I don’t think that’s the case, because otherwise how did they leak this key that the backend uses, that presumably stayed in the backend, by reverse-engineering the rabbit android application?

I think the devices all just have hardcoded keys to the APIs themselves.

Thanks for the explainer, but that’s not what I meant.

For example: If I, an ISP in Beijing went to BEIJING CERTIFICATE AUTHORITY Co., Ltd. which is on the list, and had my cert issued by them for foobar.com that listed them as the root trust, wouldn’t that work? Because the service operating there currently is illegal and I need to take it down, i don’t see how or why they could refuse. If they can’t do this for ISPs, then certainly law enforcement should be able to force them to comply, I would assume.

If I then went to abuse that cert and spread malware on my fake cloned site, then what are the affected users going to do, call the cops and tell them the illegal seedbox is down?

This is the only way I can see governments being able to display blocked website notices, takedown notices and other MITM insertions demonstrably happening in all sorts of countries without triggering a “back to safety” warning in most browsers.

This has to be possible, because otherwise the observable results don’t make any sense.

I’m not necessarily saying they did the attack this way instead of just simply spreading malicious torrents which is far easier, but I don’t see why they wouldn’t be able to do this.

or has access to a trusted CA’s key, as per above.

I don’t see why they wouldn’t, or couldn’t do this if they wanted to if they were also willing to straight up resort to spreading malware, which idk about SK but that’s illegal anywhere in the west under very broad laws.

EDIT: They could also do a redirect to a different URL with a valid cert I guess, though I’m sure browsers block that too. Well I’m out of ideas then, I feel bad for cybercriminals these days.

EDIT2: Wait a sec, how does government censorship work then? Like e.g. https://ttrpg.network/post/7634428 How is the government able to MITM this person? The website is HTTPS and they’re using a VPN, but presumably locked to the DNS of the ISP. How are they able to block websites at all in this case with anything other than a termination of a connection (i.e. displaying a banner)?

Even without a VPN by your logic if the ISP can’t present a foobar.com cert then they couldn’t block it via just DNS. How do FBI takedown notices work? Shouldn’t all of these throw up SSL errors and “back to safety” prompts?

Then wouldn’t it be just one API key to the rabbit backend instead? The researchers are suggesting it’s several keys though. Or are you suggesting every device has the same key to Elvenlabs that it sends over to the rabbit backend which passes that through to the request? That’s also very silly if they did that.

What I don’t understand is why the TTS key could even delete voices or read past responses from other devices, ideally each device should have its own properly scoped API key that only lets it access the immediately necessary functionality and no more.

I think it’s much simpler than that.

Webhard is Web Hard Drives - SK torrenting scene is very different from the west, to simplify from how I understand it (English info seems scarce) basically everyone uses seedboxes or “web hard drives” in SK to download stuff.

While I can’t seem to find out anything about what “The Grid system” is, if the whole thing is an online portal or software.

If ISP routers are anything like the west that means they control the DNS servers and the ones on router cannot be changed, and likely it blocks 1.1.1.1 and 8.8.8.8 and so on, as Virgin Media does (along with blocking secure DNS) in the UK for example, which definitely opens up a massive attack vector for an ISP to spin up its own website with a verified cert and malware and have the DNS resolve to that when users try to access it to either download the software needed to access this Grid System or if it’s a web portal - the portal itself.

I don’t think this included any attacks on the BitTorrent protocol at all, because as others said, it’s pretty secure, but another possibility is simply malicious torrents being distributed, which rights holders definitely done before (read decoying part in https://arstechnica.com/tech-policy/2007/03/mediadefender/)

Ty

That’s a lot of work. Thanks though.

Which vuln was this?

Even by your analogy, yes I’d rather have a wooden cart compared to carrying things in my hands.

That said your analogy doesn’t apply to tech. “It just doesn’t okay” isn’t a very satisfying answer from a logic standpoint, but as the other user pointed out almost all corporate software is built upon, or massively, and I mean massively relies upon the efforts of Open Source software.

I can’t really think of any other industry like this or an analogy for this, but that is how it works. Example: GNU/Linux is FOSS, and is the go-to for server software for businesses, and it’s starting to creep into end user products too, from Dell laptops to Raspberry Pi to the Steam Deck (if you’re familiar with that - Proton is also open source).

No, BAD.

RIAA is evil. AI is good for us plebs while it’s still legal for us to own and operate our own local open source LLMs away from the corpos, in the same way the internet is a net good because it’s free and open and gives us power to practice communism (information sharing, hacking (classic meaning) and open source).

All regulation will be aimed squarely at destroying that, concentrating power in the hands of the few away from just any old proletariat tom dick and harry.

Corpos will pay any fees and fines as a cost of doing business and acquire all licenses and reach private agreements with publishers out of reach for the common man or small business, all the while passing the cost of all this onto the consumer eventually just to invest in tech that will make the line go up for a few more quarters.

IP law does not benefit you and you will never truly benefit from it.

Don’t simp for corpos.

P.S.: Imagine the next LLM, 10-20 years from now is truly groundbreaking and useful, it’s a new tool, and without that tool, you’re no longer competitive for work, and all of said tool is owned by 1-2 multinational predatory conglomerates jacking up prices, because you have no choice but to pay up to live. It’s cyberpunk, just boring and without the implants, price-gouging a necessity just as they do now with housing or insulin.

We need to preserve the power to do this freely, fairly, without profit and without licensing works.

Is there a way to do reverse tunnels, or something like it, so not opening any ports at all on the network, without cloudflare?

Closest to that XP I got was generating VPN keys and distributing them to close friends, running DDNS (no-ip) on my Pi with a pivpn server and then accessing JellyFin that way.

Do you maybe mean snap?

I’m proposing replacing minimum wage w/ something like UBI (my preference is a Negative Income Tax for more of a direct replacement). That way that $100 isn’t being added to peoples’ means, but instead it’s replacing wages

So it will just accomplish nothing, as people will work the same (more if we follow current trends) for $9.00 and hour instead of $12.00, but will have an extra $3.00 from taxes on the middle class (the rich will avoid taxes always).

This is certainly a proposal.

which can keep total inflation stable

Ah yeah, like right now where inflation is low and even decreasing, but things keep getting more expensive, jobs more and more scarce and actual value is ever smaller, while building true wealth through home ownership is ever more unreachable, while being poor is only more and more expensive and social mobility is at an all time low? Lol.

Measures of inflation are like COVID cases being low before we started testing more people.

That gives employees the freedom to say no to poor working conditions and inadequate pay without worrying about where their next meal is coming from.

That’s the thing - it won’t. Capitalists won’t like this, and competing with one another by offering better working conditions will only make them worse off - they will instead band together and price fix the market, or simply complete the ongoing switch to using gig economy “contractors” instead of employees.

Capitalism is a race to the bottom. This is ofc a hypothetical, IRL they would never allow any such laws with actual teeth to pass unless a dictatorship of the proletariat showed them to the guillotines.

Sure, and moving to socialism won’t change that, all it does is replace “the rich” with “the well-connected.”

This is an argument so old Marx debunked it himself. But I’ll say this: even if this is true, corruption is indeed possible in any system, but only in capitalism we worship it and call it “lobbying”.

People being rich isn’t a problem, especially since generational wealth is often gone after 3 generation

So just because it hasn’t been 3 generations yet, Musk isn’t a problem? Bezos? Zucc?

The important thing is that who “the rich” are changes periodically so we don’t get into a Russian oligarch situation.

The Russian oligarchs are actually new rich too, most of them got wealthy by picking the corpse of the Soviet Union, during western enforced shock therapy, while the poors were left to heroin and dying of AIDS. What a woopsie that turned out to be with fascist Russia now eh?

As long as that’s improving year-over-year, things are getting better. Whether some people have tens or hundreds of millions doesn’t really impact me day-to-day.

Things have declined since the 1980s in terms of buying power of the middle income young people of today across the board, and that’s before we get into the fact life itself got more expensive (e.g. now a starter crappy job needs an MSc, used to be they hired barely literate lead eaters, who are now bosses).

It’s slightly offset if you measure happiness by socially-funded scientific and technological progress (internet was a government project) but even that is now debatable, as capitalism has sunk its teeth into that also, and more and more social services of the 20th century are privatized into oblivion.

And that’s just the local, street-level stuff. What about the global evil of capitalism? Israel? Afghanistan? Iraq? Neo-colonialism of the global south, American corporations licking dictatorial boots the world over? the blockade of Cuba? Police racism and brutality? Sexism? Ableism?

The neoliberal imperialism of the United States through it’s client-state in Israel alone is enough to wonder, whether this system should be left as-is.

Now the USSR did a fair bit of shit too, and China does a lot even worse, all of it is deserving of critique, but US’s (and it’s western vassals’) issues are precisely as a result of its system. The US is very much an oligarchy, and is three corporations in a trenchcoat, and occasionally, when whistleblowers, whether corporate or military wind up dead, people look up, and it’s important that they blame the right people, because otherwise, they’ll blame each other, and fascism - the final form of neoliberal capitalism - wins.

Trump World, the world’s leading alternative to Disney World for nightmare enthusiasts.

Read pretty much any story from those who left the USSR to get a better picture of how life was there.

A very unbiased account indeed

but I find real stories of people trying to flee more valuable in understanding life in an area than books with economic figures.

I don’t. People for the most part are morons that gulp down ivermectin and bleach enemas by the truckload to make their healing crystals work in time for Sunday church, so they can pray away the gay. People are fickle, and are often at odds with facts. As a trans person I know this well.

If life was so good there

That’s the neat part, I never claimed that. The USSR was a shithole, but the user I originally responded to was wrong as well. Two things can be true at once.

UBI

Or just nationalize necessities to cut out capitalist middlemen taking a cut. All a UBI of $100 will do is raise prices by $100 because people now have $100 more, and landlords et al. will want those $100. Under capitalism and neoliberalism the rich will always be at the top of the food chain in this manner.

Socialist policies should be limited, imo, to voluntary associations, like co-ops and private unions.

So they can be easily crushed by capitalist lobbying in western “”““democracies””".

I admire neolibs who genuinely want to make things better, and you have my respect for that, but I think you’re just a bit naive and haven’t quite thought everything through.

In reality, their education system was overly focused on technical skills, neglecting essential life skills like critical thinking, creativity, decision-making, and many others.

The US is the only country in the western world that teaches strictly extra-curricular matters at a university level, afaik. I went to uni in the UK for computer science, all of my classes were only about computer science and it’s subdomains only, there are no “life skills” classes.

This became apparent in the 90s when many supposedly ‘highly educated’ individuals were involved in fraudulent schemes, failed to build and stand for democracy

As opposed to the low levels of fraud and extremely healthy democracies of which countries exactly?

As for the rest of your claims I would like to see direct sources. The “essential items” tidbit in particular I find suspect because the definition is quite fickle and the idea is subjective and depends on circumstances. Cars were famously not very common amongst USSR citizens. What was though is public transport, and we’re now in the west finding out that neglecting public transport and shifting towards personal vehicles has been a huge mistake, so that’s that.

Lolwut? USSR recovered from being a devastated bomb crater of a country faster than Europe did on American dollar while waging a cold war against the rest of the world. They beat the US to space time and time again too.

Come the 80s, their manufacturing was well ahead of the west, and there weren’t any food issues either, so I’m not sure what you mean? The horrors of Stalin’s collectivisation efforts were a good bit before the cold war, and that wasn’t really an issue of food manufacturing.

Nobody was forced to do any type of work more than anybody is under capitalism, if anything under capitalism as it is today - you take what you are given.

In the USSR, higher education being free (as is the socialist tradition) gave people a lot more choice, no need to balance student debt against future potential earnings and as such ability to pay health expenses, like we see in the US today.

They suffered from consumer goods issues because things like game consoles and tamagotchi can’t exactly be planned in a planned economy.

It’s why I personally believe in a dual-economy, where necessities are planned centrally, from housing to infrastructure to utilities and independent worker co-operatives do the rest, I think that’s the lesson there ultimately. Oh and fuck the Russian Federation.

Enough with the goddamn thinness soon that shit is gonna snap if you breathe on it

That’s so nice! I’m so happy for US folks! Here in the UK only 12% support Gender-affirming care for trans minors, most want it banned, most actually don’t support it for adults either 😢

https://yougov.co.uk/society/articles/43194-where-does-british-public-stand-transgender-rights-1 (you need to see the full results to see that)