Forgot your password?
typodupeerror

Comment Re:Shocking (Score 0) 121

"Point us to an post about a guy given a job he is clearly unqualified"

That's literally my point -- the post isn't about the person in charge of the ministry! It's about them testing Collabora and the users just having too many issues with it. I guarantee if it was the same exact story and the minister had a male name none of you would have done this deep dive and criticism.

And why do you think she is unqualified? The Minister of Digitization doesn't need to be an expert on digitization, they need to be competent at high-level management and understanding how laws and policies work. Did she do something wrong? Would someone else have somehow convinced the 37 or however many employees who tested it not to hate it?

Comment Re:mod_php was considered the easiest approach (Score 5, Insightful) 28

This appears to be an FPM exploit: https://github.com/KillaBoi/St...

But notice it has to make a huge amount of assumptions about the configuration of the server in order to work. So this kinda sorta underlines the thing you say, assuming the hacker cannot obtain the output of php_info() - it's not unheard of for PHP devs to include that somewhere so they can check what's going on. It makes script kiddie stuff a little less likely, though a hacker specifically targetting a specific installation will likely be able to break in.

I've read various comments about viable this exploit is, and even submitted a link to someone's commentary to Slashdot about how it maybe overblown (https://eliastaylor.com/noexploit/) - The infosec community seems genuinely split on it, and I'm not sure this proof of concept is really going to convince anyone right yet.

The reality is we should probably not have acted as if a nuke went off last week, while at the same time we should patch it on a "just in case" basis. The 4 thing was more serious, and remains more serious given the number of IoT devices that'll accept 4 forever. This, on the other hand, is a good reason to stay up to date.

Comment Re:Paragraph formatting, really? (Score 2) 121

My suspicion is that all of those comments relate to importing Word documents and templates into LibreOffice. Without LibreOffice full-on ditching their internal DOM and using Microsoft's, formatting changes are inevitable.

The question to me is why they see that as a reason to not replace Word. The obvious solution is import the fucking templates and fix them, a one off task.

Comment Re:It's funny (Score 3, Interesting) 121

Collabra is a full office collaboration suite based on several open source projects including LibreOffice. LibreOffice and Collabra have had an... interesting relationship, despite the latter making probably the largest amount of contributions to it in recent decades.

It's not obscure, it's just you probably don't know the primary output of Collabra's work when you use it.

Comment Re:Harm (Score 1) 106

...says the person who defamed Fauci in the thing being replied to, something that only people who intentionally consume only media that agrees with them knowing full well it lies about 90% of the time would do.

Let me guess: you think children are getting sex change surgeries. You also think that schools are providing sex change surgery for free. You think that there are litterboxes in school classrooms for furry students. You won't fly any more because there's a risk the airplane pilot might be a furry, and that somehow makes them unable to fly. You think cats and dogs are being eaten by legal Haitian immigrants. You think that undocumented immigrants are flooding the polls or even make up a meaningful percentage of voter registrations. Global warming? Ridiculous liberal myth, clearly. Same for the damage CFCs did to the ozone layer. Oh, and that pizzeria Hilary Clinton got her pizzas from has a child rape basement. Sure.

Sound about right?

Submission + - Was the PHP RCE vulnerability as serious as the hype suggested? (eliastaylor.com)

karmawarrior writes: Last week's panic about bugs in PHP resulted in numerous website outages and a lot of stress for the development, system administration, and infosec people. But... to date, no real proof of concepts appear to have been released. As Elias Taylor reports, discussing the three most starred PHP RCE proofs of concept on Github:

One really amusing thing in common with most of these "PoC"s is that they lean on "LFI", or local-file-inclusion, to make the vulnerability. In non-php terms, their exploit chain requires the server to already have a severe code-level vulnerability. It's not rare for PHP apps to be (broken) in some sense, but requiring the server to have an existing vulnerability where users could cat /etc/password is an insane pre-requisite. If you need this, this does not make this a severe bug.

Taylor suggest the issue is people outsourcing their judgement to Claude et al, with Claude finding the problem, telling the users (correctly) that technically it's an RCE issue, and the users failing to recognize judge the context. It certainly wasn't helped that a PHP core team member appears to have been one of the people who took the reports at face value, stating "exploits will start appearing 15 minutes after the patch drops." And, of course, PHP has a poor reputation for security, albeit largely over design issues than interpreter quality.

Comment Re:Dipshits, it's still a bug if AI finds it (Score 5, Insightful) 29

If you're overloaded with slop bug reports - that is, bullshit bug reports that aren't a bug in your program but are the results of genAI users simply believing the output of Claude and shoving it into a ticket so they can pretend they contributed - you might have a very different view on this.

Slop is slop. If genAI was producing high quality output that's usable we wouldn't call it that.

Comment Re:Licensing barrier (Score 2) 29

This would, if someone would do it, resolve a hell of a lot of issues that I think are serious in the current model. Alas big-AI seems reluctant to actually partition training sets like that, and instead are focusing on lobbying to try to get copyright laws to ignore the licenses of the content they're training on. And honestly, that strategy doomed because not every jurisdiction in the world is going to go along with "Please let us ignore copyrights because we have lots of money" the same way the US seems to be going.

Everything Big AI seems to be doing seems to be oriented towards preventing society from hitting CTRL-Z.

Comment Re:Big Laundry hated the Washing Machine (Score 4, Interesting) 143

Another person who spouts some generic policy stuff without actually making a real point. Do you think those opposing genAI haven't used it? Haven't considered the ramifications? Haven't determined whether or not it's even what it claims to be?

Or are you saying the same of genAI advocates who insist that somehow they're being discriminated against when they keep submitting garbage, overstating the degree to which genAI helped them, often lying about it, ignoring the consequences both of doing this and the impact they're having on everything from the environment to the availability of personal computing (or worse, claiming those concerned about those issues should fuck off), ignoring or even celebrating the impact they're having on incentives to create non-slop (which their fucking genAI systems rely upon! What, exactly, are you expecting genAI to work with in 5-10 years time?), and pretending the legal issues are all solved because of a couple of US jurisdiction only legal cases that have already been contradicted by a fresh US jurisdiction only case, and with no sign the Supreme Court is going to take up the issue in the near future?

Every genAI advocate comes up with this pseudo-centrist bullcrap pretending that they are the "sensible" ones who have truly evaluated whether a technology is Good(tm) or not, and pretending the opposition is just irrational hate, when they are the people who haven't evaluated jack-squat: all they've done is used it, been complemented for their wonderful analytic abilities and told how smart they are, vibe coded some kludgy crap with awful UXes that aren't anywhere close to being finished, and then pronounced on the basis of this that somehow vibe coding iS tHe fUtUrE.

If you guys were the people who were thinking about the issues:

1. You'd have addressed the elephant in the room about where the training content is going to come from in the future.
2. You'd have acknowledged that everyone except you seems to be capable of noticing your programs are fucking awful.
3. You'd be demanding genAI makers knock it off with the constant sucking up manipulative shit because nobody in their right mind thinks that's (1) likely to get you a good end-product, and (2) you know damned well it's just going to turn you into some Musk or Trump "Thinks they're God but just produces shit" figure, for similar reasons.
4. You'd acknowledge that, no, the legal situation is *not* resolved, and the likelihood that your code isn't violating a shitload of licenses you're not even aware of is, actually, extremely high: you'd be calling for clarification, not shoving this crap in your open source projects as fast as humanly possible.

But you're not.

The people who are coming up with these issues you've decided are in your way, while the nice genAI machine is telling you how right you are. Of course you're going to side with the latter.

But no, you're not the rational ones in this exercise, you're the easily manipulated ones.

Comment Re: DALL-E? (Score 1) 34

My daughter's been doing the same thing to me but failing regularly. One because the style was obviously artificial - but I recognized it as a pre-AI style so very unlikely to be AI (mostly gaming graphics cut and pasted.) The other was... a WatchMojo YouTube video. Because WatchMojo is pretty much what 50% of AI video slop generators are trying to imitate (ie top ten lists, etc.) (No, Mojo International Holdings Corp has not, so far as I can tell, switched to genAI, for starters they pronounced words correctly...) So I'm not convinced they're as good as they might appear...

Slashdot Top Deals

In the long run, every program becomes rococco, and then rubble. -- Alan Perlis

Working...