Father, Hacker (Information Security Professional), Open Source Software Developer, Inventor, and 3D printing enthusiast

  • 36 Posts
  • 2K Comments
Joined 3 years ago
cake
Cake day: June 23rd, 2023

help-circle
  • A dog can’t withdraw affection strategically.

    Oooooh no. No. I’ve adopted many dogs over the course of my life and this is absolutely untrue. Especially of really smart dogs.

    Example: If my dog wants me to take her for a walk, and I go to pet her instead, she’ll pull away and grunt, then literally punch the closet with the safety vest inside. She knows that I always put on the vest before we go for a walk and knew exactly how to communicate what she wanted, haha.

    Another: On pizza night, I go get a hot bag (everyone should have one!) from the garage and then leave to go get the pizza. Not only does she know what day of the week this happens, she knows the relative time. She will bark at me to get my attention and then lead me to the bag!

    “I guess it’s time to go get the pizza.”

    Furthermore, she will not try to get out when I take the bag to the front door like she often does. If I’m holding the bag, she will stand far back from the door and if don’t move fast enough she’ll try to shoo me out!

    She will not be passing up free pizza crust, thank you! Move your ass, human!

    Here she is, the other day, lying directly on my chest, slowly inching her face closer and closer to me, indicating it’s time to get up:

    Daisy lying on my chest, close up shot




  • TVs, thermostats, “smart” anything, android phones, 3D printers, industrial equipment, routers, sensors (e.g. soil monitoring where there’s millions), and zillions more categories.

    Remember: Just about every “smart” device that’s connected to the Internet is running Linux and isn’t getting compromised anywhere near as often as embedded windows devices did (which is a big reason why companies stopped using embedded windows!). There’s vulnerabilities that crop up from time to time (e.g. cheap routers) but that problem can often be attributed to shitty practices on the part of the device manufacturer. Example: Using the same default credentials on every device, expecting the end user to change them.




  • One thing to think about with Linux—where I think you’re getting the wrong impression—there’s something like fifteen billion Linux installations globally. Compare that to Windows where there’s about 1.9 billion.

    Yet for some painfully obvious reason, Windows has about an order of magnitude more serious, actively exploited vulnerabilities than Linux. For every serious, actively exploited Linux vulnerability (which includes basically anything in the tens of thousands of packages + kernel that are available and ready to install in any Linux install), Windows has vastly more. And that’s just the stuff branded by Microsoft!

    There’s a whole lot of reasons why you’re much more secure in just about every way on a Linux install, but believe it or not, you know what the single most important factor is, that prevents malware from being much of a problem? Default permissions!

    It sounds silly, but whenever you download something on a Linux desktop you can’t just execute it. You have to take an extra step and mark that thing/malware as executable before you can run it. It’s a step where everyone stops to think, “hmm… Maybe I should double check this.” 😁

    This doesn’t stop the truly careless, of course. But it’s easily the biggest factor in preventing the sorts of “drive by malware” that people often get suckered into running.

    Contrast this with Windows where literally everything is executable by default. You can change a .txt to an .exe and BAM! Windows will now attempt to execute it when you double click on that file (that would throw an error, but you get the idea).












  • The assumption here is that the AI-generated code wasn’t reviewed and polished before submission. I’ve written stuff with AI and sometimes it does a fantastic job. Other times it generates code that’s so bad it’s a horror show.

    Over time, it’s getting a little bit better. Years from now it’ll be at that 99% “good enough” threshold and no one will care that code was AI-generated anymore.

    The key is that code is code: As long as someone is manually reviewing and testing it, you can save a great deal of time and produce good results. It’s useful.