The FBI issued a warning on May 21,
as a new AI-powered attack enables
"threat actors to obtain Microsoft 365 access tokens and bypass multi-factor authentication (MFA) protocols without intercepting the user's credentials.”
Dubbed Kali365, this phishing-as-a-service threat was first discovered last month.
The FBI released its public service announcement “to warn the public"
that these attacks use Microsoft’s authentication infrastructure to steal …
Is the chasm between the billions tech is spending on data centers and its scant AI earnings a bet on a shiny future? Or is it a convenient mask for an even less popular agenda?
I run the numbers https://jonippolito.substack.com/p/what-if-data-centers-arent-really…
Just finished "A Psalm for the Wild-Built" by Becky Chambers. Overall it's good but I also have some Thoughts.
First, it was very pleasant to finally read some non-trite utopian solarpunk after having read stuff like Octavia Butler recently. Both hope and despair can be poisonous on their own IMO, so getting some balance in is nice. It's definitely a very valuable thing to be able to lay out an actually desirable and in many ways imaginable future given our grim present. Chambers is no LeGuin though. I'll probably be reading more of her work and maybe she fleshes out these ideas elsewhere, but at least in this book there is no focus on either how the transition to a better society could happen nor on how the better society holds up in the face of adverse events and inclinations. Compare LeGuin's "The Dispossessed" or N. K. Jemisin's short story "The Ones Who Stay and Fight" and it feels like there's something important missing from Chambers' portrait of a future society. Of course, maybe the point is to make a cozy book, in which case fine, there's certainly a place for such things, and I can look for deeper inspiration elsewhere.
The second big thought I had was that Chambers' worldview seems not well-informed by certain indigenous perspectives, and this creates some contradictions. For example, (minor spoilers) when Dex enters the wilderness there's a whole bit about understanding humankind's place in nature and how human settlements are what we're used to but they're only a brief interruption of the vast untouched wilderness. Along the same lines, much of the world is intentionally left untouched by humans as a way to keep it pristine and natural. Later however, a character makes the point that humans *are* animals. The indigenous perspective that I appreciate would agree with that, and would further question the value in distinguishing between human influence on ecosystems and influences that others have. More sharply, one might observe that there's a bigger difference between how different kinds of humans relate to and influence their environments than between how less-disruptive humans and various animals do the same: the strip-mine-operator vs. migrant tribesperson impact difference is probably much greater than the migrant tribesperson vs. beaver gap, for example. Rather than talking about limiting human disruption, then, as if all human-environment interactions are disruptive and must be minimized, we could/should be talking about how to create human societies that have beneficial relationships with their environments and acknowledging that we actually have many positive examples of that, both historical and contemporary. Chambers' utopia is a "humans dominate nature but restrain themselves so that their disruptions are minimal and thus nature can thrive" vision, but what I'd even more like to see would be a "humans study old ways and make new ones so that they can interact positively with ecosystems again" vision, including some of "here are the places that sometimes breaks down but also the patterns and institutions that ensure repair of those breakdowns and thus long-term sustainability."
Final big thought: Chambers' utopia is too homogenous for my tastes. Of course it's hard enough and valuable work dreaming up and sharing any utopia and Chambers' transcends triteness in a number of ways, so this criticism is a bit rude. But the single shared religion, lack of mention of conflicts around shared decisions, especially historical society-defining ones, and nagging questions like "what about the people indigenous to the now-uninhabited lands?" and "what about the indigenous peoples who weren't part of the factory-building societies?" leave me wishing for more nuance in this direction.
All in all: a good book, and I'm criticizing out of a place of appreciation, not scorn. I've got there sequel out from the library as well and will probably detour to a few other books but get to it pretty soon.
Sadly I don't remember who, but I got this one because of a recommendation on here, so thanks if you're someone who recommended it!
#AmReading #ReadingNow #Bookstodon
« Quand nous tuons des loups ou des renards, nous avons une idée précise des bénéfices que nous en tirerons, mais aucune des bienfaits qui disparaissent avec eux »
https://www.…
from my link log —
If multicast is the answer, what was the question?
https://arxiv.org/abs/2211.09029
saved 2022-11-23 https://dotat.at/:/K9DVS.html…
After nearly 30 years, NASA realized this near-Earth asteroid is actually a comet | Space https://www.space.com/astronomy/comets/after-nearly-30-years-nasa-realized-this-nea…
Syria saw an opportunity when the war with Iran cut off access to one of the world’s most important shipping routes.
With multiple Mediterranean ports and borders with Turkey, Iraq, Jordan and Lebanon, the country offers a desperately needed alternative to the blocked Strait of Hormuz, a strategic waterway that, before the war, was used to transport a hefty share of the global oil supply.
Iraq and Gulf states including the United Arab Emirates have already begun to transport oil an…
AuthProbe: Specification-Driven, Multi-Identity Detection of Broken Object-Level Authorization in Recruitment API
Jay Barach
https://arxiv.org/abs/2607.20574 https://arxiv.org/pdf/2607.20574 https://arxiv.org/html/2607.20574
arXiv:2607.20574v1 Announce Type: new
Abstract: Broken Object-Level Authorization (BOLA), also known as Insecure Direct Object Reference (IDOR), has topped the OWASP API Security ranking since 2019 and is the root cause of some of the largest exposures of applicant data in recruitment technology. The defining feature of this flaw class is that a malicious request is byte-for-byte indistinguishable from a legitimate one, which is precisely why web application firewalls and single identity scanners fail to catch it. We present AuthProbe, an open-source, black-box scanner that detects BOLA and IDOR in HTTP APIs by driving its tests from an OpenAPI specification and by acting under two or more identities that the operator controls. AuthProbe discovers, for each identity, the objects that identity legitimately owns, then attempts to read one identity's objects while authenticated as another and confirms a leak by comparing the response against a ground-truth fetch by the true owner. It also walks predictable identifiers to expose enumeration and reports missing authentication and existence oracles. The tool returns a severity-thresholded exit code and machine-readable reports so that it can gate a continuous integration build. On a synthetic recruitment API in which the McHire failure class is reproduced, AuthProbe detects every planted cross-identity read with no false positives on a hardened counterpart, and its running time grows linearly with the number of objects under test. AuthProbe is released under the Apache 2.0 license with an authorized-use guardrail.
toXiv_bot_toot
When we encounter something that promises enjoyment or discovery, the brain’s reward system becomes active.
One important pathway runs from the ventral tegmental area,
a dopamine-producing region in the midbrain involved in motivation,
to the nucleus accumbens, a structure that helps generate feelings of reward.
Dopamine is often described as a pleasure chemical, but that is too simple.
One of its key roles is helping the brain identify opportunities worth pursu…