• 0 Posts
  • 14 Comments
Joined 3 years ago
cake
Cake day: August 4th, 2023

help-circle
  • Looking through, it seems like for the most part these are very niche and/or require the user to be using SSO or enterprise recovery options and/or try to change and rotate keys or resync often. I think few people using this for personal would be interacting with that attack surface or accepting organizational invites, but it is serious for organizations (probably why they’re trying quickly to address this).

    Honestly I think a server being incognito controlled and undetected in bitwardens fleet while also performing these attacks is, unlikely? Certainly less likely than passwords being stolen from individual site hacks or probably even banks. Like at that point, it would just be easier to do these types of manipulations directly on bank accounts or crypto wallets or email accounts than here, but then again, if you crack a wallet like this you get theoretically all the goodies to those too I suppose, for a possibly short time (assuming the user wasn’t using 2FA that wasn’t email based as well).

    Not to mitigate these issues. They need to fix them, just trying to ascertain how severe and if individual users should have much cause for concern.







  • Yes and no. Cash on hand is just what they have in the bank. Ubisoft isn’t cash flow negative, they have revenue of 2.5 billion USD per year. They lost 160 million dollars in 2025 but made 270 million in 2024. So at their 2025 rate, they can afford to pay all their employees they had in 2025, at their 2025 rates, for nearly 5 years. If they actually have good leadership and release good games that people buy, they’ll make money like in 2024 and be more than fine.




  • I’ll look into this, but at first blush this is just mostly tool calling with RAG. This does not prevent a whole host of issues with AI, and doesn’t really prevent lying. The general premise here is to put tight guard rails on how it can interact with data, and in some cases entirely forcing a function / tool path with macros. I am not really sure this would work any better than just a stateful and traditional search algorithm on your own data sources, and would require much less hardware / battery / requirements and would be much more portable.

    I like the effort, but this feels a bit like trying to make everything look like a nail.


  • Yep. This is why you have to code your language to things that are emotionally evocative to them. To some Christians, it’s using the world evil (“this action is evil”). To others it’s using the word weak (“this makes him look really weak”).

    Edit: and to be clear, it doesn’t actually need to be logical. You can say something like “his makeup makes him look weak” or “I heard that he sings in a falsetto, that’s super weird”. It doesn’t matter (by definition, it doesn’t need to be logical). What matters is repeatedly associating a negative stimulus with the target position you’re trying to dislodge (or positive stimulus for a position you want held, but humans in America and maybe generally tend to be very profoundly negative averse). The reason these people are hear is because this association game has been played very long and very hard. It is the basis of propaganda.