cotillion

And these models are deployed in a large number of data centers, with thousands of employees and on millions of GPU:s. The GPUs are built abroad and shipped to the datacenter. Billions are likely spent by China and Russia to get their hands on these weights, one could argue that ripping off the band-aid now is the only way forward.

Oh, look! Another model that's supposedly amazing at Cybersecurity.

Too bad you won't be able to use it to secure your open-source projects. If you try it'll throw up a prompt telling you to use some initiative you can't use or afford while the provider collects the findings. What a racket.

Germany cleverly designed this particular variant of the 'free market' to ensure that access to cheap energy can't be used as a competitive advantage against their industries when they closed their nuclear plants. Having the same price in northern Sweden and Norway in winter as in central Europe is insane.

Now Sweden is stuck in a terrible situation where we're forced to quickly sell our excess energy to Google/Microsoft/Facebook before the EU will force the use of the bottleneck fees to build more cables to Germany.

Some of the states held presidential elections, not all, but the winners write history so it worked out fine in that case.

I still maintain the CD LPMud driver for Genesis MUD at https://github.com/cotillion/cd-gamedriver. There is not very much activity though since most critical issues have been fixed over the years and the game is very stable.

Infineon chips are used in some smart tachographs in EU. This is likely to get very messy.

Extract those keys and your drivers can ignore all annoying work-time rules and you can just patch the files if you are audited.

My experience is that customers don't really care that much about small amounts of downtime no matter what size you are, people mostly get that unexpected stuff happens as long as you don't get hacked or misplace their data. Customers might complain a bit but seldom leave because of a few hours downtime.

This seems to mostly hold true to developers also, GitHub manages to survive just fine after all.

They obviously had no separation at all between customers within the DC though. Which is worrying.

Ouch.

Apparently Firefox has "Https First" also but requires the pref dom.security.https_first to be set.

"HTTPS-Only Mode" is obviously best if you can do that.

Its aggression is related to animals somehow.

- krya på dig katt (cat) - fuck you cat

Björn is also bear in swedish.

Netflix works because they move content close to the users. This is done by either having the ISP establish a peering connection directly to Netflix hosted servers or by having the ISPs host "Open Connect Appliances" which cache the most requested content. These appliances are based on FreeBSD.

The AWS egress savings from this setup must be immense.

https://openconnect.netflix.com/

I think those of us who have had to suffer through ClearQuest, Lotus notes etc have an entirely different scale on how bad things can be compared to those who appear to really really hate Jira today. I'm not a fan of Jira but atleast it loads, eventually.

This appears to be some Chinese source with the same info: https://cn-sec.com/archives/853339.html

Looking at Github and uses of SerializationUtils.deserialize this is going to be painful.

No, klayswap.com has CAA configured in DNS.

You are most likely vulnerable to some extent, protection has to be done by your ISP.

In this case it seems like the attackers targeted an SDK. Subresource integrity would have helped here.

https://developer.mozilla.org/en-US/docs/Web/Security/Subres...

The mitigation against this was probably the restriction on password resets which support lifted. They just forgot to train support how to deal with it.

In the server auction the price appears to drop by €2.13 when IPv6 is selected. Which I guess is affected by local VAT.

When the words on the page are "Minimum level of fines of 4% and up to 20% of total turnover " it might be time to start to listen.

And for systematic non-compliance “structural or behavioural remedies”.

Most pizza-places here attempt to avoid the "(wolt|foodora) tax" price increase for pickups by offering free drinks if you call and order instead of doing it through the app.

Wouldn't be surprised if they start splitting into separate legal entities soon to get out of the pickup price matching restrictions.

At this scale you pretty much need to apply some sort of DDoS scrubbing service. Your ISP might already have one they can route traffic through or if you have your own AS you can let a DDoS service announce the target prefixes.

A game i run was recently hit with a 102 Ggbps CLDAP reflection attack. We were down for a while until our ISPs DDoS protection detected it after that we were mostly unaffected. If the attack is difficult to separate from legitimate traffic you'll still suffer though.

They probably just do two password checks.

So, does anyone know where to one can buy an LTE gateway with a serial port interface? Asking for a friend.

Well, the conclusions seem to suggest they have passive safety.

"The affected Megapacks failed safely despite total loss."

For the Celtic - Norse cable now is probably the ideal time to tap it as it does not appear to be operational yet. For other cables brining them down with some strategic use of an anchor and tapping before it is repaired would probably be very tricky to detect.

So Apple-users can no longer delete any pictures since Apple might already have reported that photo you accidentally took of your thumb as CP.

Yes monitor. You really want to find that server which is busy encrypting all that nice data your service needs.

Fire services are learning how to deal with batteries [1] and most fire departments have had to adapt to new fire hazards as society changes over time with automobiles, high-rise buildings etc. For grid storage however it doesn't seem unreasonable to require each site to have the ability to move a burning pack somewhere where it can be extinguished.

[1] https://cfpa-e.eu/container-puts-out-inextinguishable-fires-...

Its a static site (Gatsby) hosted on Amazon CloudFront. Almost everything is inlined.

What thieves seem to go for nowdays is the d-gps hardware installed in graders / excavators used in large projects. Very expensive stuff which is easy to hide. A Leica 3d kit is something like $40k...

Yup, when you get it wrong you get to meet interesting people from the compliance department. The "enable cache" button in the load balancers should come with alot of warnings.