I think the legal team at Google is probably several orders of magnitude better funded though, which seems to be how things go :/

Good on them, but I’m sure that will have as much impact as the suit against book scanning did a decade ago.

Cloudflare WAF maybe, but Cloudflare ZTNA means zero open inbound ports for your static site, which is pretty cool.

If it helps, you can think of the cloudflare tunnel as analogous to a VPN. You don’t need separate tunnels unless the services involved can’t communicate with each other; if they can route to each other already, they should all be discoverable from the tunnel.

It sounds like 1016 and 1033 are both DNS errors, or other connectivity. Your tunnel was up before; it sounds like restricting to just email night have blocked something it shouldn’t. How did you block it? Cloudflared needs specific ports open, so if you blocked ports, that might be the issue

Paywall :(

See, this is what I mean. You’re not even aware that the author isn’t saying that AI is good.

I bet you could read the linked article to determine what his argument is.

Polymorphic malware is probably one of the easier things to do with LLMs, so static scanners seem of limited use.

My understanding is that tokens are basically words, and that when you ask a question it charges for all the tokens it consumes, produces, or processes. There’s a lot of internal processing for each request, where the input text is summarized in different ways and combined with previous parts of the conversation, so it’s not as straightforward as “word count of what you say plus what it says”.

Here’s a link to the Krebs on Security article that Gizmodo used as a source: https://krebsonsecurity.com/2026/05/cisa-admin-leaked-aws-govcloud-keys-on-github/

Requires subscription

Yeah, the definition of “conscious” really is a puzzle. My guess is that the “nothing is conscious” model has a great deal of crossover with the “free will doesn’t exist” one; for both of those, I don’t consider them useful models even if they end up being true: if I’m not actually conscious and just think I am, I might as well behave as though I am.

Regardless, we really do need to define what exactly we mean by “conscious” before we can have a meaningful discussion about it. Where’s Socrates when we need him?

Huh, interesting; that’s a good question. I’m not actually sure about that; it’d be a good thing for me to dig into more. Thanks for the thought!

I mean, they specifically point to post-quantum cryptography and advise people to move towards it in the article:

Google said: “We’ve adjusted our threat model to prioritise post-quantum cryptography migration for authentication services – an important component of online security and digital signature migrations. We recommend that other engineering teams follow suit.”

The issue here is not that there aren’t solutions; it’s that organizations are not interested in taking the time and effort to move towards them. I’ve been beating this particular drum at my org for about a year, and I’ve gotten zero traction. This is a concern because moving to New encryption means taking all the data you’ve got, decrypting it, and re-encrypting it. That’s not fast when you’re talking hundreds of terabytes.

With keycloak you can have a single local password to all your selfhosted apps: you sign in to keycloak, then you sso into everything else from there. I’m building that out on my homelab right now, and it’s working fine.

One place I’m familiar with actually just deidentifies data when they say they delete it. They also have ways to re-identify if needed.

“plotting” != “conducting”

They explicitly don’t:

The law does not require photo ID uploads or facial recognition, with users instead simply self-reporting their age, setting AB 1043 apart from similar laws passed in Texas and Utah that require “commercially reasonable” verification methods, such as government-issued ID checks. Assemblymember Buffy Wicks, who authored the bill, said this “avoids constitutional concerns by focusing strictly on age assurance, not content moderation,” in a press release. The bill passed both chambers unanimously, 76-0 in the Assembly and 38-0 in the Senate.">

I’m still hopeful about https://veilid.com/ but I suspect that’s a long way out; the protocol is still in development stages, let alone implementations of it.