@TankieTanuki@hexbear.net is there a way to upload in bulk? this was a bit hard on my fingers

screens

https://inv.nadeko.net/watch?v=9dO5j9dHHO4

lmfao the vamps name is phyre i jusrt cant

So like, unless youre really digging into wireshark or something over a long time, you really dont know what connections are encrypted or unencrypted coming from your OS. Thats more what I'm referring to. Certain OSes like whonix have safeguards for this, and linux in general is much better about this. Its hypothetically possible a malicious actor could hijack an operation that isnt encrypted coming from your OS to bork you.

And yeah tor browser on its own without JS and high tracking prevention is the way to go if you dont want a big hassle dealing with your OS. I was more referring to TORing all of your computer traffic. Mullvad browser with vpn is fine for the vast majority of people and it doesnt reduce speed a lot like TOR does.

Tor can be very dangerous if you don't compartmentalize it enough and use the wrong software with it. Its pretty well documented that if you request a normal http page (not https) malicious tor nodes are constantly checking for it so they can attempt to serve you bad shit to steal info. You never really know when your computer on say, a windows machine, will make a bad request. So it becomes imperative to use operating systems and technologies that limit that issue. (Re: use tor only on the tor browser, or use qubes+whonix to compartmentalize potential bad requests).

The most secure 'every day' thing someone can do is use almost any linux distro, mullvad browser (or a normal hardened firefox), and a trusted vpn (proton, mullvad, ivpn, out of these three mullvad is probably the best).

the most secure thing possible (re dont do this its ridiculous for 99.9% of people) is probably a sneaky self-made wireguard vpn entry node + tor + qubes/whonix. and by sneaky wireguard vpn i mean doing stuff and things in order to not pay for an ISP with your vpn server. that means you have pivpn or something setup on a hidden raspberry pi on a network you probably dont have permission to run vpns on.

lmao the company running this, Hi Auto, is also an israeli firm

from what i can tell they hook into google voice's api and then hook the output into an llm to respond. the order is put into their system through RAG. this is like, script kiddie shit but they have a company of 50 people doing it (with 12 actual programmers). they also advertise 90% accuracy of the order which is fucking abysmal, any legit data scientist would be ashamed of such a low rate. it should be noted that accuracy is usually measured per token, so imagine it getting 10% of your syllables wrong in your order, which can end up with an order that is very wrong and could trigger the wrong RAG (ordering something you dont want). some of this is likely due to issues with audio quality from shit ass drive thru mics, loud motors, and bad noise cancelling. you can get a much higher accuracy spooling up a random local speech+llm model at home while picking your nose

last time i used those it didnt circumvent cloudflare blocking properly so guess they have some secret sauce here not sure

Krolden is taking issue that they can see the vpn traffic at all, as in they can see that youre using a vpn (re: ISP knows who you are) and can sell that info to third parties who will now use your identity associated with that IP address (because ISP sold them info that the VPN connection came from you)

theres ways around this of course and its actually somewhat easy to measure how big your fingerprint is. most sites of course wont have access to this paid info so reducing fingerprint is only useful to hide from google or cloudflare, and even then they wont know specifically what data you have, just what IPs you accessed. also since so many people use the same VPN it makes it very difficult to track you, you need to have a large fingerprint which can be mitigated by using linux (or with piracy, having a separate server that doesnt fuck with anything but torrents and so on)

ISPs can also tell if youre using i2p or tor so ultimately its just a masturbatory argument, of course nothing is perfect, we all know that the only way to be truly secure is to steal internet from someone else without them knowing who you are, and you also need to be sure they dont have cameras and you have a sophisticated setup with qubes + vpn + (maybe) tor depending on what you want to do. this is of course an absurd amount of security for looking at pig poop memes on hexbear

And now we're getting back to the original point of this new secret protocol, it hides that its vpn traffic, at least to current systems. I've been able to visit sites that normally block me or limit me. From what I can tell it reduces speed by half or so but if your speed is already good its usable, whereas something like TOR drops it all to a crawl, like 300kb/s if youre lucky. Dial up shit. This new protocol implementation good for daily driver obfuscation

as to 2 i do use wireguard and so on on occasion but its not really a good way to obfuscate who you are to some random website or bypass a firewall (unless you own a server in china or something)

ive heard of i2p but afaik it has similar issues with slowness as tor, hosting your own exit relay from that list of isps is still going to result in excessive latency

If you read about how it was chosen it was elected by a community poll and they mentioned they didnt really verify anything. Yeah, ridiculous thing to do, but possible for a lib that doesnt know what bellingcat is, and they later apologized take it as you want, theyre obviously libs and the other alternatives arent any better, and are probably worse

you could always host your own mail of course but that has its own issues too, you obviously cant host your own vpn so the only option is tor which can be very messy to use regularly

Are there any other decent alternatives for mail that arent just 'store in plaintext on our server'. Of course it will never be perfect but my biggest concern is always weird sysadmins and ransoms, theyre always the most likely threat to an average person

edit: I also feel like proton is fairly 'normie' and most people wont flinch at the email address

Yeah I edited to say that, if you are an edward snowden or something you really need to just not have any computers and sneak into libraries with a usb with qubes on it or something if its absolutely necessary to get on the internet

Theres a lot of reasons to use a vpn that arent just privacy related anyways, like I vpn into chinese servers to get around the firewall (it blocks outside requests or shows different results to westerners) so I can read specific chinese news articles. Proton is probably the most secure choice for that (vpn into hong kong seems to do this fine). Tor traffic seems to not yet be fully obfuscated a lot of sites block it its also slow as fuck

Fundamentally one company gets all your information whereas before it was all companies get all your info, its also been audited and shown to only store your ID in a visible way so

Of course if you're using an OS or browser that has a ton of telemetry that can be used to track you, I'm personally not a privacy absolutist, I'm more concerned about weird sysadmins stealing nudes and knowing my IP or something than a nation state cracking down on me (which they can do anyways)

yeah same

generally tho you want to max your class's main stat

they are expensive to run and they dont release the full game anymore, 5 years from release date you can have a good experience if you pay for 200 dollars worth of dlc

i guess theres an argument that the corporation provided tech doesnt actually want you to maintain your identity and would prefer to make you a complacent and productive little piggy, so lowering empathy would be good. though that should really only be for central nervous system tech, not any tech

regardless, yeah, the people i know with missing parts and surgical implants are some of the nicest people youll ever meet

Sure, there might be moderately-beneficial use-cases, maybe; but it doesn't change the fact that there's no such thing as an ethically-trained model, and there's still no such thing as a model that wasn't created based on rampant theft by capitalists, so I consider anything that comes of it fruit of the poison tree.

I mean thats just the case with everything really. Theres a lot of very good use cases that are mostly to do with data manipulation, but the coolest ones are translating. I think we're approaching a point where small models are providing very accurate translations and are even translating tone and intent properly, which is far superior to simple dictionary translation methods. I think its very possible that new phones could be outfitted with tensor cores and you could have a real-time universal translator in your hand, though it'll likely only add 'subtitles' irl for you. AI voice-word recognition has also been very good and can be miniaturized. This is the use case I'm most excited for, personally, as a communist. Currently translating in a foreign country requires a lot of typing (if you dont have a perfect grasp of language) and it removes a very human element I feel to conversation. If everyone could locally run a subtitle-translation generation app it'd be amazing for all of humanity.

Theres of course plenty of manufacturing use cases as well, but China is spearheading on that, though there is some work being done in the US as well in the few industries that remain.

Synthetic data is basically a fancy way of saying 'I'm properly formatting data and reinforcing the ai's good outputs'. Rearranging words, fixing / adding tags, that sort of thing. This is generated with various tools that usually have an LLM or VLM plugged in, though some are as simple as a regex script.