• 1 Post
  • 87 Comments
Joined 6 months ago
cake
Cake day: December 31st, 2023

help-circle
  • I have seen social media described as “microblogging”, but I don’t think that’s true. Or rather, actual blogs like on WordPress are one thing, but the more “conversation” style is something else entirely. Phrases such as “^This”, “I also choose this guy’s wife”, “and my axe” reveal that the true purpose of social media is emotional venting, rather than conveyance of information. For some people at least - and depending on moderation practices and abilities, and on communities setting up expectations, the level of discourse may be either higher or lower, but even so, foundationally, isn’t that what this place is for?

    After all, Wikipedia articles are one thing, essays and poetry are another, blogs are still another (with the level of effort being put into their crafting), and finally at the lowest end, social media is found where we just blurt out whatever we are thinking about at any given moment.

    Mind you, it can be done well - I have had people convince me of my privilege status & thus shepherd me into wokeness even on Facebook, which is not known for such - but even so, isn’t the true purpose of a thing what it mostly does? Like a vehicle isn’t a coffee holder, despite it being capable of that, as well as many other things.

    Some people’s thoughts are just more worth listening to than others. Hence why microblogging e.g. Twitter/X & Mastodon can aim at a higher end, as too can Reddit & Lemmy/K/Mbin (+ soon: Sublinks), but it seems rarely used for its maximum purpose and far more often for its emotive vomit aka “share every single one of our uncurated thoughts”. Case in point: my message right here, which unlike a “blog post” took me <5 minutes to create.:-P

    Btw, check out https://medium.com/@max.p.schlienger/the-cargo-cult-of-the-ennui-engine-890c541cebcb for an example of what I would consider a more worthwhile post. Sometimes, imho, it is okay to aim for more quality than quantity of posts, even if that seems antithetical to the goal of “social media” that aims instead to connect people together to just shoot the shit amongst ourselves.



  • It is, but presumably phrasing it as a question increases engagement (or was thought to) hence furthers the OP’s goal, in spite of the factual nature.

    i.e. the same reason that Trump was allowed to walk all over the “moderators” at the recent Presidential advertisement “debate”.

    You know, “journalism” as it seems to always be practiced these days. As in, chase the profits to the exclusion of all other considerations.

    Hrm, I wonder if my time spent on social media has made me more hostile to such predatory practices overall…










  • “Oopsie, we didn’t mean to leave the libraries in like that, and then for that update to switch ON the collection of all data after people stopped paying attention to it, and then after a lot of data has been collected for that still additional update to cause all that data to be sent back to our home servers…”

    And perhaps it would not even be a lie - one malicious actor, working inside the company, might be able to sneak it in without the higher-ups knowing about it. Or arguably worst of all, not even realize themselves that they did it, until after-the-fact.

    When working with something dangerous - e.g. explosives, or heavy like a car - it behooves us to treat it with special care. The fact that this data collection option now exists already warrants greater care in using Microsoft products in terms of security. Except, just how much do people care?

    I could also see another alternative moving forward: the DoS simply freezes their Windows versions at the last version that did not include the data collection capability, and then never updates again. As the first years and then decades roll by, and they are using the equivalent of Windows 7, then XP, then 95, then 3.1, they simply lose out on having “computers”. Possibly here I’ve gone too far into the doom-and-gloom, b/c while it’s possible it’s not terribly plausible, though it illustrates how Microsoft is not committed to the safety of a national government, but rather instead solely their own profits - and short-term ones at that.


  • But do we know that the tracking part will not be enabled by default - and possibly in a hidden, highly obscured manner, where the system claims it to not be but it in fact is? The access to Copliot+ may cost money, but why would Microsoft turn away that source of free data? At the very least it is a strong temptation, which even if they start out being responsible with, in every future update there is the potential to change course.

    And even if it were not enabled by default, I do worry that a 2-prong attack could first turn it on, then later exploit it to gather the data. If it for truly certain is limited to those chips though… then yes that provides security, thank you for mentioning that.

    One good thing is that government systems are always at least couple versions behind, specifically to allow time for exploits to be discovered & patched, prior to upgrades - i.e. prioritizing safety & security over ease-of-use and being on the bleeding edge of “new features”.



  • I would hope that Apple would aim their AI more at iOS and leave Mac OSX alone:-|. If not, I would consider finally leaving it, if the AI features could not be turned off (which likely they would… at first, for awhile).

    Oh man, the thought strikes me: how will crucial systems like DoD Windows machines maintain integrity, if people can exploit those gigantic loopholes to basically have the OS be a keylogger? It’s not enough for me to use secure systems at home, if those in charge of our nation’s defense (especially nuclear!?) do not.



  • These seem all over the place - or maybe it is just this article that is not explaining it well?

    For starters, “smartphones” aren’t the only SIM-carrying devices that can access the internet and install apps - dumbphones can do the former and tablets can do both, which you wouldn’t even be able to visibly see someone using, if it is in their bag and they use something like a watch interface to it. Laptops too…

    The Stop Addictive Feeds Exploitation (Safe) for Kids act addresses algorithmic feeds. It would require social media platforms to provide minors with a default chronological feed composed of accounts they have chosen to follow rather than algorithmically suggested ones.

    Ngl, that sounds awesome - and not even just for kids! But immediately after that the article continues:

    The bill would also mandate that parents have more wide-reaching controls like the ability to block access to night-time notifications.

    Isn’t this already built-in to various OS’s, so why put the onus onto the app itself?

    Electronic devices like calculators have been a staple inside schools for half a century at least, and poor people who cannot afford one of every type of device will generally opt for one device that can install many different types of apps - so to now ban these apps, b/c they might be used in a certain particular manner… while simultaneously NOT stopping school shootings, it blows my mind.

    “Political theater” is the phrase that comes to mind. Another phrase is “No child left behind”, given how the parents seem to be against these policies, but the State has deemed that it knows better™.

    Then again, perhaps it has a real purpose in mind after all, as a law designed to extract money out of big tech companies as fees pile up?


  • If each request simply came from the same IP address then yeah, all the recipient has to do is block that one and the whole attack is over.

    But what if piracy websites were trying to stream content directly from the internet archive rather than make a copy of it first, and messed up to cause this attack. So intentional to cause the traffic but unintentional to cause this amount of it. Or even if those websites first opened the door, and then someone tried to DDoS them, which propagated onwards to the internet archive, whether knowingly or otherwise.

    Anyway, I was just postulating that it was theoretically possible… and odder things have and continue to happen all the time so who knows?:-P


  • Not “clearly” at all. It could be as simple as someone new to coding doing it accidentally, probably using masking of their request origins (granted, this does not seem very likely at all…:-D).

    Also, it forces the archive to expend resources that they could have allocated elsewhere - which would have longer-term consequences far beyond the short-term duration of the attack. Enough attacks like these could cause the archive to deprioritize something else that they had wanted to do, or drop something they used to support but won’t be able to continue to do so in that case.

    Or, why does a bully hit someone? That too offers purely short-term pain, until the next attack. Yet they do it anyway, and often it works to cow the victim into submission so that future attacks aren’t even necessary, and instead the mere threat of one may be sufficient for the bully to get their way.

    Also, does the entire rest of the world submit funding to the internet archive? I don’t know anything about their finances, but compared to those of e.g. Russian disinformation sources or corporate profit-seeking, surely they are tiny in comparison?

    The only thing “clear” here is that the attacker seems to be using the Might Is Right principle, as they are stepping outside the bounds of society to take on this vigilante effort by themselves.


  • Kbin: Not anymore, at least last I checked. I have an old account there that I left behind due to the enormous amount of technical glitches it kept having, and checking in on it recently (maybe last week?), not one of my comments has even a single downvote there - even older ones. iirc the “reduces” tab was still present, just entirely empty. (I was looking for a particular comment, but then while there noticed the effect was much wider.) Edit: I took another look, and I the only downvotes I see are from kbin itself (example post), so it seems to not be federating downvotes from outside of itself.

    In the past when it did used to work, it also would not show downvotes from instances that it had server-wise defederated with, although someone can still get downvotes from personally blocking an instance, on a Lemmy server running v0.19.3 or greater, that the server itself had not server-wise defederated with. So there was always a very large gap there.

    The reason I thought of this all was due to the OP title: e.g. someone could mass-downvote things on the Fediverse to attempt to control the conversation by de-emphasizing things that they did not personally agree with, but outside of moderator or admin reporting that offers a degree of trust behind it. Obviously that is its intended purpose, but I mean maliciously subverting that like have 10 accounts and log into all of them to influence a post.

    About once a week lately I keep blocking some spammer accounts that randomly shill products or videos throughout the Fediverse, rather than wait for an admin to do it, but if an account(s) was more subtle and merely downvoted, then I doubt such a thing would even be noticed?

    I should add that I respect some people’s decisions if they want to be on a server that doesn’t even record or reveal downvotes - that’s fine bc it’s their choice. But otherwise it is basically public knowledge, except as you say you need to fire up an instance of your own to view them, and then protect that instance from intrusion efforts even if you use it for nothing else (or possibly there is some API call, but I doubt that knowledge would be so easy to find, and for one thing it would have to access a database that has sent out past updates, not merely listen for new ones unless it had been running prior to the downvote event).

    Anyway, I hoped people would see this post, and it seems that is happening, so this time the downvotes did not detail any conversation about the topic (with many tens-fold greater up- than down-votes), but if there had been sufficient number of downvotes delivered quickly enough… then how many of us would have even seen this, sorting Subscribed or All by Hot? So it points to a liability in the Fediverse, which at some point, someone somewhere is going to exploit.