Or, session cookies. They don’t need special privilege to access, and if you grab all of someone’s cookies, you can probably get some valid session cookies for logged in accounts just by checking for some common domains in one/by keyword.

From there, it would be trivial to get into email, social media, and other accounts to do other things with.

It would be trivial to add a “please click ‘yes’ to the UAC prompt to allow verification” screen, so that isn’t really going to stop anyone.

I’ve seen a bit of office malware in the past that did that, where it had a bunch of images instructing you to enable macros and that.

That’s probably why they “helpfully” include a little picture of the symbol on the key, so you know what it looks like.

This feature is extremely insecure now that there’s several AIs that can replicate voices. If a scammer calls you and you say a few words (like if you say “hello” and “sorry, I think you’ve got the wrong number”), a recording of that can be enough for them to replicate your voice.

It honestly wasn’t really that secure to begin with, since the audio would have the daylights crushed out of it through the phone system. Though AI probably makes it easier by just letting you have a computer at the end of it spit out some words.

Someone could probably get away with it by sounding vaguely enough like the person calling.

Or just do the tried and true method of going through the in-person support. Voice recognition, at least in my experience, over the phone, has trouble with accents, so someone calling to get around that isn’t uncommon. It never works with me, for example, it just goes “please try again” until it redirects me to an agent.

From the Browser’s viewpoint, would there be any difference if the webpage has a JS button to put something in the clipboard, or it having code running in the background that puts things into the clipboard at page load?

It’s not like there’s that much of a difference, as far as the Browser is concerned.

Depends on how dedicated they are. It’s not implausible that some might just shuffle it away as “computer verification stuff”, and faithfully paste and execute the code, since it’s the computer doing a computery thing, that it says it is doing, and asks you to do, all must be well.

Just make the screen one gargantuan pixel, and infer the other 2-million.

I have personally found generative-text LLMs quite good for creating titles. As an example, I have a few hundred tweets that I’m trying to put into a file, and I’ll use an LLM to create a human-readable name for them. It’s much better than a lot of the other summarisation mechanisms (like BERT) I’ve tried with it, but it’s still not perfect, because the model tends to output the same thing in slightly different words each time, so repeat runs will often result in the same thing with a different title.

But, that is also a fairly limited use case.

At the same time, the trouble with local LLMs is that they’re very resource heavy. Your average household computer isn’t going to be able to run one with much usability or speed.

What is a “trustworthy software environment”?

Does that mean that it will get mad and fail you for having Developer options enabled? Having F-Droid installed? Having it plugged into a computer?

It basically gets longer every few years. At this rate, it’ll turn into an Amazon listing.

USB 3.5 Gen 3 2x2 20 Gbit Two-Sided DP PD USB 3 USB 2 USB 1 Compatible

Had the company paid for the training data and/or left it as voluntary, there would be less of a problem with it to begin with.

Part of the problem is that they didn’t, but are still using it for commercial purposes.

. (Actually, it’s worse than that. Ask me if you want to know. It’s its own rant.)

Mind enlightening us? It could be useful to compare against, for those of us who haven’t used those kinds of apps before.

Basically. DEI (Diversity, Ethics Equity, and Inclusion, IIRC?) is the new “woke”/SJW bogey.

Having an woman (with exposed skin, no less!) is causing all entertainment to be ruined forever, etc etc, that kind of thing.

EDIT: Equity, not ethics, whoops! Thanks for the correction.

Video was nicer when you could buy a piece of physical media to watch your movie on.

Even then, you still had to contend with such nonsense as region locks later on. Can’t have people watch the movie earlier than release because the production company decided to delay release a while. That would be apocalyptic.

Or when the network that the car relies on no longer exists. My old e-reader’s mobile connectivity no longer works because the phone company providing the service turned the 3G network off in the upgrade to 4G.

It’s just 17 years old. People tend to keep cars for about that long. What happens then? Does it just become limited to basics only, or become a big metal brick?

A car is also difficult to ignore, compared to something smaller.

A small expensive device that stopped working because the company shut it down is annoying, but you can at least put it to the side and ignore it.

You can’t really do that to a car that has functionally become a paperweight because the parent company has gone under.

Tumblr’s codebase is also both quite old and infamously terrible, even if it’s from being shuffled around companies a bunch.

Centralising its backend into one platform doesn’t like too bad of an idea.

A few car companies seem to be doing that. Toyota(?) here are advertising their hybrid vehicles as “self-charging electric vehicles” instead of a hybrid, even though there’s no way to plug them in and not have them self charge.

It has kind of come with newer laptops being driven to be thinner, and for newer devices, because the old SODIMM format is no longer capable of the throughput/latencies needed for higher speed memory.

From memory, 2.1Ghz DDR5 is where it caps out. Anything faster, like 2.8 GHz either requires it to be soldered, or one of the new formats like the one Dell has started using.