• 1 Post
  • 138 Comments
Joined 1 year ago
cake
Cake day: October 20th, 2023

help-circle
  • Make sure to actually understand how those “non-profit” websites and services are functioning.

    It costs money to power servers and to maintain them. Most of the fediverse instances like to claim they are run on donations and so forth. But… think about how angry people get at the idea of tipping for ANYTHING and then wonder how many of those are throwing significant cash at your favorite lemmy or mastodon instance per month.

    Everyone is always shocked when they find out how social media or a “free” vpn or whatever is funded and where there information is going. But hey, I am sure it will be completely different this time.


  • Just to expand on the phone thing because it amuses me:

    In a past life myself and a few others had access to cell tower records for a specific company. As a research project, we applied what we would now call AI/ML concepts to sanitized data (basically all customer IDs were mapped to a different ID set and then the mapping was thrown away).

    For poops and giggles I checked the tower nearest the local happy ending massage place. And, lo and behold, we were able to immediately get a list of everyone who turned their phone off for 30-60 minutes.



    1. So how ai generated is wired these days?
    2. NEVER trust any guide that is about “protecting yourself from government surveillance”. Anyone who has an idea of what risk mitigation is viable will NEVER phrase it that way for obvious reasons

    From a quick skimming, it looks like their genius guides boil down to

    • SIgnal: Signal is only as secure as every user in the chat. Yes, it is MUCH better than using something like imessage. But if they are beating your buddy with a baseball bat it doesn’t really matter if your message expired or not
    • FDE: Yes, that is a good idea. But understand that “oh, I forgot my password” doesn’t work when you have been declared to have no civil rights because you look foreign.
    • Get a NAS: A good idea, in general. But maybe understand that means you have a big ol’ box of incriminating info in your house that is available to whoever has a crowbar.
    • Use Tor: HA! First, it is only a matter of time until Tor is attacked and likely large numbers of users are brought up on CSAM charges. But also? Understand what a compromised endpoint is and maybe look up what governments tend to be associated with those.
    • Get a VPN and turn off your GPS: Yeah. it is a real good thing that our devices don’t all connect to cell towers where they can easily be tracked from.
    • Get certain crypto but carry a lot of cash: Yeah… how AI generated was this article?

    If you actually care about your vulnerability, look what ACTUAL journalists on the run from a government or megacorporation do (dedicated hardware that can’t even power up within a few city blocks of your other devices, for one). And understand that most of those boil down to “They know it is me and they are hunting me but I can live off the grid long enough to get this story out and then maybe they won’t kill me afterward”.



  • I think, in general, the shift to having MOST functions be on the touchscreen is a good one.

    When driving? You should generally only be futzing with (off the top of my head):

    • Windshield wipers
    • Climate control
    • Not the music but let’s be honest here
    • Turn signals and headlights

    And the rest make perfect sense to keep behind menus you deal with when you are parked. And with modern cars, climate control stops being about balancing the knobs and becomes about setting the preferred temperature and MAYBE tapping the defrost/circultaion button. Which actually also makes sense to not need direct button access.

    But yeah. Still 100% need physical buttons and knobs for the rest.


    I think it is Subaru who have the big display screen and then a small row of dedicated buttons below it?


  • Keepassxc is great if you don’t need to synchronize passwords across too many locations and do not require anything where state matters (mostly related to stuff like yubikeys). It DOES have the vulnerability in that a bad actor has infinite time to crack it should they get a hold of the file whereas bitwarden still lives on a server.

    But they are very different products with very different capabilities. Whether someone needs bitwarden over keepass is going to be a question of use cases.







  • The thing is? Ignoring the apparent void that black skin creates on all cameras (oy), it doesn’t take much time. It takes computing power.

    As poops and giggles a few friends and I took the public (rumble…) traffic camera feeds that a nearby county has online. Set up a simple python script to scrape those and then configured an off the shelf tool to track a buddy’s general car (green hatchback) and told him to just drive around for an hour.

    We were able to map his route with about 70% accuracy with about two hours of scripting and reading documentation. And there are companies that provide MUCH better products for the people who have access to the direct feeds and all the cameras we don’t have access to.


  • I mean, you definitely want to wear a mask and some goggles at a protest. If only for the purpose of pepper spray. I totally don’t have a thin gaiter, goggles ,and a beanie and have definitely not heard great things about mountain biking helmets (the ones with faceguards) and totally am not considering grabbing one next time I do an REI run.

    But also be aware that, with protests, you are almost always up against the groups who have access to all those “traffic” cameras and the like. And computer vision makes it fairly trivial to identify when a bunch of unmasked people walked into a dark alley and came out with their faces fully covered by tracking them back from the 4th street protest. It isn’t Enemy Of The State levels of asking Baby Busey and Jamie Kennedy to generate a 3d model from a single shot of Big Willy Style ogling some ta-tas, but most of the ways surveillance is used during that sequence are shockingly realistic and feasible.



  • Yeah but this is (basically) reddit and clearly it isn’t racism and is just a problem of multi megapixel cameras not being sufficient to properly handle the needs of phrenology.

    There is definitely some truth to needing to tweak how feature points (?) are computed and the like. But yeah, training data goes a long way and this is why there was a really big push to get better training data sets out there… until we all realized those would predominantly be used by corporations and that people don’t really want to be the next Lenna because they let some kid take a picture of them for extra credit during an undergrad course.


  • No. I have worked with phone camera sensors quite a bit (see above regarding evaluating facial recognition software…).

    Yes, the computation is a Thing. A bigger Thing is just accessing the databases to match the faces. That is why this gets offloaded to a server farm somewhere.

    But the actual computer vision and source image? You can get more than enough contours and features from dark skin no matter how much you desperately try to talk about how “difficult” black skin is without dropping an n-word. You just have to put a bit of effort in to actually check for those rather than do what a bunch of white grad students did twenty years ago (or just do what a bunch of multicultural grad students did five or six years ago but…).


  • For low contrast greyscale sequrity cameras? Sure.

    For any modern even SD color camera in a decently lit scenario? Bullshit. It is just that most of this tech is usually trained/debugged on the developers and their friends and families and… yeah.

    I always love to tell the story of, maybe a decade and a half ago, evaluating various facial recognition software. White people never had any problems. Even the various AAPI folk in the group would be hit or miss (except for one project out of Taiwan that was ridiculously accurate). And we weren’t able to find a single package that consistently identified even the same black person.

    And even professional shills like MKBHD will talk around this problem during his review ads (the apple vision video being particularly funny).