General Discussion

cross-posted from: https://beehaw.org/post/797853

If you do, what is your setup to run and maintain the containers? Have you experienced any problems that have been show-stoppers?

They seem like an attractive option in some cases, but I'm curious to hear how people use them general computing.

cross-posted from: https://lemmy.pro/post/40205

Microsoft has disclosed that it's detected a spike in credential-stealing attacks conducted by the Russian state-affiliated hacker group known as Midnight Blizzard.

The intrusions, which made use of residential proxy services to obfuscate the source IP address of the attacks, target governments, IT service providers, NGOs, defense, and critical manufacturing sectors, the tech giant's threat intelligence team said.

Midnight Blizzard, formerly known as Nobelium, is also tracked under the monikers APT29, Cozy Bear, Iron Hemlock, and The Dukes.

The group, which drew worldwide attention for the SolarWinds supply chain compromise in December 2020, has continued to rely on unseen tooling in its targeted attacks aimed at foreign ministries and diplomatic entities.

cross-posted from: https://lemmy.pro/post/40116

Microsoft Teams vulnerability allows attackers to deliver malware to employees Security researchers have uncovered a bug that could allow attackers to deliver malware directly into employees’ Microsoft Teams inbox.

Apple fixes zero-day vulnerabilities used to covertly deliver spyware (CVE-2023-32435) Apple has released patches for three zero-day vulnerabilities (CVE-2023-32434, CVE-2023-32435, CVE-2023-32439) exploited in the wild.

VMware Aria Operations for Networks vulnerability exploited in the wild (CVE-2023-20887) CVE-2023-20887, a pre-authentication command injection vulnerability in VMware Aria Operations for Networks (formerly vRealize Network Insight), has been spotted being exploited in the wild.

cross-posted from: https://lemmy.dbzer0.com/post/126868

Just figured this might be some welcome news to shout out from the crow's nest. Haven't tried it yet myself, so would love some feedback, me hearties!

open secrets everywhere

cross-posted from: https://beehaw.org/post/663550

...of a file's SHA256 fingerprint? If I have my terminology correct here...

https://lemmy.intai.tech/comment/54298

https://www.devdiscourse.com/article/technology/2491788-both-humans-and-ai-hallucinate---but-not-in-the-same-way

https://thenewstack.io/how-large-language-models-fuel-the-rise-of-vector-databases/

https://www.interconnects.ai/p/llm-development-paths

https://twitter.com/BenjaminDEKR/status/1668821068436451329

Viewing inside silicon!