Hey now. It's all about perspective. If you think about it in terms of geological history or the history of the universe, the discovery pretty much just happened.
Nah. They’re right. Declaring something a “person” then denying them rights and protections afforded to human “persons” is pretty ridiculous. The OP is, from a legality standpoint, expressing a desire to force a legal “person” to labor for them without compensation. If treating “personhood” as a purely abstract legal term, it still translates to slavery.
I’m often pretty anthropocentric, myself, and do support automation of tasks to free humans to do things that they enjoy. However, making an algorithm legally equal to a human and denying it the same basic rights is pretty messed up, despite the fact that it wouldn’t be about to use them on account of LLMs not really being capable of sentience on their own.
Additionally, this would set a really bad precedent, should artificial sentience be achieved, setting the foundations for abuse of and unnecessary conflict with other thinking beings. I really don’t want to see that as I hope for a future with more conscious, thinking, feeling beings that add to the beautiful wonder that is the universe around us.
I think that it, along with “spending money is free speech”, is among the biggest, naked, pro-corruption power-grabs of the last half-century. The fact that it shelters the legal “persons” from real consequences of criminal activity is just a cherry on top. I also doubt that anyone has ever seriously thought of it as true legal “personhood”, rather, just a flimsy but convenient excuse to justify said power-grab.
TL;DR - it’s a terrible, non-sensical precedent legislated from the bench by unelected, pro-corruption judges. Granting legal “personhood” to an LLM would similarly be a terrible and non-sensical precedent that would not be used to the benefit of society or any possible future artificial sentience.
Employers demonstrated their infidelity to their staff by paying loyal workers, on average, 7% less than new hires — 20 years ago, salaries were largely the same between new and longtime employees.
If you need advice that particular kind of DIY, feel free to post here and tag me or DM me directly. Hopefully I can be very helpful to some of you folks who either can’t afford to pay expensive mechanics or want to learn on your own....
I really miss the sheer simplicity of the bikes that I used to ride. Specifically, the KLR650 and the carbureted KLX250. Every but of maintenance was easy to DIY. Even a clutch rebuild was just simple. The 250 had the extra bonus of not wanting to cry, when it decided to take a nap.
I’ve been seeing a lot of doom and gloom about VMware. The cutting of services and licensing changes of the cost of core offerings are huge issues. Is anyone planning or budgeting to change to another hypervisor? If so what?
I’ve kept away from VMWare most of my career. I’d personally push for something KVM/QEMU based, if possible, whether it be Proxmox, LXD, or a RHEL offering. If you are in a fully MS shop, probably Hyper-V.
But make no mistake, Lebensraum for ethnic russians was executed without much pondering. Killing, burning, destroying anything that was in the way.
Hey now. That’s not quite accurate. A great deal of thought went into it when the leadership realized that the Greens (peasant militias primarily organized for mutual defense against pillaging aka “requisitions” by the Red and White armies), the presence of anarchist societies allowing voluntary association (like the Makhnovists in Ukraine, and ethnic groups with strong identities or cultural individuality would interfere with the Central Commitee’s absolute power over the populace.
Traditionally, retiring entails leaving the workforce permanently. However, experts found that the very definition of retirement is also changing between generations....
Correct. If using actual pki with a trusted root and private CA, you’re just fine.
I took the statement to mean ad-hoc self-signed certs, signed by the server that they are deployed on. That works for EiT but defeats any MitM protection, etc.
And if you’re not using a trusted CA, you are unable to protect against MitM and other forgery attacks, as well as needing to rely upon a mechanism like TOFU in order to avoid auth fatigue and other human error, which is not great.
You do SSL mutual auth between services using self signed certs
If you do, you remove the ability to prove that a service is what it claims to be as this requires accepting its provided cert - that is, authenticate it. You have to trust somewhere, even in a “zero trust” environment. Using self-signed certs for services to communicate means that you have to either have manual involvement every time a service comes up or accept the authenticity of a self-signed cert automatically. Either would be a compromise in security over use of a private CA, not an improvement.
Again, that works if your only concern is data across the pipes being encrypted during transmission but, it removes nearly all of the other additional security provided by PKI and increases your threat surface. It can be acceptable in some cases, like dev envs or as temporary measures but, with the constant increase in malicious traffic and activity, we’ve got to aim for better.
Certs do more than encryption in transit. They are also used for protection against MitM and authentication. Self-signing removes the ability to verify a cert’s authenticity.
Oh! Then you are doing it right. That was basically my entire objection - having A chain of trust is necessary to effectively and securely use certs because you have a mechanism to validate, rather than trust the cert that is presented as authentic. :)
Nope. That’s the basics of PKI and scalable, secure, low-trust environments.
You are the one who issued the cert. You can add it to your list of trusted certificates. You just have to check that this is the right certificate.
You can indeed do these things. But, are you and your users going to verify every cert for every request and response? That’s a lot of unnecessary cognitive load and tedium, both of which are known to compromise judgement. Are you going to automate it? Ok then how are you going to verify the authenticity of a given cert?
Your man in the middle scare comes from users who ignore cert warnings and continue without checking anything.
Humans are not rational actors. Does everyone read the entire EULA? Not even close.
The problem with your statement, and why it is fallacious, is that you are not accounting for humans besides yourself. I’d even argue that you should also take your human nature into account because we all make mistakes.
Robust security postures do not require everyone to act perfectly but accept and plan for the fact that we’re fallible. That is why chains and webs of trust were created, so that humans and automated services can take an approach of deference towards a less mutable “expert” on whether a claim of authenticity is trustworthy - giving them the capability and responsibility of deciding this for themselves introduces unnecessary targets for exploits.
Your man in the middle argument is invalid, no matter how much you write.
It really isn’t and it’s a significant part of why PKI exists in the first place. I’ve been doing this stuff professionally for over a decade and am very familiar with ISO27001, SOC2, and CIS standards, as well as generally just finding that a healthy dose of paranoia in computing keeps things more secure. Understanding how and why PKI works and is architected as it is is something that I recommend that everyone involved in technology explore.
Just trust youur self signed certs and you users see no difference.
This is problematic if a service needs to be redeployed, the cert expires, or becomes compromised, leaking its keys. In the former two scenarios, the new cert needs to be added on all of your end users’ machines. If you have just a few users, sure, that’s easy enough but, tedious and unnecessary. If it is a case of the latter, you now need to revoke the cert on all systems that have trusted it and deploy a new one. Again, tedious and prone to human error. Plus, you have to hope that you detect this quickly, otherwise a malicious host can harvest a lot of potentially-sensitive information, a situation easily prevented with a trusted CA.
That’s even more secure than blindly trusting the idiots from verisign.
I’m not suggesting that a public CA is the best choice for everyone or every situation. For internal use, a well-managed private CA or LE is probably a better choice, purely from a cost perspective.
I’d also like to understand why you are so hostile towards Verisign and feel better qualified in cert management. Were you or someone close to you caught up in their 2010 breach?
Don’t act so smug.
Not sure where this hostility is coming from. I am primarily explaining how these statements are not in line with intended use of security technologies and best practices. If you don’t like currently accepted security best practices, that’s absolutely your prerogative.
Use of a CA (private CA would be my thought in this case) gives you greater ability to manage certs without needing to manually revoke and the ability to verify authenticity. You’re already doing most of the work to run a private CA, TBH. Just, instead of signing from the machine, you add your private CA’s intermediate cert to the trusted CAs on your hosts, and generate CSRs on your new hosts for your CA to sign.
Signing from the machine that uses a cert gives it greater authority and increases the “blast radius” if it gets compromised.
I say it, knowing that there’s no possibility of it happening in the current day but, really, it’s the only way that’s fair for both sides and removes most potential discriminatory policies. If a business can’t afford to pay its workers enough to have a decent life, they can’t afford to be in business.
I’m not sure what area has average cost of houses around $2.8B but, if that’s the cost, sure. That is, of you’re not trying to imply that the “Wage-Price Spiral” exists, despite all evidence contrary.
The discourse of the Trump era has been dominated by a conceit that the two major parties have swapped economic identities. The Democrats have supposedly abandoned their historical role as spokespeople for the working class to represent the neoliberal global elite, while the Republicans have been transmuted into scruffy...
My partner is into DS9 and suggested we watch some last night. For some reason episode 1 was not available on Amazon Prime.(?) We watched Past Prologue and A Man Alone. As someone who is only barely familiar with the Star Trek universe, here are my thoughts:...
I think you’ve really pointed out a lot of why I think it’s one of the best, if not the best ST series. The characters are not as homogeneous, have more agency, and seem more “human” and complex. While I do think it still has a bit of the “rose-tinted glasses” perspective that has been part of Star Trek since its creation, I think it’s for a lot more grit to it and it’s more willing to go to darker places and examine moral ambiguity than other series did.
Not that the optimism seen in the other series is bad, just nice to sometimes have series that seem more genuine and relatable examples of the human experience rather than escapism.
I’m on that side too :D I like both but am a bit of a sucker for tragedies and non-utopian fiction.
I do, however, agree with your thoughts on the narrative direction. DS9 did indeed open the door for less-Treky series that I don’t think necessarily benefitted the ST universe and probably would have been better as independent sci-fi series in their own settings.
the issue of students who throw a fit about taking class X because they’re going for a degree in Y (I see this a lot with science/engineering majors when having to take classes in the humanities).
Yeah. That’s really an ongoing issue that I’ve seen too. “Why do I have to take English Comp and some other art crap, when I’m studying CS?” Is something that I have heard a lot. And the reason is that context matters and humans are not rational actors so, it’s important to learn about other ideas in order to both be able to effectively apply hard sciences in a world that doesn’t always match up to what’s on paper, understand why ethical standards exist, and know about the things that we humans do without clear material reason.
I blame the neoliberal idea that everything must relate to profit and anything that isn’t directly related to profit is luxury as a cause of this problem. Hard sciences are about understanding the world around and, to some degree inside, us. Arts and humanities are about what gives us joy, purpose, and interesting ways to make the world a weirder place.
A very good point. The obscene cost and lack of that money going to hiring motivated faculty is more than a but of a buzzkill for humanities. And the use of adjuncts to replace faculty is nothing but exploitation of both the adjunct and the students.
I think that you are both wrong and right. Societal treatment of mental health issues is indeed quite poor regardless of gender. However, it is important to realize that there ARE differences that relate directly to one’s presenting gender.
Just as women are not taken seriously by health professionals, men are frequently treated as less-than by western culture at-large, if we show anything but chauvinistic bravado. This lack of care has had a profound impact on both young and old men who have any mental illness, leading to isolation, and becoming vulnerable to radicalization by those actively preying on them and using them as tools of violence or suicide.
It’s a real, gender-specific problem that is well-encapsulated in the proverb “A child not embraced by the village will burn it down to feel its warmth.”
[Physics] Does gravity have 'elasticity'? If a solid sun-sized object zooms across space at the speed of light, then abruptly stops, does it take gravity some time to 'settle' around it?
Is it a stable/static effect no matter what, or is it a bit more stretchy/bouncy depending on how the object is behaving?...
Despair makes young US men more conservative ahead of US election, poll shows ( www.reuters.com )
How long will the Great Lakes last?
Everything about this comment is cursed ( sopuli.xyz )
xkcd #2894: Research Account ( imgs.xkcd.com )
xkcd.com/2894...
Gen Z is unhappier at work than any other generation. Here are the two things they want. ( www.businessinsider.com )
Employers demonstrated their infidelity to their staff by paying loyal workers, on average, 7% less than new hires — 20 years ago, salaries were largely the same between new and longtime employees.
To anyone in this DIY community who has a motorcycle or a car: ( beehaw.org )
If you need advice that particular kind of DIY, feel free to post here and tag me or DM me directly. Hopefully I can be very helpful to some of you folks who either can’t afford to pay expensive mechanics or want to learn on your own....
VMWare FUD. Anyone moving away from it professionally?
I’ve been seeing a lot of doom and gloom about VMware. The cutting of services and licensing changes of the cost of core offerings are huge issues. Is anyone planning or budgeting to change to another hypervisor? If so what?
"Morbidly Wealthy": The world’s five richest men have more than doubled their fortunes from $405b to $869b since 2020—at a rate of $14m/hr—while nearly five billion people have been made poorer ( sh.itjust.works )
Source: Oxfam
What the hell is this shit? Instead of pushing for the return to traditional pensions, capitalism is celebrating the idea that Millennials and Gen Z may simply never be able to stop working. ( www.cnbc.com )
Traditionally, retiring entails leaving the workforce permanently. However, experts found that the very definition of retirement is also changing between generations....
SAG-AFTRA Alleges ‘Bully Tactics’ as Studios Suspend Negotiations ( variety.com )
SAG-AFTRA negotiations have been suspended, as the AMPTP says the union is seeking an untenable streaming residual.
You have a organizational identity right? ( lemmy.zip )
Bosses and workers still can’t agree on whether the commute is part of the work day, and it’s creating a $578 billion productivity problem ( fortune.com )
Trump’s Economic Plan: Raise Taxes on the Middle Class, Cut Them on the Rich ( nymag.com )
The discourse of the Trump era has been dominated by a conceit that the two major parties have swapped economic identities. The Democrats have supposedly abandoned their historical role as spokespeople for the working class to represent the neoliberal global elite, while the Republicans have been transmuted into scruffy...
Watched episodes 2&3 of DS9, thoughts
My partner is into DS9 and suggested we watch some last night. For some reason episode 1 was not available on Amazon Prime.(?) We watched Past Prologue and A Man Alone. As someone who is only barely familiar with the Star Trek universe, here are my thoughts:...
Americans Are Losing Faith in the Value of College. Whose Fault Is That? ( www.nytimes.com )
NYT gift article expires in 30 days....
Yikes ( slrpnk.net )