My advice for everyone…. If you have to buy a new one …
just never connect it to the internet.
Wait 6 months or 6 days
And then root it till you own it for real.
Just used slopbro and did all 3 in my place. Kept on Ethernet point to point connected to my laptop until I had verified I had everything and every packet explained.
(Shout out slopbro and everyone else!!)
Getting Llm + ghidra to check every and document every binary, etc and make sure startup to a running system is understood, logs are rotated properly.
After this … all 3 will probably run one giant rust binary from startup lol
For anyone that can read this, if you have one connected to your network, change your WiFi password and don’t update your devices or bring them on the internet until you pwn/root them yourself.
From here out … everything only via tailscale and nothing should be able to connect inbound. Setup some firewalls.
Even with a perfect BMI and looking totally fit, you can still be at very serious risk of plaque formation. Like people who have hereditary bad cholesterol issues (if it's bad cholesterol due to eating junk food a lot, typically you won't have a good BMI though).
My uncle had a stroke at 52 years old and stayed paralyzed for 15+ years, until his death. When my doctor learned that, the next day I started taking statins.
BTW I'm totally fit, no beer belly, excellent BMI and I look not a bit but much younger than my age (someone even commented that here on HN a few years when they saw a picture of me when I was 49 years old).
And yet I was seriously at risk of plaques detaching and clogging. Statins are not perfect medication but it is what it is.
My point being: even if you've got what science/doctors considers the best BMI in the world, you could still be at risk.
We need something external that actually checks to see if source code matches built artifacts, and also possibly something Llm based that checks to see if you’re making checked in code vulnerable or directly adding something malicious.
Yeah those exist… the trouble being we need something that doesn’t exist
There needs to be a service that does reproducible builds of opensource projects as they sit and publishes results for people to scrape freely.
To be robust itself against attacks, likely 3-4 services.
But then that needs funding to be sustainable … and companies are incredibly cheap. Especially right now. As such… shrug :(
Maybe something as a skill for LLMs to run that actually checks build reproduction from source for a project and all of its dependencies? But then that’s gonna burn some tokens ….
I do this for personal projects … but at work they’ve started rationing tokens… as such… idk?
You can't hardly use the TVs then. I've seen TVs that don't let you use the HDMI port without it being connected if you have a streaming dongle connected. Hopefully that practice has mostly died off now (Samsung used to do this on some models, iirc), but it's still a risk and only kicks the can down the road a bit.
Yeah those devices also need to be “opened up” as it were. Some of them already have been. Just think about it like fermented whiskey. Leave them alone for a month or two until they run an opensource firmware you control.
A lot of people in opensource projects put their heads in the sand, and didn’t want to deal with all of the stuff coming out of LLM assisted code. This is a much better idea. We were always short of hands to help build things … and shorter still of hands to review things, or to even decide what a competent gate was for a feature.
This is much more useful.
Projects and developers and maintainers using LLM to review all of the code and the original specs for the architecture to make sure it makes sense and to find things that are just flawed or half baked or “now that we have Llm is this really all you can do?”
I’m actually kind of excited to see more Llm structure in a project as a given for things like Linux, Postgres etc, things that make it possible to find problems early … further left. Actually higher standards for what constitutes code that’s pushed for a project.
Also put it in rust ….
reply