Show more

In preparation to ditch my Facebook account, I requested data logs for the ~15 years I've used the site. Result: a file of less than 1MB. And the ridiculously bogus file had events with dates like January 01, 1970 -- decades before Mark Zuckerberg was even born.

A scumbag company in any decade...

Some interesting developments seem to be going on with the Calyx project, first with the founder/CEO stepping down and then with this interesting message around rotation of signing keys.

calyxos.org/news/2025/08/01/a-

Any #infosec folks wanna help me with some decent data to backup the following point? I am trying to make the point to some executives that a #password policy requiring minimum 8 characters with 1 symbol, mixed case, and 1 number is just not reasonable in 2025. (I'm commenting on another company's policy, not my own!)

What is a good example of a policy (e.g., NIST 800-63 or whatever) that said 49 bits was no good?

I currently say: 49 bits of entropy was unacceptably low in 2005. It is unthinkably low in 2025. What can I point to that might resonate better than "bits of entropy?"

Using the classic method with Shannon's estimate, I figure it's on the order of 49 bits of entropy but that's only if it's purely random from the full character set, and we konw that's not true.

I'm not looking for rhetorical suggestions. I'm good at rhetoric. I'm looking for references I can point to (like "XYZ published in 2011 that the minimum acceptable password was 56 bits of entropy")

feel free to boost for fun
#security #cybersecurity

🔵 This week's Tom the Dancing Bug
-
🛫 You'll be shocked at the all-true, top-secret story of Donald Trump and Epstein Island 🏝️
-
Brought to you by the Inner Hive, including long-time member Acoustic Ross and new member Don Bartenstein.
Join us at bit.ly/theInnerHive
-
READ THE COMIC RIGHT HERE👇

Mexit, not Brexit, is the new priority for the UK - theregister.com/2025/08/08/opi "A #Microsoft Exit strategy isn’t just a good idea, it’s vital. It must go a long way beyond a farewell to Redmond"

I keep hearing AI proponents say that it's critical to develop these AI-using skills *now*, because otherwise you'll be left behind.

But isn't the whole point that AI means you can just let all your skills atrophy and let the magic box do things for you?

Any AI system that you can't just sit down and use is *surely* not the True AI. ;-)

“I’m a guy who has been running independent websites and dealing with ad networks for more than 15 years and this book demystified a lot for me.”

tedium.co/2025/08/07/ari-papar

Show thread

Two years ago when researchers found and publicly exposed an intentional backdoor in a TETRA encryption algorithm used to secure radio communications for police/military/intel agencies around the world -- the algorithm involved a key advertised as one strength but secretly reduced to 32 bits -- the European organization that produced the algorithm told users that to secure their communications they could deploy an end-to-end encryption solution on top of the backdoor'd algorithm. Now the same researchers say they found a security problem with the end-to-end solution as well -- another reduced key. Here's my story for Wired:

wired.com/story/encryption-mad

Google calendar can be poisoned with invisible, malicious Gemini prompts:

darkreading.com/cyberattacks-d

Do I have to stop clicking on calendar invitations? What are the alternatives?

If Google can't get security or "AI" right, what hope is there that anyone will?

We're going to need journalists to stop talking about synthetic text extruding machines as if they have *thoughts* or *stances* that they are *trying* to *communicate*. ChatGPT can't *admit* anything, nor *self-report*. Gah.

wsj.com/tech/ai/chatgpt-chatbo

Psst... looking for a new club to join? 👀

Great news, ours is looking for new members: codeberg.org

Fuck Lee Greenwood's song, The Dwarves' "Fun To Try" should become the new USA national anthem.

#Australia Completely Loses The Plot, Plans To Ban Kids From Watching #YouTube - techdirt.com/2025/08/06/austra "The end result will be that Australia has basically taught a generation of teenagers not to trust the government, that their internet regulators are completely out of touch, and that laws are stupid."

I just passed 50,000 followers here -- more than I ever had on Twitter -- and I am hugely grateful to all of you.

I also have at least 10x the genuine engagement here that I ever got on Twitter.

I have just been introduced to Sharon Goldman's AI journalism and it's some of the funniest shit I've seen in my life.

She's really out there prompting ChatGPT to write what reads like Kindle Unlimited-tier softcore erotica and getting paid.

Even her "About" page on LinkedIn has two em-dashes and one --, so like, what's going on here? Local journalist can't write five sentences without an LLM? What are DOING out here?

This just in: my friends chucked out a shitty "CO2" #sensor.

Actually a breathalyzer:

hackaday.com/2023/02/18/anatom

It's a really pretty design! And while the man in the video says it's useless, I actually started a CO2 sensor project this winter, but I didn't have a display or case.
Now I guess I do!

But it turns out driving a matrix of #LCD segments is surprisingly difficult.

Here's a picture of connections. Wish me luck figuring out.

#electronics #ReverseEngineering #environment

Show more
Librem Social

Librem Social is an opt-in public network. Messages are shared under Creative Commons BY-SA 4.0 license terms. Policy.

Stay safe. Please abide by our code of conduct.

(Source code)

image/svg+xml Librem Chat image/svg+xml