sylver_dragon

the thing is in the video tutorial he’s using password only(no tpm) and it still requires you to create a recovery key

Never watched the video, so I’m just answering for the general case. Even with just a password, the recovery key serves a similar function. It’s a fail-safe if the primary protector is lost. It’s entirely possible that the password being setup will be given to a user and IT will still need a way in, if that password gets lost/changed.

on Linux with luks, it never asked for me to save a recovery key.

Ok, and? Yup, LUKS uses different defaults. Don’t get too caught up on “Linux does it this way”. Both ways have valid reasons and the Microsoft developers and LUKS developers picked different defaults. If you want, you can create a recovery.key file on LUKS. If you are using TPM as your primary protector, I’d actually recommend you follow Microsoft’s lead on this. If that TPM chip (or the motherboard it’s attached to) dies, you’re kinda fucked. If you are using a password, this is less of an issue. assuming you have that password stored safely somewhere not on that system.

It’s a design decision and one which is probably about right for many situations. TPM chips are not perfect, and there are a lot of situations which can cause them to fail or the hardware around them can fail (e.g. the motherboard). With the end result being that the data would be rendered unreadable. So a recovery key is a trade-off between confidentiality and accessibility.

The design of the recovery key itself is also fairly good as a backup protector goes. The key is long and complex enough that brute forcing it is hard enough and would require long enough that it is functionally impossible. If your concern is that the recovery key could leak, the easy answer is “don’t write it down”. You could simply choose not to store it and while it would be a theoretical attack on the confidentiality of your data, practically it’s a non-issue. But, for those folks who feel that having an unlock code written down somewhere is an acceptable risk while mitigating the risk of the TPM breaking and rendering the disk unreadable, it’s a good solution. And I can personally attest to the usefulness in a corporate environment. People do dumb things with laptops all the time. And no matter how much we might tell people to use the network/cloud storage which is off the system and backed up regularly, there is always a parade of people whose system just died and contains the only copy of important project data.

It’s important to remember that security is a long series of compromises between confidentiality, integrity and accessibility. All three are important. And you have to find the spot in the nexus of those factors which works for your situation.

surely you can’t profile criminals based on a film franchise with significant mass appeal. Talk about painting with a large brush.

If everyone is guilty of something, it makes yanking them off the street easier to justify to a news media asleep at the switch.

Buy a bit of paracord, make a simple net, toss as appropriate.
Paintball markers are also cheap, reasonably accurate and don’t involve yeeting a bullet on a ballistic arc.

Trump’s order serves as guidance, not a mandate, since shots required for school attendance are set at the state level, rather than by the federal government.

Like a lot of his crap, this is purely performative and will only impact States dumb enough to follow his suggestion That sucks for the millions of children who won’t be vaccinated, but it also means it won’t effect most children. Federalism can be a huge PITA when trying to pass good and useful legislation, but it’s also a pretty good bulwark for when stupid gets a turn at the wheel.

Let me guess, he’s never actually done any sort of child care. Especially for children with any sort of developmental or behavioral special needs, that shit is hard work.

Let me guess, he’s never actually done any sort of child care. Especially for children with any sort of developmental or behavioral special needs, that shit is hard work.

UI’s for movie streaming services are not designed to help you find something to watch. They are designed to keep you “engaged”, which means in the platform and not realizing that the pool of actually interesting things is about as deep as a puddle. Everything about streaming sites’ design is user hostile and this is a classic example of that.

I certainly won’t own a Mac.

AI

And this is yet another demonstration that the ‘S’ in ‘IoT’ stands for ‘Security’.

They want you to set up autopay so that you forget about it and just keep paying them forever. Similar reason that every online store wants to save your credit card info. The less friction you have to paying for something, the more likely you are to do it.

Move fast and break things.

And by “things” they mean “functionality”.

I’d also bet on “security” being one of those things. I can’t wait to hear about the first time some kids from 4chan take control of one of these bots.

What, you expect to actually own something that costs you $20k? Quit obstructing their access to your bank account. Think of the shareholders!

I’d love to have a robot to handle basic home maintenance tasks. Somehow, I’m not quite willing to bet $20k and $500/month on this thing being anything more than a gimmick. I’d also be really curious what happens to my $20k robot if I cancel the subscription and/or the company goes under. Do I just end up with a really expensive object lesson is poor spending decisions?

Well, how else was he supposed to understand abuse of the flock cameras, if he wasn’t doing it too?

/s for the really slow.

The AI is a tool argument is getting tired. I haven’t seen it do anything useful at all that helps my day to day life.

I’ve also never had a use for a rib spreader. That doesn’t mean it’s not useful in the right setting. I talked through it in a different reply (feel free to use AI to find it), but LLMs and image classifiers do have use cases in particular settings. Just because some folks abuse them and use them for entirely the wrong use cases, doesn’t mean they aren’t useful in the right ones.

I might need to ask chatgpt to reply to this comment. In fact if i ever see your username around i will put it into chatgpt and ask it to generate a reply for me, because i can’t think for myself.

Go for it, it might be kinda funny. A bit of irony in it too, as it would offloading the critical thinking required to engage with an argument you disagree with.

i don’t believe i’ve ever asked calculator to answer biology question for me.

Nor should you, you would be using the wrong tool for the job. I’d also not use a calculator to drive screws, that doesn’t invalidate the point. Tools are useful when we use them the right ways. And ya, AI is a terrible tool to offload critical thinking onto. There are use cases where AI makes sense though. Things like image classification and fuzzy searches on large data sets are good use cases for various AI models. One of the problems with AI, at the moment, is that it has been sold as some sort of cure-all that will replace humans and critical thinking. And it’s absolutely not that. It’s in much the same place as cocaine in the first part of the 20th century. Hucksters are putting “AI” on the label and claiming it will solve everything. The reality is much more nuanced. It has it’s uses but they are far more limited than the hucksters are claiming.

Large language models really can be useful for fuzzy searches in large data sets. To give an example from my own work, Copilot is really good at searching Microsoft documentation for me. Could I find the answers with a regular search? Probably, it would also take me longer. Instead, I send Copilot chasing after the answer to that question and go do something else while it finds the answer. They can also help in re-writing for different audiences. I write a lot of technical reports and those need to be summarized for managerial audiences. Yes, I could do that manually, I’ve done it for years. I also hate doing it. Clippy is good enough at doing it that it can give me a first draft and I can finish it up in far less time and effort.

The biggest issue I have seen with LLMs is exactly what you point out, that people trust them too much and don’t think critically about their answers. Again with my work, we use a product that uses an LLM to summarize cybersecurity issues and provides suggestions for response and investigation. It’s a pretty well trained model and it’s suggestions are pretty good most of the time. But, it falls down spectacularly bad from time to time and the analyst needs to be able to recognize that and respond to the alerts appropriately. Some analysts are better at this than others and this is now part of our training for new analysts. We teach them to use the LLM, but to also always think about the basics and question the LLM when it doesn’t seem right.

Image classifiers are another area where I think AI has some good use cases. Consider the job of reviewing images and videos for sites like FaceBook, TikTok or YouTube. The folks who do this work are exposed to a lot of very violent and disturbing media. I used to work with a guy who did computer forensics in a law enforcement setting and he finally left that work because he could deal with having to review CSAM images any more. This seems like the perfect place to slot in an AI image classifier, to make a first pass at it. If it can correctly classify the vast majority of that sort of content, that greatly lessens the workload on the analysts who will need to deal with the borderline stuff and reports of false positives and negatives.

The new normal is people just follow what billionaire said, and you think it’s okay.

Not at all, but I also think the reactionary “fuck all AI” isn’t okay either. It’s a tool and it’s going to change things. We need to navigate that with a clear head and careful consideration.

Wow, I was mostly joking. It’s really funny to see it put into practice.

It sounds like companies should have replaced the highly paid execs with AI first. It might have done a better job of using itself.