It wasn’t at rest according to the blog post:

we found a publicly accessible ClickHouse database linked to DeepSeek, completely open and unauthenticated, exposing sensitive data. It was hosted at oauth2callback.deepseek.com:9000 and dev.deepseek.com:9000.

So probably either a service that was meant to be bound on loopback or a firewall issue.

I guess that shows how dangerous it is to have something secured by the ‘nobody should be able to access this port’ method.

Now I want someone to ask trump “what’s your final solution for these people?”

This sounds like good engineering, but surely there’s not a big gap with their competitors. They are spending tens of millions on hardware and energy, and this is something a handful of (very good) programmers should be able to pull off.

Unless I’m missing something, It’s the sort of thing that’s done all the time on console games.

A GPU is forever

I found this blog post which gets into activitypub location metadata and integrating it with OSM.

https://shkspr.mobi/blog/2024/01/rebuilding-foursquare-for-activitypub-using-openstreetmap/

Sound promising actually.

Political polarisation is when you know the new boss wants the whales to die, even though nobody ever asked him.

Any suggestions for avoiding Google maps reviews? The best I can think of is looking for threads on local subreddits for e.g. restaurants. Unfortunately there’s not much of a local community on the fediverse yet.

They can do that, but I believe the various laws about openness in advertising make it pretty hard to hide ads from the client.

Isn’t the bluesky client open source? That would make it harder to force ads on everyone.

Vance’s head continues to widen, while Trump has found the briefcase from Pulp Fiction.

Something that worries me about that is attestation. This is the advice from the GrapheneOS Devs:

https://grapheneos.org/articles/attestation-compatibility-guide

They’re asking app developers to trust their keys specifically, which would mean that the app might work on GrapheneOS, but not my fork of GrapheneOS with some cherry picked fix I want.

It would be much better if we stamped this out now, before all online services require attestation.

Canada has a history of ping-ponging between Conservative and Liberal governments every ~10 years.

I think Trudeau was fine as a Liberal PM. The one difference this iteration was that they formed government on a promise to change the electoral system, and they didn’t follow through. That could have ended the cycle. They burned everyone on the left with that move, and they lost the right because the right has gone Trumpist. So now they’re fucked, and we’re all fucked too. 🎉

They just need to gachafy it. One gun = one pull. Then people won’t stop after one gun. They’ll trade in all their guns and start stealing guns from their neighbours.

I assume they’re going to use it to waste stupid amounts of electricity?

Lemmy format allows having an actual dialogue

It’s great for seeing existing dialogue, but I think it falls short for long term discussion between more than two people.

On a non-threaded board (e.g. forums, github issues) you can watch a thread you’re interested in. On Lemmy/reddit you only get notifications for direct responses to your comments.

I think some sort of option to watch/unwatch whole subtrees of comments would help a lot.

But at least you still have your head.

They’re pining for the fjords.

That Purple Mountains album is great. It’s just heartbreaking that it ended up being a suicide note.

Anyone can be a CEO. They really need to limit this to just the most evil of CEOs.

I think if you want to get pre-clearance for the hotline, you should gather plenty of evidence of your eligibility and submit it to:

https://tips.fbi.gov/

Yeah, likely true without some sort of legislation.

Well at least there’s a business opportunity for someone to reanimate these things and use them to push gacha games and energy drinks on the innocent children they’ve bonded with.