Forgot your password?
typodupeerror

Comment Annoying (Score 1) 78

I have a wildcard cert from LetsEncrypt, which I install on all the services on my home LAN. However, because it's a wildcard, LetsEncrypt insists that I prove domain ownership by updating some DNS TXT records. My DNS provider doesn't support automated updates to TXT records. So ACME won't work, so I have to do that bit by hand.

Next, I have to distribute the cert to a handful of local services, including pfSense, TrueNAS, Postfix, the Unifi Controller (extra annoying, because Java), Forgejo, and probably a couple others I've forgotten about. None of that is automated, either. It hasn't been so painful that I've bothered to write scripts for the process, so I get to do a little SSH dance every three months.

"Deploy your own!" Couple of issues there: 1) Everyone treats self-signed certs as suspicious, so they're inappropriate for Postfix TLS; 2) Every time I've tried that, Firefox and/or Chrome complain about some obscure feature not being what they expect. The latest headache had to do with OCSP stapling, which has to be turned on -- oh, whoops, now it has to be turned off... Bleah. LetsEncrypt certs Just Work, so I haven't revisited building my own CA.

Comment Re: EV in nordic countries (Score 1) 112

Both of these approaches have been used. Some vehicles have both things. For example a Sprinter T1N always has glow plugs, but a block heater is an option, but an Espar heater is actually more common! And when equipped, it comes with a timer, not just a knob controller like you would get with the cheapest install kit.

Comment Re:Can't wait for the High Frequency Certificates! (Score 1) 78

I can see how a short cert expiry is a PITA to manage in some deployments, but not how it's likely to lead to less secure behavior.

More hardcoded passwords and the like in the renewal processes where people have been doing them manually and don't know how to automate them correctly. These people should be outsourcing this...

Comment Re: Very Annoying (Score 1) 78

Sure, we'll just assign "master all things x509" to engineer #78 of 205... in our four-person shop.

You can't. You won't. You will outsource all of that to your web provider. Mine handles renewing my cert for me automatically. I could provide my own, but I don't have to. Instead, they handle getting it... from Let's Encrypt. I will not even notice this change, because they will continue to do so.

I have done my own self-signed certs and whatnot, I have installed certs from Verisign professionally yada yada, but there's no reason for me to do anything other than this for my vanity site. But there's really no good reason for most companies which can't afford to have an IT staff to do anything else either. They are not dependent on their website to do business.

Comment Re:Documentation (Score 2) 30

Tailoring the LLM to taht can save a lot of time for an analyst/engineer/operator by identifying and collecting teh information needed for analysis and reporting

It can't, though, and for two reasons. One, a person is required to check off on the data. Two, LLMs don't faithfully represent data. They ingest it as tokens and then what they crap out is influenced by random numbers produced internally as part of the token selection process. That means a person cannot certify that the data was faithfully reproduced without checking literally every value, because that's simply not how LLMs work.

You can potentially address this with a hybrid approach, where the LLM uses a tool to collect and manipulate the data, but this is shifting the problem to whether the LLM used the tool correctly. It might be more obvious when it doesn't, though, so it might still be a win.

What LLMs seem best at when it comes to text processing, and they are still not infallible, is summarization. But you can't trust its negatives, so it's only useful for identifying other possible positives. That's not worthless, it can help you catch things, but you can't trust it to do the parts you'd most want it to do.

Comment Re:A console is a PC (Score 1) 50

The way I can play games without endlessly tweaking options makes the game consoles win for me.

I rarely have to adjust any options for a game to play correctly any more. Usually the internal benchmark does an acceptable job of choosing settings. Of late even pretty rinky-dink games have even been correctly figuring out that I want vsync (I have a 60 fps display, of course I do) which is nice, but they also seem to correctly pick the performance settings. I imagine that this is something that Unity and UE have finally figured out for them.

Comment Re:Incompetence running wild (Score 1) 102

How are colleges and municipalities finding themselves in situations where they've signed contracts for someone else's equipment to be installed on their property, sometimes literally on a piece of infrastructure they they own/control and legally unable to physically remove the equipment?

This has a really obvious answer which has been thoroughly explored here but I would like to explore why that answer is bad even though it's true, and pointing out it's true is not bad.

First some postulates:
Government should not be allowed to contract anyone to manage our data.
Government should not hire contractors to work on systems which will be used to manage our data.
Government should never be sending our data out to anyone else or allowing it to be stored on systems not under their control.

Obviously I realize that this is status quo stuff, it's more common than not in fact. Only legacy and defense systems are still held and run by feds and states, everything else is generally outsourced to a contractor (Accenture, Deloitte...) and is also probably running in the cloud — specifically on AWS, Azure, or Oracle.

But these things should never happen specifically because they are each individually poisonous to privacy, let alone all three together. All of this software should be developed in-house like it used to be. Government outsources software development and management so that it can do things it's not allowed to do otherwise, not because it's the only way to do it. It allows them, perhaps most importantly, to hand our data to others. Huge amounts of our PII is being processed not just on cloud instances provided by these players, but actually through their services (e.g. Amazon Transcribe) which are AI-based* and also mean that they actually process all of the data on our behalf and are in a unique and ideal position to harvest it.

* Amazon Transcribe used to support phonetic substitutions but now it doesn't, which I take to mean that they've just handed the whole job purely to a LLM which does it in one stage... you hope.

Comment Re:Sounds like a good reason to vote Democrat (Score 1) 46

The current situation with the Republicans in power and willing to support literally anything that Trump does, is not healthy.

For the ultra-wealthy, chaos is great. They will ride it out with their stockpiled supplies and remote resorts and child rape islands, and if necessary, their bunkers. As we lose our shit they will buy it up and we will own even closer to nothing. They don't actually believe that the USA can fall, which is stupid but predictable, and it probably won't any time soon.

Trump is becoming increasingly unhinged, and not just in a har har look at the idiot kind of a way. Yesterday he decided to stab Ukraine (& Europe) in the back to buy diesel from Russia, when he could instead have bought it from a friendly country like Canada

In fact we do buy it from Canada, we buy way more than we just got from Russia all the time. This is just a way acceptable to his base for him to transfer money to Putin to use to attack Ukraine. It's not unhinged, except in the way that all evil is unhinged. It's Trump doing what Putin tells him, because Putin owns him.

Deutsche Bank was being extorted by Trump even once it became obvious that he wasn't going to be paying back his debts, because if it came out how fucking stupid they are (that they got suckered by a phone call by obviously-Trump pretending to be someone else who worked for Trump's father, who defrauded them into loaning him money with the lie that he was already in charge of the family fortune when he wasn't) that would make them look like the clown fucks they are. But then that came out and they dropped him, and he had to start banking with Russia. Both of his sons opened their stupid fucking faces and let us know that was the case on TV, on separate occasions. The rest follows naturally -without any need for appeals to the long-running conspiracy theory about "Agent Krasnov". I don't know or even actually care whether that's true when what we can see is so obviously damning.

Comment Re:They aren't the problem (Score 3, Informative) 44

These aren't supposed to be real-time surveillance, remember? That's the Flock, and other, ALPR out for these things. The moment they admit they're real-time tracking is the day every single one of these cameras is ripped out

Anyone who wants to know can look right now and find out that yes, the Flock cameras are always watching. But since they don't belong to the government, that's legal. You might argue that it shouldn't be, that if they're just turning around and handing the data to the police on any request (that is, without a warrant) then they are effectively functioning as a part of the police department. And in that case I would agree, but so far courts have permitted that to continue.

under precedent that the government doesn't get to track everyone in public on the off-chance of catching a criminal

Yeah, but again, so far if a private company is doing it and then giving the data to the cops, it's not government surveillance. An even worse example of such a partnership is that the US Postal Service hands all of the mailpiece scanning data to the FBI. The feds are logging 100% of our snail mail metadata, and tracking who is sending what (type of mail) to who. All backbones are monitored and a percentage of traffic can be sampled in realtime, Never forget QWest. Need I go on? The government is spying on us in every way, both directly and indirectly. Most people are fully head-up-ass about it so they don't have to think about it.

Slashdot Top Deals

Did you hear that two rabbits escaped from the zoo and so far they have only recaptured 116 of them?

Working...