Submission + - 97% Of Buildings On Earth 3D Mapped (nature.com)
"Scientists have produced the most detailed 3D map of almost all buildings in the world . The map, called GlobalBuildingAtlas, combines satellite imagery and machine learning to generate 3D models for 97% of buildings on Earth.
The data set, published in the open-access journal Earth System Science Data on 1 December1, covers 2.75 billion buildings, each mapped with footprints and heights at a spatial resolution of 3 metres by 3 metres.
The 3D map opens new possibilities for disaster risk assessment, climate modelling and urban planning, according to study co-author Xiaoxiang Zhu, an Earth observation data scientist at the Technical University of Munich in Germany."
– nature.com
Submission + - Over 10,000 Docker Hub images found leaking credentials, auth keys (bleepingcomputer.com)
"These multi-secret exposures represent critical risks, as they often provide full access to cloud environments, Git repositories, CI/CD systems, payment integrations, and other core infrastructure components," Flare notes
Additionally, they found hardcoded API tokens for AI services being hardcoded in Python application files, config.json files, YAML configs, GitHub tokens, and credentials for multiple internal environments.
Some of the sensitive data was present in the manifest of Docker images, a file that provides details about the image.Flare notes that roughly 25% of developers who accidentally exposed secrets on Docker Hub realized the mistake and removed the leaked secret from the container or manifest file within 48 hours.
However, in 75% of these cases, the leaked key was not revoked, meaning that anyone who stole it during the exposure period could still use it later to mount attacks.
Flare suggests that developers avoid storing secrets in container images, stop using static, long-lived credentials, and centralize their secrets management using a dedicated vault or secrets manager.
Organizations should implement active scanning across the entire software development life cycle and revoke exposed secrets and invalidate old sessions immediately.
Comment Re: He's not wrong. (Score 1) 239
Comment Re: Perfect is the enemy of good enough (Score 1) 239
Comment Re: Not Cool (Score 2) 239
Comment Re: \o/ (Score 1) 171
Comment Re: I believe what they want is "software engineer (Score 1) 113
Comment Re: Tech / IT really needs the TRADES SYSTEM! (Score 1) 113
Comment Re: Call yourselves "engineers" (Score 1) 113
Comment Decomposition (Score 0) 113
Comment Re: just get rid of EV charging altogether (Score 1) 162
Comment Re:Genuine progress ie being made, but... (Score 1) 41
The stories come from prior stories, with new prompts to re-order the words essentially. This is enshitification. It will grow until the LLM's can coin new terms, build analogies, research the principals of a story, and even call people close to the story for their opinion and summarize it. Then LLM's will have to associate good journalism practices with prompt guidelines given by trainer models.
Those missing parts are ultimately solvable by even more LLM API's and trickery, but it's still not intelligent. In fact, the guardrails of most public LLM's are so narrow for divisive issues that most newsworthy issues would be dry-as-a-bone recaps. The arc of time that makes previously non-controversial phrases turn into a dogwhistle to a social agenda would make LLM's just agree with the accusation and move on. They have no agenda, including any to dodge embarrassment.
LLM's that could write in an acerbic, critical form like some great writers of social commentary (Twain, Vonnegut, Hitchens) are a far way off. Those would be able to build a cohesive worldview using a mostly-sensible value system. As it is now, the Transforms don't really have a way of teasing out a contextually-generic moral system, because there isn't one. So we're creating the best savant possible in the field of reading everything, summarizing what's its read. This covers a lot of daily human thought, but it cannot cross over to feeling something, and it seems absurd when a machine tries to fake it.