Father, Hacker (Information Security Professional), Open Source Software Developer, Inventor, and 3D printing enthusiast

  • 10 Posts
  • 128 Comments
Joined 1 year ago
cake
Cake day: June 23rd, 2023

help-circle
  • This is a, “it’s turtles all the way down!” problem. An application has to be able to store its encryption keys somewhere. You can encrypt your encryption keys but then where do you store that key? Ultimately any application will need access to the plaintext key in order to function.

    On servers the best practice is to store the encryption keys somewhere that isn’t on the server itself. Such as a networked Hardware Security Module (HSM) but literally any location that isn’t physically on/in the server itself is good enough. Some Raspberry Pi attached to the network in the corner of the data center would be nearly as good because the attack you’re protecting against with this kind of encryption is someone walking out of the data center with your server (and then decrypting the data).

    With a device like a phone you can’t use a networked HSM since your phone will be carried around with you everywhere. You could store your encryption keys out on the Internet somewhere but that actually increases the attack surface. As such, the encryption keys get stored on the phone itself.

    Phone OSes include tools like encrypted storage locations for things like encryption keys but realistically they’re no more secure than storing the keys as plaintext in the application’s app-specific store (which is encrypted on Android by default; not sure about iOS). Only that app and the OS itself have access to that storage location so it’s basically exactly the same as the special “secure” storage features… Except easier to use and less likely to be targeted, exploited, and ultimately compromised because again, it’s a smaller attack surface.

    If an attacker gets physical access to your device you must assume they’ll have access to everything on it unless the data is encrypted and the key for that isn’t on the phone itself (e.g. it uses a hash generated from your thumbprint or your PIN). In that case your effective encryption key is your thumb(s) and/or PIN. Because the Signal app’s encryption keys are already encrypted on the filesystem.

    Going full circle: You can always further encrypt something or add an extra step to accessing encrypted data but that just adds inconvenience and doesn’t really buy you any more security (realistically). It’s turtles all the way down.



  • This is crap. TikTok is just a video hosting platform with a powerful, China-controlled algorithm that keeps people addicted. If TikTok were to disappear today a new platform would rise to take it’s place within milliseconds. Seriously: Do you honestly think that everyone would just put down their phones and do something else because TikTok doesn’t work anymore‽

    It’s not even being banned! Which is another reason why this article is total bullshit. ByteDance just needs to comply with the law that is meant to prevent the Chinese government from interfering in US politics (yes, that’s the real reason why that law was passed). That means they need to break ties with China or just outright sell the platform to some other company. If they let it die in the US they’d be throwing away billions of dollars which just isn’t going to happen.

    Furthermore, China has absolutely no ground to stand on by complaining about TikTok bans. They ban all sorts of foreign-owned apps in China for more dubious reasons.












  • I don’t trust these estimates. By 2050 there’s no way regular ICE cars will be common. Once any given region goes past about 33% electric vehicles gas stations won’t be profitable anymore and will shutter forever. When that happens it’ll be like falling dominos as gas prices go up and more people will purchase electric vehicles out of necessity as ICE vehicles will become unaffordable.

    I also seriously doubt these estimates are taking into account the fact that battery technology and the rate of battery manufacturing is improving at an exponential rate. Yes, the curve is shooting up that fast!

    Also, this title is missing a big problem that all vehicles have: The tires are one of their biggest sources of pollution.




  • Assuming you’re in the northern hemisphere: For this winter it’s fine. It’ll gently heat your home while you game like it’s 1999. No worries 😁

    However, once it starts to warm up you’ll want to send that motherboard+RAM+CPU to your local HAZMAT trash pickup/facility and get something newer. Might I suggest a nice 2020-ish desktop CPU? With a motherboard that supports Coreboot, of course!

    https://doc.coreboot.org/mainboard/index.html

    …and get yourself a nice Nvidia (sadly, because AMD and Intel are still far behind) GPU with at least 12GB of VRAM so you can have fun with the open source AI stuff (it’s a blast!). The more VRAM the better though so if you can pick up a 4060 Ti with 16GB cheap this spring that’ll be your best budget buy (endless uncensored fun) 👍

    Seriously: If you haven’t got the hardware to run Stable Diffusion locally you’re missing out! It’s as fun and addicting as a really good game. Running it on some cloud service isn’t the same because at best they’ll be running stuff that’s weeks or months out of date (which is like a million years in AI time) and they don’t give you the same level of control/possibilities that you get when running your own stuff locally (run whatever models/LoRAs you want, whatever extensions you want, generating images without having to worry about overbearing censorship because it is that bad on public AI services–paid or not!).




  • Riskable@programming.devto196@lemmy.blahaj.zoneAI Image Rule
    link
    fedilink
    English
    arrow-up
    16
    ·
    7 months ago

    big tech’s gonna abuse it.

    Actually, it’s everyone that’s going to abuse it. Big tech wants to be the exclusive “AI provider” for everyday people’s AI needs and desires but the reality is that the tech isn’t that easy to keep secret/proprietary because most of the innovations pushing AI forward come from individuals fooling around with the technology and academia. Not from big tech R&D (which lately seems to all be spent trying to improve business processes).

    Big tech is spending billions on hardware and entire data centers just to do AI stuff with the expectation that it’ll give them a competitive advantage but the truth is that it’ll be the small companies and individuals that end up taking advantage of AI in ways that actually improve things for everyday people and/or make real money.

    My guess is that they’re betting on acquisitions of companies using their AI processing power 🤷. Either that or it’s just wishful thinking.