• 0 Posts
  • 101 Comments
Joined 1 year ago
cake
Cake day: July 5th, 2023

help-circle
  • For my personal devices:

    • Microsoft products from MS DOS 6.x or so through Windows Vista
    • Ubuntu 6.06 through maybe 9.04 or so
    • Arch Linux from 2009 through 2015
    • MacOS from 2011 through current
    • Arch Linux from 2022 through current

    I’ve worked with work systems that used RedHat and Ubuntu back in the late 2000’s, plus decades of work computers with Windows. But I’m no longer in a technical career field so I haven’t kept on top of the latest and greatest.





  • Good writeup.

    The use of ephemeral third party accounts to “vouch” for the maintainer seems like one of those things that isn’t easy to catch in the moment (when an account is new, it’s hard to distinguish between a new account that will be used going forward versus an alt account created for just one purpose), but leaves a paper trail for an audit at any given time.

    I would think that Western state sponsored hackers would be a little more careful about leaving that trail of crumbs that becomes obvious in an after-the-fact investigation. So that would seem to weigh against Western governments being behind this.

    Also, the last bit about all three names seeming like three different systems of Romanization of three different dialects of Chinese is curious. If it is a mistake (and I don’t know enough about Chinese to know whether having three different dialects in the same name is completely implausible), that would seem to suggest that the sponsors behind the attack aren’t that familiar with Chinese names (which weighs against the Chinese government being behind it).

    Interesting stuff, lots of unanswered questions still.



  • I wouldn’t describe it as a reversal, the actual serenity prayer as stated already has the “courage to change the things I can,” so anything that is within the speaker’s ability to change should already be covered. And the last part, the wisdom to know the difference, already asks to have the ability to discern the two categories, and seeks to avoid accepting the things that can be changed.

    It’s clever, but doesn’t actually say anything the serenity prayer itself doesn’t already say.


  • I think by painting it as a bunch of buzzwords people were reading into the comment as either an endorsement that the items in the list were the same, which isn’t what I meant. I’m just trying to give a description of the various buzzwords I remember being thrown around by a combination of scammers, hucksters, cargo cultists simply mimicking the latest trends without understanding them, and actual legitimate business models, without actually giving my views on which ones actually delivered on the hype, which ones overpromised, or which ones totally fizzed out (or are going to).


  • A list of business fads in the tech world, from what I remember:

    • Personal computers
    • Multimedia
    • Networks: Internet, E-mail, World Wide Web, all the stupid names for it like cyberspace, information superhighway.
    • Web 2.0: AJAX and the long tail, user generated content, democratized information exchange and discovery without gatekeepers
    • Social Media
    • The Cloud
    • Mobile Apps
    • Blockchain, cryptocurrency, decentralized finance, smart contracts, Web 3.0, NFTs
    • VR, AR, XR
    • Generative AI, LLMs, GANs, Deep Learning, etc.






  • Clickthrough rates are one thing, but plenty of ads don’t rely on the ad being in the actual chain of purchase. Ads for small stuff like movies, beverages, snacks, etc., or big stuff like cars, furniture, etc., try to get consumers to buy those things outside of the medium that the ad is being presented.

    Plus native advertising when you’re looking for a specific purchase can sometimes factor in. Someone might pay more for a particular hotel room to get more prominent placement in results, and I’m not going to intentionally ignore that sponsored placement when choosing between a bunch of hotels. Maybe the ad didn’t actually make a difference (in theory my purchase decision would’ve considered that hotel anyway, and if it’s the best for my needs then they would’ve gotten my business without the ad), but I’ve definitely purchased sponsored results when searching for a product that I already intend to buy.

    And if it counts as an ad, paid referral links from recommendation websites I trust are an easy way to “support” an outlet that I use.


  • This isn’t just a browser vulnerability. It’s a vulnerability at a much more fundamental level, which is why it’s so critical. It’s a vulnerability in how almost every piece of software processes a widely supported image format, so anything that touches images is potentially at risk: browsers, chat or messaging apps, file browsers, or really anything that uses thumbnails or image previews, including some core OS functionality. On the server side, you’ve got anything that makes thumbnails and previews, too.

    We should wait and see whether there are any practical attacks outside the browser context (maybe the malicious code needs to be placed in a web page that displays the malicious image file, or maybe they need to figure out a way to actually put all the malicious code in the image file itself). But the vulnerability itself is in a fundamental library used by a lot more software.





  • Yea it feels like something has been rotten with the ads industry for a long while.

    Advertising only has as much value to the advertiser as it can get in modified consumer behavior.

    If I only have $100/month in truly discretionary income, all the advertising in the world is only fighting for that $100. Realistically, though, we’re not all susceptible to the same advertising influences, which is why ad personalization exists. But personalize it all you want and you’re still, at most, getting a few percent of my monthly budget to shift towards what you want me to buy.

    That means that advertising is only really worth it for whales. The type of people who might buy hundreds of dollars of goods or services through clicking on ads on Instagram, who have that combination of a huge amount of discretionary income and are fickle enough that they might impulse buy big ticket items.