I am the journeyer from the valley of the dead Sega consoles. With the blessings of Sega Saturn, the gaming system of destruction, I am the Scout of Silence… Sailor Saturn.

  • 0 Posts
  • 102 Comments
Joined 2 years ago
cake
Cake day: June 29th, 2023

  • SEOs match quality websites to those users trying to find them. As much as Google and Bing like to pretend that they’re perfect there are very real indexing issues that crop up and need experts to debug, mitigate, and prevent; so in a very real way the SEOs do make the web better for users.

    [comment continues below the ad]

    For example let’s say there was a user who wanted to read a website full of LLM written articles and ads but they keep stumbling across low quality websites with poor SEO practices like Wikipedia instead, why that would be terrible. In order to prevent this terrible possiblity it is the noble duty of SEOs to buy well respected high ranking domain names so that users get a brand they can trust. Like Forbes. Or Radioshack.

    [comment continues below the ad]

    Sincerely, the myseonews.now “staff”.



  • An update to my post about facebook from yesterday; turns out it’s much worse:

    https://transparency.meta.com/policies/community-standards/hateful-conduct/

    [Do not post} Insults, including those about […] Mental characteristics, including but not limited to allegations of stupidity, intellectual capacity, and mental illness, and unsupported comparisons between PC groups on the basis of inherent intellectual capacity. We do allow allegations of mental illness or abnormality when based on gender or sexual orientation, given political and religious discourse about transgenderism and homosexuality and common non-serious usage of words like “weird.”

    Like many here on awful.systems I have a pretty thick skin, but reading the above put me in a really weird mood all day. I couldn’t really concentrate on work. It’s hard to believe that they published this with a straight face, and harder to believe that the media isn’t dunking on them for it.

    On the bright side the policy technically lets you go around calling people insane for being straight or cisgender* if anyone is still on there and wants to get banned from that platform in a blaze of glory.

    * or indeed simply having a gender and I’m not sure fascists know how to use words right.






  • I’d be surprised if Eliezer hasn’t mentioned it at some point, maybe more in the way that you’re after. Can’t find any examples though.

    In his Times article the only place he mentions nukes is what we should do to countries that have too many GPUs: https://time.com/6266923/ai-eliezer-yudkowsky-open-letter-not-enough/

    Edit: Not Mr. Yudkowski but see https://futureoflife.org/document/policymaking-in-the-pause/

    “The time for saying that this is just pure research has long since passed. […] It’s in no country’s interest for any country to develop and release AI systems we cannot control. Insisting on sensible precautions is not anti-industry. Chernobyl destroyed lives, but it also decimated the global nuclear industry. I’m an AI researcher. I do not want my field of research destroyed. Humanity has much to gain from AI, but also everything to lose.”

    “Let’s slow down. Let’s make sure that we develop better guardrails, let’s make sure that we discuss these questions internationally just like we’ve done for nuclear power and nuclear weapons. Let’s make sure we better understand these very large systems, that we improve on their robustness and the process by which we can audit them and verify that they are safe for the public.”



  • “we’re cancelling the annual base salary increase”

    Subject: Looking back on an amazing year

    Body: Fellow Microsofties, at this time of year I like to look back on the accomplishments and challenges of the past year in a moment of quiet contemplation. A year ago I couldn’t have imagined that we could have launched copilot+ for enterprise dogs in one short year. I am tremendously proud of the work our company has done. This sort of nimbleness. This hunger for excellence is what makes me excited for the future of Microsoft.

    The other week in my office with my adopted labradoodle [insert picture of spacious meticulously cleaned office filled with many unread books here]. I remembered one summer hining the Alps when someone shared their water with me. This comes to me when I consider the holiday season because I think it embodies all of Microsoft’s values. To do our best at Microsoft I realized it’s best to ocassionally step back from work so as to return all the more refreshed. To pay it forward I decided to volunteer handing out boxed lunches to adorable hungry orphans.

    Likewise I would encourage all our valued Microsoft employees to also embody the spirit of the company values. Build bridges with your community. Do good work, but have fun. This spirit of humbleness is all the more important in the tough economic times of the covid-19 pandemic. As you know we are raking in money hand over fist, but we’re doing so slightly less efficiency than in past quarters. Because of this Microsoft had to reevaluate some of the discretionary compensation for a fraction of our employees in the upcoming year. I know that we as a company will do great work and I look forward to another amazing year in 2025, when our focus will be on Cloud AI integrations for customer-centric AI sidebar panels across our many products.

    And above all remember, have fun while cherishing your community!



  • Above I listed a bunch of things which would help narrow down browser version, but that’s hopeless anyway – an adversary will probably be able to figure out your rough browser version even if you fake the UA string, and that you’re running in anti-fingerprinting mode.

    So assuming that’s out of scope I think these are probably the big categories:

    • Canvas, WebGL, and WebGPU need to be implemented in software in a deterministic way. Similarly any compositing (including stuff like font shaping, SVG rendering, page layout) must be done in software (prevent GPU fingerprinting)
    • A fixed font set must be used rather than using the system font set (prevent fingerprinting font enthusiasts)
    • The device size / frame size (and position) must be lied about (e.g. rounded to a common resolution or a multiple of 100px), and layout adjusted appropriately (Mozilla calls this “Letterboxing”) (prevent fingerprinting psychos who don’t run their browser in fullscreen mode).
    • Page storage should be disabled or cleared (local / session storage, cookies, service workers, indexeddb, etc) (A cookie by any other name would taste as sweet)
    • Caching is a big problem, probably have to disable it entirely (including DNS lookups, favicons, JavaScript compilation cache) (Pesky pesky global state).
    • Performance metrics are another big problem. Disabling JavaScript would go a long way here but you probably can’t prevent them entirely unless you’re prepared to go to unhealthy extremes* (this is like the past 10 years of cutting edge security research so we’re doomed)
    • Disable any plugins or other customizations which may provide a fingerprint accessible to the webpage (oops it turned out the FBI caught me because I configured my browser to inject pictures of cute bunnies into every webpage).
    • And of course IP address, which you presumably want to do something about (proxy?)

    That said while I’ve worked with browsers, I’m not in the biz of fingerprinting or anti-fingerprinting, so there’s surely stuff I haven’t thought of.

    * Running under a VM is probably the minimum required to mitigate the chances of cutting-edge side-channel timing attacks from James Bond level adversaries, but at that point maybe you just want a dedicated browsing computer heh. I did chuckle at the idea of someone trying to apply cryptographic constant-time algorithm techniques to writing a browser though.



  • Also I’m having a fun time imagining an accurate device fingerprinting disclosure from someone who was really really thorough.

    Not-A-Cookie-I-Swear Technologies LTD may collect the following information:

    Don't worry none of it is a cookie :D
    • Your User-Agent
    • Your browsers language / locale
    • The state of the service-worker associated with Not-A-Cookie-I-Swear Technologies LTD’s website
    • Whether your “mouse” movements look more like a mouse, trackpoint, gamepad, joystick or touchscreen according to our heuristics
    • The current JavaScript time
    • Whether your browser prefers dark mode or not
    • Whether your browser reports itself as screen or print media
    • The device size, device pixel ratio, frame size, and frame position reported by your browser
    • Your browser’s HTTP request headers
    • The success or failure of fetching a URL included in the Easylist ad-block list
    • Whether or not an element associated with the Easylist element hiding list was hidden or not
    • Your IP address
    • The result of tracerouting your IP address from one of our servers
    • Browser Local and/or Session Storage
    • The state of the WebSQL and/or IndexedDB database for our website
    • The state of the OPFS filesystem store associated with our website
    • Whether or not there was an HTTP cache hit for our website
    • Whether or not there was a DNS entry cached for our website
    • A hash of the pixels in a WebGL and/or WebGPU scene
    • The browser’s default styling
    • The browser’s minimum font size
    • The browser’s default font family
    • The font file chosen for a variety of character (or ligature) and font-family combinations
    • A hash of the pixels of a canvas with a variety of font families and shapes written into it
    • A report on the presence or absence of various browser CVEs in your browser
    • Information about any other open tabs that happen to include technologies from Not-A-Cookie-I-Swear Technologies LTD
    • What video, audio, and/or image codecs are supported by your browser
    • Whether or not your browser enables video auto play (and whether or not it’s muted by default)
    • Whether your browser supports MathGL or not
    • Whether your browser recognizes any origin trials that Not-A-Cookie-I-Swear Technologies LTD happens to have opted into at any given time
    • The behavior of your browser against various web standards edge cases or the presence or absense of features in draft web standards (e.g. Web Platform Tests or Can-I-Use tests)
    • Whether or not your browser supports Widevine video DRM
    • Various browser performance characteristics
    • All key press events
    • Various form auto-fill data (if triggered)
    • Any mouse down, mouse move, or mouse up events
    • A rough geolocation calculated by examining the relative latency of fetches to a number of geographically distributed web servers
    • The presence or absence of various browser plugins developed by, purchased by, or affilated with Not-A-Cookie-I-Swear Technlogies LTD (and any data therein as agreed to by the extension permissions dialog – up to and including microphone, webcam, or full page DOM)

    Some stuff in this list is me being silly, but overall it shows that the talk about “privacy-enhancing technologies” is premature on the web platform. The web has been trying to have better privacy defaults over time; but there’s a long legacy of features from before this was considered as much, as well as Google tossing around their weight in the web standards and browser space.


  • The Google post appears to be Updating our platform policies to reflect innovations in the ads ecosystem.

    I have no idea what the heck those words mean (it appears to be some bizarro form of English), so I diffed the policy itself. Here are the parts I found notable.

    This will be removed:

    You must not use device fingerprints or locally shared objects (e.g., Flash cookies, Browser Helper Objects, HTML5 local storage) other than HTTP cookies, or user-resettable mobile device identifiers designed for use in advertising, in connection with Google’s platform products. This does not limit the use of IP address for the detection of fraud.

    This will be removed:

    You must not pass any information to Google […] that permanently identifies a particular device (such as a mobile phone’s unique device identifier if such an identifier cannot be reset).

    This will be added:

    You must disclose clearly any data collection, sharing and usage that takes place in connection with your use of Google products, including information about the technologies used, such as your use of cookies, web beacons, IP addresses, or other identifiers. This applies for data collection, sharing and usage on any platform, surface or property (e.g., web, app, Connected TV, gaming console or email publication).






  • Open Phil generally seems to be avoiding funding anything that might have unacceptable reputational costs for Dustin Moskovitz

    “reputational cost” eh? Let’s see Mr. Moskovitz’s reasoning in his own words:

    Spoiler - It's not just about PR risk

    But I do want agency over our grants. As much as the whole debate has been framed (by everyone else) as reputation risk, I care about where I believe my responsibility lies, and where the money comes from has mattered. I don’t want to wake up anymore to somebody I personally loathe getting platformed only to discover I paid for the platform. That fact matters to me.

    I cannot control what the EA community chooses for itself norm-wise, but I can control whether I fuel it.

    I’ve long taken for granted that I am not going to live in integrity with your values and the actions you think are best for the world. I’m only trying to get back into integrity with my own.

    If you look at my comments here and in my post, I’ve elaborated on other issues quite a few times and people keep ignoring those comments and projecting “PR risk” on to everything. I feel incapable of being heard correctly at this point, so I guess it was a mistake to speak up at all and I’m going to stop now. [Sorry I got frustrated; everyone is trying their best to do the most good here] I would appreciate if people did not paraphrase me from these comments and instead used actual quotes.

    again, beyond “reputational risks”, which narrows the mind too much on what is going on here

    “PR risk” is an unnecessarily narrow mental frame for why we’re focusing.

    I guess “we’re too racist and weird for even a Facebook exec” doesn’t have quite the same ring to it though.