All I know is NNTP is pretty badly broken in both the latest release and now I'm the beta channel. Not that it's the biggest use case, but it has been pretty bad.

[deleted]

[removed]

[deleted]

On the gripping hand

Is this something we already know? I’m by no means an AI researcher but the model learning at run time without updating weights seems pretty novel no? What other ‘routine’ models do this?

Telemetry beyond the telemetry is always captured. At minimum this is system fingerprinting, location, usage, system info etc.

[deleted]

Look up “learned learning” or “learning to learn by gradient descent by gradient descent” (2016) for a few examples.

If you have identical passwords, why are you using a password manager?

It's called quadratic

[removed]

Wait.. we don’t know how it works?

If you use Firefox or Thunderbird you are trusting them with your data and your machine. Any client will get at minimum, telemetry.

I just use Feedly ever since Google's RSS thing disappeared. Works fine on Firefox.

I’m sure no on would even notice

[deleted]

can we start publicizing a list of these 4th estate dickwads who will do anything for clout-to-click money?

Here is how AI scientists look like to the journalist “sorry we just press ramdom button and the machine just got intelligent, we are just trying to figure out how it got so cuz we dumb monke”

ELI5 please?

Local client has so much more capabilities for data collection and observing your machine though. Gmail is mostly browser, but Chrome already has your info, so why add another client... with local access.

Half the people posting here need to go read Cryptography by Keith Martin. An easy to read book that explains, among other things, that encryption and hashing are not the same thing.

That’s not what a rainbow table is. Also, rainbow tables are defeated by salting.

The internet needs to come up with a way to penalize this shit. Like a browser extension or something that hides any content with misleading or sensationalizing headlines

Normally I would agree with you, but given the level of breach suffered here AND the ABSOLUTE lack of transparency by the company, I wouldn't rule it out as an unreasonable concern.

With all the government supported bad actors in the world today the threat landscape has changed. State sponsored hacks designed to cause economic damage are becoming more and more common place. Sites like this are huge targets.

For the home user this is a difficult game but for the enterprise a well designed self-hosted solution (bitwarden for example) is the way to go right now IMHO.

Any of the big "public" cloud options are just too juicy a target. It is fairly trivial to set up your own reasonably redundant manager now if you're a company. The real issue is for the home user going forward. (But most home users have such horrible security posture i suppose it doesn't matter either).