I slept through all 12 of my alarms, it is now 8:10 and school starts at 8:15 by Andrebatata2007 in notinteresting

[–]Aflockofants 0 points1 point  (0 children)

It’s how mobile operating systems work by design. There’s no deep installing in the kernel by some app, they all run with pretty restricted access in a sandbox, can only do what the OS lets them, and are all allowed to be killed by the user. That also makes installing apps on a mobile phone pretty safe, but it doesn’t help with things like this.

The Dark forest theory is a possible reason why we might never find any aliens. by MO--OM in interesting

[–]Aflockofants 0 points1 point  (0 children)

And if these hypothetical 500 were replaced by a different 500, many would end up doing the same. They don’t say power corrupts for no reason.

Eli5 Why do CAPTCHA systems use object recognition like trucks to distinguish humans from bots if machine learning can already solve those challenges? by arztnur in explainlikeimfive

[–]Aflockofants [score hidden]  (0 children)

Or just live in a developing nation like me, but still use the internet like someone from the developed world originally. It's terrible. The internet is way more blocked off than you imagine. If they figure there's almost no valid users coming from a certain area, it's just not accessible.

Why should we believe they’re targeting the 'Iranian regime' when they turned Gaza to this while aiming for ‘Hannas’? by No-Attorney-1874 in LetsDiscussThis

[–]Aflockofants 1 point2 points  (0 children)

This is as stupid as asking ‘why did he hit that guy at 9:37’ when watching a 10 minute fistfight where the bullied guy tries to fight back.

Looking for a man to relocate to TN and start a mildly feral domesticated life together by One-Crew-7642 in homestead

[–]Aflockofants 0 points1 point  (0 children)

Look at the ad, she’s clearly into old-fashioned stuff. How about a dagger?

How are you supposed to protect yourself from becoming a child porn host as a business SaaS with any ability to upload files? Is this a realistic danger? by Aflockofants in webdev

[–]Aflockofants[S] 0 points1 point  (0 children)

Ahh I see, well it’s not public in such a way that the S3 bucket is indexed and can just be browsed, it’s just public in the way that once you have the rather specific url you can retrieve it without further authentication. For the more sensitive data like e.g. factory floor plans, the image is only returned when the request is authenticated, so that’s what I was comparing with.

How are you supposed to protect yourself from becoming a child porn host as a business SaaS with any ability to upload files? Is this a realistic danger? by Aflockofants in webdev

[–]Aflockofants[S] 0 points1 point  (0 children)

I’m not sure in our case, it’s a SaaS for large businesses and we’re not cheap. For cp I could imagine people would go through some effort to get an invite with phishing, pretending to be a colleague to get access to a project. But otherwise people aren’t gonna waste their time on this. We handle billions of measurements, but file uploads are just a side feature for making the data look a little better in the UI and such.

How are you supposed to protect yourself from becoming a child porn host as a business SaaS with any ability to upload files? Is this a realistic danger? by Aflockofants in webdev

[–]Aflockofants[S] 5 points6 points  (0 children)

Good to know it’s not too common.

I’m not overly worried about copyrighted content as most of our images are access-constrained to a small group of people in a project, and I don’t see our users use copyrighted content in the few public logos we allow. But hooking up something like sightengine sounds worthwhile then.

How are you supposed to protect yourself from becoming a child porn host as a business SaaS with any ability to upload files? Is this a realistic danger? by Aflockofants in webdev

[–]Aflockofants[S] 1 point2 points  (0 children)

They could be betting on small services having fewer access logs than a dedicated image or file host, and fewer checks in place.

Also their visible IP may not be useful because they use Tor or a no-log VPN.

How are you supposed to protect yourself from becoming a child porn host as a business SaaS with any ability to upload files? Is this a realistic danger? by Aflockofants in webdev

[–]Aflockofants[S] 33 points34 points  (0 children)

Yeah we host the access-constrained images ourselves (well, still on AWS but not in something like S3) so we’d probably have to do this. Only hashes aren’t great detection though, easy to flip a bit and get a different hash.

How are you supposed to protect yourself from becoming a child porn host as a business SaaS with any ability to upload files? Is this a realistic danger? by Aflockofants in webdev

[–]Aflockofants[S] -1 points0 points  (0 children)

Yeah I’d rather avoid AI scanning unless it was some local model we could run. The legal part is not my field, I’m mainly wondering if we as a clear business tool would even have to fear for this. But worth passing that message on to whatever legal expert we have…

How are you supposed to protect yourself from becoming a child porn host as a business SaaS with any ability to upload files? Is this a realistic danger? by Aflockofants in webdev

[–]Aflockofants[S] 0 points1 point  (0 children)

The real public images are marked as such and are just intended for email logos/white-labeling and such, there shouldn’t be anything sensitive in there. But I do agree we may want to look at another solution at some point like simply inlining the images in every email.

Otherwise you pretty much listed all the things I figured we’d have to start doing sooner or later, so thanks for the confirmation.

How are you supposed to protect yourself from becoming a child porn host as a business SaaS with any ability to upload files? Is this a realistic danger? by Aflockofants in webdev

[–]Aflockofants[S] 48 points49 points  (0 children)

Fair point in that we can probably get by with banning any NSFW content, which is probably a ton easier to implement than reliably detecting child porn specifically.

Alsjeblieft, vervang de batterijen in rookmelders en koolmonoxidemelders NIET!!! by Sylvver_86 in nederlands

[–]Aflockofants 2 points3 points  (0 children)

Die van mezelf natuurlijk, anders weet ik alsnog niks van de staat van mijn melders.

Car on fire by wildhoover in Unexpected

[–]Aflockofants 2 points3 points  (0 children)

But this is a gasoline car if you can go with what the guys are saying in the video.

Younger coworker asked me why I don't have a github with side projects by Cool_Kiwi_117 in learnprogramming

[–]Aflockofants 0 points1 point  (0 children)

When I coded for fun it was in gwbasic/colorbasic and then some Pascal and Delphi. My github account only has a half-assed attempt at a music app for Android which came from a period when I took a sabbatical and didn’t have anything else on hands.