modrobert boosted

#Microsoft sent an email to everyone saying they're listening to people now and they will definitely not pushing AI to everything anymore.

Also Microsoft enabled #github to collect all your "inputs, outputs and associated context to train and improve AI models". This new tickbox is enabled by default, even if you explicitly disabled Copilot before.

Actions speak louder than words.

You can disable the option at github.com/settings/copilot/fe

#enshittification

modrobert boosted

@firefox, the “last privacy-respecting browser” now nags you with in-browser pop-ups to let AI generate “key points” when you long-press links.

Mozilla CEO: “AI should always be a choice – something people can easily turn off”

Then why the fuck is it off by default? Why the fuck am I getting pop-ups asking me to try features I didn’t ask for? That’s not a choice. That’s opt-out with a fucking marketing budget.

What the fuck happened to you, Mozilla.

They spent WEEKS in damage control promising an "AI kill switch" and then shipped it fucking disabled. That is the most gaslit UX I have ever seen in my life.

"Help me @librewolf - you're my only hope."

Settings > AI Controls > Block AI enhancements. Do it now, because they won't do it for you.

Edit: a few corrections thanks to @Feyd:

“Hover over links”

It’s a long-press / context menu action, not a passive hover. That’s a meaningful distinction because hover implies it’s happening constantly without intent, which is way more invasive than what’s actually happening.

“Sending page content to ML models”

the default link preview (before you enable key points) just reads the Open Graph meta tags – the same og:title / og:description metadata that generates link cards in Slack, Discord, iMessage, etc. That’s not AI, that’s just HTML parsing.
even when you DO opt into the AI key points feature, it runs a local on-device model, not shipping your page content off to some cloud endpoint.

#Firefox #Mozilla #AI #InfoSec #Privacy #Fediverse #OpenWeb

modrobert boosted
modrobert boosted

For no reason at all, please give me your favourite cow-related figures of speech! (Stuff like "No use crying over spilled milk" or "until the cows come home", puns extremely welcome)

modrobert boosted

This new page on the curl website explains how you can (should?) verify #curl, and a little what we do to verify what we do.

We can never be 100% safe, but we can try.

curl.se/docs/verify.html

modrobert boosted
modrobert boosted

oh look, the AI batshit crazy Microslop is down the most out of the MAG 7. OpenAI's big investor, Microsof has lost 31% of its market cap in just a few weeks, and it’s gonna sink even deeper when the market opens in a few hours.

OpenAI is running out of cash & can't find new investors. Even the banks refused to sanction loans for Oracle to build an IDC for them. Now Microslop says they tone down the AI & Ads in Win11 just to win back users. their slop machines aren't generating enough profits

Show thread
modrobert boosted

Because there’s always room to maintain one more project alone 🔥

modrobert boosted

Open source isn't a tip jar – it's time to charge for access theregister.com/2026/03/25/ope via @theregister & @sjvn

#Opensource was never "free as in free beer." It's "free as in free speech." With companies making billions from open source, it's time we pay people a real wage.

modrobert boosted

Worth remembering—Iomega had some sleek peripherals on the market well before Apple ended the Reign of Beige in the late 1990s.

"Two versions of LiteLLM, an open source interface for accessing multiple large language models, have been removed from the Python Package Index (PyPI) following a supply chain attack that injected them with malicious credential-stealing code.

Specifically, LiteLLM v1.82.7 and v1.82.8 have been taken down because they contain credential-stealing code in a component file, litellm_init.pth."

theregister.com/2026/03/24/tri

modrobert boosted

Lmao @Hacker0x01 told me the backdoor was known "through internal security assessments" and they're "closing this report as out of scope". But now are pissed I disclosed it. Nobody should use this joke of a platform who put the interests of companies over that of users.

Show thread
modrobert boosted

RE: hachyderm.io/@kees/11628274586

Fun to see the Linux kernel follow in #curl's footsteps! 😎 (we removed the last strncpy from curl in late 2025)

modrobert boosted

Imagine how much happier you’d be today if you’d never turned it back on

modrobert boosted

repost this image to instantly consume all AA batteries in a 50km radius

modrobert boosted
modrobert boosted

I learned that the artist behind the artwork for the game Elite was none other than Philip Castle, the designer of the posters for A Clockwork Orange and Full Metal Jacket, among others.

He passed away on February 20, 2026, at the age of 83 🙏

#PhilipCastle #Elite #RetroGaming

modrobert boosted

You're paying AI companies a monthly subscription fee to be fingerprinted like a parolee.

I got bored and ran uBlock across Claude, ChatGPT, and Gemini simultaneously.

Claude:

Six parallel telemetry pipelines.
A tracking GIF with 40 browser fingerprint data points baked into the URL, routed through a CDN proxy alias specifically to make it harder to block.
Intercom running a persistent WebSocket whether you use it or not.
Honeycomb distributed tracing on a chat UI because apparently your conversation needs the same observability stack as a payments microservice.

ChatGPT:

proxies telemetry through their own backend to hide the Datadog destination URL from blockers.
uBlock had to deploy scriptlet injection — actual JS injected into the page to intercept fetch() at the API level — because a network rule wasn't enough.
Also ships your usage data to Google Analytics. OpenAI. To Google. You cannot make this up.
Also runs a proof-of-work challenge before you're allowed to type anything.

Gemini:

play.google.com/log getting hammered with your full session behavior, authenticated with three SAPISIDHASH token variants, piped directly into the Google identity supergraph that correlates everything you've ever done across every Google product since 2004.
Also creates a Web App Activity record in your Google account timeline. Also has "ads" in one of the telemetry endpoint subdomains.

When uBlock blocks Gemini's requests, the JS exceptions bubble up and Gemini dutifully tries to POST the error details back to Google. uBlock blocks that too. The error messages contain the internal codenames for every upsell popup that failed to load.

KETCHUP_DISCOVERY_CARD.
MUSTARD_DISCOVERY_CARD.
MAYO_DISCOVERY_CARD.

Google named their subscription upsell popups after condiments and I found out because their error handler snitched on them.

All three of these products cost money.
One of them is also running ad infrastructure.

Touch grass. Install @ublockorigin

#infosec #privacy #selfhosted #foss #surveillance

modrobert boosted

A lizard I saw while biking today. Usually they run away quite quickly but this one was just hanging around on the road.

youtu.be/bRl5ByNklX0

#singapore #mtb

modrobert boosted
Show older
Qoto Mastodon

QOTO: Question Others to Teach Ourselves
An inclusive, Academic Freedom, instance
All cultures welcome.
Hate speech and harassment strictly forbidden.