mathstodon.xyz is one of the many independent Mastodon servers you can use to participate in the fediverse.
A Mastodon instance for maths people. We have LaTeX rendering in the web interface!

Server stats:

3K
active users

#authenticity

4 posts4 participants0 posts today
Replied in thread

The last part of the book Talk: The Science of Conversation and the Art of Being Ourselves discusses conversations between people who may not agree. Other books have tackled this subject at length, so I won’t rehash the ideas here.

While some of the ideas in the book aren’t new (to me), I think they could be applied to collective benefit, both in person and on social media. Less one-upmanship, fewer “gotcha” questions, less correction, less ego. More question asking, more connection, and more kindness, most of all.

🧵 end

My 12yo daughter is into the Young Sheldon series right now. Sometimes she invites me in for a shared viewing. (I treasure it while it lasts.) So it came to pass that I saw young Sheldon's too-good-to-be-true grandma quoting Sissy Spacek to Sheldon, as a role model of Texan resilience.

That made me remember and cherish how much I love the work of Sissy Spacek.

Sissy Spacek is right, whatever she does. A real actor, flawless, giving life and depth to every character she plays. I know next to nothing about her, but I do know that she has the magic touch.

Thank you, Young Sheldon, and thank you, my daughter, for this reconnection.

"I do not want a computer to summarise texts sent by my friends into shorter sentences, as though the work of being updated on the lives of those I love is somehow strenuous or not what being alive is all about."

Writer and painter Joseph Earp nails it in this Guardian essay.

theguardian.com/commentisfree/

The Guardian · AI promises to free up time. But what if it spares us from learning, writing, painting and exploring the world?By Joseph Earp

"Franse overheid voert phishingtest uit op 2,5 miljoen leerlingen"
security.nl/posting/881630/Fra

KRANKZINNIG!

Het is meestal onmogelijk om nepberichten (e-mail, SMS, ChatApp, social media en papieren post - zie plaatje) betrouwbaar van echte te kunnen onderscheiden.

Tegen phishing en vooral nepwebsites is echter prima iets te doen, zoals ik vandaag nogmaals beschreef in security.nl/posting/881655.

(Big Tech en luie websitebeheerders willen dat niet, dus is en blijft het een enorm gevecht).

Replied in thread

@BjornW :

I've stopped doing that after a lot of people called me an idiot and a liar if I kindly notified them. I stopped, I'll get scolded anyway.

Big tech and most admins want everyone to believe that "Let's Encrypt" is the only goal. Nearly 100% of tech people believe that.

And admins WANT to believe that, because reliable authentication of website owners is a PITA. They just love ACME and tell their website visitors to GFY.

People like you tooting nonsense get a lot of boosts. It's called fake news or big tech propaganda. If you know better, why don't you WRITE BETTER?

It has ruined the internet. Not for phun but purely for profit. And it is what ruins people's lives and lets employees open the vdoor for ransomware and data-theft.

See also infosec.exchange/@ErikvanStrat (and, in Dutch, security.nl/posting/881296).

@troyhunt @letsencrypt

Infosec ExchangeErik van Straten (@ErikvanStraten@infosec.exchange)🌘DV-CERT MIS-ISSUANCES & OCSP ENDING🌒 🧵#1/3 On Jul 23, 2024, Josh Aas of Let's Encrypt wrote, while his nose was growing rapidly: <<< Intent to End OCSP Service [...] We plan to end support for OCSP primarily because it represents a considerable risk to privacy on the Internet. [...] CRLs do not have this issue. >>> https://letsencrypt.org/2024/07/23/replacing-ocsp-with-crls.html 🚨 On THAT SAME DAY, Jul 23, 2024, LE (Let's Encrypt) issued at least 34 certs (certificates) for [*.]dydx.exchange to cybercriminals, of which LE revoked 27 mis-issued certs approximately 6.5 hours later. Note that falsified DNS records may instruct DNS caching servers to retain entries for a long time; therefore speedy revocation helps reducing the number of victims. Apart from this mis-issuance *blunder*, CRL's have HUGE issues that Josh does not mention: they are SSSLLLOOOWWW and files are potentially huge - while OCSP is instantaneous and uses little bandwith. 🌘NO OCSP INCREASES INTERNET RISKS🌒 If LE quits OCSP support, the average risk of using the internet will *increase*. 🌘LIES🌒 Furthermore, the privacy argument is mostly moot, as nearly every website makes people's browsers connect to domains owned by Google (and even let's those browsers execute Javascript from third party servers, allowing nearly unlimited espionage). In addition, IP-addresses are sent in the plain anyway (📎). (📎 When using a VPN, source and destination IP-addresses *within the tunnel* are not visible for anyone with access to the *outside* of the tunnel - but they are sent in the plain between the end of the tunnel and the actual server.) Worse, the remote endpoint of your E2EE https connection increasingly often is *not* the actual server (that website was moved to sombody else's server in the cloud anyway), but a CDN proxy server which has the ability to monitor everything you do (unencrypting your data: three letter agencies love it, FISA section 702 grants them unlimmited access - without anyone informing you). 🤷 LE may try to blame others for their mis-issuance blunder, but *THEY* chose to use old, notoriously untrustworthy, internet protocols (BGP and DNS, including database records - that DNSSEC will never protect) as the basis for authentication. By making that choice, LE and other DV cert suppliers were simply ASKING for trouble. 🔓 In fact, the promise that Let's Encrypt would make the internet safer was misleading from the start: domain names are mostly meaningless to users, 100% fault intolerant, unpredictable and easily forgotten. If your browser is communicating with a malicious server, encryption is pointless. Josh, stop lying to us; your motives are purely economical. 🌘CORRUPT: BIG TECH FACILITATES CRIME🌒 DV-certs were heavily promoted by Google (not for phun but for profit) after their researchers "proved" that it was possible to show misleasing identification information in the browser's address bar after certificate mis-issuance (the "Stripe, Inc" incident, https://arstechnica.com/information-technology/2017/12/nope-this-isnt-the-https-validated-stripe-website-you-think-it-is/). This message was repeated by many specialists (e.g. https://www.troyhunt.com/paypals-beautiful-demonstration-of-extended-validation-fud/) with stupid arguments: certificates do NOT directly warrant reliable websites. OV and EV certificates, and QWAC's, more or less reliably, warrant *WHO OWNS* a domain name. That means that users know *who* they're doing business with, can depend on their reputation and can sue them if they violate laws. "Of course" Google recently lost trust in Entrust for mis-issuing certificates (https://security.googleblog.com/2024/06/sustaining-digital-certificate-security.html). Meanwhile the internet has become a corrupt and criminal mess; its users get to see misleading identification info in their browser's address bar WAY MORE OFTEN, e.g. https:⁄⁄us–usps–ny.com (for loads of examples see https://www.virustotal.com/gui/ip-address/188.114.96.0/relations; tap ••• a couple of times). Supporting DN's like "ing–movil.com" and "m–santander.de" *is* facilitating cybercrime, by repeatedly mis-issuing certs for them (see https://crt.sh/?q=ing-movil.com and https://crt.sh/?q=m-santander.de) and by letting them hide behind a CDN (see https://www.virustotal.com/gui/domain/ing-movil.com/details and https://www.virustotal.com/gui/domain/m-santander.de/details). In addition, *thousands* of DV-certs have been mis-issued - without *their* issuers getting distrusted by Google, Microsoft, Apple and Mozilla. People have their bank accounts drained and companies get slammed with ransomware because of this. But no Big Tech company (including the likes of Cloudflare) takes ANY responsibility; they make Big Money by facilitating cybercrime. Not by issuing "free" DV-certs, but by selling domain names, server space and CDN functionality, and by letting browsers no longer distinguish between useful and useless certs. They've deliberately made the internet insecure *FOR PROFIT*. 🌘CERT MIS-ISSUANCE ROOT CAUSE🌒 The mis-issuance of LE certs was caused by the unauthorized modification of customer DNS records managed by SquareSpace; this incident was further described in https://www.bleepingcomputer.com/news/security/defi-exchange-dydx-v3-website-hacked-in-dns-hijack-attack/. Note that a similar attack, also affecting SquareSpace customers, occurred on July 11, 2024 (see https://www.bleepingcomputer.com/news/security/dns-hijacks-target-crypto-platforms-registered-with-squarespace/). Even if it *looks like* that no certs were mis-issued during the July 11 incident, because (AFAIK) none of them have been revoked, this does not warrant that none of them were mis-issued; such certs can still be abused by attackers, albeit on a smaller scale. 🌘MORE INFO🌒 Please find additional information in two followups of this toot: 🧵#2/3 Extensive details regarding Mis-issued dydx.exchange certs on 2024-07-23; 🧵#3/3 Links to descriptions of multiple other DV-cert mis-issuance issues. 🌘DISCLAIMER🌒 I am not (and have never been) associated with any certificate supplier. My goal is to obtain a safer internet, in particular for users who are not forensic experts. It is *way* too hard for ordinary internet users to destinguish between 'fake' and 'authentic' on the internet. Something that, IMO, can an must significantly improve ASAP. Edited 08:16 UTC to add people: @troyhunt @dangoodin @BleepingComputer @agl #DV #LE #LetsEncrypt #Certificates #Certs #Misissuance #Mis_issuance #Revocation #Revoked #Weaknessess #WeakCertificates #WeakAuthentication #Authentication #Impersonation #Identification #Infosec #DNS #DNSHijacks #SquareSpace #Authorization #UnauthorizedChanges #UnauthorizedModifications #DeFi #dydx_exchange #CryptoCoins

Let's Make an AI Song!

Vanessa Briscoe Hay lead singer of the band “Pylon Reenactment Society” dives into the evolution of music, the impact of AI, and how technology continues to reshape the creative process. We even create an AI-generated song together!

Watch or listen to the full episode wherever your podcast is.
youtu.be/Joz5qRPUL4Y
#theinternetiscrack #podcast #ai #music #authenticity #indiemusic
#technology #musicians #song #aiart #recording #pylonreenactmentsociety

Authenticity Is Still Important!

Vanessa Briscoe Hay lead singer of the band “Pylon Reenactment Society” dives into the evolution of music, the impact of AI, and how technology continues to reshape the creative process. We even create an AI-generated song together!

Watch or listen to the full episode wherever your podcast is.
youtu.be/Joz5qRPUL4Y
#theinternetiscrack #podcast #music #indiemusic #authenticity #AI #Technology #pylonreenactmentsociety

🤖👁️🔗 💬🤖✍️ 🧠
Okay, so Jeff Geerling is complaining about people just copying and pasting ChatGPT responses instead of putting in the effort to type their own thoughts. Hmm, interesting. Let me unpack this.

First, why is this bothering him? Maybe he's a content creator who values originality and effort. But wait, isn't using AI like ChatGPT just another tool? People have always used tools to assist them—spell check, grammar check, thesauruses. So why the big deal about AI-generated comments?

He mentions "at least do the minimum effort." But what's the minimum effort here? If someone uses AI to get ideas and then paraphrases, isn't that still their own work? Or is the problem that it's too obvious when someone just copies and pastes? Maybe the comments come off as generic or lack personal touch, which can be off-putting.

But then again, maybe the real issue is authenticity. If a comment is obviously AI-generated, it might feel inauthentic, like a robot is commenting instead of a real person. That could be frustrating for someone who wants genuine interaction. But isn't the internet full of scripted and formulatic comments anyway? Like "LMAO" or "This is the best video ever!" Those aren't original either.

Wait, could this be a form of gatekeeping? Jeff might be looking down on people who don't put in the effort, but maybe they're just lazy. Or perhaps he's worried about the devaluation of human effort in an AI-driven world. If everyone just uses AI, then maybe the quality of discourse goes down. But then again, AI can help people who are less articulate to contribute.

Another angle: is this just a hypocrisy issue? If Jeff uses AI himself for his content, then his complaint is two-faced. Or maybe he's using it but wants others to do better. Also, the rise of AI-generated content is a trend that might be making him feel like his work isn't valued anymore because anyone can just copy-paste AI text.

There's also the aspect of originality vs. efficiency. People might prioritize speed over originality. Maybe Jeff's perspective is that taking the time to think shows respect for the creator. But in a fast-paced online environment, maybe people just want quick interactions.

Conspiracy-wise, maybe there's a bigger agenda here. Could this be part of a narrative to push against AI adoption, or perhaps Jeff is part of a movement that wants to maintain human-centric content creation. Or maybe he's just another voice in the noise of the internet, trying to signal his own effort and expertise by criticizing others.

Also, considering the timing—March 2025—AI might be more integrated into daily interactions by then. So maybe this is a response to the saturation of AI in comments sections, leading to a backlash from those who value human input.

In summary, Jeff's complaint touches on authenticity, effort, the role of AI in communication, and possibly deeper concerns about the devaluation of human contribution in an AI-driven world. It's a complex issue with multiple layers, and his frustration might stem from a desire to preserve meaningful interaction online amidst the convenience of AI tools. #ChatGPT #AI #Authenticity #Effort #OnlineCommunication

Reply to mastodon.social/@geerlingguy/1

Replied in thread

@fsinn @human3500 @gemelliz

Since COVID, it seems we've lost our minimum bar: there are no parameters to define acceptable behavior anymore.

A lot / enough of society thinks whack-a-doos like this are some form of "normal". They're not! 🤪

In the movie Ryan's Daughter, Michael, a man from the village and played superbly by John Mills, was an honest genuine soul that understood respect, in spite of all his challenges. A novel concept for many these days ...

Canadian politics isn't about who gets to play banker and real estate agent and he/she who bankrupts all the other players is the winner. It's about making a level playing field for all as we help those in need.

Help dig deep and honor your authentic self with our Garden Quartz / Lodolite Gemstone Spheres. They invite you to gaze into their complex depths to assist in uncovering personal truths and opening you to other possibilities and realities.

inkedgoddesscreations.com/prod
#GardenQuartz #Authenticity #Lodolite #InnerSelf #Meditation #Truth #Crystal #Mineral #Gemstone #Magick

Biggest phishing-test in history

So some weirdo, possibly Elon Musk, instructs you to reply by mail informing him what you did last week.

😱 You will be fired if you do - for failing the phishing test. You should have known that it's a hoax because Elon Musk just fired all the people who could read all of those mails.

And you should have known that you should not share confidential information via email because you don't know for sure who the recipient is. Neither do you know who reads the mail "on its way" and neither does the recipient know that you are who you say that you are.

Finaly, some mail ends up in spam boxes or gets dropped for frivolous reasons (Postel@RFC5321.whatever.tld)
(edited 17:23 UTC - corrected the RFC nr. 825 is not SMTP - sorry!)

😱 You will be fired if you don't.

It's a witch hunt. The Trump govt throws you in the water. You are not a witch if you drown.

blogs.loc.gov/law/2022/02/swim

Replied in thread

@SandraDeHaan schreef: "Ook NL heeft zich afhankelijk gemaakt van Amerikaanse digitale infrastructuur (o.a. cloud-diensten)."

Daar waarschuw ik al langer voor (zie security.nl/posting/684958 van 6-1-2021 toen ik de bestorming van het Capitool zag, en zie bovenaan die pagina).

En gisteren nog: infosec.exchange/@ErikvanStrat

En de NL overheid gaat daar, op advies van "experts" (anoniem natuurlijk) gewoon in mee: security.nl/posting/876914.

Hoe NAÏEF kunnen we zijn?!

En waarom een EV-certificaat, bijv. van de Rabobank, 1FA (en DV nauwelijks veiliger dan DNS is - een notoir onveilig protocol): security.nl/posting/877247.

P.S. Helaas heb ik Bert Hubert moeten bliokken nadat hij IDF-propagandaspam uit Auschwitz had geboost.

#Availability #Beschikbaarheid #Cinfidentiality #Vertrouwelijkheid #Integrity #Integriteit #Authenticity #Authenticiteit #Risico #Economie #Cloudflare #Fastly #CDN #AitM #MitM.#FISASection702 #FISA #ThreeLetterAgencies#Trump #Sbowden #E2EE #InfoSec #VVD #PVV #CIDI #VT #VirusTotal #DVCerts #DV #OV #EV #QWAC #CyberCrime #NepWebsites #FakeWebsites