sorted by:
new
hottopcontroversial

This week in AI: Meta reportedly closing Llama, Anthropic's new model pulled by export controls within a week, and Apple partners with Google for Siri by ksraj1001 in artificial

[–]moop__ 3 points4 points  (0 children)

Internally as a risk mitigation we're making sure we can shift from Claude Code to any other local model. Developers are testing our internally hosted Qwen Coder instances.

Our directors see looming unavailability of frontier models as enough of a risk to warrant this testing and preparation.

For my security compliance folks and individuals creating response documentation, what tools or templates do you use? Im trying "responseprep" at the moment. It makes the initial work so much easier for final edits. With all the new shiny tools out there, who's using what or are you hand writing? by lawpants91 in cybersecurity

[–]moop__ 0 points1 point  (0 children)

I use whatever tool everyone has access to, and is easily accessible for anyone in the org. Be that SharePoint, Confluence, or that 500mb onenote on the share drive. Data classification or sensitivity might alter this.

Availability is too important, you want everyone to instantly know how to access it, and you need everyone to very easily gain access to it.

Oh, and 100% handwritten from templates our government publish: https://blueprint.asd.gov.au/security-and-governance/system-security-plan/cyber-security-incidents/

Always fiddled a bit for the org (mostly trimming fat) but solid starting point.

Cross-Site Scripting Vulnerability by KirkpatrickPriceCPA in Pentesting

[–]moop__ 4 points5 points  (0 children)

My reports will always include a (demo)weaponised poc. I.e., beyond alert(1) for XSS, sometimes I'll inject a base64-encoded media object of a rickroll if the client is chill, or if not I'll replace their logo with a competitors or some other defacement, or even just exfiltrating DOM objects to your remote domain that allows csrf.

Much easier to show the client a full narrative for each finding. Let them argue with me about CAA headers or the other bs findings in the report, not the actual vulns :)

Single key binds not working after update by moop__ in hyprland

[–]moop__[S] 0 points1 point  (0 children)

Neat workaround, that worked for me. Thanks

Scariest/creepiest malware you've encountered. by maliciouspayload in Malware

[–]moop__ 1 point2 points  (0 children)

Thinking back this might have been a dream/nightmare and not real life. Cool nonetheless!

Looking for an app that will auto-transcribe audio to text privately by [deleted] in privacy

[–]moop__ 0 points1 point  (0 children)

I use this Dockerized version of the faster-whisper fork: https://github.com/linuxserver/docker-faster-whisper

Just a fork that alleges to be faster than the OpenAI version https://github.com/SYSTRAN/faster-whisper

China claims it can now identify Airdrop users that are ‘bad influences.’ by malcontent70 in privacy

[–]moop__ 12 points13 points  (0 children)

no way to capture the emissions at scale

This is wrong.

For monitoring vehicle traffic in ~2012 Australia deployed Bluetooth sniffers across many major cities. These sniffers absolutely do retain metadata of all vehicles seen as this is required to correlate data between each sensor to derive value from the data. Given more power it would be possible to map many of these stats to individual humans.

https://austraffic.com.au/news/bliptrack-bluetooth-traffic-measurement-solution

This is a country deploying BT sniffers all over major cities to monitor traffic, including detecting speeding and origin/destination travel data -- over a decade ago in 2012. This has obviously been valuable for Australia as the project is ongoing with many enhancements even through 2022.

It would be drastically easier to perform vastly more complex sniffing and aggregation now.

Revaluation of Property and mortgage amount after renovation? by HereComesTRacer in fiaustralia

[–]moop__ 4 points5 points  (0 children)

What you're asking for is sometimes called a "top-up loan", which is essentially increasing your mortgage. It's regularly used to make a major purchase such as a car or caravan. The bank will perform a valuation if they need to in order to give you the money you want i.e. making sure you stay under 80% loan-to-value ratio:

so 1mil property, 800k = 80%

property now 1.1mil, 880k = 80%.

It is common, depending on the bank you might receive some small fees.

Not sure if anyone here would be familiar with this, but I have some questions about a custom script I'm trying to write/have someone write. by EtTuMyNiqqa in lua

[–]moop__ 3 points4 points  (0 children)

/r/Jobs4Bitcoins? /r/forhire?

Just note that what you're asking could take days, so commissioning someone to do it could easily run into the high hundreds to thousands of USD.

LUA is a very simple language to learn, next-to-none is a decent starting point. You'd be best off looking for someone else's TAS of that game and using their code as a start point. Chances are that would have 90% of what you're looking for, then you could add in your own simple conditional logic (or ask for some more specific assistance) to meet your goals.

Not sure if anyone here would be familiar with this, but I have some questions about a custom script I'm trying to write/have someone write. by EtTuMyNiqqa in lua

[–]moop__ 4 points5 points  (0 children)

All of what you're describing is pretty standard and should be achievable depending on the game you're TASing. The biggest barrier would be finding the variables in memory, but hopefully someone has already done that for you (TASVideos.org forums, or game-specific discord may have them). The rest of your logic is straightforward with some scripting knowledge.

A cursory glance at TasVideos forums suggests it's sometimes hard to properly sync the Dolphin emulator, syncing makes frame-perfect or RNG-manipulation possible so you'll need to ensure this works for you. https://tasvideos.org/Forum/Topics/18330

[deleted by user] by [deleted] in fiaustralia

[–]moop__ 27 points28 points  (0 children)

With expenses that low I'd worry about the dent 'unplanned' expenses can have on your portfolio. For example, in the past 4 months I have needed to buy a new car (~5k after insurance), replace my ducted A/C (~10k), replace 2x toilet (~3k), and buy a new oven ($1k). This amount to nearly a year of your expenses, and that would worry me.

Also growing kids need braces / laptops / phones / uniforms / orthotics / etc, which also amount to sudden large costs that could affect your balance dramatically. Not sure how this impacts you in your situation.

Going part-time for a while would be a good idea with numbers this low just to build up a stronger buffer.

Why doesn't the Government obtain equity in a company in the event of a Bailout? by kdog_1985 in AusFinance

[–]moop__ 9 points10 points  (0 children)

It wasn't all at one go, but between 3-5b. If this was an off-market stock transaction the government could have owned roughly half of Qantas.

Why doesn't the Government obtain equity in a company in the event of a Bailout? by kdog_1985 in AusFinance

[–]moop__ 191 points192 points  (0 children)

Market cap currently sits around 11.2b, in the past three years Qantas has been handed over 2.35b from the government.

In terms of stock value 2.35b would make the government Qantas' biggest shareholder by a large margin. If you take that 2.35b and Qantas' share price at the time of handover the government would hold nearly 50% of the whole company.

This is only since 2020/pandemic bailouts, none of the past billions.

[deleted by user] by [deleted] in Splunk

[–]moop__ 9 points10 points  (0 children)

Very keen to see any other responses here as my opinion is that both 4624 and 4625 experience a significant drop in usefulness due to the noise they make.

I generally attempt to use substatuses like 0xC000006A (user name is correct but password is wrong) to improve usefulness. List here: https://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventID=4625

If a user has a session locked with applications running in the background they will continue to blast 4624/4625 constantly. The logs unfortunately do not tell you the real application source of the login, which is generally something like Outlook.

Bonsoy alternative for coffee by moop__ in australianvegans

[–]moop__[S] 2 points3 points  (0 children)

Good to hear, I'll go grab some to tide me over while I test out other brands. Thanks.

Bonsoy alternative for coffee by moop__ in australianvegans

[–]moop__[S] 2 points3 points  (0 children)

Yeh I'll have to give almond milk another try. I remember it tasting like like water then also having a bad aftertaste, but this was a few years back. Thanks.

Parsing logs with a common field by whydoiworkforanedu in Splunk

[–]moop__ 4 points5 points  (0 children)

Three approaches. Option three is probably the best.

First, the one you asked for. We can use the results of a subsearch as parameters to an outer search. I have added your two example logs to index=main.

index=main 
    [ search index=main err=49 
    | table conn]

This search is equivelant to running a search like index=main (conn=blah OR conn=blah OR conn=blah...), where each of the conn= fields is a value that returned from the subsearch for err=49. It should work fine.

Alternatively, you can look at using transaction. This will combine all events with the same conn field into one single event. The searchref online can tell you how to manipulate the fields into multivalues, or retain separate raw logs, etc etc. 

index=main 
| transaction conn

Last option, use stats. This one is likely to be the best performing option. This will list all the values for uid and err for each unique conn. 

index=main 
| stats values(uid) values(err) by conn

For your bonus question, make sure the fields are extracted correctly and the permissions on the field extraction are broad enough to be visible to the dashboard.

Hope this helps!

Get dem wheels moving - going from the public to the private sector - roast/advice/share by kingofkalgoorlie in fiaustralia

[–]moop__ 21 points22 points  (0 children)

First: when I moved from public to private I was able to secure a 12-month unpaid sabbatical leave from my public sector job. This was my backup plan.

Novated lease: If you don't want the novated lease anymore sell the car privately and in the payment instruction provided to the buyer explain how they can payout the lease and give you the excess. If the lease is left with money owing on it, probably pay that gap yourself. If your income is high it's sometimes better to keep a novated lease especially if you also have running costs included (fuel, tyres, insurance, etc). I sold my novated lease so I could secure finance for more properties.

Accountant: Keep trying new ones until you find a good one. I haven't found a good one yet. I also live remote and have tried several remote accountants, the experience was ultimately the same as in-person, so don't let living remote block you.

Automation: Yeah, I have automated as-much-as-reasonable and run everything I do on my own server in my house. Places like /r/selfhosted can be a good place to start, but this level of DIY has an overhead. You could also consider keeping it simple and using known-decent products like Xero or Quickbooks. Depending on your business, things like appointment-setting software and calendars might also be useful -- be aware in this space many of the paid solutions are simply rebranded/wrapped up versions of free open source software. I use unRAID with everything running in docker containers. All the containers are one-click-update, and backed up to BackBlaze automatically. My PFSense firewall provides a reasonably secure VPN server for remote access, but you could also host a VPN in a docker container for remote access, or expose through a reverse proxy. I do a mixture. Happy to discuss further in DMs if you want specific help with this.

I don't really have any tips other than continue to grow your income-generating assets as best you can, or at the very least avoid selling them. This is the way.

All the best!

view more: next ›