• 0 Posts
  • 4 Comments
Joined 2 years ago
cake
Cake day: June 28th, 2024

help-circle
  • It certainly isn’t good to depend on it but security by obscurity is your first and probably most important line of defense. When these vulnerabilities come out they need to know your service exists to exploit it.

    The best way to do that is to setup a reverse proxy to reject invalid hostnames. A single port is all you need exposed for multiple web services, and the IP scans won’t find the script kiddies anything valuable. Be careful with lets encrypt, there is a public journal of all issued certs, so make sure to get yourself a wildcard cert so that you aren’t advertising your valid hostnames to the world.

    Use the reverse proxy to put basic auth in front of your services (if they can handle that). Basic auth is very simple, no web forms to attack, just a single header. If your php site is vulnerable they won’t ever be able to even attempt to reach it without a valid username/password.

    I’ve got a mix of containers and VMs behind that reverse proxy. The containers have network security groups around them limiting network access. The VMs are in a Harvester hypervisor with KubeOVN for software defined networking. That means each VM is in its own subnet with network security groups around the subnet preventing any unnecessary network access.

    For machines/containers that need Internet access I have a Squid proxy with an explicit whitelist of allowed URLs so that the machines can’t reach out to unauthorized sites to download their malware or contact command and control nodes.

    Unattended updates for the VMs, and FluxCD keeping helm charts up to date hourly for the containers. For my own containers, weekly scheduled container rebuilds.

    I do have one public website that I host for a friend (indexed by search engines so the sites name is known to the world). My friend had originally deployed that as a WordPress site, but WordPress/PHP don’t have the best security track record so I was concerned about that. The site was pretty simple so I recreated it as 100% static content, so now the attack surface is just a nginx container with a read-only filesystem.



  • There are plenty of non Chinese models (Meta/Mistral/Google’s models for instance) but they don’t keep up with the frontier models nearly as well as the Chinese open weight models.

    Really where the model comes from has little to do with it. Any business is just going to use whatever is cheapest that does the job. If you buy from an AI provider, and the Anthropic/OpenAI models come with extra cost to license their use and the Chinese ones don’t, then clearly the Chinese models will be cheaper, and that is what they will use.

    The US providers think this is a race to the top, expecting to hit AGI which would have made them rich eliminating millions of jobs.

    The Chinese see this as a race to the bottom. Computers (and the models) always get faster and more capable, so you can’t expect to make money off the model itself. The compute not the model is the valuable part, and the compute will just get cheaper and cheaper.

    The Chinese can use this to build up their semiconductor sector to reduce their dependence on other countries while crushing the US companies, it’s a win win to them.

    Meanwhile in the US they release convenient news stories about developers quitting because they are suddenly worried about AI destroying humanity. Which is clearly just a way for them to collude with each other to reduce spending without worrying their investors.

    They realized their own competition with each other was costing them too much money. No return on investment in the current model before they have to spend billions to make the next one that just costs far too much for any business to run even with the current losing money prices. No real progress on AGI so slowing down is the best way to make more money.


  • E=mc^2

    Energy and mass are just different measures of the same thing. The transporters job is to take mass and turn it into something that it can more easily move around (a wave? Particle stream?) and back. So as long as the transporter is connected to the ship’s energy supply it should theoretically be able to use that energy (instead of the energy from your body) to reassemble any pattern it wants without breaking the law of conservation of mass.

    Riker is 6’4 let’s say 200lbs, which is 8,153,369 terajoules.

    DATA: Imagination is not necessary. The scale is readily quantifiable. We are presently generating twelve point seven five billion gigawatts per (an alarm goes off)

    One watt is one Joule per second, there is some debate out there about the “per” part of the quote since watts already implies per second, but we probably assume the ship is capable of generating 12,750,000 terawatts, or 12,750,000 terajoules per second.

    8,153,369/12,750,000 gets us about 0.64 seconds of the ships output to create our duplicate Riker.

    However the quote above was when the ship was basically idling, (not actually at warp) so the actual output of the ship is likely exponentially larger.

    Basically they have so much power available, that they can just rearrange it into whatever mass they want.