• 1 Post
  • 342 Comments
Joined 3 years ago
cake
Cake day: June 15th, 2023

help-circle

  • Those companies have extremely well developed propaganda machines. They have to sell their technology and products as benefits to governments (i.e. society) and solutions to chaos (i.e. crime and terrorism), and they have extremely well refined language to describe themselves in positive term. If you don’t look past the company line, it’s easy to believe that the skeptics and warnings are all just FUD from haters, especially when the propaganda pays your mortgage.

    Then Palantir goes and publishes an actual fascist manifesto…


  • To me, that’s the ‘fancy search engine’ mode of AI where it works well and basically focuses the human effort. A needle-in-haystack problem. It might still be missing things, but they’re things you’ve already missed yourself, so no loss.

    It’s different from asking Claude, for example, to create a new guest VLAN with limited internet access and access to only a specific service on the private network. For that, you have to 1) trust Claude because you lack the expertise to review, 2) spend time learning the config system well enough to review, or 3) already know the system well enough to check it. 1) just sounds bad. 2) sounds like Claude isn’t saving much time, but maybe helps focus the human where to study, and 3) seems like the human might have been able to just do the job in similar or less time than writing the prompt + reviewing the result.


  • I feel like the big mistake they continue to propagate is failing to distinguish among the uses of AI.

    A lot of hype seems to be the generative uses, where AI creates code, images, text, or whatever, or the agentic uses where it supposedly automates some process. Safe uses in that way should involve human review and approval, and if the human spends as much time reviewing as they would creating it in the first place, then there’s a productivity loss.

    All the positive cases I’ve heard of use AI like a fancy search engine - look for specific issues in a large code base, look for internal consistency in large document or document sets. That form lets the human shift from reading hundreds or thousands of pages to reading whatever snippets the AI returns. Even if that’s a lot of false positives, it’s still a big savings over full review. And as long as the AI’s false-negative rate is better than the human, it’s a net improvement in review.

    And, of course, there’s the possibility that AI facilitated review allows companies to do review of documents that they would otherwise have ignored as intractable, which would also show up as reduced productivity.


  • tburkhol@lemmy.worldtoSelfhosted@lemmy.worldIPv6
    link
    fedilink
    English
    arrow-up
    5
    ·
    10 days ago

    Not familiar with opnSense, but on your PC, you can check the address it assigns - if it’s /128, it’s a single address.

    My ISP does not assign a prefix for delegation unless you specifically ask for it. I had to add “request_prefix 1” to my dhclient.conf file to get a /64 I assume opnSense has a friendly setting somewhere for that. For me, the key phrase was ‘prefix delegation.’ After I got that, I could search around and get my solution.



  • Beyond “whomever holds the highest office at the moment,” there’s “whomever gets the biggest media coverage.” That might be Gavin Newsom, who’s not very popular, even in his home state. Bernie Sanders and AOC always get good coverage, but that’s partly because they’re so far outside the mainstream.

    US isn’t really set up for singular leaders at the national level, which is part of what makes Trump so unusual.








  • If you only need it to be accessible inside your home, then you just need to run your own DNS. Have your dhcp point at your DNS and your DNS declare itself the master for your domain.

    To get full functionality, you’ll probably want to have your registrar point to the public IP you get from your ISP as the domain’s authoritative name server.You should be able to script it to update the registrar when your ISP changes your IP, but that usually happens infrequently enough to do manually. Obviously can’t do that if you’re behind CGNAT.

    To get Lets Encrypt certificates, you can do the DNS challenge. If your ISP gives you a (even inconsistent) public IP, you can do fancy ‘views’ with your selfhosted DNS, where it responds with private IPs inside your network and your ISP-given IP outside your network. I have certbot set up to expose my DNS & web server just before it starts its renewal process, then close the firewall after. Once you have the certificate, you can move it to where ever it will actually be used.



  • To me, the nonstandard port is mostly nice for reducing log spam from scripts. The risk is that using a nonstandard port lulls one into a false sense of security and overlook good sshd practices. Good sshd practices will prevent the script-kiddies just as well as the non-standard port, while a non-standard port will not challenge a targeted attack. And, if you interact with multiple servers, it can be inconvenient to remember a different port for each one.