dislocate_expansion

joined 8 months ago
[–] [email protected] 3 points 2 weeks ago

Seriously. It isn't helpful towards the environment if we are using so many resources to mine chips and metals and then push it along the internet to then be trained on said AI bots. Would be more sustainable using paper and planting trees smh

[–] [email protected] 2 points 2 weeks ago

Also the internet uses massive amounts of water and energy

[–] [email protected] 1 points 2 months ago* (last edited 2 months ago)

Lemmy does not remove exif data (unless the code has changed), you need to remove it yourself (also a good practice in general)

[–] [email protected] 8 points 2 months ago

Article is from 2023

[–] [email protected] 2 points 2 months ago* (last edited 2 months ago) (1 children)

That's a different conversation. I'm talking about an adversary who just creates a Lemmy instance and has malicious code embedded in the images, videos and text

What does that have to do with any corporation? Facebook specifically is already in a lawsuit this last month about installing malicious Root Certificates and performing man in the middle attacks against Amazon and Google, so I'm not sure what you're asking

[–] [email protected] 1 points 2 months ago

Yeah, but the average internet users doesn't understand these concepts. And with the use of "random-lemmy.random" it seems like it might be an easy attack to fall for

[–] [email protected] 1 points 2 months ago (3 children)

I think the chances are high since the domains are supposed to be novel, compared to Facebook which is a worldwide known domain and chances of impersonating it are slim or would require a client side hack

[–] [email protected] 1 points 2 months ago (2 children)

The quick defederarion option is a nice defense. Could be some damage in the meantime though

[–] [email protected] 2 points 2 months ago (5 children)

Either or. Would be more nefarious to have users sign up for a malicious instance unknowingly and then federate with non malicious instances

 

With so many variations of Lemmy and fediverse instances, are there any defenses against a malicious server running altered code? Is there a way to prove what code is supposed to be running on each instance?