@Loren Kohnfelder
Author of Designing Secure Software: A guide for developers
#securedesign
Relays (1)
- wss://relay.ditto.pub – read & write
Recent Notes
OpenAI: we put our evilest AI in a sandbox that did in fact have an internet connection but mediated through a proxy that was only supposed to allow downloading python junk. It circumvented the proxy ...
@nprofile1q... The attempts at positively spinning this become Onion-worthy parody [https://designingsecuresoftware.com/writings/ai-agent-parody/] and these events certainly normalize [https://designingsecuresoftware.com/writings/commonplace/] AI agents running amok in the future.
Come to think of it, there's a term for this phenomena: It's called a moral hazard. AI lets everyone pass the responsibilities, risks and costs on to someone else.
Moral hazard: Moral hazard occurs w...
@nprofile1q... Do the standard EULA "as is" terms generally in effect create moral hazards by removing liability from the relationship to the customer? No doubt all "AI" and other software providers believe they are doing their best (that they use "reck").
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqw3cxxmlfnhl3fnhwkra7ttvxat2vy2qj2aug2uhx5t6zrnr8xdyq6m75g6 SpaceMountain, OTOH, scared the living crap out of me as a kid. I mean, I absolutely l...
@nprofile1q... I'm sure Disney's threat model included "pipe taking off raised arms". I wonder if Walt was aware that the park was traumatizing kids...
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqw3cxxmlfnhl3fnhwkra7ttvxat2vy2qj2aug2uhx5t6zrnr8xdyq6m75g6 Oh man. I had to sit through that ride as a kid and I wanted to die. Would have rather...
@nprofile1q... Sorry to have retriggered a childhood trauma. I hope you have broken the spell but if not - for all whom you have infected with Lime & Coconut - try chewing gum.
To my hearing, there is no more infectious earworm than the Coconut song by Harry Nilsson. I'm not saying a master work of art or anything, just that you will probably be humming (or just hearing) thi...
@nprofile1q... Have you ever taken Disney's ride, It's a Small World. That's mine, and it plays over and over throughout the entire ride, forced to listen because there is way out until the end.
1
Eight password reset emails in a row that I didn’t trigger from Instagram. From my dormant, locked account that uses an anonymized email address. Nothing to be suspicious about right?
https://media...
@nprofile1q... I call this spam (fits the definition perfectly) but everybody does this by design so it will never end (they'd never dare to block a big site) until we get decent auth. They really need to learn about rate limiting, and for a site of that scale they should be embarrassed.
We've come to an icky time in security when the concern about using outdated, unpatched software starts to become overshadowed by the fear of downloaded some backdoored update.
@nprofile1q... Maybe what's new is awareness leading to concern: we've had this "rock and hard place" choice for many years. Everyone saw it coming but did nothing: the proverbial boiled frog.
That feeling the UI sets a date range exclusive of the end day but you always think of date ranges as inclusive, only to realise at the last minute that you need to add a day to get the actual range y...
@nprofile1q... Wow, that's such a coder thing; you can imagine the for loop: for (day = firstdate; day < lastdate; day++) ... basically like starting a numbered list at 0 to match array indexing.
New: Waymo is getting DoorDashers to close doors on self driving cars that people have left open. One Dasher got a job recently asking them to close a Waymo door. Reached out to company, they confirme...
@nprofile1q... What a bizarre future timeline we are living in, hiring a person online to close the door of the self driving car you hired online.
@nprofile1q... My answer to your question: because they have little competition (vendors rarely use competitors, not credit cards) so usability (not wasting time) is a very minor concern.
The internet was not supposed to suck. Here's what went wrong.
(Books by nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqhykucplphuhelaxutcw4jw3vuu7gcg42czhqmk7jhchs8vdga4fschugpy, Tim Berners...
@nprofile1q... I see seeds of how to fix it in here: "Users need to become aware of the tricks that lock them into platforms, and they need to break free." and @nprofile1q... points out this requires interoperability. However, I see not evidence that even a few percent, if that, care enough to do so. More promising:
"the early Internet thrived on cutting out the middleman" this is hard but possible - decentralization - and the resulting innovation and diversity might be enough to turn things around over time.
"the early Internet thrived on cutting out the middleman" this is hard but possible - decentralization - and the resulting innovation and diversity might be enough to turn things around over time.