• 0 Posts
  • 20 Comments
Joined 2 years ago
cake
Cake day: June 20th, 2023

help-circle

  • If I am not mistaken the 47.0.0.0/8 ip block is for Alibaba cloud

    That’s an ARIN block according to Wikipedia so North America, under Northen Telecom until 2010. It does look like Alibaba operate many networks under that /8, but I very much doubt it’s the whole /8 which would be worth a lot; a /16 is apparently worth around $3-4M, so a /8 can be extrapolated to be worth upwards of a billion dollars! I doubt they put all their eggs into that particular basket. So you’re probably matching a lot of innocent North American IPs with this.



  • Wikimedians discussed ways that AI/machine-generated remixing of the already created content can be used to make Wikipedia more accessible and easier to learn from

    The entire mistake right there. Look no further. They saw a solution (LLMs) and started hunting for a problem.

    Had they done it the right way round there might have been some useful, though less flashy, outcome. I agree many article summaries are badly written. So why not experiment with an AI that flags those articles for review? Or even just organize a community drive to clean up article summaries?

    The questions are rhetorical of course. Like every GenAI peddler they don’t have an interest in the problem they purport to solve, they just want to play with or sell you this shiny toy that pretends really convincingly that it is clever.


  • This is separate from A-GPS. Google seems to be using WiFi rather than Bluetooth, but the broader point remains the same. No one is stopping any vendor from crowdsourcing the location of every BT device… which is what Apple has done, for Airtags which don’t have the battery capacity to run a GPS chip.

    Sure without GPS it wouldn’t be very effective to rely on only nearby devices to guess the current location. But an attacker only has to get lucky once to get your home address. So the only safe approach is to hide nearby devices/networks from unauthorized apps.


  • Every Bluetooth device has a unique identifier. Any phone that has seen that Bluetooth device in the past could have told google/apple/whoever “hey BTW this device is at those coordinates”.

    Google already uses this with WiFi to help “bootstrap” GPS localization. It is much faster to get a GPS fix if you already know roughly where you are (a few seconds vs a couple minutes), so they use nearby WiFi/Bluetooth devices to determine that. Remember 10-15 years ago when getting a GPS fix took forever? GPS didn’t change, this did.
    Apple went further and does this with Airtags now. Every Bluetooth device that ever went near an iPhone is in Apple’s database with GPS coordinates.

    So unless you live alone in a mountain cabin that has never been visited by someone with a smartphone before and you didn’t disable the “enhanced localization” feature on your phone, yes your Bluetooth is at risk of giving up your location.


  • Plenty of cars flash their brake lights when ABS(/ESP?) engages, which is reasonable and should be a legal requirement IMO.

    There’s lots of room to give additional info in between that and “brake light is on because the driver doesn’t understand that they can do mild adjustments by letting off the gas / stupid bitch-ass VW PHEV computer thinks using cruise control downhill with electric regen requires the motherfucking brake lights”. It’s like no-one realizes or cares that brake lights lose all purpose if they’re on when the car isn’t meaningfully decelerating. ARGH.



  • It’s because the ~*~tech~*~ sector fundamentally relies on different economics than most engineering companies, and that has investors absolutely bricked up.

    What investors being sold by “tech” companies is infinite ROI. Sure, [YouTube/Twitter/Uber/whoever] has never been profitable more than a few quarters in a row (if that), but think! They have virtually no fixed costs! That means if we just inject a few more millions in R&D we will finally reach the threshold where we can scale deployments to hundreds of millions of users who will be paying us MRR! Hosting costs are virtually nothing and at that scale R&D is basically free as well! And if push comes to shove, we can reduce costs to nearly zero by firing all the engineers! The economies of scale are practically infinite, they say.

    It’s the rare instance where capitalists actually care about long-terms gain a bit too much. The tech industry tends to be single-mindedly chasing monthly user counts first and revenue second or third. Then at some point reality catches up, the accountants start getting their way, the product starts getting enshittified, and the users leave for something else. Did the product actually turn a net profit over its lifetime? Who knows, who cares. Everyone who made those early business decisions has long since cashed out.

    Where the markets are unbelievably irrational is that this frenzy has spilled over into industries where the the sales pitch for infinite economies of scale doesn’t even make theoretical sense. Tesla sells physical products, so why are they worth more than every other automotive company combined? OpenAI operates at an enormous loss because LLMs are just expensive to train and run by nature, so they cannot be profitable under the current business model at any scale. Yet here we are. Just because it’s labeled as “tech”, investors are throwing our retirement funds into it. And any time the markets are being irrational, there’s a risk that investors wise up to the bad fundamentals and the whole thing comes crashing down.


    In Europe we’ve been spared some of the worst of the craziness. Although venture capitalism is alive and well in the software sector, I would wager that European companies tend to have stronger fundamentals on average (but that’s just a gut feeling, I’m not an economist).



  • I know people in that predicament and they’re, charitably, helpless little babies when you tell them to read two paragraphs of documentation on how to run one command in a Linux CLI.

    Fundamentally nothing out there really caters to the needs of resellers. Your average resale company couldn’t automate a backup job to save itself from bankruptcy if it doesn’t come with a neat GUI, a 24/7 support contract, and preferably a Microsoft or oracle logo somewhere in the corner to inspire confidence.

    Like I jest but there are Microsoft outfits and FOSS outfits and there is essentially zero professional overlap even though they both sell IT products/solutions. The disconnect is a mile wide. Which translates to wildly different business models where the FOSS people have been running shit in containers for 15 years while the Microsoft slaves are still licensing their monolithic solutions by the CPU Core and doing weird-ass shit like buy 4-core xeons because it’s more economical with these archaic licensing models.

    So sure Proxmox/Suse are certainly very happy with their sales number right now but anecdotally I’m not seeing the migration frenzy that one would expect under such intense price gouging. Broadcom correctly identified that it will take years for these super corporate structures to steer away from “the way we’ve always done things” and in the meantime that’s untold millions in additional short-term profits.



  • That’s a broad topic where I would avoid making generalizations. It’s a matter of tradeoffs.

    The key indicators I’d look at are, in no particular order:

    • Cost. Does cloud hosting provide economies of scale that dramatically reduce operational costs?
    • Risk. If your cloud provider hikes prices or turns out to be based in a hostile fascist dictatorship, can you easily switch to another offering?
    • Liability. For better and more often for worse, companies love delegating business because it relieves them of liability if someone cocks it up. It’s a harsh reality that some SMEs have IT infrastructure that looks fine and inexpensive until they find out the hard way that their “IT person” doesn’t know what a firewall is.
    • Accounting. Companies strongly prefer OpEx to CapEx due to the way modern accounting incentives, and cloud hosting is tailored to that.
    • Practicality. If you want your email to sync to your phone abroad, you’ll need a cloud (though it could be a private cloud, but then I’d recommend a VPN which is more secure but less practical).
    • Security. Does the NSA looking at all your files matter? For governments I would hope it does buuuuut…

    Either way it goes, be mindful of blind spots. Companies often don’t (IMO) properly assess the risk of locking themselves into walled gardens due to short-termism. But at the same time IT gremlins such as myself tend to underestimate the costs we represent, not just as salaried employees but as people who might cock something up or leave behind us an undocumented mess that will costs hundreds of thousands to rebuild a few years from now.


    1. He’s dumber than you give him credit for
    2. What is the point of the supposed cover story? To cover from who, about what? He’s literally paying people to vote, again. Next to that, buying a social media to influence it almost sounds democratic.

    The reason that conspiracy theory is appealing is the same for all conspiracy theories; it’s more comforting to think the powerful have a clever masterful evil plan than the sad reality that we’re all making it up as we go, even the literal Nazis.

    Relevant ContraPoints from 4 days ago


  • I mean yeah it’s all very complex for sure. Managing a cluster is very involved and k8s administration is typically a completely separate role from dev/devops. I am comfortable with the idea and I still run my selfhosted setup on docker because it’s easier and I have no personal use for multi-node setups.

    However when you get down to it pretty much everything in k8s solves a real problem that in a “traditional” infra would require lots of ad-hoc bullshit. The ingress system of k8s is, at a high level, a standardized recreation of the typical “haproxy+nginx+ad-hoc provisioning” setup you’d find in a “classical” private cloud deployment. TLS in, send to nginx, nginx chooses a relevant healthy back-end and reverse proxies the request. K8s doesn’t really do anything crazy complex, the complexity is just inherent to having a many-to-many mapping of HTTP requests while optionally supporting multi-zone setups with local affinity and lifecycle management/awareness.

    But unlike with a traditional deployment there’s not a greybeard guru in the back who deployed it all and knows the ins-and-outs so it’s quite common that the complexity is not understood and underappreciated by the “admins”. That complexity is a blessing when you need to leverage it but a curse when you lack the expertise to understand what is happening holistically.

    Kind of like a linux distro… It’s amazing when it works but when libpam throws an error and you don’t even know what that library is or does, well you’re in for a fun evening.


  • The “problem” with k8s is not that it’s abstract-y (it’s not inherently any more abstract than docker), it’s that it’s very complex and enterprise-y.

    The need for such a complex orchestration layer is not necessarily immediately obvious, until you’ve worked on a complex infra setup that wasn’t deployed with kubernetes. Believe me when you’ve seen the depths of hell that are hundreds of separately configured customer setups using thousands of lines of ansible playbooks, all using ad-hoc systems for creating containers/VMs, with even more ad-hoc and hacked together development and staging environments, suddenly k8s starts looking very appetizing. Instead of an abominable spaghetti of bash scripts, playbooks, and random documentation, one common (albeit complex) set of tools understood by every professional which manages your application deployment & configuration, redundancy, software upgrades, firewall configs, etc.

    A small self-hosted production kubernetes cluster doesn’t have to be hard to operate or significantly more expensive than bare-metal; you can buy 3U of rack space, plop in 3 semi-large servers (think 128 GB plus a few TB of SSD RAID), install rancher and longhorn, and now you’ve got a prod cluster large enough for nearly every workload such that if you ever need to upgrade that means you have so many customers that hiring a k8s administrator will be a no-brainer.

    Or you can buy minutes from AWS because CapEx is the absolute devil and instead you pay several times as much in OpEx to make it someone else’s problem. But if you’re doing that then you’re not comparing against “installing things the old-fashioned way”.


  • I push for FOSS everywhere I can at work, but then we acquire a company and they casually drop “oh yeah we’ve built $solution on Azure Containers using Azure SDN with Azure API Gateway and Azure LoadBalancer and Azure Firewall and Azure Backups and Azure Georedundancy and we use Azure SAST and Azure pipelines (replace with microsoft marketing lingo as applicable - I don’t care to learn it). Aside from that we’re vendor-agnostic”.

    It’s astonishing how “we can use Azure/AWS but let’s not lock ourselves into proprietary solutions for which FOSS alternatives are readily available” is somehow a controversial statement in some software outfits. Ignoring the sovereignty concerns for a minute, from a business perspective you’re essentially putting all your eggs in one basket and hoping really hard that Microsoft or Amazon don’t pull a Broadcom and bankrupt you one day by hiking prices a few hundred percent.

    It boggles the mind how existentially reliant most of the digital world is on the whims of like, three unchecked billionaires.


  • Very hard disagree. Hearts and minds.

    Dafuq else do you expect a random French opposition member to do? Sit there quietly and look pretty? That seems to be the leading strategy for the US Dems and also an irredeemable dereliction of duty. If you are forced into the opposition, be performative. Be loud. Be ungovernable, if necessary.

    It’s nice to wish for a world where a fascist regime doesn’t have full control of the USA, but unfortunately we don’t live in that world so please don’t denigrate the work of politicians who at least are doing the bare minimum of saying something about it.


  • azertyfun@sh.itjust.workstoTechnology@lemmy.world*Permanently Deleted*
    link
    fedilink
    English
    arrow-up
    0
    arrow-down
    1
    ·
    5 months ago

    Ryan Gosling as Ken, semi-shirtless

    Is this considered porn? I am certainly, along with at least hundreds of millions of people, into shirtless Ryan Gosling. Specifically his pecs and abs.

    Look, I am taking the piss, but not everything that might turn someone on for one reason or another is porn. The AI video of Trump is clearly satire and meant to disgust. What’s next, we can’t make satirical drawings of him grovelling at Putin’s feet because some people have a humiliation fetish?


  • Oh they definitely exist. At a high level the bullshit is driven by malicious greed, but there are also people who are naive and ignorant and hopeful enough to hear that drivel and truly believe in it.

    Like when Microsoft shoves GPT4 into notepad.exe. Obviously a terrible terrible product from a UX/CX perspective. But also, extremely expensive for Microsoft right? They don’t gain anything by stuffing their products with useless annoying features that eat expensive cloud compute like a kid eats candy. That only happens because their management people truly believe, honest to god, that this is a sound business strategy, which would only be the case if they are completely misunderstanding what GPT4 is and could be and actually think that future improvements would be so great that there is a path to mass monetization somehow.