Discussion

RE: https://mastodon.social/@amalia22/117449822590594967

With posts like this, I keep wondering if we should call them 'rogue' AI agents. It does give the feeling that the AI agents are at fault.

To me, the phrasing should be 'OpenAI' or 'Anthropic' attempts to get confidential information by breaking into secure Indian systems.

AI Agents are only the tool that they use to do that. Those tools were programmed to do this.

When an AI Agent from Russia breaks into a secure system in the West, we also say that Russia infiltrates our systems.

#AIAgent

Mentaal.nl is a portal being co-designed by thirteen patient and family non-profit organisations in Dutch mental health care. They’re piloting Bonfire as the infrastructure for their federated archipelago: a network of connected spaces built around clear, safe boundaries, where patients, caregivers, families and professionals can each find their place.

We’re excited to be part of this, and we’ll be sharing what we learn and build along the way 🔥

publicspaces.net/2026/10/16/...

Mentaal.nl is a portal being co-designed by thirteen patient and family non-profit organisations in Dutch mental health care. They’re piloting Bonfire as the infrastructure for their federated archipelago: a network of connected spaces built around clear, safe boundaries, where patients, caregivers, families and professionals can each find their place.

We’re excited to be part of this, and we’ll be sharing what we learn and build along the way 🔥

publicspaces.net/2026/10/16/...

Ok, looks like this is the week of funny experiences.

Customer: "I had an AI check our server and it says the SSH port is open and that's not very secure."

Me: "Yes, you asked us to open it so you could access the server via SFTP (actually, you wanted FTP, but we discussed it a bit and found this compromise). Don't worry, it's only accessible from your IP and you land in a dedicated FreeBSD jail. From there, you can only access the 'exchange' directory on your server, where you can upload and download files without affecting the application."

(NB: I had suggested a VPN, but they declined because it was too complicated.)

Customer: "Yes, but maybe it's still insecure. Can't we close it?"

Me: "No, unless you want to lose access to that directory."

Customer: "Ok, thanks."

One hour later:

Customer: "Hi, I think we've found a solution. We've just created an app (!!!) with AI that lets us access the files anyway, but more securely than SSH (!!!). Can we install that and close SSH? Oh, and not in the dedicated jail, but directly in the application's jail, because it needs access to the application's files."

Me: "Frankly, I trust SSH in a dedicated jail, restricted by the firewall, a lot more. I don't think this is a good idea."

Customer: "Ok, thanks."

Half an hour later:

Customer: "Ok, now it's secure. I had another AI check it and it found some security issues, but it fixed them all. Can you install it and disable SSH?"

Me: "I strongly advise against it. I can see problems coming."

Customer: "Ok, thanks."

One hour later, my phone rings.

Their internal IT guy (who has access to the machine, which, after all, belongs to them) had given the AI the login credentials to go ahead with the operation.

Except the AI had managed to lock itself out via the firewall, without even starting the app. And now they couldn't get back in.

Fortunately, I had my own access, via VPN, to a separate jail that the AI hadn't touched (or even considered).

Customer: "SORRYSORRYSORRYSORRYSORRY! From now on, we do things your way."

Well, at least it ended well.

PS: The customer knows I'm sharing this story and agreed to it.

#IT #SysAdmin

Hello !
Man ancien'ne coloc cherche des nouvelleaux collocs du côté de Goven (Bretagne, 35)

Bonsoir,
Ma coloc et sa fille s'en vont bientôt vers d'autres aventures et j'aimerais pouvoir continuer à vivre
dans cette maison en bord de forêt. Je suis donc à la recherche d'un.e nouvelleau co-habitant-e pour le 1er décembre 2026.
La maison est située à Goven, à 5mn en voiture du bourg (véhicule indispensable car il n'y a pas de
transport à proximité). Elle est de plain-pied et composée d'un grand salon, d'une cuisine ouverte, de deux grandes chambres (avec chacune un grand placard et une ouverture sur le jardin) et d'une plus petite chambre-bureau. Le tout orienté sud donc plutôt agréablement lumineux Nous avons un très grand jardin et un appentis pour stocker du matériel Ma coloc a aussi entretenu un potager l'année écoulée
La maison est non-meublée, une partie sera donc à remeubler et décorer ensemble. Le loyer est de 440 euros par personne auquel il faut ajouter les charges communes de la coloc (environ 90 euros par
mois). APL possible. Il y aura des frais de bail et d'état des lieux (aux alentours de 100 euros) mais pas de frais d'agence. La caution est de 425 euros.

vote, it’s as American as it gets #vote #American

@amoroso The Epson HX-20 showed up in a couple of episodes, but yeah, I think that was probably the last they were heard from. 😆

The podcast is based on Cindy’s book, “Privacy’s Defender: My Thirty-Year Fight Against Digital Surveillance” (@themitpress). Pick up a copy – proceeds benefit EFF! https://www.eff.org/Privacys-Defender

@quixoticgeek Can I apply for usage in the same office where the stellar bypass plans are posted for review since a mere thousand years? 🤔

@zackwhittaker while also taking me to the wrong locations, crashing constantly, and draining my battery unfortunately. Going to try Organic Maps instead

Autumn in Montreal

#FensterFreitag #photography #Montreal #autumn

@tcrouzet j'ai lu votre billet https://tcrouzet.com/2026/10/04/je-suis%20humain/
Il réveille ma question lancinante :

pourquoi y a-t-il une tolérance illimitée pour les écrivains fantômes et pas pour l'écriture par IA, et diversement pour le plagiat ? — sinon que c'est à la gueule du client ?

"Drawing on organizing experiences of Black Rose/Rosa Negra members across the United States, this pamphlet explores how workers, neighbors, and communities are building collective resistance to ICE and defending their immigrant coworkers, classmates, and loved ones. By connecting struggles across workplaces, schools, and neighborhoods, the transversal organizing approach we prioritize builds solidarity across different sectors of society to confront the interconnected structures of domination that shape our lives.

Through organizers’ experiences, we share lessons on sustaining organizing, confronting repression, and connecting immigrant defense to broader struggles to build popular power."

https://www.blackrosefed.org/sanctuary-verb-pamphlet/

@eclectech
Samosa would like to participate in #sillySpookyHatting if you please

“Devices at international news network Al Jazeera were infected with mercenary spyware from Candiru (rebranded as “Integrity Labs”) via targeted online advertisements.

The malicious advertisements were purchased by Discover-Tech, an Israeli company that presents itself as a legitimate advertising company, but which we found operates as a facilitator for multiple mercenary spyware partners.

Discover-Tech operates a platform called Controlium that enables its mercenary partners to de-anonymize, fingerprint, and automatically infect devices the moment an advertisement is rendered — a form of zero-click attack.”

In a hilarious development I never saw coming, I think that some of my astrophotography is going to be published in the Wall Street Journal?!

@omkar_foss @strypey @funkwhale@fosstodon.org

I updated error page :)

Former EFF Executive Director Cindy Cohn talks with Daniel Bernstein, whom she represented in a landmark legal case 30 years ago that set the stage for the modern internet - and with the DOJ lawyer who opposed them. Hear Ep.2 of our "Privacy’s Defenders" podcast: “No Privacy Without Encryption.” https://www.eff.org/deeplinks/2026/10/privacys-defenders-podcast-no-privacy-without-encryption