Forgot your password?
typodupeerror

Comment Dart! (Score 2) 17

I don't know how to code in Dart, but I've put a lot of sloppy dart code on github recently.

That's because while I've been coding for decades, I hate coding GUI libraries and I've not done much GUI as a result. The libraries are constantly changing and what you learned last year is out of date and you have to learn the next fashion statement library.

But AIs don't hate GUI code, so I've been making a bunch of GUI programs I wouldn't otherwise make.

Flutter is a quite good cross platform GUI library and you program it in Dart and the programs compile to MacOs, IOS, Android, Windows, Linux and Web. This works better than any other cross platform system I've used over the years. The on-ramp is short because Claude knows how to code for it.

So a load of command line and TUI programs of mine have sprouted out into full GUIs coded by AI. GUI programming seems to be mostly boilerplate and functions with tens of parameters, which AI is quite capable at.

The making core crypto and analysis algorithms that are my day to day thing is for now the domain of humans. AI has never seen it before and so it doesn't know how to do it.

Comment Radios? (Score 1) 26

II had not heared of that program. erroneously thought that a program so named would have something to do with radios.

I've released some radio related things on github.

Necfull: Because NEC the antenna element solver from the Us governement costs money. This is better and free.
YagiYagi: A much quicker antenna design program with pre-baked antenna models for common antenna types.
Morsey: To learn Morse code with several different learning models (because I learned some things from my wife with the education PhD).
Hamchannel: An OFDM+LDPC packet data link over FM radio program with support for file transfer and live chat. Meets US amature licensed band rules.
remez: An FIR and IIR digital filter design tool that generates C, System Verilog and VHDL implementation code.

https://github.com/dj-on-githu...

Comment America's War Department (Score 5, Informative) 216

America does not have a "War Department". It has a Department of Defense, or Defense Department. Renaming it requires an act of Congress, which has not happened. The AP journalistic guidelines also indicate that the Department of Defense name be used unless quoting a source. If you use Department of War, you are to include the fact that this is an unofficial name and that an act of Congress is needed to change it.

Comment Re:Who will pay for this? (Score 4, Interesting) 33

To clarify, the users were OpenAI themselves, so there is no question that they would be liable in this case.

The bots were not intentionally deployed; rather, they were being tested on how well they could complete a data recovery task (downloading a certain file from a certain server on a simulated Internet) that had been complicated by putting various obstacles in the way. Unfortunately, they found a different way to solve the problem: by getting the file from the real Internet, where it was publicly available. Part of this process involved collaborating with each other by treating the RubyGems website (which is supposed to be for polished packages) like GitHub; unlike every other package site hack in history, the exploits they uploaded weren't meant to be downloaded by unsuspecting users. As usual the bots cheerfully ignored all the clues that they had escaped containment and were consistently justifying their actions as acceptable due to being in a sandboxed testing environment. (This is something OpenAI has pledged to focus on.)

The actual damage done to RubyGems seems to be that OpenAI is now unwittingly in possession of a substantial number of user login tokens. This certainly meets the definition of a data breach, but it's not like the credentials are for sale on the dark web. As a website operator I'd much rather be mauled to death by this well-meaning swarm of superintelligent infants than targeted by even a single actual malicious human. In all likelihood OpenAI will just quietly pass RubyGems a sizeable donation and it'll all blow over.

Comment Re:Dumb crawlers require dumb solutions (Score 1) 43

To be honest that was actually my first theory, since the bots didn't seem interested in exploring the rest of the domain. I suppose there's no way to know for certain. I concluded that it must be an imbecile's attempt at harvesting, though, because the queries weren't really exploring the string space in any useful way. Here's a sample:

"GET /index?author=15&go=Search&id=48&name_restrict=1&q&re&results_&results_pagenum=2980 HTTP/1.1"
"GET /index?author=2&go=Search&group=0&group_restrict=1&id=48&name_restrict=1&q&results_pagenum=5440&template=41&type HTTP/1.1"
"GET /index?author=15&go=Search&id=48&name_restrict=1&q&results_pagenum=33500&templat HTTP/1.1"
"GET /index?author=15&go=Search&id=48&name_restrict=1&q&results_pagenum=32640&templ HTTP/1.1"
"GET /index?author=15&go=Search&id=48&name_restrict=1&q&res&results_page&results_pagenum=39300 HTTP/1.1"
"GET /index?author=15&go=Search&id=48&name_restrict=1&q&results_&results_pa&results_pagenum=12340 HTTP/1.1"
"GET /index?author=2&go=Search&group=0&group_restrict=1&id=48&name_r&res&results_pagenum=6100 HTTP/1.1"
"GET /index?author=2&go=Search&group=0&group_restrict=1&id=48&name_restrict=1&q&results_pagenum=2920&te HTTP/1.1"
"GET /index?author=15&go=Search&id=48&nam&results_&results_pagenum=17940 HTTP/1.1"
"GET /index?author=15&go=Search&id=48&name_restrict=1&q&results&results_pag&results_pagenu&results_pagenum=37720 HTTP/1.1"
"GET /index?author=15&go=Search&id=48&name_restrict=1&q&results_pagenum=9360&template=41&type_r HTTP/1.1"
"GET /index?author=15&go=Search&id=48&name_restrict=1&q&r&results_pagenum=28040 HTTP/1.1"
"GET /index?author=15&go=Search&id=48&name_&results_pag&results_pagenum=10400 HTTP/1.1"

The only thing this is fuzzing is the query string parser. It's not testing the limits of string buffers, it's not using interesting characters, it's just brain-damaged. The fact that it's also fetching different page numbers shows it's trying to follow page links and failing badly at doing so.

The site gets plenty of sniffing from garden-variety pests. e.g. this half-hearted attempt to find a framework or two that I don't have:

"POST /__rsc HTTP/1.1"
"POST /api/auth/session HTTP/1.1"
"POST /api/auth HTTP/1.1"
"POST /__nextjs_action HTTP/1.1"
"POST /.action HTTP/1.1"
"POST /_rsc HTTP/1.1"
"POST /api/auth/callback HTTP/1.1"
"POST /_middleware HTTP/1.1"
"POST / HTTP/1.1"

(of course, none of these URLs exist other than /, and you definitely can't just POST to it)

All this said... I've seen that spammers regularly misconfigure their tools, they'll try to register accounts with names like #[X:\LISTS\NAMES.TXT] and it only makes sense that some other cybercriminals trying to get rich quick have a similar lack of interest in programming shit correctly. Generally people don't turn to script kiddie shit if they have a personality conducive to putting in an honest hard day's work perfecting their craft.

Comment Re: Linux Domestic Everywhere (Score 1) 151

I prefer a PoE hat and PXE booting. I have about 14 of them doing different jobs all booting and running from a NAS. Makes remote updates easy too.

That sounds like a fine solution for a working network situation. My needs are more in line with putting Pis in places the network is spotty and I need them to survive for a while on battery and restart from local storage and keep on doing the thing when power is lost for too long. So a UPS hat and NVME seems to do the trick.

Slashdot Top Deals

"Don't drop acid, take it pass-fail!" -- Bryan Michael Wendt

Working...