Can it even be called FOSS if nobody owns the copyright?

This article is devoid of information. Go to the source: https://www.etsi.org/deliver/etsi_tr/104100_104199/104171/01.01.01_60/tr_104171v010101p.pdf

This is basically the snippet of the source that they’re writing the article about:

AI attacks against QRNGs are a form of side-channel attack or predictive analysis. They do not try to break the
quantum laws of physics but rather exploit the flow of information between the quantum source and the final output.

Exploiting Classical Noise: Every QRNG system has classical hardware components, like sensors, power supplies, and
signal processors. These components introduce small amounts of classical noise, which may be predictable in some
cases. If these untrusted noise sources have not been included in the QRNG’s physical model (see Definition 3), an
attacker with a sophisticated AI model may be able to analyse the output of the QRNG and, over time, learn to identify
the predictable patterns caused by it. Then, once the distribution of the classical noise is known, the attacker can now
slightly improve its ability to predict the QRNG’s outcome, thereby compromising the security of the generated random
numbers. Even for an advanced AI, this can be a fairly difficult and time-consuming procedure.

Side-Channel Attacks: These involve an attacker monitoring side channels of the device, such as power consumption,
electromagnetic radiation, etc. AI can analyse extremely large amounts of data fairly quickly and potentially find
correlations between these side-channel signals and the output of the QRNG. This allows an attacker to gain
information about the output without directly attacking the quantum source. For example, a QRNG might show a subtle,
non-random power spike when it generates a specific type of number, a pattern that an AI could learn and exploit. This
is not unique to QRNG attacks and may be applied in a similar manner to other types of random number generators as
well.

To counter these threats, developers of QRNGs are focusing on a few key strategies:
• Robustness against Classical Noise: By improving the hardware design and shielding of QRNG devices,
manufacturers can minimize the impact of classical noise.
• Advanced Randomness Extraction: Researchers are developing more sophisticated and verifiable
randomness extraction algorithms.
• Continuous Monitoring: As previously discussed in clause 5.1.4.3, continuous monitoring systems that
constantly check the QRNG’s output for even the slightest biases or correlations may allow for real-time
adjustments or alerts.

It’s nothing new. Just reiterating that implementation details matter in crypto systems.

Yeah I mean to you it might be pretty simple lego :) but I’m sure lots of people would benefit from it. Even if not to use the same exact setup then to provide an example or starting point for DIY.

Are you planning on sharing the source?

I’ve only recently adopted AI, and only sparingly, mainly for debugging, tests and help with documentation.

I wonder who came up with the name and the logo 🤣

Varonis found that an attacker who has already compromised a highly privileged Entra account can register a rogue External Authentication Method (EAM) as one of these external MFA providers and use it to insert a convincing Microsoft password prompt into the legitimate authentication flow.

The fake prompt captures the user’s password in plaintext before the malicious provider returns a valid signed token to Entra, causing the login to complete without displaying an error.

Yeah obviously if the account that configures the EAM is compromised then all bets are off. This isn’t exactly an attack is it, it’s just an observation about the trust model.

Those actions require a Global Administrator or Authentication Policy Administrator account, making TrustSink a post-compromise technique.

“If you’ve already been compromised then you’re fucked” isn’t the kind of research that deserves its own catchy name and blog post article. Is this what passes for security research these days?

Hacking a PBX is seriously old-school.

Mandiant says an attacker hijacked an active AI coding-assistant session at an unnamed software-as-a-service provider and later spread Shai-Hulud across about 100 internal code repositories.

Before the repository spread, the assistant recommended software that the attacker had poisoned, and the recommendation was accepted. The worm stole repository secrets and source code for the company’s products.

lmao no, no. An attacker didn’t hijack an active AI coding-assistant session. The AI coding-assistant hallucinated a library name and the sloperator didn’t do any verification of its output so they pulled in the slop-squatted malicious code and got owned.

Framing the incident this way is a clear attempt to avoid accountability; “We got attacked!” No, you played yourself by running arbitrary code suggested by a random word generator.

Have you tried both ping4 and ping6 to isolate whether it is ipv4 or ipv6 or both that’s filtering icmp? Also, can you ping other hosts from your server (ie. does the echo-reply get dropped at the input?)

You could also add logging when a packet is rejected so you can see it in your syslog. Put this at the end of your input chain:

log level warn prefix "Input Packet Dropped: "  

I’m not looking for an elitist lecture. I genuinely want to know the community’s thoughts.

What if the community’s thoughts are an elitist lecture? I don’t know what qualifies as that, but it makes the question a bit loaded. I’m not sure it’s the best way to get a balanced set of answers.

Anthropic confesses to fourth crime. When is someone going to be charged?

With the build up of fediverse, Meta, flock, Alphabet and now LG tv’s now spying on us in our own homes

I’m just curious if anyone else that is pulling away from the fediverse is also thinking about learning the Ham radio Trade also?

What’s going on with the Fediverse that makes you put it in a list with these companies?

Is this concern trolling?

“Joined 8 hours ago” seems like a strange move for someone who is “pulling away from the fediverse.”

Thanks for the link.

Personally for me, the spirit of self-hosting is incompatible with using Cloudflare and Synology services, but I understand that less technical users may prefer commercial services.

That’s another good one. There are so many parts of that book that are directly relevant today. It boggles my mind that people in general are not furious about what is happening.

The party told you to reject the evidence of your eyes and ears. It was their final, most essential command. His heart sank as he thought of the enormous power arrayed against him, the ease with which any Party intellectual would overthrow him in debate, the subtle arguments which he would not be able to understand, much less answer. And yet he was in the right! They were wrong and he was right. The obvious, the silly, and the true had got to be defended. Truisms are true, hold on to that! The solid world exists, its laws do not change. Stones are hard, water is wet, objects unsupported fall towards the earth’s centre. With the feeling that he was speaking to O’Brien, and also that he was setting forth an important axiom, he wrote:

Freedom is the freedom to say that two plus two make four. If that is granted, all else follows.

- 1984, George Orwell

We would do better at recognising the tools of fascism if more people engaged with the literature of our culture. It’s there right under our noses.

OP, are you the OP of the reddit post?

If you use cloud services to do this (which is better than having a honeypot in your home network) make sure to set spending limits in your account!

Yes I wouldn’t want anyone to think that my comment is praising their authoritarianism, surveillance panopticon, cultural genocide of ethnic minorities, extra-national police stations, hacking of critical infrastructure etc.

Just that when you’re competing against late stage capitalism, the bar for success is set very low.

Making their own DRAM, GPUs and CPUs. Making their own EUV lithography machines. Leading the world in solar panel manufacture and deployment. Competing with the western EV market, in the west. Owning a part of just about every supply chain in manufacturing of just about every product.

It’s easy to think that this is a deliberate strategy to undermine the US and the western hemisphere and position themselves to be the next world superpower, but it could also be explained just by the slow and continual collapse of capitalism causing everyone else to fall behind.