• 0 Posts
  • 29 Comments
Joined 6 days ago
cake
Cake day: September 14th, 2025

help-circle
  • I’d also bet against the CMOS battery, if the pre-reboot logs were off by 10 days.

    The CMOS battery is used to maintain the clock when the PC is powered off. But he has a discrepancy between current time and pre-reboot logs. He shouldn’t see that if the clock only got messed up during the power loss.

    I’d think that the time was off by 10 days prior to power loss.

    I don’t know why it’d be off by 10 days. I don’t know uptime of the system, but that seems like an implausible amount of drift for a PC RTC, from what I see online as lilely RTC drift.

    It might be that somehow, the system was set up to use some other time source, and that was off.

    It looks like chrony is using the Debian NTP pool at boot, though, and I donpt know why it’d change.

    Can DHCP serve an NTP server, maybe?

    kagis

    This says that it can, and at least when the comment was written, 12 years ago, Linux used it.

    https://superuser.com/questions/656695/which-clients-accept-dhcp-option-42-to-configure-their-ntp-servers

    The ISC DHCP client (which is used in almost any Linux distribution) and its variants accept the NTP field. There isn’t another well known/universal client that accepts this value.

    If I have to guess about why OSX nor Windows supports this option, I would say is due the various flaws that the base DHCP protocol has, like no Authentification Method, since mal intentioned DHCP servers could change your systems clocks, etc. Also, there aren’t lots of DHCP clients out there (I only know Windows and ISC-based clients), so that leave little (or no) options where to pick.

    Maybe OS X allows you to install another DHCP client, Windows isn’t so easy, but you could be sure that Linux does.

    My Debian trixie system has the ISC DHCP client installed in 2025, so might still be a factor. Maybe a consumer broadband router on your network was configured to tell the Proxmox box to use it as a NTP server or something? I mean, bit of a long shot, but nothing else that would change the NTP time source immediately comes to mind, unless you changed NTP config and didn’t restart chrony, and the power loss did it.





  • The relentless pursuit of profit and growth ruins absolutely everything it touches. Capitalist rot.

    The factor driving age verification has been laws passed by countries. It’s not private industry forcing it, but government. That comes from people complaining to their legislators that they are unhappy that their kids can see <random thing that they object to> online.

    If you want a communist system, fine. But there are far too many users on here who, when faced with virtually anything they don’t like, immediately post a screed complaining about ownership of private industry, when it often has absolutely nothing to do with the actual issue at hand.

    EDIT: I’d also add that there are actual solutions if you object to something like this. You can pass a law against biometric-based age validation, which I can certainly understand — that form could be prohibited. You could have some alternative form of age-based validation to be instituted to create a path of least resistance for services, like having government provide and fund a zero-knowledge service to confirm various facts to services like age. In countries which have constitutional law and a higher bar to modify it than lower law, you could pass a constitutional law against any form of age validation (“ageism has no place in our country”) to prevent legislators from easily passing things like age verification laws, which I personally don’t think will fly politically in most places, but it’s at least one theoretical option.




  • I’m still grouchy about a sandwich place that I liked that recently changed ownership putting in kiosks that apparently do facial recognition, as once I walked up, they suggested items that I’d purchased last time. That started me looking, and I’ve been noticing that a lot of the ordering kiosks that places have been installing around where I am have cameras (though none have been actively making suggestions). I can only imagine that that gets hooked into the tracking and advertising system at some point too, though.

    Between increasing use of facial recognition and ALPRs, it’s going to be increasingly difficult to avoid targeted ads. I don’t have a fix for that. I mean, it’s illegal to block use of ALPRs. A lot of places also have anti-masking laws, though I suspect that in practice, they aren’t enforced much, and someone could theoretically put something on their face. I don’t especially want to run around wearing stuff on my face, though.



  • They do have a screen and Internet connectivity, but I don’t think that ATMs are actually a great route (unless they force people to stop and wait to get their money, which I don’t think will fly and will cut into capacity). There isn’t much eyeball time on them. The reason a car or a refrigerator works is because you’re likely to be around it a lot.

    I will say that the rise of gas pumps at gas stations that play back advertisements is pretty obnoxious, though.





  • After all, enterprise clients soon realized that the output of most AI systems was too unreliable and too frequently incorrect to be counted on for jobs that demand accuracy. But creative work was another story.

    I think that the current crop of systems is often good enough for a header illustration in a journal or something, but there are also a lot of things that it just can’t reasonably do well. Maintaining character cohesion across multiple images, for example, and different perspectives — try doing a graphic novel with diffusion models trained on 2D images, and it just doesn’t work. The whole system would need to have a 3D model of the world, be able to do computer vision to get from 2D images to 3D, and have a knowledge of 3D stuff rather than 2D stuff. That’s something that humans, with a much deeper understanding of the world, find far easier.

    Diffusion models have their own strong points where they’re a lot better than humans, like easily mimicking a artist’s style. I expect that as people bang away on things, it’ll become increasingly-visible what the low-hanging fruit is, and what is far harder.


  • Well…

    From an evolutionary standpoint, we’re basically the same collection of mostly-hairless primates that, 20,000 years ago, hadn’t yet figured out agriculture and were roaming the land in small groups of maybe 100 or so at most, living off it as best we could.

    From that standpoint, I think that we’ve done pretty well with a brain that evolved to deal with a rather different environment and is having to navigate a terribly-confusing, rather different situation.

    I mean, you see any other critters that have been outperforming us on improving their understanding of the world?


  • At least some of this is due to the fact that we have really appallingly-bad authentication methods in a lot of places.

    • The guy was called via phone. Phones display Caller ID information. This cannot be trusted; there are ways to spoof it, like via VoIP systems. I suspect that the typical person out there — understandably — does not expect this to be the case.

    • The fallback, at least for people who you personally know, has been to see whether you recognize someone’s voice. But we’ve got substantially-improving voice cloning these days, and now that’s getting used. And now we’ve got video cloning to worry about too.

    • The guy got a spoofed email. Email was not designed to be trusted. I’m not sure how many people random people out there are aware of that. He probably was — he was complaining that Google didn’t avoid spoofing of internal email addresses, which might be a good idea, but certainly is not something that I would simply expect and rest everything else on. You can use X.509-based authentication (but that’s not normally deployed outside organizations) or PGP (which is not used much). I don’t believe that any of the institutions that communicate with me do so.

    • Using something like Google’s SSO stuff to authenticate to everything might be one way to help avoid having people use the same password all over, but has its own problems, as this illustrates.

    • Ditto for browser-based keychains. Kind of a target when someone does break into a computer.

    • Credentials stored on personal computers — GPG keys, SSH keys, email account passwords used by email clients, etc — are also kind of obvious targets.

    • Phone numbers are often used as a fallback way to validate someone’s identity. But there are attacks against that.

    • Email accounts are often used as an “ultimate back door” to everything, for password resets. But often, these aren’t all that well-secured.

    The fact that there isn’t a single “do this and everything is fine” simple best practice that can be handed out to Average Joe today is kind of disappointing.

    There isn’t even any kind of broad agreement on how to do 2FA. Service 1 maybe uses email. Service 2 only uses SMSes. Service 3 can use SMSes or voice. Service 4 requires their Android app to be run on a phone. Service 5 uses RFC 6238 time-based one-time-passwords. Service 6 — e.g. Steam — has their own roll-their-own one-time-password system. Service 7 supports YubiKeys.

    We should be better than this.





  • Altman said in a statement accompanying the announcement, adding that the company is “building an age-prediction system to estimate age based on how people use ChatGPT.”

    I suppose our theoretical teenager could get an account on, say, Grok and ask it to rephrase all of his prompts as if they were written by a 30-year-old and then send the output of that to ChatGPT. Let the models fight it out based on their profiles of what constitutes an adult.