elias_griffin

joined 10 months ago
[–] elias_griffin@lemmy.world 2 points 1 month ago

If you'd like real knowledge, insights, and explanations of the Spy game, one of the best ever imo and so little have seen it, an NSA Signals Intelligence Analyst gave a talk at a conference about the German v Russian Spying during the Cold War from his experience.

That NSA Analysist is named Bill Scannell because, well, it's a circus. https://www.youtube.com/watch?v=8x_yL12dJjI

[–] elias_griffin@lemmy.world 1 points 1 month ago (1 children)

Hah! I took that in two meanings one of which is in the John le Carré sense, "The Circus" being the nickname for MI6. It always seemed to stick in my mind though that the whole Nation-State Intellgence Spycraft Game is a Circus, full of theater and dangerous clowns. He even said something akin to that in The Secret Pilgrim (1990) which although not as entertaining as Tinker Tailor Soldier Spy (1974) it is much more revealing about Spycraft...if any of it true.

He did say it was "Fiction from start to finish" but also he worked at MI5 and MI6 and you'd expect him to say that.

What Spies Really Think About John le Carré

The British novelist didn’t just write about the world of intelligence. He changed it forever.

[–] elias_griffin@lemmy.world 3 points 1 month ago* (last edited 1 month ago) (2 children)

I just happened upon this thread and security of all types is my specialty so I just wanted to say that nothing here is personal. I'm trying to be helpful giving folks "actual security" as in not "better than putting passwords in plain text files". Lazy idiots will be lazy idiots with Keepass as well. I can't tell you how many stories I've heard from colleagues that those people aforementioned just put the main Keepass password in a plain text file.

I upvoted the OP and your reply for bringing TM novelty and awareness.

I do see what you're going for, but the mitigations you wrote can be found everywhere on the Internet for over a decade. It's average commodity information combined with that fact that we are not more secure these days, but less secure in 2024 that ever.

In the case of password databases, this is de facto less secure than paper and pencil, which is not extreme by any measure and actually takes little effort.

[–] elias_griffin@lemmy.world 2 points 1 month ago* (last edited 1 month ago) (5 children)

Quadhelion Engineering Corrected Mitigation Strategies:

  • Never use an electronic password manager, use index cards and an art quality graphite pencil instead
  • The loss, hack, crack, or malfunction of a MFA device can be absolutely devastating. Use with caution and sync three of them, 1 of them kept in a firesafe at all times
  • Never regurlarly update all software and devices, choose your updates and choose your timing depending on your environment and posture instead
  • Never be reliant upon an electronic home security system and lock devices (if they get that far, major damage has occured), use a Rottwieller, Great Dane, Mastiff, German Shepard, or Akita (never Pitbulls or Dobermans) alongside yourself with non-lethal weapons until lethal force is used upon you, instead

You asked and the Non-lethal (Less-Lethal) Weapons Industry has delivered. Pepper ball guns, Radically Improved Tasers, Electrical Stun Devices, Batons, Kubatons, Pellet Guns, ColdSteel Brooklyn Smasher, Slings, and also you may not think unless you played, Paintball Guns, big nasty bruises at medium range if only wearing a T-Shirt.

[–] elias_griffin@lemmy.world -4 points 1 month ago* (last edited 1 month ago)

The Kremlin is obviously a Mosque. Pooty-poo's BFF and primary assassin (word origin, Muslim) is Kadyrov, a Muslim. St. Petersburg at one time held the highest Jewish metropolitan population in the world. It says it's Christian but Patriarch Kirill likes to wear Rolex and is covered in tattoos.

Russia has had uninterrupted continuous control of the North Pole, the geographic center of Nation State power (Northern Hemisphere), probably since 900, and brags about this fact and the fact they can destroy the whole world with nuclear technology making it the primary terrorist, by definition, in the world.

Russia invented the modern prison industrial complex, the Gulag. Russia invented Nation-State PyOps. Russia had for nearly a century or more, total control of Afghanistan, the first place where Marijjuana was cultivated, same parallel/latitude as Humbolt County California. Afghanistan, also one of the first places were Poppy Fields were cultivated en-masse. Academic Historians will say Russia failed there, I say the opposite.

Now here is something wierd and fun to investiage for internet slueths!

If you are an internet afficionado you've noticed over two decades that Google and nearly all other search engines routed all conspiracy theories to really one place, Godlikeproductions. In this place, this forum, run out of the island Nation of Jersey, which is self governing....you cannot post two words, "Tavistock", the British The Tavistock Institute and "Bolshevik" as in Revoluion. Don't believe me, try it yourself.

Spending a couple hours reading that legendary conspiracy forum you'll notice two things: It loves Trump and Russia. If you go against either of those things there, your logical argument will be minimzed/trivialized, your life threatened, and reputation ridiculted, sometimes with very personal insults. You can just read/lurk and see how many times a life threat is made in one day on that site.

If nothing else, it's a fantastic study in psychology as it's visited daily by people all over the world. Try to see how many other words are banned!

P.S. I was one of the people responsible for the Call of Duty: Know Your History, Commercial

;)

[–] elias_griffin@lemmy.world 0 points 1 month ago

In fact just the other day information wanted a ham sandwhich before I set it free so it could find more people not on an empty stomach :/

[–] elias_griffin@lemmy.world -1 points 1 month ago* (last edited 1 month ago) (2 children)

Copyright Infringment strawman argument. When considering AI, we are not talking legal copyright infringement in the relationship between humans vs AI. Humans are mostly concerned with being obsoleted by Big Tech so the real issue is Intellectual Property Theft.

artificial INTELLIGENCE stole our Intellectual Property

Do you see it now?

[–] elias_griffin@lemmy.world 1 points 1 month ago

Oh yeah, tell me about Intellectual Property, Patent, Invention, and Ideation thievery, was it still there afterwards? IP theft has been recognized for centuries.

Back to the basement Mustafa Jr..

[–] elias_griffin@lemmy.world -3 points 1 month ago* (last edited 1 month ago) (1 children)

Look at this AI paid influencer everybody! Who pays you Mustafa Jr? Most everyone knows that AI is gigging them now. When you steal from the world, that is definite hate but It was meant in the aggregate, stupified sanctimonious simpleton.

P.S. Take your "Capitalism Sucks" Marxist bullshit back to Russia, Vatnik and take Mustafa with you.

[–] elias_griffin@lemmy.world 6 points 1 month ago* (last edited 1 month ago) (3 children)

So Mustafa steals from the entire world and justifies it by pointing to an abstraction that cannot be proven. It's already complete as they can admit it now and throw Billions at corrupt judges over a decade which will be too late.

These tech-god pyschopaths hate us.

[–] elias_griffin@lemmy.world 20 points 2 months ago* (last edited 2 months ago) (5 children)
  • Women hide thier skin, lips, and age
  • Men hide thier jawline with beards and their insecurities are buried so well, they forget it themselves as a defense mechanism hoping the mental/emotional weakness will "heal" by next confrontation
  • Humans hide thier weakness,
  • Thier competitive business plans
  • Patents until they are published
  • Who are you falling in love with at the start
  • Exactly how much you are attracted to a person
  • Who you have a crush on
  • Your answer to a $10,000 competition
  • Your lottery ticket
  • The location of your gold and gun
  • The location of your child when allowed online
  • Whether someone is away from home for extended periods of time, you leave the lights and TV on.
  • Inventions until it's marketed
  • Science Fair Project until it's unvieled
  • Presents until they are opened
  • Your private parts
  • Your private thoughts on your marriage

Have you ever grabbed a childs private parts? NO of course not, because you INNATELY UNDERSTAND even though you are not a parent and don't remember being one yourself. In fact you understand it so well that if you were to do so publcally, you're putting your life at risk.

CONCLUSION: Privacy is natural and helps give confidence and security to an individual but they want access to your weaknesses and privates anyway.

EVIDENCE: Privacy Violation is a specific tactic meant to break people ...IN PRISON..since they begining of time, Gulags.

P.S. Stop showing nude baby pictures at reunions to those that did not raise or grow up with the child in the family who already saw them naked, and only while they are still a child and not a teenager, otherwise that is a serious privacy violation. In fact, just don't take the picture, where did you even get that you lazy lubricated louse.

[–] elias_griffin@lemmy.world 2 points 2 months ago

Very interesting tip, preciate that.

@PassGAN

Instead of relying on manual password analysis, PassGAN uses a Generative Adversarial Network (GAN) to autonomously learn the distribution of real passwords from actual password leaks, and to generate high-quality password guesses. Our experiments show that this approach is very promising.

0
submitted 2 months ago* (last edited 2 months ago) by elias_griffin@lemmy.world to c/technology@lemmy.world
 

I used to be the Security Team Lead for Web Applications at one of the largest government data centers in the world but now I do mostly "source available" security mainly focusing on BSD. I'm on GitHub but I run a self-hosted Gogs (which gitea came from) git repo at Quadhelion Engineering Dev.

Well, on that server I tried to deny AI with Suricata, robots.txt, "NO AI" Licenses, Human Intelligence (HI) License links in the software, "NO AI" comments in posts everywhere on the Internet where my software was posted. Here is what I found today after having correlated all my logs of git clones or scrapes and traced them all back to IP/Company/Server.

Formerly having been loathe to even give my thinking pattern to a potential enemy I asked Perplexity AI questions specifically about BSD security, a very niche topic. Although there is a huge data pool here in general over many decades, my type of software is pretty unique, is buried as it does not come up on a GitHub search for BSD Security for two pages which is all most users will click, is very recent comparitively to the "dead pool" of old knowledge, and is fairly well recieved, yet not generally popular so GitHub Traffic Analysis is very useful.

The traceback and AI result analysis shows the following:

  1. GitHub cloning vs visitor activity in the Traffic tab DOES NOT MATCH any useful pattern for me the Engineer. Likelyhood of AI training rough estimate of my own repositories: 60% of clones are AI/Automata
  2. GitHub README.md is not licensable material and is a public document able to be trained on no matter what the software license, copyright, statements, or any technical measures used to dissuade/defeat it. a. I'm trying to see if tracking down whether any README.md no matter what the context is trainable; is a solvable engineering project considering my life constraints.
  3. Plagarisation of technical writing: Probable
  4. Theft of programming "snippets" or perhaps "single lines of code" and overall logic design pattern for that solution: Probable
  5. Supremely interesting choice of datasets used vs available, in summary use, but also checking for validation against other software and weighted upon reputation factors with "Coq" like proofing, GitHub "Stars", Employer History?
  6. Even though I can see my own writing and formatting right out of my README.md the citation was to "Phoronix Forum" but that isn't true. That's like saying your post is "Tick Tock" said. I wrote that, a real flesh and blood human being took comparitvely massive amounts of time to do that. My birthname is there in the post 2 times [EDIT: post signature with my name no longer? Name not in "about" either hmm], in the repo, in the comments, all over the Internet.

[EDIT continued] Did it choose the Phoronix vector to that information because it was less attributable? It found my other repos in other ways. My Phoronix handle is the same name as GitHub username, where my handl is my name, easily inferable in any, as well as a biography link with my fullname in the about.[EDIT cont end]

You should test this out for yourself as I'm not going to take days or a week making a great presentation of a technical case. Check your own niche code, a specific code question of application, or make a mock repo with super niche stuff with lots of code in the README.md and then check it against AI every day until you see it.

P.S. I pulled up TabNine and tried to write Ruby so complicated and magically mashed, AI could offer me nothing, just as an AI obsucation/smartness test. You should try something similar to see what results you get.

view more: next ›