to school in the snow. Uphill. Both ways!
    Now get off my lawn!

    Jokes aside, I think one thing we had pretty good was not having to live in constant fear of every stupid thing we did likely being put online immediately. And there not being an “online” where your mistakes would haunt you forever. I did a lot of stupid stuff in my late teens and early 20’s. And there is thankfully very little evidence of any of it. Kids these days don’t often have that luxury. We’re all young and stupid at some point. As you get older, that stupid stuff should be something you and your friends laugh about over beers, not something you fear a current employer is going to find at the top of the results when they google your name.

    That said, the easy access to media and information is insanely cool. If I want to learn about the mating habits of marmosets, there is likely an in-depth Wikipedia article with way, way too much information. And it’s likely up to date and well edited. Compare that to whatever blurb might be in the encyclopedias at your local or school library, plus anything you could dig out of the periodicals and microfiche, and it’s not even in the same universe of information availability. Sure, there’s a lot more to sift through online. And it’s getting easier and easier to get lost in a sea of misinformation. But, you still stand a much better chance today of finding more, faster, than what we had back then. It’s funny to think back about instructors making a big deal about not using Wikipedia when it first came out. Now, it’s likely recommended as the first stop in researching something.

    Also, I have a fucking computer in my pocket with more processing power than the entire world had available when we sent men to the moon. And I can use that computer to communicate with nearly anyone in the world instantaneously. And that computer can access that insane wealth of knowledge I just mentioned above. Again, almost instantly, from most places I am likely to be. I can be taking a shit in the woods and reading up on marmosets fucking while chatting with someone shitting on Twitter. It’s the goddamn future over here.