Replying to
@catsalad@infosec.exchange @nlnet@social.nlnet.nl It does not appear to be under their funding anymore though, so I suppose this is not relevant.
https://nlnet.nl/project/Pixelfed/
https://nlnet.nl/project/Pixelfed-Groups/
Remote
thepwnicorn
@thepwnicorn@infosec.exchange
mastodon 4.8.0-alpha.3+glitchWorking in AppSec by day, posting on here by night. he/him
73 Followers
86 Following
30 Posts
Joined November 05, 2022
Replying to
@catsalad@infosec.exchange @nlnet@social.nlnet.nl As far as I can tell, this violates the nlnet policy as the GenAI use is not disclosed in the README and also not in the commits.
https://nlnet.nl/foundation/policies/generativeAI/
Replying to
@catsalad@infosec.exchange @nlnet@social.nlnet.nl they also seem to be using Kiro, a tool for "Agentic engineering".
https://github.com/pixelfed/pixelfed/commit/ecb0131d33e0f008a66b88177dcf80cb93aaef01
Replying to
@wurzelmann@mastodon.wurzelmann.at @fluepke@chaos.social @Dexruus@chaos.social Ich kann die defensive Haltung auch nicht verstehen. Ich meine es gibt genug Themen bei denen man täglich, ob auf Arbeit oder medial, sieht wie leider Ethik viel zu wenig bei Entscheidungen berücksichtigt wird. Den Schuh müssen wir uns in der IT-Branche schon anziehen.
Replying to
@wurzelmann@mastodon.wurzelmann.at @fluepke@chaos.social @Dexruus@chaos.social Und klar ist nicht jeder mit gemeint und das Problem ist dort auch sicher nicht exklusiv verordnet.
Replying to
@GossiTheDog@cyberplace.social so much for their supposed security initiative. Greed really eats brains.
Replying to
Replying to
@zackwhittaker For companies selling "electronic products with digital elements" in the EU this will be a requirement due to the Cyber Resilience Act.
Replying to
@hacks4pancakes it's looking really good! I like the premise of an insider threat, the false trail of information, different approaches one can take, and various ways intrusion may get detected. It seems to be well-suited for good story telling and mechanics that drive the story forward. Haven't had the chance to run it yet, but shared it with fellow friends who are into TTRPGs.
Replying to
@cR0w@infosec.exchange by coincidence, I just disabled the sending of HTML emails from Forgejo
Replying to
@1sabelR@mastodon.social it's such a fun game and vibe. Also really adore Anna Hollinrake's art style.
Replying to
It shouldn't be that hard to understand that a community can self-govern and decide what they want to allow on their platform. In this case a code forge they offer entirely for free, financed through donations.
Replying to
@GossiTheDog@cyberplace.social Would be nice if each day would not start with news how things are being fucked up even further. Greed and hubris are destroying the world, all to prop up this nonsense AI bullshit.
Replying to
@Mara@hachyderm.io ok, this is super cool and I'm really tempted. I'm a bit worried about safety though, would have to read up on that.
Replying to
@wirepair@mastodon.social Uh, that does not seem in the spirit of 2FA. Then again you can also add additional 2FA devices to admin accounts without additional authentication even when admin mode enforcement is active.
Replying to
@Natasha_Jay@tech.lgbt I hope this holds up to replication, because that is perfect *chef kiss*