• 1 Post
  • 293 Comments
Joined 2 years ago
cake
Cake day: June 23rd, 2023

help-circle

  • Yeeeaahh… At my org our default security policy for all of our site collections prevents sharing outside of our domain, and requires managed devices to access our SharePoint.
    To share things outside of our org via SharePoint, a site collection with a different security policy has to be created, and only admins can control the sharing. We can only share with people who have some sort of identity service that can federate with ours.
    No user is granted above contribute access, and sharing is turned off. (People can share links, but they cannot change the permissions of an item to share it.).
    Theoretically it’s possible that a SharePoint can be created that allows public access, but to my knowledge we do not do that.

    OneDrive files cannot even be downloaded by external parties (although they can be viewed in the browser!), and Teams workspaces are also not accessible externally unless by special circumstance.

    I would imagine the federal government is… well, hopefully at least as locked down as my work.


  • You don’t accidentally publish the list.

    At very large organizations, sharing files easily is a pain in the ass. The available tools are usually tied to your Active Directory, which means you have to know who you’re sharing with, or at least have some idea of what permission groups allow what access.

    To share documents appropriately, you still have to do the hard work of finding out who and what permission groups you should be sharing with, even if that means coordinating with other IT teams to make sure you understand their permissions structures properly.

    Or you half-ass it, and put the document somewhere public and hope the link doesn’t get shared beyond your control (or found).

    I guess I’m saying it’s not intimidation, accident, or resistance — just laziness and stupidity. Both of which are not unfamiliar ground for this administration.






  • When I was younger my grandmother died of cancer. She wanted to pass at home and we lived with her.

    For months she just declined, until she was bed-bound in the living room, having carers and family members feed her, clean her after she pooped on herself, sometimes randomly screaming in pain, having nightmares, and was largely incoherent. In the last week she didn’t have the strength to eat and her doctors told us to just stop feeding her. She had a death rattle that lasted for days and echoed through the house every time she breathed, until finally something just gave out.
    It was not dignified. It was not peaceful. It was deeply traumatizing. I wish we could cut her suffering short somehow – for us as much as her.



  • The sources for this video indicate the person wearing the armband:

    • Harassed a black man on a bus.
    • Walked around downtown Seattle for an hour dressed that way.
    • Had several verbal confrontations with passerby who commented on his clothing.
      Source 1

    • Several 911 calls were placed about this man attempting to instigate fights.
    • The man declined to file a police report after the police did appear.
      Source 2

    For at least an hour at any point leading up to this, the person wearing the armband could have taken it off and stopped interacting with others. To my knowledge, the person who was punched has never spoken to media to explain why they were dressed as such, despite the massive internet fame of the video.

    Do you still feel uncomfortable? Do you know in your bones if the person deserved it?



  • I was going to ask “What’s your point?” but then I realized that this post isn’t even anti-AI.

    The text of this post highlights anticompetitive business practices that have nothing to do with OpenAI’s business model.
    Straight up - they can’t even use the silicon wafers.

    This is just market manipulation to harm their competition and possibly engage in stock market fuckery. (Micron, which stands to make billions, is largely owned by U.S. based wealth management companies.)

    OpenAI and its business partners stand atop a massive bubble that they are desperate to not have pop. I’m horrified, but kind of impressed at the maneuver.

    You’re throwing stones in the wrong direction.



  • Everybody hates the government, but that take is not applicable.

    Reading the incident report -
    A privileged user got spearphished into downloading a compromised system administration tool. After the compromised tool was detected by industry standard (and modern) intrusion detection software and removed, the backdoor it installed, which was not fixed, was (eventually) used to install a keylogger. Shortly thereafter, another privileged user had a keylogger installed. Afterward, the harvested credentials were used to create further compromises in their network and to move laterally throughout it.

    The age of the equipment or software is not a factor when your admin accounts get compromised. The user that got compromised should have known better, but they literally failed one thing - double checking the veracity of the download website. They didn’t surrender credentials, or fall for any direct attack. It’s not really a government bad, private industry good sort of thing. Heck, if that had happened to a non-admin user, the attack wouldn’t have been possible.


  • The why is sort of at the limits of my knowledge. I can tell you a ‘close enough’ what, though.

    By default, Windows tries to install programs to the program files directory, but that requires admin, which triggers user account control. However, apps that do not require admin to install or run can still be installed to the users profile. Clicking cancel from a UAC prompt will just try to install the program locally instead of for all users.

    My assumption is that many system administrators believed UAC was enough, or that programs installing locally (as in, just for that user) and not requiring admin were not a big deal.



  • This is so pathetic and stupid.

    This isn’t aimed at Russia or China, whom the article calls out by name.
    This is a dick measuring contest with Iran and North Korea.

    I mean - he made the announcement in South Korea.

    Diplomatically, Trump (well, his administration) has stated to learn that befriending and allowing tinpot dictators to humiliate the U.S. is non-viable. So they’ve moved to cold-war era tactics of arms races and implied threats of nuclear holocaust.
    They, of course, are focusing on smaller nations that while powerful in their own right, aren’t actual threats to the U.S. global hegemony. Not that I support continued U.S. dominance on the world stage, but it’s a weird priority.
    Maybe by the end of the admin, they’ll be caught up to Clinton, who realized the best way to apply pressure was economically and via international partnerships — assuming the U.S. has an economy and international partnerships to leverage by then.


  • The social contract is that we do not tolerate intolerance. If someone is intolerant or they tolerate intolerance, they are violating the social contract.

    If she’s calling for tolerance of his views (she is), or is clear that she’s tolerant of his views (again, she is), then she’s breaking the social contract.

    As his wife, she would know his medical history, and would know if he underwent a personality shift. As a politician, she’s expected to represent all of her constituents and have sound judgement, especially in matters of conflicts of interest.
    There’s no more story to know or no mitigating factors. Throw the baby out with the bathwater on this one.