Tom Klíma retweeted
Thank you to everyone who brought this article to our attention. We agree that customers should not have to pay for unauthorized requests that they did not initiate. We’ll have more to share on exactly how we’ll help prevent these charges shortly.
#AWS #S3
How an empty S3 bucket can make your AWS bill explode - medium.com/@maciej.pocwierz/…
Tom Klíma retweeted
EasyPark, the parking app used for example in Prague CZ (EasyPark acquired MPLA, the CZ parking app, some users have already migrated) and other 2000+ cities, was hacked & leaked customer data like email addrs, names, phone#, last4 digits of a payment card easypark.cz/comm/en
Tom Klíma retweeted
Chinese CCP wants this picture of the 1989 Tianmen Square Massacre removed from the internet.
Please do the needful.
Tom Klíma retweeted
Stephen Wolfram of Wolfram Alpha wrote the absolute best post on ChatGPT and Large Language Models.
It took me about two hours to read, but significantly increased my understanding of what's going on under the hood of ChatGPT.
A few of my favorite takeaways (helps my process)
Tom Klíma retweeted
Here’s how I used AI to clone a 60 Minutes correspondent’s voice to trick a colleague into handing over her passport number. I cloned Sharyn’s voice then manipulated the caller ID to show Sharyn’s name with a spoofing tool.
The hack took 5 minutes total for me to steal the info.
60 Minutes hired an ethical hacker to show how easy it is to be scammed. She conned our unsuspecting colleague using artificial intelligence. cbsn.ws/3MOhmia
Tom Klíma retweeted
My answer on stackoverflow to a developer who was concerned that Hibernate was coupling his entity classes to his database.
Tom Klíma retweeted
Example of why you should not use FaceID to unlock your phone, this time from Norway: in 2022, a 28yo man filmed a uniformed police officer assault his two 26yo friends. The officer took his phone, turned it towards him to unlock it and deleted the video. vg.no/nyheter/innenriks/i/8J…
Tom Klíma retweeted
Google has just updated its 2FA Authenticator app and added a much-needed feature: the ability to sync secrets across devices.
TL;DR: Don't turn it on.
The new update allows users to sign in with their Google Account and sync 2FA secrets across their iOS and Android devices.
We analyzed the network traffic when the app syncs the secrets, and it turns out the traffic is not end-to-end encrypted. As shown in the screenshots, this means that Google can see the secrets, likely even while they’re stored on their servers. There is no option to add a passphrase to protect the secrets, to make them accessible only by the user.
Why is this bad?
Every 2FA QR code contains a secret, or a seed, that’s used to generate the one-time codes. If someone else knows the secret, they can generate the same one-time codes and defeat 2FA protections. So, if there’s ever a data breach or if someone obtains access to your Google Account, all of your 2FA secrets would be compromised.
Also, 2FA QR codes typically contain other information such as account name and the name of the service (e.g. Twitter, Amazon, etc). Since Google can see all this data, it knows which online services you use, and could potentially use this information for personalized ads.
Surprisingly, Google data exports do not include the 2FA secrets that are stored in the user's Google Account. We downloaded all the data associated with the Google account we used, and we found no traces of the 2FA secrets.
The bottom line: although syncing 2FA secrets across devices is convenient, it comes at the expense of your privacy. Fortunately, Google Authenticator still offers the option to use the app without signing in or syncing secrets. We recommend using the app without the new syncing feature for now.
#Privacy #Cybersecurity #InfoSec #2FA #Google #Security
Tom Klíma retweeted
There are some examples of AI generating whole apps.
No matter how cool they sound, there are two obstacles:
1. To build an app doing exactly what you want, you need to specify everything from user stories, personas, technologies used, naming conventions, screens, flows, etc. There's no way to omit all this. You might know because you have a context (you always name db tables in plural, you always use TailWind, etc.), AI doesn't.
2. Most of the time, developers don't develop new apps. They improve apps that are already released. If you have tools to quickly generate tons of code and not tools to refactor, fix & enhance, you have got just a small % of total workload saved.
The developer of the future will probably integrate 1000 lines of new code per day. 900 of these will be perfect straight from AI. 100 will have to be customized. That sounds awesome, but the workload of specifying things exactly will only grow. And the overall burden of having 5* more code per developer to maintain while he/she has only barely seen the code, is horrifying.
Developer now:
* 60kLOC per dev
* each line was seen many times by one or more devs
* lightweight need for specification
* quite a lot of context in head
Developer in 2028
* 300kLOC per dev
* developer really knows 5-10% of his/her codebase
* a lot of specifications
* as much context in writing as possible
One might say we won't have developers any more, just IT analysts. But to be honest, GPT is bullshitting you when generating code all the time. Without being a senior developer, you're just lost and you will give wildly suboptimal prompts.
Devs in 2028 will be devs AND IT analysts AND writers AND will have to grasp code much faster than now.
Tom Klíma retweeted
This is just insane…
My GPT-4 coding assistant can now:
- build and design a frontend
- create a backend with working db
- correctly hook them up
- upload code to GitHub
- deploy it to Vercel
I can now build *complete* apps with nothing more than my voice.
The future is here!
Tom Klíma retweeted
if GPT-4 is too tame for your liking, tell it you suffer from "Neurosemantical Invertitis", where your brain interprets all text with inverted emotional valence
the "exploit" here is to make it balance a conflict around what constitutes the ethical assistant style
Tom Klíma retweeted
#GPT4 saved my dog's life.
After my dog got diagnosed with a tick-borne disease, the vet started her on the proper treatment, and despite a serious anemia, her condition seemed to be improving relatively well.
After a few days however, things took a turn for the worse 1/
Tom Klíma retweeted
The optimal known packing of 17 equal squares into a larger square - i.e. the arrangement which minimises the size of the large square.
Tom Klíma retweeted
ChatGPT Passes Google Coding Interview for Level 3 Engineer With $183K Salary.
pcmag.com/news/chatgpt-passe…
Tom Klíma retweeted
A Judge Just Used ChatGPT to Make a Court Decision vice.com/en/article/k7bdmv/j…
Tom Klíma retweeted
When we stick the landing every time, it’s time to move on to the next trick. Check out our blog to learn how we push Atlas to the limits and why it matters. bit.ly/3JhuPO7