the internet loves grapheneOS, the secure AOSP fork that also makes Android nicely usable without the LLM crap
-
@zzt
"It's a new developer we hired"Why did they hire them, if not to slop?
-
@ariarhythmic
@hazelnot @zzt
If I recall the main limitations in Linux are- Lack of proper hardening in the stock kernel, including the memory hardening that Graphene does
- Lack of a MAC by default, like Apparmor or SELinux
These can be fixed
@avesbury_rosetta @hazelnot @zzt The very design of Linux is a horrible mess, it's not really about incremental hardening improvements.
It can be secure, yes, since GrapheneOS is secure, but honestly, we really need a better kernel project.
-
@zzt FUCK FUCK FUCK FUCK FUCK FUCK FUCK FUCK FUCK FUCK FUCK FUCK
/me inhales
FUCK FUCK FUCK FUCK FUCK FUCK FUCK FUCK FUCK FUCK FUCK FUCK FUCK FUCK FUCK FUCK FUCK FUCK FUCK FUCK
god fucking dammit graphene
@aspensmonster I used to have that reaction, but this has got to be the third or fourth time something I wished I could have used/bought/migrated to full-on corrupted. (Versus the two or three times something I'm currently using blew up in my face.)
Now I'm at a constant "fuck it" and my throat feels better.
-
@zzt At this point I think I'd pay a vlog subscription at like 50 bucks a month, happily, if a guy promised to just show me videos of him telling AI evangelicals to "get a real job you fucking Moonie"
@AnarchoNinaWrites yo @davidgerard we’ve got a second channel idea for pivot and at least one subscriber!
more or less what we do on awful.systems but in video form. actually not a bad idea at all, do we know anyone with a good voice for it?
-
@AnarchoNinaWrites yo @davidgerard we’ve got a second channel idea for pivot and at least one subscriber!
more or less what we do on awful.systems but in video form. actually not a bad idea at all, do we know anyone with a good voice for it?
@zzt @AnarchoNinaWrites @davidgerard algernon takes a note to record a few demos later today
-
if you’re in infosec or pretending to be in infosec and you’re about to start gooning in this thread with the contents of anthropic’s marketing campaign for mythic, a model whose results are shit: reconsider
reconsider a lot of things, really
@zzt
GOS: "It's fine if most of the output is wrong because it finds actual issues."Literally wat
-
the internet loves grapheneOS, the secure AOSP fork that also makes Android nicely usable without the LLM crap
<yelling from out of frame>
…ah. this just in, grapheneOS has decided to start codegooning core apps and security fixes and now they’re exhaustingly defending doing that
> Many valid issues are reported in between the hallucinations and other nonsense.
oh I see, what a relief
> Attackers are heavily using AI models to discover vulnerabilities and develop exploits. For example, Cellebrite is heavily using it including developing frameworks for reverse engineering and vulnerability discovery.
gotta use the wrongness machine, no sorry, “frontier models” because the coptech adversary is using them and also mythic’s great at finding vulnerabilities til you find out you can do the same job without it. great! https://grapheneos.social/@GrapheneOS/117226938743085364
@zzt Looks like GrapheneOS is out as a possible OS for my old Pixel phone.
-
@avesbury_rosetta @zzt we need mobile linux, to start with. Android is a non-open, user-adversarial dead end. It takes a special kind of wrong mindset to be as determined to work on, and advocate for it, as GrapheneOS
@ariarhythmic @avesbury_rosetta @zzt Now that there's slop in the Linux kernel too, it might make sense to start completely from scratch (while maybe keeping Linux/POSIX compatibility to tap into the existing applications).
It's what I want to do too. Working title is KittyOS, an operating system built around end-user accessible scripting and programming features. I'm currently already developing the programming language for that, see the #Kittyscript hashtag or the repo at https://codeberg.org/LunaDragofelis/kittyscript-kotlin if you're curious. (TLDR: it's supposed to become an ultimate, all purpose, hyper-extensible programming language for everything from kernels to scripts.) -
the internet loves grapheneOS, the secure AOSP fork that also makes Android nicely usable without the LLM crap
<yelling from out of frame>
…ah. this just in, grapheneOS has decided to start codegooning core apps and security fixes and now they’re exhaustingly defending doing that
> Many valid issues are reported in between the hallucinations and other nonsense.
oh I see, what a relief
> Attackers are heavily using AI models to discover vulnerabilities and develop exploits. For example, Cellebrite is heavily using it including developing frameworks for reverse engineering and vulnerability discovery.
gotta use the wrongness machine, no sorry, “frontier models” because the coptech adversary is using them and also mythic’s great at finding vulnerabilities til you find out you can do the same job without it. great! https://grapheneos.social/@GrapheneOS/117226938743085364
@zzt *sigh* now I get to be hoping NetBSD gets drivers for my phone too
-
the internet loves grapheneOS, the secure AOSP fork that also makes Android nicely usable without the LLM crap
<yelling from out of frame>
…ah. this just in, grapheneOS has decided to start codegooning core apps and security fixes and now they’re exhaustingly defending doing that
> Many valid issues are reported in between the hallucinations and other nonsense.
oh I see, what a relief
> Attackers are heavily using AI models to discover vulnerabilities and develop exploits. For example, Cellebrite is heavily using it including developing frameworks for reverse engineering and vulnerability discovery.
gotta use the wrongness machine, no sorry, “frontier models” because the coptech adversary is using them and also mythic’s great at finding vulnerabilities til you find out you can do the same job without it. great! https://grapheneos.social/@GrapheneOS/117226938743085364
@zzt It's just the beginning
https://mastodon.bsd.cafe/@ricardo/117228998903521142 @teknomagic -
@zzt I wonder what the situation is with other custom ROMs. I hope LineageOS hasn't ruined their work either
-
the internet loves grapheneOS, the secure AOSP fork that also makes Android nicely usable without the LLM crap
<yelling from out of frame>
…ah. this just in, grapheneOS has decided to start codegooning core apps and security fixes and now they’re exhaustingly defending doing that
> Many valid issues are reported in between the hallucinations and other nonsense.
oh I see, what a relief
> Attackers are heavily using AI models to discover vulnerabilities and develop exploits. For example, Cellebrite is heavily using it including developing frameworks for reverse engineering and vulnerability discovery.
gotta use the wrongness machine, no sorry, “frontier models” because the coptech adversary is using them and also mythic’s great at finding vulnerabilities til you find out you can do the same job without it. great! https://grapheneos.social/@GrapheneOS/117226938743085364
@zzt this seems important, but what does it mean?
-
the internet loves grapheneOS, the secure AOSP fork that also makes Android nicely usable without the LLM crap
<yelling from out of frame>
…ah. this just in, grapheneOS has decided to start codegooning core apps and security fixes and now they’re exhaustingly defending doing that
> Many valid issues are reported in between the hallucinations and other nonsense.
oh I see, what a relief
> Attackers are heavily using AI models to discover vulnerabilities and develop exploits. For example, Cellebrite is heavily using it including developing frameworks for reverse engineering and vulnerability discovery.
gotta use the wrongness machine, no sorry, “frontier models” because the coptech adversary is using them and also mythic’s great at finding vulnerabilities til you find out you can do the same job without it. great! https://grapheneos.social/@GrapheneOS/117226938743085364
@zzt well, I guess I can cross “try out graphene” off my todo list.
-
also, here’s how much you can trust that they’re only using it strictly for reviews:
https://circumstances.run/@davidgerard/117235031728518322
> The AGENTS.md talks about the bot writing new code. On the available evidence I don't actually believe they're not coding with it.
not that “only doing using it for reviews” gets good results. you end up programming the way the LLM insists you should anyway. reviewing like this is exhausting and quality goes straight into the toilet. most people just cognitively surrender to the bot after a bit. this is an extremely common methodology in professional code, and it’s the reason why half the software you use right now fucking sucks.
@zzt Graphene’s super weird, hyperdefensive & combative comms person replying in 3…2…
-
@zzt Graphene’s super weird, hyperdefensive & combative comms person replying in 3…2…
@distractal don’t forget the fans, the second worst part of using grapheneOS
-
the internet loves grapheneOS, the secure AOSP fork that also makes Android nicely usable without the LLM crap
<yelling from out of frame>
…ah. this just in, grapheneOS has decided to start codegooning core apps and security fixes and now they’re exhaustingly defending doing that
> Many valid issues are reported in between the hallucinations and other nonsense.
oh I see, what a relief
> Attackers are heavily using AI models to discover vulnerabilities and develop exploits. For example, Cellebrite is heavily using it including developing frameworks for reverse engineering and vulnerability discovery.
gotta use the wrongness machine, no sorry, “frontier models” because the coptech adversary is using them and also mythic’s great at finding vulnerabilities til you find out you can do the same job without it. great! https://grapheneos.social/@GrapheneOS/117226938743085364
@zzt "sorry phones, it looks like its scientific experiments for the lot of you".
Really feeling out of options for electronic devices that aren't built to spy on me for advertising 24/7.
-
J jwcph@helvede.net shared this topic
-
> That increase is despite adding features slowly down a lot. A massive monolithic kernel written in a memory unsafe language is a bigger liability than ever.
rust in the kernel is in the corner like “am I a joke to you”
it’s uhhh real rich that the AOSP fork suddenly has a problem with a massive monolithic kernel written in a memory unsafe language now that LLMs are on the table
and the solution is just LLMs, only that. not fixing the massive, monolithic, or unsafe language bits at all. making them much worse, in fact. thanks!
@zzt if they really cared about this they would have ship a phil-c compiled kernel version and say "hey this may kill your perf and battery life, but if state actors are actually after you it is worth it"
-
the internet loves grapheneOS, the secure AOSP fork that also makes Android nicely usable without the LLM crap
<yelling from out of frame>
…ah. this just in, grapheneOS has decided to start codegooning core apps and security fixes and now they’re exhaustingly defending doing that
> Many valid issues are reported in between the hallucinations and other nonsense.
oh I see, what a relief
> Attackers are heavily using AI models to discover vulnerabilities and develop exploits. For example, Cellebrite is heavily using it including developing frameworks for reverse engineering and vulnerability discovery.
gotta use the wrongness machine, no sorry, “frontier models” because the coptech adversary is using them and also mythic’s great at finding vulnerabilities til you find out you can do the same job without it. great! https://grapheneos.social/@GrapheneOS/117226938743085364
@zzt
I really want to see an analisys on the quality and severity of those Linux CVEs.And also even if you're keeping a codebase secure with slop extrusion, and it works (I am generous for a moment), you don't have to glee about it (see also “it's fine if you don't think about ethics” argument).
I maybe could stomach the argument of using the forest burning machine, so the people protesting the forest from burning would have a secure tool, but that goes out window on extruding new code.
-
the internet loves grapheneOS, the secure AOSP fork that also makes Android nicely usable without the LLM crap
<yelling from out of frame>
…ah. this just in, grapheneOS has decided to start codegooning core apps and security fixes and now they’re exhaustingly defending doing that
> Many valid issues are reported in between the hallucinations and other nonsense.
oh I see, what a relief
> Attackers are heavily using AI models to discover vulnerabilities and develop exploits. For example, Cellebrite is heavily using it including developing frameworks for reverse engineering and vulnerability discovery.
gotta use the wrongness machine, no sorry, “frontier models” because the coptech adversary is using them and also mythic’s great at finding vulnerabilities til you find out you can do the same job without it. great! https://grapheneos.social/@GrapheneOS/117226938743085364
TIL: "codegooning"
-
TIL: "codegooning"
@jamesbritt the codegooners keep telling me I can’t call what they do slop so I found an even more appropriate term: https://mas.to/@zzt/117225094752753839
