Yes, true. It isn’t perfect.

CE marking is a just self a certification

That’s true, but the manufacturer must produce credible testing evidence to quality, so it’s not completely useless.

Just for anyone who collects PC points, you can just install the app, screenshot the part with the bar code and uninstall it. Works fine. I also do this with SaveOn Foods.

which is a huge office politics no no

Sex happens. In all environments.

It blows my mind that anyone cares. Corporations now break laws flagrantly and publicly, and somehow the addition of “affair” to the corporate spying adds gravitas to this situation?

We already know the top players in every field are riddled with industrial espionage. The feigned surprise is weird.

Oh, OK. So an incompetent vuln discory and remediation cycle.

That is still not what air gapped means.

No network interfaces.

How is it airgapped if it has an LTE modem?

One is ultimately responsible for one’s output.

There’s a substantial difference between mitigating for errors by human drivers and accepting a percentage of undesirable behaviour as part of a system run by logic.

We really are living in the post-truth world…

Can’t I call out the hypocrisy?

Sure, but this is politics. All the bad things and the good things are true at the same time. If you try to make a scorecard of the lies and the truths, it will never end.

Are the Americans meddlesome? Yes. Is it terrible that the current administration ended WHO support and overseas medical assistance programs? Also yes.

We cannot have pure discourse, it doesn’t exist.

So if you understand that there was no real pretext for an invasion, why are you comparing these two topics?

Yes, I’m sick of internal affairs having an over-inflated valuation also.

5 gunpowder, 4 sand, and 1 broadcast domain.

Seriously, though, tools like metasploit and python itself are a great place to start if you actually want to get into it.

Sure, that may be true. But I am not an international lawyer, so I can’t really speak to that point.

CVEs should be taken with an approach that the cve does matter, but that adding your own exposure to it is the only way to measure its impact on you.

This is a PXE boot environment vuln, so most of the self-hosting community itself probably doesn’t have this enabled at all. A person who does is likely very aware that PXE is already dangerously easy to misconfigure, especially in the days of remote init methods over https, which can at least be layered with other security solutions.

That is indeed a hot take. The cve involves crafting a PXE packet, so just… Don’t use PXE in your environment.

If you do, you already know of the dangers of signing exploits in boot images, DNS shenanigans, and all that.

I’m not saying this isn’t serious, but it’s not really the end of the world.

No argument here, but that wasn’t my point.

I’m not sure what you’re making here.

Well, the power efficiency being much better is one problem to solve. Also various laws need to make pronouncements on copyright, etc. There is also figuring out what will happen to open weight models, what will become of challenges like deepseek.

Ultimately, ai will remain in some form, or catalyze another kind of technology, but it will certainly change tech landscape the way the printing press did.