DocMcStuffin

joined 1 year ago
[–] DocMcStuffin 1 points 7 months ago

Bad bot. Bad summary.

[–] DocMcStuffin 19 points 7 months ago

This is only for new users. They will be able to do write actions for free after 3 months.

Surely, bot owners never thought to age their accounts before unleashing them.

[–] DocMcStuffin 8 points 7 months ago

CoS doesn't worship Satan either. They're just Ayn Rand libertarians dressed up with ritual. They're basically atheists like TST but on the other side of the political spectrum.

[–] DocMcStuffin 12 points 7 months ago

They'll bring a history of fascism to the classroom too, right?

[–] DocMcStuffin 88 points 7 months ago (7 children)

Twitter for Nazis was never a viable business model. Neither is Netflix for Nazis.

[–] DocMcStuffin 23 points 7 months ago

Caitlin Doughty and her team put together a documentary 2 years ago. It covers some of the history, and why it's prone to suicides.

[–] DocMcStuffin 44 points 7 months ago (1 children)

Not a Florida woman. Georgia woman. Georgia is exporting their crazy to Florida.

[–] DocMcStuffin 2 points 7 months ago

Yeeeaaah, that makes more sense. 😅 That would be a giant gaping vulnerability if everything was in kernel space.

[–] DocMcStuffin 8 points 7 months ago* (last edited 7 months ago) (2 children)

Bluetooth has one of the largest network stacks. It's bigger than Wifi. This means some parts of the stack probably aren't tested and may have bugs or vulnerabilities. It has duplicate functionality in it. This opens up the possibility that flaws in how different parts interact could lead to vulnerabilities or exploits.

A number of years ago some security researchers did an analysis of the Windows and Linux stacks. They found multiple exploitable vulnerabilities in both stacks. They called their attack blue borne, but it was really a series of attacks that could be used depending on which OS you wanted to target. Some what ironically, Linux was more vulnerable because the Linux kernel implemented more of the protocol than Windows.

[–] DocMcStuffin 7 points 8 months ago (1 children)

Technically it's only one.

[–] DocMcStuffin 35 points 8 months ago

There's talk on the Linux kernel mailing list. The same person made recent contributions there.

Andrew (and anyone else), please do not take this code right now.

Until the backdooring of upstream xz[1] is fully understood, we should not accept any code from Jia Tan, Lasse Collin, or any other folks associated with tukaani.org. It appears the domain, or at least credentials associated with Jia Tan, have been used to create an obfuscated ssh server backdoor via the xz upstream releases since at least 5.6.0. Without extensive analysis, we should not take any associated code. It may be worth doing some retrospective analysis of past contributions as well...

[–] DocMcStuffin 73 points 8 months ago (6 children)

You can try it and find out.

 

Post contents (and a mirror):

BotDefense is wrapping up operations

TL;DR below.

When we announced the BotDefense project in 2019, we had no idea how large the project would become. Our initial list of bots was just 879 accounts. Most of them were annoying rather than outright malicious.

Since then, we've witnessed the rise of malicious bots being used to farm karma for the purpose of spamming and scamming users across Reddit and we've done our best to help communities stem the tide. We spent countless hours finding and reviewing accounts, writing code to automate detections, and reviewing appeals (mostly from outright criminals and karma farmers definitely running bots, but we typically unban about 4 accounts per month, and unlike similar bots an unban means that we unban the account everywhere we banned it).

Along the way, we've struggled with the scope of the problem, rewritting our back-end code multiple times and figuring out how to scale to the 3,650 subreddits that BotDefense now moderates. We came up with new algorithms to identify content theft, reduce the number of times we accidentally ban an innocent account, and more. In January of 2023, we added an incredible 10,070 bots to our ban list which now stands at an incredible 144,926 accounts.

Like many anti-abuse projects on Reddit, we've done all of this for free while putting up with Reddit's penchant for springing detrimental changes on developers and moderators (e.g., adding API limits without advance notice and blocking Pushshift) and figuring out workarounds for numerous scalability issues that Reddit never seems to fix. Without Pushshift, the number of malicious bots we were able to ban dropped to 5,517 in May.

Now, Reddit has changed the Reddit API terms to destroy third-party apps and harm communities. A group of developers and moderators tried to convince Reddit to not continue down this path and communities protested like never before, but that was all in vain. Reddit is so brazenly hostile to moderators and developers that the CEO of Reddit has referred to us as "landed gentry".

With these changes and in this environment, we no longer believe we can effectively perform our mission. The community of users and moderators submitting accounts to us depend on Pushshift, the API, and third-party apps. And we would be deluding ourselves if we believed any assurances from Reddit given the track record of broken promises. Investing further resources into Reddit as a platform presents significant risks, and it's safer to allocate one's time, energy, and passions elsewhere.

Therefore, we have already disabled submissions of new accounts and our back-end analytics, and we will be disabling future actions on malicious and annoying bots. We will continue to review appeals and process unbans for a minimum of 90 days, or until Reddit breaks the code running BotDefense.

We'd rather be figuring out how to combat the influx of ChatGPT bots flooding Reddit, temu bots flooding subreddits with fake comments, and every other malicious bot out there, of course.

At this time, we advise keeping BotDefense as a moderator through October 3rd so any future unbans can be processed. We will provide updates if the situation changes or if we have any other news to share.

Finally, I want to thank all of the users and moderators who have contributed accounts, my co-moderators who have helped review countless accounts, and to all of the communities that have trusted us with helping moderate their subreddits.

Regards.

— dequeued

TL;DR With the API changes now in place, we no longer believe we can effectively perform our mission so we are sunsetting BotDefense. We recommend keeping BotDefense on as a moderator through October 3rd so any unbans can be processed.

view more: ‹ prev next ›